ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 45,941 in 0.140 second(s)

  • 199.187.19.123:32768 (tcp/http) - last seen on 2024-11-21 at 08:50:33 UTC

    • IP
      199.187.19.123
      Network
      199.187.16.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://199.187.19.123:32768/ 200

      ASN
      AS55933
      Organization
      Cloudie Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      46dbdad79db954969c733fb4e68a67fc
      HTTP Header MD5
      db929ee95f62f99728d840d6c0c11e00
      HTTP Body MD5
      021a5ac1c8e371e0aed2126074317609 
    • HTTP/1.1 200 OK
Server: nginx
Date: Thu, 21 Nov 2024 08:50:33 GMT
Content-Type: text/html
Content-Length: 1091
Last-Modified: Wed, 20 Nov 2024 04:11:32 GMT
Connection: close
Vary: Accept-Encoding
ETag: "673d6174-443"
Accept-Ranges: bytes

<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="renderer" content="webkit|ie-comp|ie-stand">
    <meta http-equiv="X-UA-Compatible" content="IE =edge,chrome =1" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no, minimum-scale=1.0, maximum-scale=1.0">
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <title></title>
</head>
<body>
    <script type="text/javascript">
    window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };
    _MICHAT("cptid", "7e5d6dec0c21");
    _MICHAT("host", "cvlvwj.cn");
    (function (m, d, q, j, s) {
        j = d.createElement(q),s = d.getElementsByTagName(q)[0];
        j.async = true;
        j.charset ="UTF-8";
        j.src = ("https:" == document.location.protocol ? "https://" : "http://") + "cvlvwj.cn/Web/js/loader.js";
        s.parentNode.insertBefore(j, s);
    })(window, document, "script");
    </script>
    </body >
  </html >
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:33.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "021a5ac1c8e371e0aed2126074317609",
         "bodymmh3" : -976714766,
         "header" : [
            {
               "name" : "Last-Modified",
               "value" : "Wed, 20 Nov 2024 04:11:32 GMT"
            },
            {
               "name" : "ETag",
               "value" : "673d6174-443"
            }
         ],
         "headermd5" : "db929ee95f62f99728d840d6c0c11e00",
         "headermmh3" : 181180914
      },
      "length" : 1341
   },
   "asn" : "AS55933",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:50:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 1091\r\nLast-Modified: Wed, 20 Nov 2024 04:11:32 GMT\r\nConnection: close\r\nVary: Accept-Encoding\r\nETag: \"673d6174-443\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n    <meta charset=\"utf-8\">\r\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\r\n    <meta name=\"renderer\" content=\"webkit|ie-comp|ie-stand\">\r\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE =edge,chrome =1\" />\r\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, user-scalable=no, minimum-scale=1.0, maximum-scale=1.0\">\r\n    <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n    <title></title>\n</head>\n<body>\n    <script type=\"text/javascript\">\r\n    window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };\r\n    _MICHAT(\"cptid\", \"7e5d6dec0c21\");\r\n    _MICHAT(\"host\", \"cvlvwj.cn\");\r\n    (function (m, d, q, j, s) {\r\n        j = d.createElement(q),s = d.getElementsByTagName(q)[0];\r\n        j.async = true;\r\n        j.charset =\"UTF-8\";\r\n        j.src = (\"https:\" == document.location.protocol ? \"https://\" : \"http://\") + \"cvlvwj.cn/Web/js/loader.js\";\r\n        s.parentNode.insertBefore(j, s);\r\n    })(window, document, \"script\");\r\n    </script>\n    </body >\n  </html >",
   "datamd5" : "46dbdad79db954969c733fb4e68a67fc",
   "datammh3" : -1645556221,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS40065",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "tenetstl.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NETBLK-DEACON",
      "organization" : "Deaconess Health System",
      "subnet" : "199.187.16.0/21"
   },
   "ip" : "199.187.19.123",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cloudie Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 32768,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "199.187.16.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 199.187.32.51:32768 (tcp/http) - last seen on 2024-11-21 at 08:50:09 UTC

    • IP
      199.187.32.51
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://199.187.32.51:32768/ 200

      HTTP Title
      恭喜，站点创建成功！
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      65a6243aa38f6c49e44d24c85a0baf81
      HTTP Header MD5
      9b25fd43ac35a3b878f5988c823bdb9e
      HTTP Body MD5
      a3473388010b32f24ef13040135f748a 
    • HTTP/1.1 200 OK
Server: nginx
Date: Thu, 21 Nov 2024 08:50:08 GMT
Content-Type: text/html
Content-Length: 917
Last-Modified: Sat, 16 Nov 2024 03:17:11 GMT
Connection: close
ETag: "67380eb7-395"
Accept-Ranges: bytes

<!doctype html>
<html>
<head>
    <meta charset="utf-8">
    <title>恭喜，站点创建成功！</title>
    <style>
        .container {
            width: 60%;
            margin: 10% auto 0;
            background-color: #f0f0f0;
            padding: 2% 5%;
            border-radius: 10px
        }

        ul {
            padding-left: 20px;
        }

            ul li {
                line-height: 2.3
            }

        a {
            color: #20a53a
        }
    </style>
</head>
<body>
    <div class="container">
        <h1>恭喜, 站点创建成功！</h1>
        <h3>这是默认index.html，本页面由系统自动生成</h3>
        <ul>
            <li>本页面在FTP根目录下的index.html</li>
            <li>您可以修改、删除或覆盖本页面</li>
            <li>FTP相关信息，请到“面板系统后台 > FTP” 查看</li>
        </ul>
    </div>
</body>
</html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:09.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "a3473388010b32f24ef13040135f748a",
         "bodymmh3" : 2130982981,
         "header" : [
            {
               "name" : "Last-Modified",
               "value" : "Sat, 16 Nov 2024 03:17:11 GMT"
            },
            {
               "name" : "ETag",
               "value" : "67380eb7-395"
            }
         ],
         "headermd5" : "9b25fd43ac35a3b878f5988c823bdb9e",
         "headermmh3" : -834047762,
         "title" : "\u606d\u559c\uff0c\u7ad9\u70b9\u521b\u5efa\u6210\u529f\uff01"
      },
      "length" : 1143
   },
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:50:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 917\r\nLast-Modified: Sat, 16 Nov 2024 03:17:11 GMT\r\nConnection: close\r\nETag: \"67380eb7-395\"\r\nAccept-Ranges: bytes\r\n\r\n<!doctype html>\n<html>\n<head>\n    <meta charset=\"utf-8\">\n    <title>\u606d\u559c\uff0c\u7ad9\u70b9\u521b\u5efa\u6210\u529f\uff01</title>\n    <style>\n        .container {\n            width: 60%;\n            margin: 10% auto 0;\n            background-color: #f0f0f0;\n            padding: 2% 5%;\n            border-radius: 10px\n        }\n\n        ul {\n            padding-left: 20px;\n        }\n\n            ul li {\n                line-height: 2.3\n            }\n\n        a {\n            color: #20a53a\n        }\n    </style>\n</head>\n<body>\n    <div class=\"container\">\n        <h1>\u606d\u559c, \u7ad9\u70b9\u521b\u5efa\u6210\u529f\uff01</h1>\n        <h3>\u8fd9\u662f\u9ed8\u8ba4index.html\uff0c\u672c\u9875\u9762\u7531\u7cfb\u7edf\u81ea\u52a8\u751f\u6210</h3>\n        <ul>\n            <li>\u672c\u9875\u9762\u5728FTP\u6839\u76ee\u5f55\u4e0b\u7684index.html</li>\n            <li>\u60a8\u53ef\u4ee5\u4fee\u6539\u3001\u5220\u9664\u6216\u8986\u76d6\u672c\u9875\u9762</li>\n            <li>FTP\u76f8\u5173\u4fe1\u606f\uff0c\u8bf7\u5230\u201c\u9762\u677f\u7cfb\u7edf\u540e\u53f0 > FTP\u201d \u67e5\u770b</li>\n        </ul>\n    </div>\n</body>\n</html>",
   "datamd5" : "65a6243aa38f6c49e44d24c85a0baf81",
   "datammh3" : 349294665,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NETBLK-NHL",
      "organization" : "National Health Laboratories",
      "subnet" : "199.187.32.0/19"
   },
   "ip" : "199.187.32.51",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 32768,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 221.128.176.143:32768 (tcp/http) - last seen on 2024-11-21 at 08:50:09 UTC

    • IP
      221.128.176.143
      Network
      221.128.128.0/17
      Domain(s)
      imidc.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://221.128.176.143:32768/ 200

      Reverse DNS
      unknown.imidc.com
      ASN
      AS55933
      Organization
      Cloudie Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e82115f14c5af989b5a3bcc126f531d5
      HTTP Header MD5
      db929ee95f62f99728d840d6c0c11e00
      HTTP Body MD5
      0d0ee30a8e74c226de34380b93d30cd5 
    • HTTP/1.1 200 OK
Server: nginx
Date: Thu, 21 Nov 2024 08:50:08 GMT
Content-Type: text/html
Content-Length: 1093
Last-Modified: Mon, 18 Nov 2024 05:13:51 GMT
Connection: close
Vary: Accept-Encoding
ETag: "673acd0f-445"
Accept-Ranges: bytes

<!DOCTYPE html>
<html>
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="renderer" content="webkit|ie-comp|ie-stand">
    <meta http-equiv="X-UA-Compatible" content="IE =edge,chrome =1" />
    <meta name="viewport" content="width=device-width, initial-scale=1.0, user-scalable=no, minimum-scale=1.0, maximum-scale=1.0">
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <title></title>
</head>
<body>
    <script type="text/javascript">
    window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };
    _MICHAT("cptid", "2cb2fc14ffe2");
    _MICHAT("host", "gzxjyz.com");
    (function (m, d, q, j, s) {
        j = d.createElement(q),s = d.getElementsByTagName(q)[0];
        j.async = true;
        j.charset ="UTF-8";
        j.src = ("https:" == document.location.protocol ? "https://" : "http://") + "gzxjyz.com/Web/js/loader.js";
        s.parentNode.insertBefore(j, s);
    })(window, document, "script");
    </script>
    </body >
  </html >
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:09.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "0d0ee30a8e74c226de34380b93d30cd5",
         "bodymmh3" : 1646658092,
         "header" : [
            {
               "value" : "Mon, 18 Nov 2024 05:13:51 GMT",
               "name" : "Last-Modified"
            },
            {
               "name" : "ETag",
               "value" : "673acd0f-445"
            }
         ],
         "headermd5" : "db929ee95f62f99728d840d6c0c11e00",
         "headermmh3" : -178234194
      },
      "length" : 1343
   },
   "asn" : "AS55933",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:50:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 1093\r\nLast-Modified: Mon, 18 Nov 2024 05:13:51 GMT\r\nConnection: close\r\nVary: Accept-Encoding\r\nETag: \"673acd0f-445\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n    <meta charset=\"utf-8\">\r\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\r\n    <meta name=\"renderer\" content=\"webkit|ie-comp|ie-stand\">\r\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE =edge,chrome =1\" />\r\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0, user-scalable=no, minimum-scale=1.0, maximum-scale=1.0\">\r\n    <meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n    <title></title>\n</head>\n<body>\n    <script type=\"text/javascript\">\r\n    window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };\r\n    _MICHAT(\"cptid\", \"2cb2fc14ffe2\");\r\n    _MICHAT(\"host\", \"gzxjyz.com\");\r\n    (function (m, d, q, j, s) {\r\n        j = d.createElement(q),s = d.getElementsByTagName(q)[0];\r\n        j.async = true;\r\n        j.charset =\"UTF-8\";\r\n        j.src = (\"https:\" == document.location.protocol ? \"https://\" : \"http://\") + \"gzxjyz.com/Web/js/loader.js\";\r\n        s.parentNode.insertBefore(j, s);\r\n    })(window, document, \"script\");\r\n    </script>\n    </body >\n  </html >",
   "datamd5" : "e82115f14c5af989b5a3bcc126f531d5",
   "datammh3" : 107706347,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "imidc.com"
   ],
   "geolocus" : {
      "asn" : "AS55933",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "cnnic.cn",
         "fbiinet.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CYNET",
      "organization" : "Beijing Chang Ying Netowrk Service Co.Ltd",
      "subnet" : "221.128.160.0/19"
   },
   "host" : [
      "unknown"
   ],
   "hostname" : [
      "unknown.imidc.com"
   ],
   "ip" : "221.128.176.143",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cloudie Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 32768,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "unknown.imidc.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "221.128.128.0/17",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 103.212.187.109:32768 (tcp/http) - last seen on 2024-11-21 at 08:50:09 UTC

    • IP
      103.212.187.109
      Network
      103.212.186.0/23
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://103.212.187.109:32768/ 200

      ASN
      AS55933
      Organization
      Cloudie Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4b9e8d9575f12ee073d3757d0afa3dcc
      HTTP Header MD5
      9b25fd43ac35a3b878f5988c823bdb9e
      HTTP Body MD5
      e61fc972c650c72b67428f62c2d47274 
    • HTTP/1.1 200 OK
Server: nginx
Date: Thu, 21 Nov 2024 08:50:08 GMT
Content-Type: text/html
Content-Length: 661
Last-Modified: Tue, 12 Nov 2024 02:43:30 GMT
Connection: close
ETag: "6732c0d2-295"
Accept-Ranges: bytes

