Returning 10 result(s) out of 97,187 in 0.129 second(s)

  • 204.242.254.123:8292 (tcp/http) - last seen on 2024-11-07 at 05:49:23 UTC

    • IP
      204.242.254.123
      Network
      204.242.240.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://204.242.254.123:8292/ 407

      ASN
      AS6079
      Organization
      RCN-AS
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      beff904528226673ee6dbdb9e7fe6002
      HTTP Header MD5
      4bd5a82db187fbf06a2b7f25b880c717
      HTTP Body MD5
      917a0ae17b6e9db13c448d39f37c69ca
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm=""
      
      Proxy Authentication Required
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:49:23.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
               "bodymmh3" : -1539650452,
               "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
               "headermmh3" : 372433470
            },
            "length" : 111
         },
         "asn" : "AS6079",
         "city" : "Ashburn",
         "country" : "US",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
         "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
         "datammh3" : 501879459,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS6079",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "cogentco.com",
               "northerncablefiber.com",
               "rackdog.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "NORTHERN-CABLE",
            "organization" : "NORTHERN CABLE AND FIBER, LLC",
            "subnet" : "204.242.224.0/19"
         },
         "ip" : "204.242.254.123",
         "ipv6" : "false",
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "RCN-AS",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8292,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "204.242.240.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 133.130.109.6:8292 (tcp/http) - last seen on 2024-11-07 at 05:49:00 UTC

    • IP
      133.130.109.6
      Network
      133.130.64.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Ubuntu
      URL

      http://133.130.109.6:8292/ 302

      HTTP Title
      302 Found
      ASN
      AS7506
      Organization
      GMO Internet,Inc
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Ubuntu
      Product
      F5 Nginx 1.14.0
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4f9e75836482fd87eecb05b7728e6b01
      HTTP Header MD5
      935ae8a017676cb92664e8d279572ee0
      HTTP Body MD5
      602c1b9891c3be7844f8d51d248440ea
    • HTTP/1.1 302 Moved Temporarily
      Server: nginx/1.14.0 (Ubuntu)
      Date: Thu, 07 Nov 2024 05:48:59 GMT
      Content-Type: text/html
      Content-Length: 170
      Connection: close
      Location: https://<ip>/__proxy_error__/497.html
      
      <html>
      <head><title>302 Found</title></head>
      <body bgcolor="white">
      <center><h1>302 Found</h1></center>
      <hr><center>nginx/1.14.0 (Ubuntu)</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:49:00.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "602c1b9891c3be7844f8d51d248440ea",
               "bodymmh3" : 959249276,
               "headermd5" : "935ae8a017676cb92664e8d279572ee0",
               "headermmh3" : -1409031298,
               "title" : "302 Found"
            },
            "length" : 386
         },
         "asn" : "AS7506",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Moved Temporarily\r\nServer: nginx/1.14.0 (Ubuntu)\r\nDate: Thu, 07 Nov 2024 05:48:59 GMT\r\nContent-Type: text/html\r\nContent-Length: 170\r\nConnection: close\r\nLocation: https://<ip>/__proxy_error__/497.html\r\n\r\n<html>\r\n<head><title>302 Found</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>302 Found</h1></center>\r\n<hr><center>nginx/1.14.0 (Ubuntu)</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "4f9e75836482fd87eecb05b7728e6b01",
         "datammh3" : 656937095,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS7506",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "interq.or.jp",
               "nic.ad.jp"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "JPNIC-NET-JP-ERX",
            "organization" : "Japan Network Information Center",
            "subnet" : "133.130.64.0/18"
         },
         "ip" : "133.130.109.6",
         "ipv6" : "false",
         "latitude" : "35.6897",
         "location" : "35.6897,139.6895",
         "longitude" : "139.6895",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "GMO Internet,Inc",
         "os" : "Linux",
         "osdistribution" : "Ubuntu",
         "osvendor" : "Linux",
         "port" : 8292,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.14.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Temporarily",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "133.130.64.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 181.215.203.207:8292 (tcp/http) - last seen on 2024-11-07 at 05:48:35 UTC

    • IP
      181.215.203.207
      Network
      181.215.203.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://181.215.203.207:8292/ 407

      ASN
      AS29802
      Organization
      HVC-AS
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      beff904528226673ee6dbdb9e7fe6002
      HTTP Header MD5
      4bd5a82db187fbf06a2b7f25b880c717
      HTTP Body MD5
      917a0ae17b6e9db13c448d39f37c69ca
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm=""
      
      Proxy Authentication Required
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:48:35.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
               "bodymmh3" : -1539650452,
               "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
               "headermmh3" : 372433470
            },
            "length" : 111
         },
         "asn" : "AS29802",
         "city" : "Seoul",
         "country" : "KR",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
         "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
         "datammh3" : 501879459,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "181.215.203.207",
         "ipv6" : "false",
         "latitude" : "37.5794",
         "location" : "37.5794,126.9754",
         "longitude" : "126.9754",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HVC-AS",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8292,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "181.215.203.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 156.249.168.221:8292 (tcp/http) - last seen on 2024-11-07 at 05:48:31 UTC