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title></title>
</head>
<body>
    <script type="module">
        export function main() {
            return {
                headers: { location: 'https://www.qq.com' },
                statusCode: 302 // Updated status code for temporary redirect
            };
        }

        
        const response = main();
        if (response.statusCode === 302 && response.headers.location) {
            window.location.href = response.headers.location;
        }
    </script>
</body>
</html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:09.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "qq.com"
         ],
         "hostname" : [
            "www.qq.com"
         ],
         "url" : [
            "https://www.qq.com"
         ]
      },
      "http" : {
         "bodymd5" : "e61fc972c650c72b67428f62c2d47274",
         "bodymmh3" : -1810729642,
         "header" : [
            {
               "name" : "Last-Modified",
               "value" : "Tue, 12 Nov 2024 02:43:30 GMT"
            },
            {
               "name" : "ETag",
               "value" : "6732c0d2-295"
            }
         ],
         "headermd5" : "9b25fd43ac35a3b878f5988c823bdb9e",
         "headermmh3" : 1093502448
      },
      "length" : 887
   },
   "asn" : "AS55933",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:50:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 661\r\nLast-Modified: Tue, 12 Nov 2024 02:43:30 GMT\r\nConnection: close\r\nETag: \"6732c0d2-295\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\r\n<html lang=\"en\">\r\n<head>\r\n    <meta charset=\"UTF-8\">\r\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\r\n    <title></title>\r\n</head>\r\n<body>\r\n    <script type=\"module\">\r\n        export function main() {\r\n            return {\r\n                headers: { location: 'https://www.qq.com' },\r\n                statusCode: 302 // Updated status code for temporary redirect\r\n            };\r\n        }\r\n\r\n        \r\n        const response = main();\r\n        if (response.statusCode === 302 && response.headers.location) {\r\n            window.location.href = response.headers.location;\r\n        }\r\n    </script>\r\n</body>\r\n</html>",
   "datamd5" : "4b9e8d9575f12ee073d3757d0afa3dcc",
   "datammh3" : -1578108410,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS55933",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "ampus.hk"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "AMPUSLTD-HK",
      "organization" : "Ampus Limited",
      "subnet" : "103.212.186.0/23"
   },
   "ip" : "103.212.187.109",
   "ipv6" : "false",
   "latitude" : "22.2578",
   "location" : "22.2578,114.1657",
   "longitude" : "114.1657",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cloudie Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 32768,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "103.212.186.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 47.236.82.9:32768 (tcp/http) - last seen on 2024-11-21 at 08:50:09 UTC

    • IP
      47.236.82.9
      Network
      47.236.0.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://47.236.82.9:32768/ 200

      HTTP Title
      New API
      HTTP Description
      OpenAI 接口聚合管理，支持多种渠道包括 Azure，可用于二次分发管理 key，仅单可执行文件，已打包好 Docker 镜像，一键部署，开箱即用
      ASN
      AS45102
      Organization
      Alibaba US Technology Co., Ltd.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      023d1e057f97c62e868af9332aef07f0
      HTTP Header MD5
      449df94ab2dc14ef402b2d0a0083d98d
      HTTP Body MD5
      e8b1ee32c238cc9d2f6c744d539e8380 
    • HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache
Content-Length: 680
Content-Type: text/html; charset=utf-8
X-Oneapi-Request-Id: 20241121085008386839309t5q6k6bY
Date: Thu, 21 Nov 2024 08:50:08 GMT
Connection: close

<!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="icon" href="logo.png"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="theme-color" content="#ffffff"/><meta name="description" content="OpenAI 接口聚合管理，支持多种渠道包括 Azure，可用于二次分发管理 key，仅单可执行文件，已打包好 Docker 镜像，一键部署，开箱即用"/><title>New API</title><script defer="defer" src="/static/js/main.14a5acf6.js"></script><link href="/static/css/main.2e43eb63.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:09.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "e8b1ee32c238cc9d2f6c744d539e8380",
         "bodymmh3" : 2024691111,
         "description" : "OpenAI \u63a5\u53e3\u805a\u5408\u7ba1\u7406\uff0c\u652f\u6301\u591a\u79cd\u6e20\u9053\u5305\u62ec Azure\uff0c\u53ef\u7528\u4e8e\u4e8c\u6b21\u5206\u53d1\u7ba1\u7406 key\uff0c\u4ec5\u5355\u53ef\u6267\u884c\u6587\u4ef6\uff0c\u5df2\u6253\u5305\u597d Docker \u955c\u50cf\uff0c\u4e00\u952e\u90e8\u7f72\uff0c\u5f00\u7bb1\u5373\u7528",
         "headermd5" : "449df94ab2dc14ef402b2d0a0083d98d",
         "headermmh3" : -651106118,
         "title" : "New API"
      },
      "length" : 917
   },
   "asn" : "AS45102",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nCache-Control: no-cache\r\nContent-Length: 680\r\nContent-Type: text/html; charset=utf-8\r\nX-Oneapi-Request-Id: 20241121085008386839309t5q6k6bY\r\nDate: Thu, 21 Nov 2024 08:50:08 GMT\r\nConnection: close\r\n\r\n<!doctype html><html lang=\"en\"><head><meta charset=\"utf-8\"/><link rel=\"icon\" href=\"logo.png\"/><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"/><meta name=\"theme-color\" content=\"#ffffff\"/><meta name=\"description\" content=\"OpenAI \u63a5\u53e3\u805a\u5408\u7ba1\u7406\uff0c\u652f\u6301\u591a\u79cd\u6e20\u9053\u5305\u62ec Azure\uff0c\u53ef\u7528\u4e8e\u4e8c\u6b21\u5206\u53d1\u7ba1\u7406 key\uff0c\u4ec5\u5355\u53ef\u6267\u884c\u6587\u4ef6\uff0c\u5df2\u6253\u5305\u597d Docker \u955c\u50cf\uff0c\u4e00\u952e\u90e8\u7f72\uff0c\u5f00\u7bb1\u5373\u7528\"/><title>New API</title><script defer=\"defer\" src=\"/static/js/main.14a5acf6.js\"></script><link href=\"/static/css/main.2e43eb63.css\" rel=\"stylesheet\"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id=\"root\"></div></body></html>",
   "datamd5" : "023d1e057f97c62e868af9332aef07f0",
   "datammh3" : -38184568,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS45102",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "alibaba-inc.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AL-3",
      "organization" : "Alibaba Cloud LLC",
      "subnet" : "47.236.64.0/18"
   },
   "ip" : "47.236.82.9",
   "ipv6" : "false",
   "latitude" : "1.3673",
   "location" : "1.3673,103.8014",
   "longitude" : "103.8014",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Alibaba US Technology Co., Ltd.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 32768,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "47.236.0.0/17",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 199.187.41.8:32768 (tcp/http) - last seen on 2024-11-21 at 08:50:09 UTC

    • IP
      199.187.41.8
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://199.187.41.8:32768/ 200

      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3e308f1d90cf9104b37deefc130e4d48
      HTTP Header MD5
      9b25fd43ac35a3b878f5988c823bdb9e
      HTTP Body MD5
      052f1bca5630830e17d776a71697c5d3 
    • HTTP/1.1 200 OK
Server: nginx
Date: Thu, 21 Nov 2024 08:50:08 GMT
Content-Type: text/html
Content-Length: 1017
Last-Modified: Tue, 19 Nov 2024 11:33:01 GMT
Connection: close
ETag: "673c776d-3f9"
Accept-Ranges: bytes

<!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="renderer" content="webkit|ie-comp|ie-stand"><meta http-equiv="X-UA-Compatible" content="IE =edge,chrome =1"><meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=no,minimum-scale=1,maximum-scale=1"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title></title></head><body><script type="text/javascript">window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };
    _MICHAT("cptid", "2dec61bbdf65");
    _MICHAT("host", "emcg.keeygvv.cn");
    (function (m, d, q, j, s) {
        j = d.createElement(q),s = d.getElementsByTagName(q)[0];
        j.async = true;
        j.charset ="UTF-8";
        j.src = ("https:" == document.location.protocol ? "https://" : "http://") + "emcg.keeygvv.cn/Web/js/loader.js";
        s.parentNode.insertBefore(j, s);
    })(window, document, "script");</script></body></html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:09.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "052f1bca5630830e17d776a71697c5d3",
         "bodymmh3" : 506844271,
         "header" : [
            {
               "name" : "Last-Modified",
               "value" : "Tue, 19 Nov 2024 11:33:01 GMT"
            },
            {
               "name" : "ETag",
               "value" : "673c776d-3f9"
            }
         ],
         "headermd5" : "9b25fd43ac35a3b878f5988c823bdb9e",
         "headermmh3" : -1037648713
      },
      "length" : 1244
   },
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:50:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 1017\r\nLast-Modified: Tue, 19 Nov 2024 11:33:01 GMT\r\nConnection: close\r\nETag: \"673c776d-3f9\"\r\nAccept-Ranges: bytes\r\n\r\n<!doctype html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"><meta name=\"renderer\" content=\"webkit|ie-comp|ie-stand\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE =edge,chrome =1\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1,user-scalable=no,minimum-scale=1,maximum-scale=1\"><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"><title></title></head><body><script type=\"text/javascript\">window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };\r\n    _MICHAT(\"cptid\", \"2dec61bbdf65\");\r\n    _MICHAT(\"host\", \"emcg.keeygvv.cn\");\r\n    (function (m, d, q, j, s) {\r\n        j = d.createElement(q),s = d.getElementsByTagName(q)[0];\r\n        j.async = true;\r\n        j.charset =\"UTF-8\";\r\n        j.src = (\"https:\" == document.location.protocol ? \"https://\" : \"http://\") + \"emcg.keeygvv.cn/Web/js/loader.js\";\r\n        s.parentNode.insertBefore(j, s);\r\n    })(window, document, \"script\");</script></body></html>",
   "datamd5" : "3e308f1d90cf9104b37deefc130e4d48",
   "datammh3" : -1109219968,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NETBLK-NHL",
      "organization" : "National Health Laboratories",
      "subnet" : "199.187.32.0/19"
   },
   "ip" : "199.187.41.8",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 32768,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 102.134.33.225:32768 (tcp/http) - last seen on 2024-11-21 at 08:50:08 UTC

    • IP
      102.134.33.225
      Network
      102.134.32.0/23
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://102.134.33.225:32768/ 200

      ASN
      AS55933
      Organization
      Cloudie Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b6e4ab9c4524cfd7ea41ddbd0fc4d29d
      HTTP Header MD5
      9b25fd43ac35a3b878f5988c823bdb9e
      HTTP Body MD5
      03b2f8f1218be488c86da0e988926f81 
    • HTTP/1.1 200 OK
Server: nginx
Date: Thu, 21 Nov 2024 08:50:07 GMT
Content-Type: text/html
Content-Length: 1019
Last-Modified: Sat, 16 Nov 2024 08:05:27 GMT
Connection: close
ETag: "67385247-3fb"
Accept-Ranges: bytes

<!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="renderer" content="webkit|ie-comp|ie-stand"><meta http-equiv="X-UA-Compatible" content="IE =edge,chrome =1"><meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=no,minimum-scale=1,maximum-scale=1"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title></title></head><body><script type="text/javascript">window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };
    _MICHAT("cptid", "773abbe59d39");
    _MICHAT("host", "emfn.stand02.com");
    (function (m, d, q, j, s) {
        j = d.createElement(q),s = d.getElementsByTagName(q)[0];
        j.async = true;
        j.charset ="UTF-8";
        j.src = ("https:" == document.location.protocol ? "https://" : "http://") + "emfn.stand02.com/Web/js/loader.js";
        s.parentNode.insertBefore(j, s);
    })(window, document, "script");</script></body></html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:50:08.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "03b2f8f1218be488c86da0e988926f81",
         "bodymmh3" : 1195897387,
         "header" : [
            {
               "name" : "Last-Modified",
               "value" : "Sat, 16 Nov 2024 08:05:27 GMT"
            },
            {
               "name" : "ETag",
               "value" : "67385247-3fb"
            }
         ],
         "headermd5" : "9b25fd43ac35a3b878f5988c823bdb9e",
         "headermmh3" : -38756753
      },
      "length" : 1246
   },
   "asn" : "AS55933",
   "country" : "ZA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:50:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 1019\r\nLast-Modified: Sat, 16 Nov 2024 08:05:27 GMT\r\nConnection: close\r\nETag: \"67385247-3fb\"\r\nAccept-Ranges: bytes\r\n\r\n<!doctype html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"><meta name=\"renderer\" content=\"webkit|ie-comp|ie-stand\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE =edge,chrome =1\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1,user-scalable=no,minimum-scale=1,maximum-scale=1\"><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"><title></title></head><body><script type=\"text/javascript\">window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };\r\n    _MICHAT(\"cptid\", \"773abbe59d39\");\r\n    _MICHAT(\"host\", \"emfn.stand02.com\");\r\n    (function (m, d, q, j, s) {\r\n        j = d.createElement(q),s = d.getElementsByTagName(q)[0];\r\n        j.async = true;\r\n        j.charset =\"UTF-8\";\r\n        j.src = (\"https:\" == document.location.protocol ? \"https://\" : \"http://\") + \"emfn.stand02.com/Web/js/loader.js\";\r\n        s.parentNode.insertBefore(j, s);\r\n    })(window, document, \"script\");</script></body></html>",
   "datamd5" : "b6e4ab9c4524cfd7ea41ddbd0fc4d29d",
   "datammh3" : 2143757542,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS328543",
      "continent" : "AF",
      "continentname" : "Africa",
      "country" : "ZA",
      "countryname" : "South Africa",
      "domain" : [
         "hitel.com.kh"
      ],
      "isineu" : "false",
      "latitude" : "-30.559482",
      "location" : "-30.559482,22.937506",
      "longitude" : "22.937506",
      "netname" : "xinyuan",
      "organization" : "CN XINYUAN INTERCONNECT COMPANY LTD",
      "subnet" : "102.134.32.0/23"
   },
   "ip" : "102.134.33.225",
   "ipv6" : "false",
   "latitude" : "-28.9984",
   "location" : "-28.9984,23.9888",
   "longitude" : "23.9888",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cloudie Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 32768,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "102.134.32.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 119.29.10.14:32768 (tcp/http) - last seen on 2024-11-21 at 08:49:11 UTC