    • IP
      156.249.168.221
      Network
      156.249.160.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://156.249.168.221:8292/ 407

      ASN
      AS984
      Organization
      OWS
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      beff904528226673ee6dbdb9e7fe6002
      HTTP Header MD5
      4bd5a82db187fbf06a2b7f25b880c717
      HTTP Body MD5
      917a0ae17b6e9db13c448d39f37c69ca
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm=""
      
      Proxy Authentication Required
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:48:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
               "bodymmh3" : -1539650452,
               "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
               "headermmh3" : 372433470
            },
            "length" : 111
         },
         "asn" : "AS984",
         "city" : "Bangkok",
         "country" : "TH",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
         "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
         "datammh3" : 501879459,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS984",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "TH",
            "countryname" : "Thailand",
            "domain" : [
               "cloudinnovation.org"
            ],
            "isineu" : "false",
            "latitude" : "15.870032",
            "location" : "15.870032,100.992541",
            "longitude" : "100.992541",
            "netname" : "Octopus_Web_Solution_Inc",
            "organization" : "Route",
            "subnet" : "156.249.160.0/20"
         },
         "ip" : "156.249.168.221",
         "ipv6" : "false",
         "latitude" : "13.8054",
         "location" : "13.8054,100.6751",
         "longitude" : "100.6751",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "OWS",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8292,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "156.249.160.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 149.3.95.254:8292 (tcp/http) - last seen on 2024-11-07 at 05:48:06 UTC

    • IP
      149.3.95.254
      Network
      149.3.0.0/17
      Domain(s)
      silknet.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://149.3.95.254:8292/ 403

      HTTP Title
      403 Forbidden
      Reverse DNS
      149-3-95-254.customers.silknet.com
      ASN
      AS35805
      Organization
      JSC Silknet
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      384b2194d3f158828acb7a402ef628e9
      HTTP Header MD5
      7f23882e651edbe1db324dff6384d348
      HTTP Body MD5
      12f66b59cdcfac6a7eb918cf5b7bf7fb
    • HTTP/1.1 403 Forbidden
      Content-Type: text/html; charset=utf-8
      Content-Length: 106
      Connection: close
      
      <html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:48:06.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "12f66b59cdcfac6a7eb918cf5b7bf7fb",
               "bodymmh3" : 908042195,
               "headermd5" : "7f23882e651edbe1db324dff6384d348",
               "headermmh3" : 1600144948,
               "title" : "403 Forbidden"
            },
            "length" : 212
         },
         "asn" : "AS35805",
         "city" : "Tbilisi",
         "country" : "GE",
         "data" : "HTTP/1.1 403 Forbidden\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 106\r\nConnection: close\r\n\r\n<html><head><title>403 Forbidden</title></head><body><center><h1>403 Forbidden</h1></center></body></html>",
         "datamd5" : "384b2194d3f158828acb7a402ef628e9",
         "datammh3" : 374602540,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "silknet.com"
         ],
         "geolocus" : {
            "asn" : "AS35805",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "GE",
            "countryname" : "Georgia",
            "domain" : [
               "silknet.com"
            ],
            "isineu" : "false",
            "latitude" : "42.315407",
            "location" : "42.315407,43.356892",
            "longitude" : "43.356892",
            "netname" : "SILKNET-BROADBAND",
            "organization" : "JSC \"Silknet",
            "subnet" : "149.3.64.0/19"
         },
         "host" : [
            "149-3-95-254"
         ],
         "hostname" : [
            "149-3-95-254.customers.silknet.com"
         ],
         "ip" : "149.3.95.254",
         "ipv6" : "false",
         "latitude" : "41.6959",
         "location" : "41.6959,44.8320",
         "longitude" : "44.8320",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "JSC Silknet",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8292,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Forbidden",
         "reverse" : [
            "149-3-95-254.customers.silknet.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 403,
         "subdomains" : [
            "customers.silknet.com"
         ],
         "subnet" : "149.3.0.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 38.48.163.26:8292 (tcp/http) - last seen on 2024-11-07 at 05:47:33 UTC

    • IP
      38.48.163.26
      Network
      38.48.128.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://38.48.163.26:8292/ 200

      HTTP Title
      demo
      ASN
      AS54600
      Organization
      PEG-SV
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      jQuery jQuery 1.8.3
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      09c0d53d9be7faa056534fe7b5493484
      HTTP Header MD5
      db929ee95f62f99728d840d6c0c11e00
      HTTP Body MD5
      51bd75d4828c82192dfb36236a71a60e
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Thu, 07 Nov 2024 05:47:37 GMT
      Content-Type: text/html
      Content-Length: 4624
      Last-Modified: Wed, 22 May 2024 06:33:16 GMT
      Connection: close
      Vary: Accept-Encoding
      ETag: "664d91ac-1210"
      Accept-Ranges: bytes
      