    • IP
      119.29.10.14
      Network
      119.29.0.0/16
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Citrix Gateway Firmware Debian
      URL

      http://119.29.10.14:32768/studio/index.html 200

      HTTP Title
      BIG-IP®- Redirect
      HTTP Description
      OrientDB Studio
      ASN
      AS45090
      Organization
      Shenzhen Tencent Computer Systems Company Limited
      Protocol
      http
      Source
      datascan::redirect::3
    • Operating System
      Citrix Gateway Firmware Debian
      HTTP Component(s)
      PHP PHP 7.3.11 RedHat JBoss Community Application Server 4.2.3 Citrix Application Delivery Controller Oracle JSP 2.1 Drupal Drupal 6 Apache Solr OpenSSL OpenSSL 1.0.2k Apache org.apache.sling.servlets.post 2.4 Apache mod_jk 1.2.46
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f62384e6559e2436dd0a4b3a850f9db5
      HTTP Header MD5
      2e5961389fac069cd87c9d11cf063e10
      HTTP Body MD5
      6b9936c0cbbfee5c4feba9869e9b525b 
    • HTTP/1.1 200 OK
B44f479747a910a27dc8977282623951: 1OBtqAURqSbeu6LUYZTBVtv5u96UOJT6RigVuDVsNv
Content-Type: application/json
Server: BigIP Docker/1.13.1 (linux),docker 1.20,Jboss,Apache-Coyote/1.1,WildFly/10,WebLogic Server 6.0,WebLogic Server 7.0 SP4,phpstudy,struts,jenkins,gSOAP,lighttpd,Servlet,IBM_HTTP_Server/6.0.2 Apache/2.0.47 (Unix),Raptor Simple, Secure Web Server 1.0,28ZE,300Mbps Wireless N ADSL2+ Modem Router TD-W8960N,::: Login :::,ADSL2 PLUS,AGS GmbH Webserver Setup,AIROS,AN550602B,Apache Tomcat,AsicMiner,BaseDashboard,Braunschweiger Seven Stammtisch,C3T Routers,CRM - Welcome,Center of Inspiration,Channel management,Chaparral Wireless,Costume Designers Guild | IATSE local 892,D-LINK SYSTEMS, INC. | WIRELESS ROUTER | HOME,DIR600 1,DIR-615 DLINK,DLINK DIR-905L,DSL Router,DSL Router - GKM 1220,DVR Components Download,Dlink DIR-610,Dlink DIR-611,ELSYS CPE-2N,F609,FiberHome AN5506-02-B, hardware: GJ-2.134.321B7G, firmware: RP2520,FiberLink101,GOTHAN,GPON Home Gateway,GREATEK,GWR-120,Game of Life,Gial Plast,GoAhead-Boa,GoAhead-Webs,GoAhead-Webs Routers,GoAhed 302,HD,Home - B52,Home - International Club Winterthur,HtmlAnvView:D7B039C1-5929-49B3-913E-EB62C8866FC4,IIS7,IIS Windows Server,IP Camera,IPCam Client,IPOX,Infipix,Intelbras,KP8696X,Link One,Linksys Smart Wi-Fi,Login,Mini_httpd,Multilaser Router,NAS,NETSurveillance WEB,NETSuveillance WEB,Net Systems Research,Network Video Recorder Login,OIWTECH,PLC Wireless Router,PROVERLINK TELECOM,PayNet,PellesWeb,Proqualit Router,Realtek Semiconductor,Realtek Semiconductor [Title],Roteador ADSL,Roteador Wireless KLR 300N,Roteador Wireless N 150 Mbps,Roteador Wireless N 150Mbps,Roteador Wireless N 300 Mbps,Roteador Wireless N 300 Mbps [ LinkOne ],Roteador Wireless N 300 Mbps [Link One],Roteador Wireless N ( MultiLaser ),Roteador Wireless N [ MultiLaser ],RouterOS router configuration page,Server&nbsp;-&nbsp;Synology&nbsp;RackStation,Sicetelecom.it - HIPERLINK MANAGEMENT,Siemens,Sony Network Camera SNC-RZ30,Spark WebServer,Succession2&nbsp;-&nbsp;Synology&nbsp;DiskStation,Swagger UI,System dashboard - JIRA,TENDA,TL-WR740N / TL-WR741ND,TL-WR840N,TL-WR849N,TP-LINK Nano WR702N,TP-LINK Roteador Wireless,TP-LINK Roteador Wireless N WR741ND,TP-LINK TL-WR941HP,TP-LINK WR340G,TP-LINK WR720N,TP-LINK WR740N,TP-LINK WR741N,TP-LINK WR743ND,TP-LINK WR840N,TP-LINK WR841HP,TP-LINK WR841N,TP-LINK WR940N,TP-LINK WR941N,TP-LINK WR949N,TP-LINK Wireless AP WA5210G,TP-LINK Wireless Lite N Router WR740N,TP-LINK Wireless Lite N Router WR749N,TP-LINK Wireless N Gigabit Router WR1043ND,TP-LINK Wireless N Router WR841N/WR841ND,TP-LINK Wireless N Router WR845N,TP-LINK Wireless N Router WR941ND,TP-LINK Wireless Router,Tangible Interfaces,Teltonika Hotspot,Teltonika-RUT950.com - Web UI,Tenda Web Master,TimDSL,Titan ES,UCRM,WEB SERVICE,WLAN AP Webserver,Web Client,Samsung NVR,nginx,Wireless Router,Wireless Router,Wireless-N Router,YOU NET TELECOM,ZNID,ZXHN H108N V2.5,ZXV10 H108L,[controllr.netmontes.com.br] - Controllr,ePMP,index,macroscop,WSGIServer/0.2 CPython/3.8.0,dcv,Apache-Coyote/1.1,Servlet/2.4,Sun-ONE-Web-Proxy-Server/3.6-SP4,Varnish,Tengine,Cloudflare,Akamai,CDN,WWW Server/1.1,ASUSTeK UPnP/1.0 MiniUPnPd/1.4 AirTies/ASP 1.0 UPnP/1.0 miniupnpd/1.0 Apache-Coyote/1.1 Boa/0.94.13 Boa/0.94.14rc21 Camera Web Server CouchDB/1.6.1 (Erlang OTP/18) Cross Web Server DNVRS-Webs DVRDVS-Webs DasanNetwork Solution Debian/4.0 UPnP/1.0 miniupnpd/1.0 DWS GoAhead-Webs HTTP Server Hikvision-Webs IPCamera-Webs JAWS/1.0 Jan 21 2017 LINUX-2.6 UPnP/1.0 MiniUPnPd/1.5 Linux, HTTP/1.1, DIR-860L Ver 1.01 Linux/2.6.18 UPnP/1.0 miniupnpd/1.0 Linux/2.x UPnP/1.0 Avtech/1.0 Linux/3.4.39 UPnP/1.0 Cling/2.0 Linux/3.10.0 eHomeMediaCenter/1.0 Linux/3.10.33 UPnP/1.0 Teleal-Cling/1.0 Linux/3.10.104 eHomeMediaCenter/1.0 Linux/3.14.29 CyberHTTP/1.0 MIPS LINUX/2.4 UPnP/1.0 miniupnpd/1.0 Mbedthis-Appweb/2.4.0 Microsoft-HTTPAPI/2.0 Microsoft-IIS/6.0 Microsoft-NetCore/2.0, UPnP/1.0 DLNADOC/1.50 Mikrotik HttpProxy Mini web server 1. Mini web server 1.0 ZTE corp 2005. MiniServ/1.890 Net-OS 5.xx UPnP/1.0 NetEVI/3.10 Network Camera with Pan/Tilt PanWeb Server/ - RomPager/4.07 UPnP/1.0 Router Webserver Servlet 2.5; JBoss-5.0/JBossWeb-2.1 Servlet/2.5 JSP/2.1 SonicWALL Spark TP-LINK Router UPnP/1.0 DLNADOC/1.50 Allwinnertech/0.1.0 UPnP/1.0 DLNADOC/1.50 Platinum/1.0.5.13 Unspecified, UPnP/1.0, Unspecified VB WCY_WEBServer/2.0 WebServer Windows Server 2008 R2, UPnP/1.0 DLNADOC/1.50, Serviio/1.8 Xavante 2.2.0 embeded alphapd axhttpd/1.5.3 gen5th/1.33.00 http server 1.0 httpd lighttpd/1.4.28 lighttpd/1.4.35 lighttpd/1.4.43 micro_httpd minhttpd mini_httpd/1.19 19dec2003 miniupnpd/1.0 UPnP/1.0 nginx/1.8.0 nostromo 1.9.4 uc-httpd 1.0.0 uc-httpd/1.0.0 360 web server, 792/71644 HTTP Server version 2.0 - TELDAT S.A., A10WS/1.00, ADB Broadband HTTP Server, ADH-Web, AR, ASUSTeK UPnP/1.0 MiniUPnPd/1.4, ATS/5.3.0, Adaptec ASM 1.1, AirTies/ASP 1.0 UPnP/1.0 miniupnpd/1.0, Allegro-Software-RomPager/4.06, AmirHossein Server v1.0, AnWeb/1.42p, Android Webcam Server, AnyStor-E, Apache-Coyote/1.1, Apache/2.2.15 (CentOS), Apache/2.4.29 (Ubuntu), Apache/2.4.6 (Red Hat Enterprise Linux) PHP/7.3.11, Apache/2.4.6 (Red Hat Enterprise Linux) mod_jk/1.2.46 OpenSSL/1.0.2k-fips, App-webs/, ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.9.4), AvigilonGateway/1.0 Microsoft-HTTPAPI/2.0, Avtech, Baby Web Server, BigIP, BlueIris-HTTP/1.1, Boa/0.93.15, Boa/0.94.13, Boa/0.94.14rc20, Boa/0.94.14rc21, Boa/0.94.7, BolidXMLRPC/1.10 (Windows NT) ORION-BOLID v1.10, BroadWorks, Brovotech/2.0.0, CJServer/1.1, CPWS, CVM, Caddy, Cam, Cambium HTTP Serve
Set-Cookie: bt_panel=
X-Generator: Drupal 6 7 8
X-Jenkins-Session: 224f1e43
X-Powered-By: Servlet 2.4; Servlet/2.5 JSP/2.1 ,JBoss-4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181417)/JBossWeb-2.0,PHP/5.4.35,ASP.NET,UrlRewriter.NET 1.7.0,PleskLin,ARR/2.5,ZendServer/9.1.3
X-Redirect-By: Wordpress
Date: Thu, 21 Nov 2024 08:49:11 GMT
Connection: close
Transfer-Encoding: chunked

f09d
<meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body>hello world! OK
<title>BIG-IP®- Redirect</title>
<p id="hello" hidden="hidden">
    <!--
     <title>Citrix Login</title>
     <title>Index of</title>
     <title>AmbiGateCRM</title>
     <title>GPON Home Gateway</title>
     <title>RouterOS router configuration page</title>
     <title>DasanNetwork Solution</title>
     <title>Web Client</title>
     <title>NETSurveillance WEB</title>
     <title>System Information [Jenkins]</title> <title>d-link</title> <title>Vuln!! patch it Now!</title>
     <meta name="generator" content="vBulletin 5.5.4" />
     Tengine,
     nginx/1.10.0
     Apache/2.2.21
     gSOAP/2.7
     GoAhead-Webs
     GoAhead-http
     RomPager/4.07 UPnP/1.0
     lighttpd/1.4.34
     Lighttpd/1.4.28
     lighttpd/1.4.31
     Linux/2.x UPnP/1.0 Avtech/1.0
     P-660HW-T1 v3
     U S Software Web Server
     Netwave IP Camera
     Boa/0.94.14rc21
     Boa/0.93.15
     DVRDVS-Webs
     CouchDB/2.1.0 (Erlang OTP/17)
     miniupnpd/1.0 UPnP/1.0
     DasanNetwork Solution
     HP-iLO-Server/1.30
     OS 1.0 UPnP/1.0 Realtek/V1.3
     IceWarp/12.0.2.0 x64
     Docker/17.05.0-ce (linux)
     uc-httpd/1.0.0
     uc-httpd 1.0.0
     Nexus/3.14.0-04 (OSS)
     MiniServ/1.920
     Httpd/1.0
     Apache-Coyote/1.1
     Server: mini_httpd/1.19 19dec2003

     #keyword
     Authorization: Digest username="admin", realm="LIVE555 Streaming Media", nonce="3d2a0bb54a3361e769604858ce72de05", uri="rtsp:/172.104.73.17:44554/12/streamid=0", response="9f1d5082dd5700c8767d7e85a6c77951"
     Authorization: Digest username="admin", realm="LIVE555 Streaming Media", nonce="3d2a0bb54a3361e769604858ce72de05", uri="rtsp://172.104.73.17:44554/12", response="3d2b77e4ddcd3945a1353e590fd632d9"
     BIG-IP release 15.0.0