      <!DOCTYPE html><html><head>
      <meta charset="utf-8">
      <meta name="viewport" content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no">
      <title>demo</title>
      <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
      <link rel="stylesheet" href="css/reset.css">
      <link rel="stylesheet" href="css/style.css">
      <script type="text/javascript" src="js/jquery-1.8.3.min.js"></script>
      <script type="text/javascript" src="js/flexible.js"></script>
      
      </head>
      <body>
      <!--[if lt IE 8]>
      <p class="browserupgrade">当前浏览器版本太低,建议升级道最新版本</p>
      <![endif]-->
        <!--  <div class="head-cen">
          <div class="hBox-cen clearfix">
              <div class="logo"><a href="#" class="config_site"><img src="images/mb-title.png?v=1" alt=""></a></div>
          </div>
      </div>-->
      
      
      <div class="main-bd">
          <div class="banner">
              <img src="images/mb-title.png?v=1" alt="">
              <img src="images/mb-stitle.png?v=1">       
           <!--        <img src="images/pay.dbc4021c.png?v=1">
               <img src="images/62371a_514x56.png?v=1">     -->  
            <!--  <div class="banner-down">
                  <img src="down-ico1" class="animate__animated animate__infinite animate__fadeInDown">
                  <img src="down-ico1" class="animate__animated animate__infinite animate__fadeInDown">
                  <img src="down-ico1" class="animate__animated animate__infinite animate__fadeInDown">
              </div>-->
          </div>
          <ul class="list">
        
                <li>
                   <a href="https://keku04.680u.buzz/?shareName=yl02" target="_blank">
                      <img class="list-banner" src="images/01.png">
                  </a>
              </li>
              <li>
                 <a class="btnsss" data-url="https://web.680-b.com" target="_blank">
                      <img class="list-banner" src="images/02.png">
                  </a>
              </li>
      
             <!--  <li>
                 <a class="btnsss" data-url="https://xz.7811m.com/normal/wap.html?cid=360352" target="_blank">
                      <img class="list-banner" src="images/list-img-2.png?v=1">
                  </a>
              </li>-->
          </ul>
      </div>
      
      <div class="main-bd">
          <div class="banner">
              <img src="images/155b36_750x322.png?v=1">       
              <img src="images/f1.eef14b54.png?v=1">       
          </div>
      <!--<div class="foot">
      </div>-->
      <!--轮换-->
      <script>
          $(function(){
              function shuffle(arr) {
                var i = arr.length, t, j;
                while (i) {
                  j = Math.floor(Math.random() * i--);
                  t = arr[i];
                  arr[i] = arr[j];
                  arr[j] = t;
                }
                 return arr;
              }
              $(".list").append(shuffle($(".list li")))
          })
      </script>
      
      
      
      <!--<script>
       
          var $_GET = (function () {
                  var url = window.document.location.href.toString();
                  var u = url.split("?");
                  if (typeof (u[1]) == "string") {
                      u = u[1].split("&");
                      var get = {};
                      for (var i in u) {
                          var j = u[i].split("=");
                          get[j[0]] = j[1];
                      }
                      return get;
                  } else {
                      return {};
                  }
              })();
              var shareName = $_GET['shareName'] || '';
              var proxyAccount = $_GET['proxyAccount'] || '';
       
       
      	//var datas=window.location.host
      	//console.log(datas)
      	$(".btnss").click(function() {
      	var $this = $(this);
      		//window.open($this.attr("data-url") + "/?shareName=" +  shareName + '&proxyAccount='+proxyAccount);
      		window.open($this.attr("data-url") + "/?shareName=" + shareName);
      	});
      </script>-->
      
      <!--二站-->
      <script>
      var $_GET = (function () {
                  var url = window.document.location.href.toString();
                  var u = url.split("?");
                  if (typeof (u[1]) == "string") {
                      u = u[1].split("&");
                      var get = {};
                      for (var i in u) {
                          var j = u[i].split("=");
                          get[j[0]] = j[1];
                      }
                      return get;
                  } else {
                      return {};
                  }
              })();
              var channelCode = $_GET['channelCode'] || '';
              
       
       
      	//var datas=window.location.host
      	//console.log(datas)
      	$(".btnsss").click(function() {
      	var $this = $(this);
      		window.open($this.attr("data-url") + "/?channelCode=" +  channelCode);
      	});
      </script>
      
      
      <!--680com-->
      <script>
      var _czc = _czc || [];
      (function () {
      	var um = document.createElement("script");
      	um.src = "https://v1.cnzz.com/z.js?id=1281345465&async=1";
      	var s = document.getElementsByTagName("script")[0];
      	s.parentNode.insertBefore(um, s);
      })();
      </script>
      