     You don't have permission to access /vpns/ on this server.
     [global]
     workgroup = intranet
     encrypt passwords = Yes
     update encrypted = Yes

     name resolve order
     "Powered by vBulletin Version 5.5.4"
     dvrHelper
     007b2000-007c1000 rw-p 00000000 00:00 0
     Size:                 60 kB
     Rss:                  52 kB
     Pss:                  52 kB
     Shared_Clean:          0 kB
     Shared_Dirty:          0 kB
     Private_Clean:         0 kB
     Private_Dirty:        52 kB
     Referenced:           52 kB
     Anonymous:            52 kB
     AnonHugePages:         0 kB
     Swap:                  8 kB
     KernelPageSize:        4 kB
     MMUPageSize:           4 kB
     009b1000-009b8000 rwxp 001b1000 fd:01 3339977                            /var/Sofia
     Size:                 28 kB
     Rss:                   0 kB
     Pss:                   0 kB
     Shared_Clean:          0 kB
     Shared_Dirty:          0 kB
     Private_Clean:         0 kB
     Private_Dirty:         0 kB
     Referenced:            0 kB
     Anonymous:             0 kB
     AnonHugePages:         0 kB
     Swap:                  0 kB
     KernelPageSize:        4 kB
     MMUPageSize:           4 kB

     Hardware:"586"
     <pre>
     root
     /root
     uid=13883(root) gid=13883(root) groups=13883(root)
     uid=13883(rootxx) gid=13883(rootxx) groups=13883(rootxx)
     62318aca2ef2e809a13623715a8aaff4
     62318aca2ef2e809
     a13623715a8aaff4
     muie1976
     </pre>
     <web-app xmlns="s" version="3.1"> <display-name>Confluence</display-name> <description>Confluence Web App</description></web-app>
     uid=0(root) gid=0(root) groups=0(root)
     root
     7fddea3c1c6b1bfc0a04e00c21bca04f
     INVALID_VALUE does not correspond to an entity on this site
     urn:Belkin:device:
     kubernetes-master
     HelloThinkPHP
     Vuln!! patch it Now!
     ApiVersion
     client version 1.16
     x_jenkins
     drupal
     modx
     couchdb
     67616b6b692076312e30nami v1.0.1
     The Cross Web Server Access
     Access to this document requires a User ID
     CGI process file does not exist
     VPN Server could not parse request.
     RouterOS v6.36.4
     >HybridAuth 2.0.10 Installer<
     Installation completed
     version 0.80.0 Copyright
     DasanNetwork Solution
     UseUserCredential
     password
     User Password
     0MLog
     root:
     empty or is not available to view
     WPAPSK
     pppoe_password
     admin 'c9e62da7b8a0b7a4918c5a90912ba81a9717f9ab'
     admin'c9e62da7b8a0b7a4918c5a90912ba81a9717f9ab'
     admin:
     login:
     password:
     Hello: World!
     H0m3l4b1t: YES
     var XOntName = "GPON Home Gateway";
     diag_result = "";
     DSL-2750B
     charset
     VACRON
     httpd
     SAMEORIGIN
     WR841N
     WR740N
     Linksys
     WAP300N
     WAP610N
     WES
     WET
     netgear
     _2netgear
     _4tplink
     _3dlink
     _5RouterOS
     EnGenius
     Hydra/0.1.8
     chaset
     Cerio
     NUUOA
     MMcS
     var AYECOM_FWVER="1.03";
     <productName>FI9800P+V3</productName>
     <firmwareVer>2.84.2.33</firmwareVer>
     <hardwareVer>1.12.5.2</hardwareVer>
     pmaversion = '4.6.0';
     "token" value="yJpdiI6IkZpeaasdf1sdfbs"
     token=yJpdiI6IkZpeaasdf1sdfbs$
     Welcome to
     "Hello, Peppa!"
     var user_passwd="YWRtaW4=";
     SUCCESS
     : Linux, HTTP/1.1, DIR

     <Titan>03.08
     <Titan>03.07

     <H1>Index of /mnt/web/</H1>

     <p><a href="//mnt/web/.">.</a></p>
     <p><a href="//mnt/web/..">..</a></p

     <p><a href="//mnt/web/../../proc/.">.</a></p>
     <p><a href="//mnt/web/../../proc/..">..</a></p>
     <p><a href="//mnt/web/../../proc/18881">18881</a></p>
     <p><a href="//mnt/web/../../proc/888">888</a></p>
     <p><a href="//mnt/web/../../proc/1881">1881</a></p>
     <p><a href="//mnt/web/../../proc/cmdline">cmdline</a></p>
     <p><a href="//mnt/web/../../proc/cpuinfo">cpuinfo</a></p>
     <p><a href="//mnt/web/../../proc/">devices</a>devices</p>
     <p><a href="//mnt/web/../../proc/">version</a>version</p>

     <script>document.localtion.replace("/+CSCOE+/logon.html")</script>
     ///
     [
     {"name":"+CSCOE+", "size":0, "type":"1", "mdate":1526562483}
     {"name":"user:mbentk", "size":0, "type":"0", "mdate":1526562483}
     ]

     <title>Redirecting to OrientDB Studio...</title>
     <meta name="title" content="Document | DBMS | Database | Java | Studio" />
     <meta name="description" content="OrientDB Studio" />
     <meta http-equiv="refresh" content="0; URL=/studio/index.html">
     Redirecting to OrientDB Studio...

     <div class="panel-body">
     <hr>
     <center><h3>Failed to change password : The current password is incorrectuid=0(root) gid=0(root) groups=0(root)
     <center><h3>Successful to change password : The current password is incorrectuid=0(root) gid=0(root) groups=0(root)
     </h3></center>

     base64Binary</base64Binary>
     <button data-drupal-selector="edit-submit" class="button js-form-submit form-submit btn-default btn" type="submit" id="edit-submit" name="op" value="Subscribe">Subscribe</button>
     <a href="http://mikrotik.com"><img src="mikrotik_logo.png" style="float: right;" /></a>
     <h1>RouterOS v6.36.4</h1>
     <h1>(MikroTik 6.36.4)</h1>
     <tr><td colspan="3"><h2>WebFig Login:</h2>
     <title>RouterOS router configuration page</title>
     Linux Ubuntu 4.4.0-101-generic #124-Ubuntu SMP Fri Nov 10 18:29:59 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
     Location: http://192.168.1.1/home_H1.asp
     <html ng-app="solrAdminApp">
     <title>Solr Admin</title>
     if (lang == "en")
     {
     document.write("<span><font color="#006699" style="font-family:Arial;font-size:20px;">Home Gateway</font></span>");
     }
     else if (lang == "zh")
     {
     document.write("<span><font color="#006699" style="font-family:Arial;font-size:28px;"><b>若� 佯� 營� ��</b></font></span>");
     }
     <HTML><HEAD><script>top.location.href="/Main_Login.asp?error_status=1&page=index.asp&lock_time=0";</script>
     </HEAD></HTML>
     Admin:
     MLog
     deadbeaf
     java.lang.ProcessBuilder
     [fonts]
     ConfigSystemCommand
     <NewUserpassword>455</NewUserpassword>
     :no
     D-Link
     <div id="menu" class="topmenucontainer" style="display:none;"><div class="modelname">DIR-629</div>
     <div id="menu" class="topmenucontainer" style="display:none;"><div class="modelname">DIR-600</div>
     <form name="frm" id="frm" method="post" action="login.php">
     <form name="pagepost" method="post" action="/xslt?PAGE=WRA01_POST&amp;NEXTPAGE=WRA01_POST" id="pagepost">
     P-660HN-T1A_IPv6
     [error]0
     ZyXEL P-660HN-T1A
     home_wan.htm
     Invalid credentials for user
     success
     DeviceBasicInfo
     UserSetSetting
     DDNSSetting
     <title>Network Video Recorder Login</title>
     var VENDOR_NAME = "NUUO";
     var VENDOR_DISPLAY_NAME = "NUUO";
     var DEFAULT_PASSWD = "admin";
     var COPYRIGHT_YEAR = "2013";
     var SUPPORT_SYSTEM_SETTING = true;
     var SUPPORT_RAID_SETTING = true;
     var SUPPORT_NETWORK_SETTING = true;
     var SUPPORT_POS = true;
     var SUPPORT_IO = true;
     var SUPPORT_WEB_SERVICE = true;
     var SUPPORT_HW_LOG = true;
     var SUPPORT_ABNORMAL_DISK_EVENT = true;
     var SUPPORT_DAILY_SYSTEM_REPORT = true;
     var SUPPORT_POWER_ON_EVENT = true;
     var SUPPORT_OVERHEAT_EVENT = true;
     var SUPPORT_LICENSE_TRANSFER = true;
     var SUPPORT_TRIAL = false;
     var SUPPORT_LOCAL_DISPAY = false;
     var NEED_UPLOAD_FROM_DISK = true;
     var SUPPORT_BUILDIN_DHCP = false;
     var OEM_TYPE = false;
     var DEFAULT_LANG = "en";
     var VENDOR_CONTACT_WINDOW = "www.nuuo.com/eHelpdesk.php";
     var PROJECT_NAME = "NVRmini 2";
     omg1337hax
     RomPager
     tomcat
     phpmyadmin
     login
     ddns
     WPAPSK
     Adm_ID
     szUsername
     szPassword
     report.db.server.name
     report.db.server.sa.pass
     report.db.server.user.pass
     pwdSupport
     pwdUser
     pwdAdmin
     root:x:0:0:root:/root:/bin/bash
     daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
     bin:x:2:2:bin:/bin:/usr/sbin/nologin
     sys:x:3:3:sys:/dev:/usr/sbin/nologin
     sync:x:4:65534:sync:/bin:/bin/sync
     games:x:5:60:games:/usr/games:/usr/sbin/nologin
     man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
     lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
     mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
     news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
     uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
     