      
      </body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:47:33.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "cnzz.com",
                  "7811m.com",
                  "680u.buzz",
                  "680-b.com"
               ],
               "hostname" : [
                  "keku04.680u.buzz",
                  "v1.cnzz.com",
                  "web.680-b.com",
                  "xz.7811m.com"
               ],
               "url" : [
                  "https://keku04.680u.buzz/?shareName=yl02",
                  "https://v1.cnzz.com/z.js?id=1281345465&async=1",
                  "https://web.680-b.com",
                  "https://xz.7811m.com/normal/wap.html?cid=360352"
               ]
            },
            "http" : {
               "bodymd5" : "51bd75d4828c82192dfb36236a71a60e",
               "bodymmh3" : 259534189,
               "component" : [
                  {
                     "productversion" : "1.8.3",
                     "productvendor" : "jQuery",
                     "product" : "jQuery"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Wed, 22 May 2024 06:33:16 GMT"
                  },
                  {
                     "value" : "664d91ac-1210",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "db929ee95f62f99728d840d6c0c11e00",
               "headermmh3" : -505545002,
               "title" : "demo"
            },
            "length" : 4875
         },
         "asn" : "AS54600",
         "city" : "Los Angeles",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:47:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 4624\r\nLast-Modified: Wed, 22 May 2024 06:33:16 GMT\r\nConnection: close\r\nVary: Accept-Encoding\r\nETag: \"664d91ac-1210\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html><html><head>\n<meta charset=\"utf-8\">\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=1,user-scalable=no\">\n<title>demo</title>\n<link rel=\"shortcut icon\" href=\"favicon.ico\" type=\"image/x-icon\">\n<link rel=\"stylesheet\" href=\"css/reset.css\">\n<link rel=\"stylesheet\" href=\"css/style.css\">\n<script type=\"text/javascript\" src=\"js/jquery-1.8.3.min.js\"></script>\n<script type=\"text/javascript\" src=\"js/flexible.js\"></script>\n\n</head>\n<body>\n<!--[if lt IE 8]>\n<p class=\"browserupgrade\">\u5f53\u524d\u6d4f\u89c8\u5668\u7248\u672c\u592a\u4f4e,\u5efa\u8bae\u5347\u7ea7\u9053\u6700\u65b0\u7248\u672c</p>\n<![endif]-->\n  <!--  <div class=\"head-cen\">\n    <div class=\"hBox-cen clearfix\">\n        <div class=\"logo\"><a href=\"#\" class=\"config_site\"><img src=\"images/mb-title.png?v=1\" alt=\"\"></a></div>\n    </div>\n</div>-->\n\n\n<div class=\"main-bd\">\n    <div class=\"banner\">\n        <img src=\"images/mb-title.png?v=1\" alt=\"\">\n        <img src=\"images/mb-stitle.png?v=1\">       \n     <!--        <img src=\"images/pay.dbc4021c.png?v=1\">\n         <img src=\"images/62371a_514x56.png?v=1\">     -->  \n      <!--  <div class=\"banner-down\">\n            <img src=\"down-ico1\" class=\"animate__animated animate__infinite animate__fadeInDown\">\n            <img src=\"down-ico1\" class=\"animate__animated animate__infinite animate__fadeInDown\">\n            <img src=\"down-ico1\" class=\"animate__animated animate__infinite animate__fadeInDown\">\n        </div>-->\n    </div>\n    <ul class=\"list\">\n  \n          <li>\n             <a href=\"https://keku04.680u.buzz/?shareName=yl02\" target=\"_blank\">\n                <img class=\"list-banner\" src=\"images/01.png\">\n            </a>\n        </li>\n        <li>\n           <a class=\"btnsss\" data-url=\"https://web.680-b.com\" target=\"_blank\">\n                <img class=\"list-banner\" src=\"images/02.png\">\n            </a>\n        </li>\n\n       <!--  <li>\n           <a class=\"btnsss\" data-url=\"https://xz.7811m.com/normal/wap.html?cid=360352\" target=\"_blank\">\n                <img class=\"list-banner\" src=\"images/list-img-2.png?v=1\">\n            </a>\n        </li>-->\n    </ul>\n</div>\n\n<div class=\"main-bd\">\n    <div class=\"banner\">\n        <img src=\"images/155b36_750x322.png?v=1\">       \n        <img src=\"images/f1.eef14b54.png?v=1\">       \n    </div>\n<!--<div class=\"foot\">\n</div>-->\n<!--\u8f6e\u6362-->\n<script>\n    $(function(){\n        function shuffle(arr) {\n          var i = arr.length, t, j;\n          while (i) {\n            j = Math.floor(Math.random() * i--);\n            t = arr[i];\n            arr[i] = arr[j];\n            arr[j] = t;\n          }\n           return arr;\n        }\n        $(\".list\").append(shuffle($(\".list li\")))\n    })\n</script>\n\n\n\n<!--<script>\n \n    var $_GET = (function () {\n            var url = window.document.location.href.toString();\n            var u = url.split(\"?\");\n            if (typeof (u[1]) == \"string\") {\n                u = u[1].split(\"&\");\n                var get = {};\n                for (var i in u) {\n                    var j = u[i].split(\"=\");\n                    get[j[0]] = j[1];\n                }\n                return get;\n            } else {\n                return {};\n            }\n        })();\n        var shareName = $_GET['shareName'] || '';\n        var proxyAccount = $_GET['proxyAccount'] || '';\n \n \n\t//var datas=window.location.host\n\t//console.log(datas)\n\t$(\".btnss\").click(function() {\n\tvar $this = $(this);\n\t\t//window.open($this.attr(\"data-url\") + \"/?shareName=\" +  shareName + '&proxyAccount='+proxyAccount);\n\t\twindow.open($this.attr(\"data-url\") + \"/?shareName=\" + shareName);\n\t});\n</script>-->\n\n<!--\u4e8c\u7ad9-->\n<script>\nvar $_GET = (function () {\n            var url = window.document.location.href.toString();\n            var u = url.split(\"?\");\n            if (typeof (u[1]) == \"string\") {\n                u = u[1].split(\"&\");\n                var get = {};\n                for (var i in u) {\n                    var j = u[i].split(\"=\");\n                    get[j[0]] = j[1];\n                }\n                return get;\n            } else {\n                return {};\n            }\n        })();\n        var channelCode = $_GET['channelCode'] || '';\n        \n \n \n\t//var datas=window.location.host\n\t//console.log(datas)\n\t$(\".btnsss\").click(function() {\n\tvar $this = $(this);\n\t\twindow.open($this.attr(\"data-url\") + \"/?channelCode=\" +  channelCode);\n\t});\n</script>\n\n\n<!--680com-->\n<script>\nvar _czc = _czc || [];\n(function () {\n\tvar um = document.createElement(\"script\");\n\tum.src = \"https://v1.cnzz.com/z.js?id=1281345465&async=1\";\n\tvar s = document.getElementsByTagName(\"script\")[0];\n\ts.parentNode.insertBefore(um, s);\n})();\n</script>\n\n\n</body></html>",
         "datamd5" : "09c0d53d9be7faa056534fe7b5493484",
         "datammh3" : 1301381262,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS54600",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "cogentco.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "COGENT-A",
            "organization" : "PSINet, Inc.",
            "subnet" : "38.48.128.0/18"
         },
         "ip" : "38.48.163.26",
         "ipv6" : "false",
         "latitude" : "34.0544",
         "location" : "34.0544,-118.2441",
         "longitude" : "-118.2441",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "PEG-SV",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8292,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "38.48.128.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 104.234.131.165:8292 (tcp/http) - last seen on 2024-11-07 at 05:47:04 UTC