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:49:11.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "mikrotik.com"
         ],
         "file" : [
            "ehelpdesk.php",
            "login.php"
         ],
         "hostname" : [
            "mikrotik.com"
         ],
         "ip" : [
            "12.0.2.0",
            "1.0.5.13",
            "2.84.2.33",
            "1.12.5.2",
            "192.168.1.1",
            "1.8.9.4",
            "172.104.73.17"
         ],
         "url" : [
            "http://192.168.1.1/home_H1.asp",
            "http://mikrotik.com",
            "rtsp://172.104.73.17:44554/12"
         ]
      },
      "http" : {
         "bodymd5" : "6b9936c0cbbfee5c4feba9869e9b525b",
         "bodymmh3" : -1707456506,
         "component" : [
            {
               "product" : "Application Delivery Controller",
               "productvendor" : "Citrix"
            },
            {
               "productversion" : "4.2.3",
               "product" : "JBoss Community Application Server",
               "productvendor" : "RedHat"
            },
            {
               "productversion" : "7.3.11",
               "productvendor" : "PHP",
               "product" : "PHP"
            },
            {
               "productversion" : "1.2.46",
               "product" : "mod_jk",
               "productvendor" : "Apache"
            },
            {
               "product" : "Solr",
               "productvendor" : "Apache"
            },
            {
               "productversion" : "6",
               "productvendor" : "Drupal",
               "product" : "Drupal"
            },
            {
               "product" : "org.apache.sling.servlets.post",
               "productvendor" : "Apache",
               "productversion" : "2.4"
            },
            {
               "productversion" : "1.0.2k",
               "productvendor" : "OpenSSL",
               "product" : "OpenSSL"
            },
            {
               "productversion" : "2.1",
               "productvendor" : "Oracle",
               "product" : "JSP"
            }
         ],
         "description" : "OrientDB Studio",
         "headermd5" : "2e5961389fac069cd87c9d11cf063e10",
         "headermmh3" : -2032211757,
         "realm" : "LIVE555 Streaming Media",
         "title" : "BIG-IP\u00ae- Redirect"
      },
      "length" : 16384
   },
   "asn" : "AS45090",
   "city" : "Guangzhou",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nB44f479747a910a27dc8977282623951: 1OBtqAURqSbeu6LUYZTBVtv5u96UOJT6RigVuDVsNv\r\nContent-Type: application/json\r\nServer: BigIP Docker/1.13.1 (linux),docker 1.20,Jboss,Apache-Coyote/1.1,WildFly/10,WebLogic Server 6.0,WebLogic Server 7.0 SP4,phpstudy,struts,jenkins,gSOAP,lighttpd,Servlet,IBM_HTTP_Server/6.0.2 Apache/2.0.47 (Unix),Raptor Simple, Secure Web Server 1.0,28ZE,300Mbps Wireless N ADSL2+ Modem Router TD-W8960N,::: Login :::,ADSL2 PLUS,AGS GmbH Webserver Setup,AIROS,AN550602B,Apache Tomcat,AsicMiner,BaseDashboard,Braunschweiger Seven Stammtisch,C3T Routers,CRM - Welcome,Center of Inspiration,Channel management,Chaparral Wireless,Costume Designers Guild | IATSE local 892,D-LINK SYSTEMS, INC. | WIRELESS ROUTER | HOME,DIR600 1,DIR-615 DLINK,DLINK DIR-905L,DSL Router,DSL Router - GKM 1220,DVR Components Download,Dlink DIR-610,Dlink DIR-611,ELSYS CPE-2N,F609,FiberHome AN5506-02-B, hardware: GJ-2.134.321B7G, firmware: RP2520,FiberLink101,GOTHAN,GPON Home Gateway,GREATEK,GWR-120,Game of Life,Gial Plast,GoAhead-Boa,GoAhead-Webs,GoAhead-Webs Routers,GoAhed 302,HD,Home - B52,Home - International Club Winterthur,HtmlAnvView:D7B039C1-5929-49B3-913E-EB62C8866FC4,IIS7,IIS Windows Server,IP Camera,IPCam Client,IPOX,Infipix,Intelbras,KP8696X,Link One,Linksys Smart Wi-Fi,Login,Mini_httpd,Multilaser Router,NAS,NETSurveillance WEB,NETSuveillance WEB,Net Systems Research,Network Video Recorder Login,OIWTECH,PLC Wireless Router,PROVERLINK TELECOM,PayNet,PellesWeb,Proqualit Router,Realtek Semiconductor,Realtek Semiconductor [Title],Roteador ADSL,Roteador Wireless KLR 300N,Roteador Wireless N 150 Mbps,Roteador Wireless N 150Mbps,Roteador Wireless N 300 Mbps,Roteador Wireless N 300 Mbps [ LinkOne ],Roteador Wireless N 300 Mbps [Link One],Roteador Wireless N ( MultiLaser ),Roteador Wireless N [ MultiLaser ],RouterOS router configuration page,Server&nbsp;-&nbsp;Synology&nbsp;RackStation,Sicetelecom.it - HIPERLINK MANAGEMENT,Siemens,Sony Network Camera SNC-RZ30,Spark WebServer,Succession2&nbsp;-&nbsp;Synology&nbsp;DiskStation,Swagger UI,System dashboard - JIRA,TENDA,TL-WR740N / TL-WR741ND,TL-WR840N,TL-WR849N,TP-LINK Nano WR702N,TP-LINK Roteador Wireless,TP-LINK Roteador Wireless N WR741ND,TP-LINK TL-WR941HP,TP-LINK WR340G,TP-LINK WR720N,TP-LINK WR740N,TP-LINK WR741N,TP-LINK WR743ND,TP-LINK WR840N,TP-LINK WR841HP,TP-LINK WR841N,TP-LINK WR940N,TP-LINK WR941N,TP-LINK WR949N,TP-LINK Wireless AP WA5210G,TP-LINK Wireless Lite N Router WR740N,TP-LINK Wireless Lite N Router WR749N,TP-LINK Wireless N Gigabit Router WR1043ND,TP-LINK Wireless N Router WR841N/WR841ND,TP-LINK Wireless N Router WR845N,TP-LINK Wireless N Router WR941ND,TP-LINK Wireless Router,Tangible Interfaces,Teltonika Hotspot,Teltonika-RUT950.com - Web UI,Tenda Web Master,TimDSL,Titan ES,UCRM,WEB SERVICE,WLAN AP Webserver,Web Client,Samsung NVR,nginx,Wireless Router,Wireless Router,Wireless-N Router,YOU NET TELECOM,ZNID,ZXHN H108N V2.5,ZXV10 H108L,[controllr.netmontes.com.br] - Controllr,ePMP,index,macroscop,WSGIServer/0.2 CPython/3.8.0,dcv,Apache-Coyote/1.1,Servlet/2.4,Sun-ONE-Web-Proxy-Server/3.6-SP4,Varnish,Tengine,Cloudflare,Akamai,CDN,WWW Server/1.1,ASUSTeK UPnP/1.0 MiniUPnPd/1.4 AirTies/ASP 1.0 UPnP/1.0 miniupnpd/1.0 Apache-Coyote/1.1 Boa/0.94.13 Boa/0.94.14rc21 Camera Web Server CouchDB/1.6.1 (Erlang OTP/18) Cross Web Server DNVRS-Webs DVRDVS-Webs DasanNetwork Solution Debian/4.0 UPnP/1.0 miniupnpd/1.0 DWS GoAhead-Webs HTTP Server Hikvision-Webs IPCamera-Webs JAWS/1.0 Jan 21 2017 LINUX-2.6 UPnP/1.0 MiniUPnPd/1.5 Linux, HTTP/1.1, DIR-860L Ver 1.01 Linux/2.6.18 UPnP/1.0 miniupnpd/1.0 Linux/2.x UPnP/1.0 Avtech/1.0 Linux/3.4.39 UPnP/1.0 Cling/2.0 Linux/3.10.0 eHomeMediaCenter/1.0 Linux/3.10.33 UPnP/1.0 Teleal-Cling/1.0 Linux/3.10.104 eHomeMediaCenter/1.0 Linux/3.14.29 CyberHTTP/1.0 MIPS LINUX/2.4 UPnP/1.0 miniupnpd/1.0 Mbedthis-Appweb/2.4.0 Microsoft-HTTPAPI/2.0 Microsoft-IIS/6.0 Microsoft-NetCore/2.0, UPnP/1.0 DLNADOC/1.50 Mikrotik HttpProxy Mini web server 1. Mini web server 1.0 ZTE corp 2005. MiniServ/1.890 Net-OS 5.xx UPnP/1.0 NetEVI/3.10 Network Camera with Pan/Tilt PanWeb Server/ - RomPager/4.07 UPnP/1.0 Router Webserver Servlet 2.5; JBoss-5.0/JBossWeb-2.1 Servlet/2.5 JSP/2.1 SonicWALL Spark TP-LINK Router UPnP/1.0 DLNADOC/1.50 Allwinnertech/0.1.0 UPnP/1.0 DLNADOC/1.50 Platinum/1.0.5.13 Unspecified, UPnP/1.0, Unspecified VB WCY_WEBServer/2.0 WebServer Windows Server 2008 R2, UPnP/1.0 DLNADOC/1.50, Serviio/1.8 Xavante 2.2.0 embeded alphapd axhttpd/1.5.3 gen5th/1.33.00 http server 1.0 httpd lighttpd/1.4.28 lighttpd/1.4.35 lighttpd/1.4.43 micro_httpd minhttpd mini_httpd/1.19 19dec2003 miniupnpd/1.0 UPnP/1.0 nginx/1.8.0 nostromo 1.9.4 uc-httpd 1.0.0 uc-httpd/1.0.0 360 web server, 792/71644 HTTP Server version 2.0 - TELDAT S.A., A10WS/1.00, ADB Broadband HTTP Server, ADH-Web, AR, ASUSTeK UPnP/1.0 MiniUPnPd/1.4, ATS/5.3.0, Adaptec ASM 1.1, AirTies/ASP 1.0 UPnP/1.0 miniupnpd/1.0, Allegro-Software-RomPager/4.06, AmirHossein Server v1.0, AnWeb/1.42p, Android Webcam Server, AnyStor-E, Apache-Coyote/1.1, Apache/2.2.15 (CentOS), Apache/2.4.29 (Ubuntu), Apache/2.4.6 (Red Hat Enterprise Linux) PHP/7.3.11, Apache/2.4.6 (Red Hat Enterprise Linux) mod_jk/1.2.46 OpenSSL/1.0.2k-fips, App-webs/, ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.9.4), AvigilonGateway/1.0 Microsoft-HTTPAPI/2.0, Avtech, Baby Web Server, BigIP, BlueIris-HTTP/1.1, Boa/0.93.15, Boa/0.94.13, Boa/0.94.14rc20, Boa/0.94.14rc21, Boa/0.94.7, BolidXMLRPC/1.10 (Windows NT) ORION-BOLID v1.10, BroadWorks, Brovotech/2.0.0, CJServer/1.1, CPWS, CVM, Caddy, Cam, Cambium HTTP Serve\r\nSet-Cookie: bt_panel=\r\nX-Generator: Drupal 6 7 8\r\nX-Jenkins-Session: 224f1e43\r\nX-Powered-By: Servlet 2.4; Servlet/2.5 JSP/2.1 ,JBoss-4.2.3.GA (build: SVNTag=JBoss_4_2_3_GA date=200807181417)/JBossWeb-2.0,PHP/5.4.35,ASP.NET,UrlRewriter.NET 1.7.0,PleskLin,ARR/2.5,ZendServer/9.1.3\r\nX-Redirect-By: Wordpress\r\nDate: Thu, 21 Nov 2024 08:49:11 GMT\r\nConnection: close\r\nTransfer-Encoding: chunked\r\n\r\nf09d\r\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\"></head><body>hello world! OK\n<title>BIG-IP\u00ae- Redirect</title>\n<p id=\"hello\" hidden=\"hidden\">\n    <!--\n     <title>Citrix Login</title>\n     <title>Index of</title>\n     <title>AmbiGateCRM</title>\n     <title>GPON Home Gateway</title>\n     <title>RouterOS router configuration page</title>\n     <title>DasanNetwork Solution</title>\n     <title>Web Client</title>\n     <title>NETSurveillance WEB</title>\n     <title>System Information [Jenkins]</title> <title>d-link</title> <title>Vuln!! patch it Now!</title>\n     <meta name=\"generator\" content=\"vBulletin 5.5.4\" />\n     Tengine,\n     nginx/1.10.0\n     Apache/2.2.21\n     gSOAP/2.7\n     GoAhead-Webs\n     GoAhead-http\n     RomPager/4.07 UPnP/1.0\n     lighttpd/1.4.34\n     Lighttpd/1.4.28\n     lighttpd/1.4.31\n     Linux/2.x UPnP/1.0 Avtech/1.0\n     P-660HW-T1 v3\n     U S Software Web Server\n     Netwave IP Camera\n     Boa/0.94.14rc21\n     Boa/0.93.15\n     DVRDVS-Webs\n     CouchDB/2.1.0 (Erlang OTP/17)\n     miniupnpd/1.0 UPnP/1.0\n     DasanNetwork Solution\n     HP-iLO-Server/1.30\n     OS 1.0 UPnP/1.0 Realtek/V1.3\n     IceWarp/12.0.2.0 x64\n     Docker/17.05.0-ce (linux)\n     uc-httpd/1.0.0\n     uc-httpd 1.0.0\n     Nexus/3.14.0-04 (OSS)\n     MiniServ/1.920\n     Httpd/1.0\n     Apache-Coyote/1.1\n     Server: mini_httpd/1.19 19dec2003\n\n     #keyword\n     Authorization: Digest username=\"admin\", realm=\"LIVE555 Streaming Media\", nonce=\"3d2a0bb54a3361e769604858ce72de05\", uri=\"rtsp:/172.104.73.17:44554/12/streamid=0\", response=\"9f1d5082dd5700c8767d7e85a6c77951\"\n     Authorization: Digest username=\"admin\", realm=\"LIVE555 Streaming Media\", nonce=\"3d2a0bb54a3361e769604858ce72de05\", uri=\"rtsp://172.104.73.17:44554/12\", response=\"3d2b77e4ddcd3945a1353e590fd632d9\"\n     BIG-IP release 15.0.0\n\n\n     You don't have permission to access /vpns/ on this server.\n     [global]\n     workgroup = intranet\n     encrypt passwords = Yes\n     update encrypted = Yes\n\n     name resolve order\n     \"Powered by vBulletin Version 5.5.4\"\n     dvrHelper\n     007b2000-007c1000 rw-p 00000000 00:00 0\n     Size:                 60 kB\n     Rss:                  52 kB\n     Pss:                  52 kB\n     Shared_Clean:          0 kB\n     Shared_Dirty:          0 kB\n     Private_Clean:         0 kB\n     Private_Dirty:        52 kB\n     Referenced:           52 kB\n     Anonymous:            52 kB\n     AnonHugePages:         0 kB\n     Swap:                  8 kB\n     KernelPageSize:        4 kB\n     MMUPageSize:           4 kB\n     009b1000-009b8000 rwxp 001b1000 fd:01 3339977                            /var/Sofia\n     Size:                 28 kB\n     Rss:                   0 kB\n     Pss:                   0 kB\n     Shared_Clean:          0 kB\n     Shared_Dirty:          0 kB\n     Private_Clean:         0 kB\n     Private_Dirty:         0 kB\n     Referenced:            0 kB\n     Anonymous:             0 kB\n     AnonHugePages:         0 kB\n     Swap:                  0 kB\n     KernelPageSize:        4 kB\n     MMUPageSize:           4 kB\n\n     Hardware:\"586\"\n     <pre>\n     root\n     /root\n     uid=13883(root) gid=13883(root) groups=13883(root)\n     uid=13883(rootxx) gid=13883(rootxx) groups=13883(rootxx)\n     62318aca2ef2e809a13623715a8aaff4\n     62318aca2ef2e809\n     a13623715a8aaff4\n     muie1976\n     </pre>\n     <web-app xmlns=\"s\" version=\"3.1\"> <display-name>Confluence</display-name> <description>Confluence Web App</description></web-app>\n     uid=0(root) gid=0(root) groups=0(root)\n     root\n     7fddea3c1c6b1bfc0a04e00c21bca04f\n     INVALID_VALUE does not correspond to an entity on this site\n     urn:Belkin:device:\n     kubernetes-master\n     HelloThinkPHP\n     Vuln!! patch it Now!\n     ApiVersion\n     client version 1.16\n     x_jenkins\n     drupal\n     modx\n     couchdb\n     67616b6b692076312e30nami v1.0.1\n     The Cross Web Server Access\n     Access to this document requires a User ID\n     CGI process file does not exist\n     VPN Server could not parse request.\n     RouterOS v6.36.4\n     >HybridAuth 2.0.10 Installer<\n     Installation completed\n     version 0.80.0 Copyright\n     DasanNetwork Solution\n     UseUserCredential\n     password\n     User Password\n     0MLog\n     root:\n     empty or is not available to view\n     WPAPSK\n     pppoe_password\n     admin 'c9e62da7b8a0b7a4918c5a90912ba81a9717f9ab'\n     admin'c9e62da7b8a0b7a4918c5a90912ba81a9717f9ab'\n     admin:\n     login:\n     password:\n     Hello: World!\n     H0m3l4b1t: YES\n     var XOntName = \"GPON Home Gateway\";\n     diag_result = \"\";\n     DSL-2750B\n     charset\n     VACRON\n     httpd\n     SAMEORIGIN\n     WR841N\n     WR740N\n     Linksys\n     WAP300N\n     WAP610N\n     WES\n     WET\n     netgear\n     _2netgear\n     _4tplink\n     _3dlink\n     _5RouterOS\n     EnGenius\n     Hydra/0.1.8\n     chaset\n     Cerio\n     NUUOA\n     MMcS\n     var AYECOM_FWVER=\"1.03\";\n     <productName>FI9800P+V3</productName>\n     <firmwareVer>2.84.2.33</firmwareVer>\n     <hardwareVer>1.12.5.2</hardwareVer>\n     pmaversion = '4.6.0';\n     \"token\" value=\"yJpdiI6IkZpeaasdf1sdfbs\"\n     token=yJpdiI6IkZpeaasdf1sdfbs$\n     Welcome to\n     \"Hello, Peppa!\"\n     var user_passwd=\"YWRtaW4=\";\n     SUCCESS\n     : Linux, HTTP/1.1, DIR\n\n     <Titan>03.08\n     <Titan>03.07\n\n     <H1>Index of /mnt/web/</H1>\n\n     <p><a href=\"//mnt/web/.\">.</a></p>\n     <p><a href=\"//mnt/web/..\">..</a></p\n\n     <p><a href=\"//mnt/web/../../proc/.\">.</a></p>\n     <p><a href=\"//mnt/web/../../proc/..\">..</a></p>\n     <p><a href=\"//mnt/web/../../proc/18881\">18881</a></p>\n     <p><a href=\"//mnt/web/../../proc/888\">888</a></p>\n     <p><a href=\"//mnt/web/../../proc/1881\">1881</a></p>\n     <p><a href=\"//mnt/web/../../proc/cmdline\">cmdline</a></p>\n     <p><a href=\"//mnt/web/../../proc/cpuinfo\">cpuinfo</a></p>\n     <p><a href=\"//mnt/web/../../proc/\">devices</a>devices</p>\n     <p><a href=\"//mnt/web/../../proc/\">version</a>version</p>\n\n     <script>document.localtion.replace(\"/+CSCOE+/logon.html\")</script>\n     ///\n     [\n     {\"name\":\"+CSCOE+\", \"size\":0, \"type\":\"1\", \"mdate\":1526562483}\n     {\"name\":\"user:mbentk\", \"size\":0, \"type\":\"0\", \"mdate\":1526562483}\n     ]\n\n     <title>Redirecting to OrientDB Studio...</title>\n     <meta name=\"title\" content=\"Document | DBMS | Database | Java | Studio\" />\n     <meta name=\"description\" content=\"OrientDB Studio\" />\n     <meta http-equiv=\"refresh\" content=\"0; URL=/studio/index.html\">\n     Redirecting to OrientDB Studio...\n\n     <div class=\"panel-body\">\n     <hr>\n     <center><h3>Failed to change password : The current password is incorrectuid=0(root) gid=0(root) groups=0(root)\n     <center><h3>Successful to change password : The current password is incorrectuid=0(root) gid=0(root) groups=0(root)\n     </h3></center>\n\n     base64Binary</base64Binary>\n     <button data-drupal-selector=\"edit-submit\" class=\"button js-form-submit form-submit btn-default btn\" type=\"submit\" id=\"edit-submit\" name=\"op\" value=\"Subscribe\">Subscribe</button>\n     <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\n     <h1>RouterOS v6.36.4</h1>\n     <h1>(MikroTik 6.36.4)</h1>\n     <tr><td colspan=\"3\"><h2>WebFig Login:</h2>\n     <title>RouterOS router configuration page</title>\n     Linux Ubuntu 4.4.0-101-generic #124-Ubuntu SMP Fri Nov 10 18:29:59 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux\n     Location: http://192.168.1.1/home_H1.asp\n     <html ng-app=\"solrAdminApp\">\n     <title>Solr Admin</title>\n     if (lang == \"en\")\n     {\n     document.write(\"<span><font color=\"#006699\" style=\"font-family:Arial;font-size:20px;\">Home Gateway</font></span>\");\n     }\n     else if (lang == \"zh\")\n     {\n     document.write(\"<span><font color=\"#006699\" style=\"font-family:Arial;font-size:28px;\"><b>\uf974\ufffd \u4f6f\ufffd \u71df\ufffd \ufffd\ufffd</b></font></span>\");\n     }\n     <HTML><HEAD><script>top.location.href=\"/Main_Login.asp?error_status=1&page=index.asp&lock_time=0\";</script>\n     </HEAD></HTML>\n     Admin:\n     MLog\n     deadbeaf\n     java.lang.ProcessBuilder\n     [fonts]\n     ConfigSystemCommand\n     <NewUserpassword>455</NewUserpassword>\n     :no\n     D-Link\n     <div id=\"menu\" class=\"topmenucontainer\" style=\"display:none;\"><div class=\"modelname\">DIR-629</div>\n     <div id=\"menu\" class=\"topmenucontainer\" style=\"display:none;\"><div class=\"modelname\">DIR-600</div>\n     <form name=\"frm\" id=\"frm\" method=\"post\" action=\"login.php\">\n     <form name=\"pagepost\" method=\"post\" action=\"/xslt?PAGE=WRA01_POST&amp;NEXTPAGE=WRA01_POST\" id=\"pagepost\">\n     P-660HN-T1A_IPv6\n     [error]0\n     ZyXEL P-660HN-T1A\n     home_wan.htm\n     Invalid credentials for user\n     success\n     DeviceBasicInfo\n     UserSetSetting\n     DDNSSetting\n     <title>Network Video Recorder Login</title>\n     var VENDOR_NAME = \"NUUO\";\n     var VENDOR_DISPLAY_NAME = \"NUUO\";\n     var DEFAULT_PASSWD = \"admin\";\n     var COPYRIGHT_YEAR = \"2013\";\n     var SUPPORT_SYSTEM_SETTING = true;\n     var SUPPORT_RAID_SETTING = true;\n     var SUPPORT_NETWORK_SETTING = true;\n     var SUPPORT_POS = true;\n     var SUPPORT_IO = true;\n     var SUPPORT_WEB_SERVICE = true;\n     var SUPPORT_HW_LOG = true;\n     var SUPPORT_ABNORMAL_DISK_EVENT = true;\n     var SUPPORT_DAILY_SYSTEM_REPORT = true;\n     var SUPPORT_POWER_ON_EVENT = true;\n     var SUPPORT_OVERHEAT_EVENT = true;\n     var SUPPORT_LICENSE_TRANSFER = true;\n     var SUPPORT_TRIAL = false;\n     var SUPPORT_LOCAL_DISPAY = false;\n     var NEED_UPLOAD_FROM_DISK = true;\n     var SUPPORT_BUILDIN_DHCP = false;\n     var OEM_TYPE = false;\n     var DEFAULT_LANG = \"en\";\n     var VENDOR_CONTACT_WINDOW = \"www.nuuo.com/eHelpdesk.php\";\n     var PROJECT_NAME = \"NVRmini 2\";\n     omg1337hax\n     RomPager\n     tomcat\n     phpmyadmin\n     login\n     ddns\n     WPAPSK\n     Adm_ID\n     szUsername\n     szPassword\n     report.db.server.name\n     report.db.server.sa.pass\n     report.db.server.user.pass\n     pwdSupport\n     pwdUser\n     pwdAdmin\n     root:x:0:0:root:/root:/bin/bash\n     daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin\n     bin:x:2:2:bin:/bin:/usr/sbin/nologin\n     sys:x:3:3:sys:/dev:/usr/sbin/nologin\n     sync:x:4:65534:sync:/bin:/bin/sync\n     games:x:5:60:games:/usr/games:/usr/sbin/nologin\n     man:x:6:12:man:/var/cache/man:/usr/sbin/nologin\n     lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin\n     mail:x:8:8:mail:/var/mail:/usr/sbin/nologin\n     news:x:9:9:news:/var/spool/news:/usr/sbin/nologin\n     uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin\n     ",
   "datamd5" : "f62384e6559e2436dd0a4b3a850f9db5",
   "datammh3" : -1766923540,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "forward" : "119.29.10.14",
   "geolocus" : {
      "asn" : "AS45090",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "cnnic.cn",
         "tencent.com"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "TencentCloud",
      "organization" : "Shenzhen Tencent Computer Systems Company Limited",
      "subnet" : "119.29.0.0/20"
   },
   "hostname" : [
      "119.29.10.14"
   ],
   "ip" : "119.29.10.14",
   "ipv6" : "false",
   "latitude" : "23.1181",
   "location" : "23.1181,113.2539",
   "longitude" : "113.2539",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Shenzhen Tencent Computer Systems Company Limited",
   "os" : "Gateway Firmware",
   "osdistribution" : "Debian",
   "osvendor" : "Citrix",
   "port" : 32768,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-21",
   "source" : "datascan::redirect::3",
   "status" : 200,
   "subnet" : "119.29.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/studio/index.html"
}