    • IP
      104.234.131.165
      Network
      104.234.131.0/24
      Device

      <enterprise field>: device.class

      URL

      http://104.234.131.165:8292/ 407

      ASN
      AS29802
      Organization
      HVC-AS
      Protocol
      http
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      beff904528226673ee6dbdb9e7fe6002
      HTTP Header MD5
      4bd5a82db187fbf06a2b7f25b880c717
      HTTP Body MD5
      917a0ae17b6e9db13c448d39f37c69ca
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm=""
      
      Proxy Authentication Required
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:47:04.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
               "bodymmh3" : -1539650452,
               "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
               "headermmh3" : 372433470
            },
            "length" : 111
         },
         "asn" : "AS29802",
         "city" : "Toronto",
         "country" : "CA",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
         "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
         "datammh3" : 501879459,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS29802",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "ipxo.com",
               "velcom.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "NET-104-234-131-0-24",
            "organization" : "IPXO LLC",
            "subnet" : "104.234.131.0/24"
         },
         "ip" : "104.234.131.165",
         "ipv6" : "false",
         "latitude" : "43.6547",
         "location" : "43.6547,-79.3623",
         "longitude" : "-79.3623",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HVC-AS",
         "port" : 8292,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "104.234.131.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 154.9.202.198:8292 (tcp/http) - last seen on 2024-11-07 at 05:46:36 UTC

    • IP
      154.9.202.198
      Network
      154.9.200.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://154.9.202.198:8292/ 407

      ASN
      AS174
      Organization
      COGENT-174
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      beff904528226673ee6dbdb9e7fe6002
      HTTP Header MD5
      4bd5a82db187fbf06a2b7f25b880c717
      HTTP Body MD5
      917a0ae17b6e9db13c448d39f37c69ca
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm=""
      