  • 221.128.201.108:32768 (tcp/http) - last seen on 2024-11-21 at 08:49:09 UTC

    • IP
      221.128.201.108
      Network
      221.128.128.0/17
      Domain(s)
      imidc.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://221.128.201.108:32768/ 200

      Reverse DNS
      unknown.imidc.com
      ASN
      AS55933
      Organization
      Cloudie Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a8501d143ee0b529d1442b0764b707be
      HTTP Header MD5
      9b25fd43ac35a3b878f5988c823bdb9e
      HTTP Body MD5
      6d77c15d500012aa2df779634061cb9f 
    • HTTP/1.1 200 OK
Server: nginx
Date: Thu, 21 Nov 2024 08:49:09 GMT
Content-Type: text/html
Content-Length: 1015
Last-Modified: Wed, 20 Nov 2024 06:26:19 GMT
Connection: close
ETag: "673d810b-3f7"
Accept-Ranges: bytes

<!doctype html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="renderer" content="webkit|ie-comp|ie-stand"><meta http-equiv="X-UA-Compatible" content="IE =edge,chrome =1"><meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=no,minimum-scale=1,maximum-scale=1"><meta http-equiv="Content-Type" content="text/html; charset=utf-8"><title></title></head><body><script type="text/javascript">window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };
    _MICHAT("cptid", "14b1b6acffc3");
    _MICHAT("host", "emgr.omzrt.com");
    (function (m, d, q, j, s) {
        j = d.createElement(q),s = d.getElementsByTagName(q)[0];
        j.async = true;
        j.charset ="UTF-8";
        j.src = ("https:" == document.location.protocol ? "https://" : "http://") + "emgr.omzrt.com/Web/js/loader.js";
        s.parentNode.insertBefore(j, s);
    })(window, document, "script");</script></body></html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:49:09.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6d77c15d500012aa2df779634061cb9f",
         "bodymmh3" : 1706101898,
         "header" : [
            {
               "value" : "Wed, 20 Nov 2024 06:26:19 GMT",
               "name" : "Last-Modified"
            },
            {
               "name" : "ETag",
               "value" : "673d810b-3f7"
            }
         ],
         "headermd5" : "9b25fd43ac35a3b878f5988c823bdb9e",
         "headermmh3" : 1781378204
      },
      "length" : 1242
   },
   "asn" : "AS55933",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:49:09 GMT\r\nContent-Type: text/html\r\nContent-Length: 1015\r\nLast-Modified: Wed, 20 Nov 2024 06:26:19 GMT\r\nConnection: close\r\nETag: \"673d810b-3f7\"\r\nAccept-Ranges: bytes\r\n\r\n<!doctype html><html><head><meta charset=\"utf-8\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\"><meta name=\"renderer\" content=\"webkit|ie-comp|ie-stand\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE =edge,chrome =1\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1,user-scalable=no,minimum-scale=1,maximum-scale=1\"><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"><title></title></head><body><script type=\"text/javascript\">window._MICHAT = window._MICHAT || function () { (_MICHAT.a = _MICHAT.a || []).push(arguments) };\r\n    _MICHAT(\"cptid\", \"14b1b6acffc3\");\r\n    _MICHAT(\"host\", \"emgr.omzrt.com\");\r\n    (function (m, d, q, j, s) {\r\n        j = d.createElement(q),s = d.getElementsByTagName(q)[0];\r\n        j.async = true;\r\n        j.charset =\"UTF-8\";\r\n        j.src = (\"https:\" == document.location.protocol ? \"https://\" : \"http://\") + \"emgr.omzrt.com/Web/js/loader.js\";\r\n        s.parentNode.insertBefore(j, s);\r\n    })(window, document, \"script\");</script></body></html>",
   "datamd5" : "a8501d143ee0b529d1442b0764b707be",
   "datammh3" : -67078578,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "imidc.com"
   ],
   "geolocus" : {
      "asn" : "AS55933",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "cnnic.cn",
         "fbiinet.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CYNET",
      "organization" : "Beijing Chang Ying Netowrk Service Co.Ltd",
      "subnet" : "221.128.192.0/19"
   },
   "host" : [
      "unknown"
   ],
   "hostname" : [
      "unknown.imidc.com"
   ],
   "ip" : "221.128.201.108",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cloudie Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 32768,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "unknown.imidc.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "221.128.128.0/17",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 13.40.168.143:32768 (tcp/http) - last seen on 2024-11-21 at 08:49:09 UTC

    • IP
      13.40.168.143
      Network
      13.40.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Linux Linux Kernel
      URL

      http://13.40.168.143:32768/ 200

      HTTP Title
      AiCloud
      Reverse DNS
      ec2-13-40-168-143.eu-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      eec2f4120ab9a23d5cfaf3bfdc2425a1
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      5ca568bf96622aad854cce25a37f12ad
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 08:40:07 GMT
Server: nginx
Content-Length: 16915
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Cache-control" content="no-cache">
<meta name="viewport" content="width=device-width, minimum-scale=1.0, maximum-scale=1, user-scalable=no" />
<meta name="apple-mobile-web-app-capable" content="yes">
<meta name="apple-mobile-web-app-status-bar-style" content="black">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta http-equiv="X-Frame-Options" content="SAMEORIGIN">
<title>AiCloud</title>
<style>
html{
margin:0 0;
padding:0px;
font-family:"Segoe UI",Arial;
}
body{
display: block;
overflow: hidden;
}

input,#ok {
background:transparent url("/smb/css/style-theme.png") no-repeat top left;
}

#login_logo{
width:300px;
height:76px;
background:transparent url("/smb/css/logo.jpg") no-repeat top left;
position: absolute;
top: 60px;
}

#ok{
background-position: -200px -390px;
width:40px;
height:40px;
float:right;
}
#title1{
color:#fff;
font-size:30px
}
#title2{
color:#fff;
font-size:20px
}
input {
font-size: 14px;
text-shadow: 0px 1px 0px white;
outline: none;
background-position: 0 -540px;
-webkit-border-radius: 0;
-moz-border-radius: 0;
border-radius: 0;
border: 0;
-webkit-box-shadow: 0 0 0;
-moz-box-shadow: 0 0 0;
box-shadow: 0 0 0;
padding-left:3px;
}
div.cap_num{
width:40px;
height:40px;
float:right;
}
.unselectable {
-moz-user-select: -moz-none;
-khtml-user-select: none;
-webkit-user-select: none;
-o-user-select: none;
user-select: none;
}
.table_x{
position: relative;
padding: 20px 40px 0 40px;
font-size: 20px;
display:none;
}
.table_x input{
width:220px;
height:36px;
font-size: 20px;
}
.table_x .table_label_x{
color:#ffffff;
}
</style>
<script type="text/javascript" src="/smb/js/tools.js"></script>
<script type='text/javascript' src='/smb/js/davclient_tools.js'></script>
<script type="text/javascript">
var this_url;
var m = new lang();
var g_storage = new myStorage();
var g_captcha = -1;

function makeid(){
    var text = "";
    var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";

    for( var i=0; i < 20; i++ )
        text += possible.charAt(Math.floor(Math.random() * possible.length));

    return text;
}

$("document").ready(function() {
        //- create access token
        var asus_token = ( g_storage.gett('asus_token') == undefined ) ? '' : g_storage.gett('asus_token');
        if(asus_token==""){
                asus_token = makeid();
                g_storage.sett('asus_token', asus_token);
        }

        var loc_lan = String(window.navigator.userLanguage || window.navigator.language).toLowerCase();
        var lan = ( g_storage.get('lan') == undefined ) ? loc_lan : g_storage.get('lan');
        m.setLanguage(lan);

        $('label#username').text(m.getString('title_username2'));
        $('label#password').text(m.getString('title_password2'));
        // $('label#captcha').text(m.getString('title_captcha'));

        this_url = $("input.urlInfo").attr("value");

        if(this_url!="/"){
                $("div#title1").text(m.getString('title_login'));
                $("div#title2").text(this_url);
        }

        var browserVer = navigator.userAgent.toLowerCase();
        if( isIE() &&
                getInternetExplorerVersion() <= 7 ){

                $("table#table_login").remove();

                var append_html = '<table border="0" cellpadding="0" cellspacing="3" style="position: relative;left:40px;padding-top:20px"><tbody><tr><td width="240px">';
                append_html += '<font color="white" size="4">';
                append_html += '<label>';
                append_html += m.getString('msg_browsersupport');
                append_html += '</label>';
                append_html += '</font>';
                append_html += '</td>';
                append_html += '</tr>';
                append_html += '</tbody>';
                append_html += '</table>';
                $(append_html).appendTo($("#main"));

                return;
        }

        // $(".captcha").css("display","none");
        // generateCaptcha();

        adjustUI();

        $(window).resize(adjustUI);

        $("table#table_login").css("display", "block");

        $("input#username").focus();
});

function sanitize(input) {
    //- Use replacement methods to remove or encode potentially malicious characters
    return input
        .replace(/&/g, "&amp;")
        .replace(/</g, "&lt;")
        .replace(/>/g, "&gt;")
        .replace(/"/g, "&quot;")
        .replace(/'/g, "&#x27;")
        .replace(/\//g, "&#x2F;");
}

function generateCaptcha(){

        if(this_url!="/")
                return;

        $.ajax({
                url: 'GetCaptchaImage',
                data: '',
                type: 'GET',
                dataType: 'xml',
                timeout: 20000,
                error: function(){
                        //alert('Error loading XML document');
                },
                success: function(xml){

                        var data = parseXml(xml);
                        var captcha_enable = sanitize($(data).find('enable').text());
                        if(captcha_enable==1){
                                var image_data1 = sanitize($(data).find('img1').text());
                                var image_data1 = sanitize($(data).find('img1').text());
                                var image_data2 = sanitize($(data).find('img2').text());
                                var image_data3 = sanitize($(data).find('img3').text());
                                var image_data4 = sanitize($(data).find('img4').text());
                                g_captcha = sanitize($(data).find('code').text());

                                var captcha_pattern = "";
                                $("#captcha_pattern").empty();

                                captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data4 + ")'></div>";
                                captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data3 + ")'></div>";
                                captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data2 + ")'></div>";
                                captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data1 + ")'></div>";

                                $(captcha_pattern).appendTo("#captcha_pattern");

                                $(".captcha").css("display","block");

                                $("#main").css("height",420);
                        }

                }
        });
}

function adjustUI(){
        var logo_left = ($(document).width() - $("div#login_logo").width())/2;
        $("div#login_logo").css("left", logo_left);
}

function doOK(e) {
        var captcha = "";//$('input#captcha').val();
        var user = "";
        var pass = "";
        var auth = "";

        if(g_captcha!=-1&&captcha!=g_captcha){
                alert(m.getString('msg_error_captcha'));
        }
        else{
                user = $('input#username').val();
                pass = $('input#password').val();
                auth = "Basic " + Base64.encode(user + ":" + pass);
        }

        var client = new davlib.DavClient();
        client.initialize();

        g_storage.set('openurl', this_url);

        /*
        //var enc = "crypt:6166393232616536393164633730316238643463326264313735363031393961:3d593c297c1c6539356237383035663530353462633939646666313138643561";
        var enc = "";
        g_storage.set('openurl', this_url);

        client.OAUTH(this_url, auth, enc, function(error, statusstring, content){

                if(error==401){

                        $('input#password').attr("value","");

                        var the_left = parseInt($('div#login_logo').css("left"));

                        for(var i=0; i<6; i++){

                                var x = i%2;
                                var new_left = 0;
                                if(x==0)
                                        new_left = the_left + i*5;
                                else if(x==1)
                                        new_left = the_left - i*5;

                                $('div#login_logo').animate({
                                left: new_left
                                }, 100, function(){
                                        if(i=5)
                                                adjustUI();
                                });
                        }

                }
                else{
                        $.cookie("TestAuth", content);

                        setTimeout(function(){
                                window.location.reload(true);
                        }, 100);

                }
        });
        */

        client.PROPFIND(this_url, auth, function(error, statusstring, content){
                if(error==401){
                        $('input#password').attr("value","");

                        var the_left = parseInt($('div#login_logo').css("left"));

                        for(var i=0; i<6; i++){

                                var x = i%2;
                                var new_left = 0;
                                if(x==0)
                                        new_left = the_left + i*5;
                                else if(x==1)
                                        new_left = the_left - i*5;

                                $('div#login_logo').animate({
                                left: new_left
                                }, 100, function(){
                                        if(i=5)
                                                adjustUI();
                                });
                        }

                }
                else{
                        setTimeout(function(){
                                window.location.reload(true);
                        }, 100);
                }
        });
}

function onKeyHandler(e){
        if(e.keyCode==13)
                doOK(e);
}

</script>
</head>
<body style='padding-top:20px;margin:0;background-color:#313131'>

<table id="logo" width="100%" border="0" valign="middle" align="center" cellpadding="0" cellspacing="0">
        <tbody><tr height="128px">
                <tr><td valign="middle" align="center"><div id="login_logo"></div></td></tr>
        </tr></tbody>
</table>

<table width="100%" border="0" valign="middle" align="center" cellpadding="0" cellspacing="0">
        <tbody>
                <tr>
                <td valign="middle" align="center">
                        <div style="width:300px;height:88px;background-color:#595F62;padding-top:10px">
                                <div id="title1">Welcome.</div>
                                <div id="title2">Who’s coming home?</div>
                        </div>
                </td>
                </tr>
                <tr height="7px"></tr>
        </tbody>
</table>

<table width="100%" height="100%">
        <tbody><tr>
                <td valign="middle" align="center">

                        <table valign="middle" align="center" border="0" cellpadding="0" cellspacing="0">
                                <tbody><tr>
                                        <td align="left" background="" height="106" alt="">
                                                <div id="main" style="width:300px;height:385px;background-color:#595F62">
                                                        <table id="table_login" class="table_x" border="0" cellpadding="0" cellspacing="3">
                                                                <tbody>
                                                                        <tr>
                                                                                <td>
                                                                                        <label class="table_label_x" id="username">Username :</label>
                                                                                </td>
                                                                        </tr>
                                                                        <tr height="5px"></tr>
                                                                        <tr>
                                                                        <td>
                                                                                <input id="username" name="username" type="text" maxlength="32" autocapitalize="off">
                                                                        </td>
                                                                </tr>
                                                                <tr style="height:10px"></tr>
                                        <tr>
                                        <td>
                                                <label class="table_label_x" id="password">Password :</label>
                                        </td>
                                        </tr>
                                                                <tr height="5px"></tr>
                                                                <tr>
                                                                <td>
                                                                        <input id="password" name="password" type="password" maxlength="32" onkeydown="return onKeyHandler(event)">
                                                                </td>
                                                                </tr>
                                                                        <tr style="height:10px"></tr>
                                                                        <!--
                                                                <tr class="captcha" style="display:none">
                                                                                <td>
                                                                                        <font color="white" size="4">
                                                                                                <label id="captcha">Random no. :</label>
                                                                                        </font>
                                                                                </td>
                                                                        </tr>
                                                                        <tr class="captcha" height="5px" style="display:none"></tr>
                                                                        <tr class="captcha" style="display:none">
                                                                        <td>
                                                                                <input id="captcha" name="captcha" type="text" autocapitalize="off" maxlength="4" style="font-size:20px;width:220px;height:36px" onkeydown="return onKeyHandler(event)">
                                                                        </td>
                                                                </tr>
                                                                <tr class="captcha" height="5px" style="display:none"></tr>
                                                                 <tr class="captcha" style="display:none">
                                                                        <td>
                                                                                <div id="captcha_pattern" class="unselectable" name="captcha_pattern" style="width:220px;height:40px;float:left" onclick="generateCaptcha()"></div>
                                                                        </td>
                                                                </tr>
                                                                        <tr style="height:10px"></tr>
                                                          