      Proxy Authentication Required
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:46:36.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
               "bodymmh3" : -1539650452,
               "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
               "headermmh3" : 372433470
            },
            "length" : 111
         },
         "asn" : "AS174",
         "city" : "London",
         "country" : "GB",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
         "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
         "datammh3" : 501879459,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS174",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "cogentco.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "PSINET-B2-9",
            "organization" : "Performance Systems International",
            "subnet" : "154.9.202.0/23"
         },
         "ip" : "154.9.202.198",
         "ipv6" : "false",
         "latitude" : "51.5074",
         "location" : "51.5074,-0.1196",
         "longitude" : "-0.1196",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COGENT-174",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8292,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "154.9.200.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 181.215.70.97:8292 (tcp/http) - last seen on 2024-11-07 at 05:46:06 UTC

    • IP
      181.215.70.97
      Network
      181.215.70.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://181.215.70.97:8292/ 407

      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      beff904528226673ee6dbdb9e7fe6002
      HTTP Header MD5
      4bd5a82db187fbf06a2b7f25b880c717
      HTTP Body MD5
      917a0ae17b6e9db13c448d39f37c69ca
    • HTTP/1.1 407 Proxy Authentication Required
      Proxy-Authenticate: Basic realm=""
      
      Proxy Authentication Required
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:46:06.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
               "bodymmh3" : -1539650452,
               "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
               "headermmh3" : 372433470
            },
            "length" : 111
         },
         "asn" : "AS20473",
         "city" : "Melbourne",
         "country" : "AU",
         "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
         "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
         "datammh3" : 501879459,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "181.215.70.97",
         "ipv6" : "false",
         "latitude" : "-37.8159",
         "location" : "-37.8159,144.9669",
         "longitude" : "144.9669",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-VULTR",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8292,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Proxy Authentication Required",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 407,
         "subnet" : "181.215.70.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 171.7.86.119:8292 (tcp/http) - last seen on 2024-11-07 at 05:46:06 UTC

    • IP
      171.7.86.119
      Network
      171.7.0.0/16
      Domain(s)
      3bb.in.th
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor

      Operating System
      Mikrotik RouterOS
      URL

      http://171.7.86.119:8292/ 200

      HTTP Title
      RouterOS router configuration page
      Reverse DNS
      mx-ll-171.7.86-119.dynamic.3bb.in.th
      ASN
      AS45758
      Organization
      Triple T Broadband Public Company Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Mikrotik RouterOS
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      08e8a5aa1a23a16635621b4be4fbe2b7
      HTTP Header MD5
      508070579d3bda9d98e9ba0408c62fd3
      HTTP Body MD5
      91e377f29922ef39edb4a61b5a49def2
    • HTTP/1.1 200 OK
      Connection: close
      Content-Length: 7064
      Content-Type: text/html
      Date: Thu, 07 Nov 2024 05:45:59 GMT
      Expires: 0
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml">
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
      <link rel="icon" href="/favicon.png"/>
      <title>RouterOS router configuration page</title>
      <style type="text/css">
      body {
      font-family: Verdana, Geneva, sans-serif;
      font-size: 11px;
      }
      img {border: none}
      img:hover {opacity: 0.8;}
      h1 {
      font-size: 1.7em;
      display: inline;
      margin-bottom: 10px;
      }
      fieldset {
      margin-top: 20px;
      background: #fff;
      padding: 20px;
      border: 1px solid #c1c1c1; 
      }
      #container {
      width: 70%;
      margin: 10% auto;
      }
      #box {
      background-color: #fff; 
      -moz-border-radius: 7px; 
      -webkit-border-radius: 7px; 
      border: 1px solid #c1c1c1; 
      padding: 30px;
      filter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */
      background: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */
      background: -moz-linear-gradient(top,  #fff,  #f3f3f3); /* for firefox 3.6+ */
      }
      .floater {float: left; margin-right: 10px;}
      .floater label {display: block; text-align: center;}
      
      #login {
          margin: 2em 0 4em 0;
      }
      #login h2 {
          font-weight: normal;
          font-size: 14px;
          margin: 0 0 0.5em 1em;
      }
      #login td {
          padding: 0 4px 0 0;
      }
      #login td.label {
          text-align: right;
      }
      #login td.toolbar {
          padding: 0 0 0 1em;
          vertical-align: top;
      }
      #login ul.toolbar {
          margin: 0;
      }
      #login input {
          margin: 2px;
          padding: 2px;
          border: 1px solid #888;
          box-shadow: 1px 1px 3px rgba(0,0,0,0.3);
          -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);
          -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);
      }
      #error {
          display:none;
          color:red;
          padding: 1em 0 0 0;
      }
      ul.toolbar {
          font-size: 11px;
          text-align: left;
          list-style-type: none;
          padding: 0;
          margin: 2px 0 4px 2px;
      }
      ul.toolbar li {
          float: left;
          vertical-align: middle;
      }
      ul.toolbar a {
          float: none;
          display: block;
          margin: 2px 4px 2px 0;
          padding: 5px;
      
          background: #ddd;
          border: 1px solid #888;
          border-radius: 3px;
          -moz-border-radius: 3px;
          box-shadow:
              1px 1px 2px rgba(255,255,255,0.8) inset,
      	0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */
      	1px 1px 2px rgba(0,0,0,0.2); /* shadow */
          -webkit-box-shadow:
              1px 1px 2px rgba(255,255,255,0.8) inset,
      	0 10px 10px -5px rgba(255,255,255,0.5) inset,
      	1px 1px 2px rgba(0,0,0,0.2);
          -moz-box-shadow:
              1px 1px 2px rgba(255,255,255,0.8) inset,
      	0 10px 10px -5px rgba(255,255,255,0.5) inset,
      	1px 1px 2px rgba(0,0,0,0.2);
          color: #000;
      
          text-decoration: none;
          text-align: center;
          white-space: nowrap;
          cursor: inherit;
          min-width: 4em;
      
          -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;
          -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;
      }
      ul.toolbar a:hover {
          background: #eee;
      }
      ul.toolbar a:active {
          background: #aaa;
          box-shadow: 1px 1px 2px #999 inset;
          -webkit-box-shadow: 1px 1px 2px #999 inset;
          -moz-box-shadow: 1px 1px 2px #999 inset;
      }
      </style>
      <script>
      function get(id) {
          return document.getElementById(id);
      }
      function trim(str) {
          return str.replace(/^\s+|\s+$/g, '');
      }
      function login(user, pwd, autologin) {
          var expires = new Date();
          expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));
          document.cookie = 'username=' + user +
              '; expires=' + expires.toGMTString() + '; path=/';
      
          window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;
          window.location.replace('/webfig/' + window.location.hash);
      }
      function dologin() {
          login(get('name').value, get('password').value);
      }
      function loaded() {
          var p = window.name.split('=');
          if (p[0] == 'error' && p[1]) {
              var err = get('error');
              err.appendChild(document.createTextNode(p[1]));
              err.style.display = 'block';
          } else if (p[0] != 'noautologin' || p[1] != 1) {
              var user = '';
              if (user) {
                  login(user, '', true);
                  return;
              }
          }
          window.name = '';
      
          document.onkeydown = function(e) {
              e = e || event;
              if (e.keyCode == 13) {
                  dologin();
                  return false;
              }
              return true;
          };
      
          var username = null;
          var cookies = document.cookie.split(';');
          for (var i in cookies) {
      	var c = trim(cookies[i]).split('=');
      	if (c[0] == 'username') {
      	    username = c[1];
      	    break;
      	}
          }
          
          if (username != null) {
      	get('name').value = username;
      	get('password').focus();
          } else {
              get('name').value = 'admin';
      	get('name').focus();
          }
      }
      </script>
      </head>
      
      <body onload="loaded()">
      
      <div id="container">
      
          <div id="box">
          <a href="http://mikrotik.com"><img src="mikrotik_logo.png" style="float: right;" /></a>
      
          <br style="clear: both;"/>
          
      		<h1>RouterOS v6.48.6</h1>
              
              <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>
              
            <table id="login">
      	<tr><td colspan="3"><h2>WebFig Login:</h2>
              <tr><td class="label">Login: <td><input id="name" type="text" tabindex="1">
      	 <td class="toolbar" rowspan="2">
               <ul class="toolbar">
      	   <li><a onclick="dologin()" ondragstart="return false;"><span>Login</span></a></li>
               </ul>
               <tr><td class="label">Password: <td><input id="password" type="password" tabindex="2">
      	<tr><td colspan="3">
      	    <div id="error"></div>
            </table>
                  
                  <fieldset>
                  <div class="floater"> 
                  	<a href="http://www.mikrotik.com/download/winbox.exe"><img src="winbox.png"/></a><br/>
                      <label>Winbox</label>
                  </div>
                  
                  <div class="floater"> 
                  	<a href="telnet://192.168.1.134"><img src="console.png"/></a><br/>
                      <label>Telnet</label>
                  </div>
      
                  
                  
                  <div class="floater"> 
                  	<a href="/graphs"><img src="green.png"/></a><br/>
                      <label>Graphs</label>
                  </div>
                 
                  
                  <div class="floater"> 
                  	<a href="/help/license.html"><img src="license.png"/></a><br/>
                      <label>License</label>
                  </div>
                  
      			<div class="floater"> 
                  	<a href="http://wiki.mikrotik.com"><img src="help.png"/></a><br/>
                      <label>Help</label>
                  </div>
      
      </fieldset>
                 
                  <br style="clear: both"/> 
                                  <div style="float: right">&copy; mikrotik</div>
      