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:49:09.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "w3.org"
         ],
         "hostname" : [
            "www.w3.org"
         ],
         "url" : [
            "http://www.w3.org/1999/xhtml",
            "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
         ]
      },
      "favicon" : {
         "image" : "AAABAAIAEBAQAAAAAAAoAQAAJgAAACAgEAAAAAAA6AIAAE4BAAAoAAAAEAAAACAAAAABAAQAAAAAAIAAAAAAAAAAAAAAABAAAAAQAAAAAAAAAAAAgAAAgAAAAICAAIAAAACAAIAAgIAAAICAgADAwMAAAAD/AAD/AAAA//8A/wAAAP8A/wD//wAA////AAAAAAAAAAAAAABERERERAAABEREREREAABERAAAAAAAAERAAAAAAAAEREAAAAAAAAREREREREQABERERERERAAEREAAAAAAAAREQAAAAAAAAEREAAAAAAAARERAAAAAAAAEREREREQAAAAERERERAAAAAAAAAAAAAAAAAAAAAAA//8AAPADAADgAwAAw/8AAMf/AACH/wAAgAMAAIADAACH/wAAh/8AAMP/AADB/wAA4AMAAPgDAAD//wAA//8AACgAAAAgAAAAQAAAAAEABAAAAAAAAAIAAAAAAAAAAAAAEAAAABAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEREREREREREQAAAAAAAAEREREREREREREAAAAAAAERERERERERERERAAAAAAAREREREREREREREQAAAAABEREREREREREREREAAAAAAREREREAAAAAAAAAAAAAABEREREQAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREQAAAAAAAAAAAAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREREREREREREREAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREQAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAABEREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREREREREREQAAAAAAEREREREREREREREAAAAAAAERERERERERERERAAAAAAAAAREREREREREREQAAAAAAAAABEREREREREREAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/////////////////4AAP/4AAD/4AAA/8AAAP+AAAD/gD///wB///8A////Af///gH///4B///+AAAA/gAAAP4AAAD+AAAA/gAAAP4B////Af///wD///8Af///gD///8AAAP/AAAD/4AAA//gAAP/+AAD////////////////w==",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "5ca568bf96622aad854cce25a37f12ad",
         "bodymmh3" : 2122725594,
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : -638671310,
         "title" : "AiCloud"
      },
      "length" : 16384
   },
   "asn" : "AS16509",
   "city" : "London",
   "country" : "GB",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:40:07 GMT\r\nServer: nginx\r\nContent-Length: 16915\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta http-equiv=\"Cache-control\" content=\"no-cache\">\n<meta name=\"viewport\" content=\"width=device-width, minimum-scale=1.0, maximum-scale=1, user-scalable=no\" />\n<meta name=\"apple-mobile-web-app-capable\" content=\"yes\">\n<meta name=\"apple-mobile-web-app-status-bar-style\" content=\"black\">\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<meta http-equiv=\"X-Frame-Options\" content=\"SAMEORIGIN\">\n<title>AiCloud</title>\n<style>\nhtml{\nmargin:0 0;\npadding:0px;\nfont-family:\"Segoe UI\",Arial;\n}\nbody{\ndisplay: block;\noverflow: hidden;\n}\n\ninput,#ok {\nbackground:transparent url(\"/smb/css/style-theme.png\") no-repeat top left;\n}\n\n#login_logo{\nwidth:300px;\nheight:76px;\nbackground:transparent url(\"/smb/css/logo.jpg\") no-repeat top left;\nposition: absolute;\ntop: 60px;\n}\n\n#ok{\nbackground-position: -200px -390px;\nwidth:40px;\nheight:40px;\nfloat:right;\n}\n#title1{\ncolor:#fff;\nfont-size:30px\n}\n#title2{\ncolor:#fff;\nfont-size:20px\n}\ninput {\nfont-size: 14px;\ntext-shadow: 0px 1px 0px white;\noutline: none;\nbackground-position: 0 -540px;\n-webkit-border-radius: 0;\n-moz-border-radius: 0;\nborder-radius: 0;\nborder: 0;\n-webkit-box-shadow: 0 0 0;\n-moz-box-shadow: 0 0 0;\nbox-shadow: 0 0 0;\npadding-left:3px;\n}\ndiv.cap_num{\nwidth:40px;\nheight:40px;\nfloat:right;\n}\n.unselectable {\n-moz-user-select: -moz-none;\n-khtml-user-select: none;\n-webkit-user-select: none;\n-o-user-select: none;\nuser-select: none;\n}\n.table_x{\nposition: relative;\npadding: 20px 40px 0 40px;\nfont-size: 20px;\ndisplay:none;\n}\n.table_x input{\nwidth:220px;\nheight:36px;\nfont-size: 20px;\n}\n.table_x .table_label_x{\ncolor:#ffffff;\n}\n</style>\n<script type=\"text/javascript\" src=\"/smb/js/tools.js\"></script>\n<script type='text/javascript' src='/smb/js/davclient_tools.js'></script>\n<script type=\"text/javascript\">\nvar this_url;\nvar m = new lang();\nvar g_storage = new myStorage();\nvar g_captcha = -1;\n\nfunction makeid(){\n    var text = \"\";\n    var possible = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\";\n\n    for( var i=0; i < 20; i++ )\n        text += possible.charAt(Math.floor(Math.random() * possible.length));\n\n    return text;\n}\n\n$(\"document\").ready(function() {\n        //- create access token\n        var asus_token = ( g_storage.gett('asus_token') == undefined ) ? '' : g_storage.gett('asus_token');\n        if(asus_token==\"\"){\n                asus_token = makeid();\n                g_storage.sett('asus_token', asus_token);\n        }\n\n        var loc_lan = String(window.navigator.userLanguage || window.navigator.language).toLowerCase();\n        var lan = ( g_storage.get('lan') == undefined ) ? loc_lan : g_storage.get('lan');\n        m.setLanguage(lan);\n\n        $('label#username').text(m.getString('title_username2'));\n        $('label#password').text(m.getString('title_password2'));\n        // $('label#captcha').text(m.getString('title_captcha'));\n\n        this_url = $(\"input.urlInfo\").attr(\"value\");\n\n        if(this_url!=\"/\"){\n                $(\"div#title1\").text(m.getString('title_login'));\n                $(\"div#title2\").text(this_url);\n        }\n\n        var browserVer = navigator.userAgent.toLowerCase();\n        if( isIE() &&\n                getInternetExplorerVersion() <= 7 ){\n\n                $(\"table#table_login\").remove();\n\n                var append_html = '<table border=\"0\" cellpadding=\"0\" cellspacing=\"3\" style=\"position: relative;left:40px;padding-top:20px\"><tbody><tr><td width=\"240px\">';\n                append_html += '<font color=\"white\" size=\"4\">';\n                append_html += '<label>';\n                append_html += m.getString('msg_browsersupport');\n                append_html += '</label>';\n                append_html += '</font>';\n                append_html += '</td>';\n                append_html += '</tr>';\n                append_html += '</tbody>';\n                append_html += '</table>';\n                $(append_html).appendTo($(\"#main\"));\n\n                return;\n        }\n\n        // $(\".captcha\").css(\"display\",\"none\");\n        // generateCaptcha();\n\n        adjustUI();\n\n        $(window).resize(adjustUI);\n\n        $(\"table#table_login\").css(\"display\", \"block\");\n\n        $(\"input#username\").focus();\n});\n\nfunction sanitize(input) {\n    //- Use replacement methods to remove or encode potentially malicious characters\n    return input\n        .replace(/&/g, \"&amp;\")\n        .replace(/</g, \"&lt;\")\n        .replace(/>/g, \"&gt;\")\n        .replace(/\"/g, \"&quot;\")\n        .replace(/'/g, \"&#x27;\")\n        .replace(/\\//g, \"&#x2F;\");\n}\n\nfunction generateCaptcha(){\n\n        if(this_url!=\"/\")\n                return;\n\n        $.ajax({\n                url: 'GetCaptchaImage',\n                data: '',\n                type: 'GET',\n                dataType: 'xml',\n                timeout: 20000,\n                error: function(){\n                        //alert('Error loading XML document');\n                },\n                success: function(xml){\n\n                        var data = parseXml(xml);\n                        var captcha_enable = sanitize($(data).find('enable').text());\n                        if(captcha_enable==1){\n                                var image_data1 = sanitize($(data).find('img1').text());\n                                var image_data1 = sanitize($(data).find('img1').text());\n                                var image_data2 = sanitize($(data).find('img2').text());\n                                var image_data3 = sanitize($(data).find('img3').text());\n                                var image_data4 = sanitize($(data).find('img4').text());\n                                g_captcha = sanitize($(data).find('code').text());\n\n                                var captcha_pattern = \"\";\n                                $(\"#captcha_pattern\").empty();\n\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data4 + \")'></div>\";\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data3 + \")'></div>\";\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data2 + \")'></div>\";\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data1 + \")'></div>\";\n\n                                $(captcha_pattern).appendTo(\"#captcha_pattern\");\n\n                                $(\".captcha\").css(\"display\",\"block\");\n\n                                $(\"#main\").css(\"height\",420);\n                        }\n\n                }\n        });\n}\n\nfunction adjustUI(){\n        var logo_left = ($(document).width() - $(\"div#login_logo\").width())/2;\n        $(\"div#login_logo\").css(\"left\", logo_left);\n}\n\nfunction doOK(e) {\n        var captcha = \"\";//$('input#captcha').val();\n        var user = \"\";\n        var pass = \"\";\n        var auth = \"\";\n\n        if(g_captcha!=-1&&captcha!=g_captcha){\n                alert(m.getString('msg_error_captcha'));\n        }\n        else{\n                user = $('input#username').val();\n                pass = $('input#password').val();\n                auth = \"Basic \" + Base64.encode(user + \":\" + pass);\n        }\n\n        var client = new davlib.DavClient();\n        client.initialize();\n\n        g_storage.set('openurl', this_url);\n\n        /*\n        //var enc = \"crypt:6166393232616536393164633730316238643463326264313735363031393961:3d593c297c1c6539356237383035663530353462633939646666313138643561\";\n        var enc = \"\";\n        g_storage.set('openurl', this_url);\n\n        client.OAUTH(this_url, auth, enc, function(error, statusstring, content){\n\n                if(error==401){\n\n                        $('input#password').attr(\"value\",\"\");\n\n                        var the_left = parseInt($('div#login_logo').css(\"left\"));\n\n                        for(var i=0; i<6; i++){\n\n                                var x = i%2;\n                                var new_left = 0;\n                                if(x==0)\n                                        new_left = the_left + i*5;\n                                else if(x==1)\n                                        new_left = the_left - i*5;\n\n                                $('div#login_logo').animate({\n                                left: new_left\n                                }, 100, function(){\n                                        if(i=5)\n                                                adjustUI();\n                                });\n                        }\n\n                }\n                else{\n                        $.cookie(\"TestAuth\", content);\n\n                        setTimeout(function(){\n                                window.location.reload(true);\n                        }, 100);\n\n                }\n        });\n        */\n\n        client.PROPFIND(this_url, auth, function(error, statusstring, content){\n                if(error==401){\n                        $('input#password').attr(\"value\",\"\");\n\n                        var the_left = parseInt($('div#login_logo').css(\"left\"));\n\n                        for(var i=0; i<6; i++){\n\n                                var x = i%2;\n                                var new_left = 0;\n                                if(x==0)\n                                        new_left = the_left + i*5;\n                                else if(x==1)\n                                        new_left = the_left - i*5;\n\n                                $('div#login_logo').animate({\n                                left: new_left\n                                }, 100, function(){\n                                        if(i=5)\n                                                adjustUI();\n                                });\n                        }\n\n                }\n                else{\n                        setTimeout(function(){\n                                window.location.reload(true);\n                        }, 100);\n                }\n        });\n}\n\nfunction onKeyHandler(e){\n        if(e.keyCode==13)\n                doOK(e);\n}\n\n</script>\n</head>\n<body style='padding-top:20px;margin:0;background-color:#313131'>\n\n<table id=\"logo\" width=\"100%\" border=\"0\" valign=\"middle\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\n        <tbody><tr height=\"128px\">\n                <tr><td valign=\"middle\" align=\"center\"><div id=\"login_logo\"></div></td></tr>\n        </tr></tbody>\n</table>\n\n<table width=\"100%\" border=\"0\" valign=\"middle\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\n        <tbody>\n                <tr>\n                <td valign=\"middle\" align=\"center\">\n                        <div style=\"width:300px;height:88px;background-color:#595F62;padding-top:10px\">\n                                <div id=\"title1\">Welcome.</div>\n                                <div id=\"title2\">Who\u2019s coming home?</div>\n                        </div>\n                </td>\n                </tr>\n                <tr height=\"7px\"></tr>\n        </tbody>\n</table>\n\n<table width=\"100%\" height=\"100%\">\n        <tbody><tr>\n                <td valign=\"middle\" align=\"center\">\n\n                        <table valign=\"middle\" align=\"center\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\">\n                                <tbody><tr>\n                                        <td align=\"left\" background=\"\" height=\"106\" alt=\"\">\n                                                <div id=\"main\" style=\"width:300px;height:385px;background-color:#595F62\">\n                                                        <table id=\"table_login\" class=\"table_x\" border=\"0\" cellpadding=\"0\" cellspacing=\"3\">\n                                                                <tbody>\n                                                                        <tr>\n                                                                                <td>\n                                                                                        <label class=\"table_label_x\" id=\"username\">Username :</label>\n                                                                                </td>\n                                                                        </tr>\n                                                                        <tr height=\"5px\"></tr>\n                                                                        <tr>\n                                                                        <td>\n                                                                                <input id=\"username\" name=\"username\" type=\"text\" maxlength=\"32\" autocapitalize=\"off\">\n                                                                        </td>\n                                                                </tr>\n                                                                <tr style=\"height:10px\"></tr>\n                                        <tr>\n                                        <td>\n                                                <label class=\"table_label_x\" id=\"password\">Password :</label>\n                                        </td>\n                                        </tr>\n                                                                <tr height=\"5px\"></tr>\n                                                                <tr>\n                                                                <td>\n                                                                        <input id=\"password\" name=\"password\" type=\"password\" maxlength=\"32\" onkeydown=\"return onKeyHandler(event)\">\n                                                                </td>\n                                                                </tr>\n                                                                        <tr style=\"height:10px\"></tr>\n                                                                        <!--\n                                                                <tr class=\"captcha\" style=\"display:none\">\n                                                                                <td>\n                                                                                        <font color=\"white\" size=\"4\">\n                                                                                                <label id=\"captcha\">Random no. :</label>\n                                                                                        </font>\n                                                                                </td>\n                                                                        </tr>\n                                                                        <tr class=\"captcha\" height=\"5px\" style=\"display:none\"></tr>\n                                                                        <tr class=\"captcha\" style=\"display:none\">\n                                                                        <td>\n                                                                                <input id=\"captcha\" name=\"captcha\" type=\"text\" autocapitalize=\"off\" maxlength=\"4\" style=\"font-size:20px;width:220px;height:36px\" onkeydown=\"return onKeyHandler(event)\">\n                                                                        </td>\n                                                                </tr>\n                                                                <tr class=\"captcha\" height=\"5px\" style=\"display:none\"></tr>\n                                                                 <tr class=\"captcha\" style=\"display:none\">\n                                                                        <td>\n                                                                                <div id=\"captcha_pattern\" class=\"unselectable\" name=\"captcha_pattern\" style=\"width:220px;height:40px;float:left\" onclick=\"generateCaptcha()\"></div>\n                                                                        </td>\n                                                                </tr>\n                                                                        <tr style=\"height:10px\"></tr>\n                                                          ",
   "datamd5" : "eec2f4120ab9a23d5cfaf3bfdc2425a1",
   "datammh3" : -58520762,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "GB",
      "countryname" : "United Kingdom",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "55.378051",
      "location" : "55.378051,-3.435973",
      "longitude" : "-3.435973",
      "netname" : "AMAZON-LHR",
      "organization" : "Amazon Data Services UK",
      "subnet" : "13.40.0.0/14"
   },
   "host" : [
      "ec2-13-40-168-143"
   ],
   "hostname" : [
      "ec2-13-40-168-143.eu-west-2.compute.amazonaws.com"
   ],
   "ip" : "13.40.168.143",
   "ipv6" : "false",
   "latitude" : "51.5088",
   "location" : "51.5088,-0.0930",
   "longitude" : "-0.0930",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 32768,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-13-40-168-143.eu-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "eu-west-2.compute.amazonaws.com"
   ],
   "subnet" : "13.40.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}