          </div>
      </div>
      
      </div>
      
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:46:06.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org",
                  "mikrotik.com"
               ],
               "file" : [
                  "winbox.exe"
               ],
               "hostname" : [
                  "mikrotik.com",
                  "wiki.mikrotik.com",
                  "www.mikrotik.com",
                  "www.w3.org"
               ],
               "ip" : [
                  "192.168.1.134"
               ],
               "url" : [
                  "http://mikrotik.com",
                  "http://wiki.mikrotik.com",
                  "http://www.mikrotik.com/download/winbox.exe",
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "91e377f29922ef39edb4a61b5a49def2",
               "bodymmh3" : 1948130691,
               "headermd5" : "508070579d3bda9d98e9ba0408c62fd3",
               "headermmh3" : -616330881,
               "title" : "RouterOS router configuration page"
            },
            "length" : 7198
         },
         "asn" : "AS45758",
         "city" : "Bangkok",
         "country" : "TH",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Length: 7064\r\nContent-Type: text/html\r\nDate: Thu, 07 Nov 2024 05:45:59 GMT\r\nExpires: 0\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<link rel=\"icon\" href=\"/favicon.png\"/>\r\n<title>RouterOS router configuration page</title>\r\n<style type=\"text/css\">\r\nbody {\r\nfont-family: Verdana, Geneva, sans-serif;\r\nfont-size: 11px;\r\n}\r\nimg {border: none}\r\nimg:hover {opacity: 0.8;}\r\nh1 {\r\nfont-size: 1.7em;\r\ndisplay: inline;\r\nmargin-bottom: 10px;\r\n}\r\nfieldset {\r\nmargin-top: 20px;\r\nbackground: #fff;\r\npadding: 20px;\r\nborder: 1px solid #c1c1c1; \r\n}\r\n#container {\r\nwidth: 70%;\r\nmargin: 10% auto;\r\n}\r\n#box {\r\nbackground-color: #fff; \r\n-moz-border-radius: 7px; \r\n-webkit-border-radius: 7px; \r\nborder: 1px solid #c1c1c1; \r\npadding: 30px;\r\nfilter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */\r\nbackground: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */\r\nbackground: -moz-linear-gradient(top,  #fff,  #f3f3f3); /* for firefox 3.6+ */\r\n}\r\n.floater {float: left; margin-right: 10px;}\r\n.floater label {display: block; text-align: center;}\r\n\r\n#login {\r\n    margin: 2em 0 4em 0;\r\n}\r\n#login h2 {\r\n    font-weight: normal;\r\n    font-size: 14px;\r\n    margin: 0 0 0.5em 1em;\r\n}\r\n#login td {\r\n    padding: 0 4px 0 0;\r\n}\r\n#login td.label {\r\n    text-align: right;\r\n}\r\n#login td.toolbar {\r\n    padding: 0 0 0 1em;\r\n    vertical-align: top;\r\n}\r\n#login ul.toolbar {\r\n    margin: 0;\r\n}\r\n#login input {\r\n    margin: 2px;\r\n    padding: 2px;\r\n    border: 1px solid #888;\r\n    box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n    -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n    -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n}\r\n#error {\r\n    display:none;\r\n    color:red;\r\n    padding: 1em 0 0 0;\r\n}\r\nul.toolbar {\r\n    font-size: 11px;\r\n    text-align: left;\r\n    list-style-type: none;\r\n    padding: 0;\r\n    margin: 2px 0 4px 2px;\r\n}\r\nul.toolbar li {\r\n    float: left;\r\n    vertical-align: middle;\r\n}\r\nul.toolbar a {\r\n    float: none;\r\n    display: block;\r\n    margin: 2px 4px 2px 0;\r\n    padding: 5px;\r\n\r\n    background: #ddd;\r\n    border: 1px solid #888;\r\n    border-radius: 3px;\r\n    -moz-border-radius: 3px;\r\n    box-shadow:\r\n        1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */\r\n\t1px 1px 2px rgba(0,0,0,0.2); /* shadow */\r\n    -webkit-box-shadow:\r\n        1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n    -moz-box-shadow:\r\n        1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n    color: #000;\r\n\r\n    text-decoration: none;\r\n    text-align: center;\r\n    white-space: nowrap;\r\n    cursor: inherit;\r\n    min-width: 4em;\r\n\r\n    -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n    -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n}\r\nul.toolbar a:hover {\r\n    background: #eee;\r\n}\r\nul.toolbar a:active {\r\n    background: #aaa;\r\n    box-shadow: 1px 1px 2px #999 inset;\r\n    -webkit-box-shadow: 1px 1px 2px #999 inset;\r\n    -moz-box-shadow: 1px 1px 2px #999 inset;\r\n}\r\n</style>\r\n<script>\r\nfunction get(id) {\r\n    return document.getElementById(id);\r\n}\r\nfunction trim(str) {\r\n    return str.replace(/^\\s+|\\s+$/g, '');\r\n}\r\nfunction login(user, pwd, autologin) {\r\n    var expires = new Date();\r\n    expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));\r\n    document.cookie = 'username=' + user +\r\n        '; expires=' + expires.toGMTString() + '; path=/';\r\n\r\n    window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;\r\n    window.location.replace('/webfig/' + window.location.hash);\r\n}\r\nfunction dologin() {\r\n    login(get('name').value, get('password').value);\r\n}\r\nfunction loaded() {\r\n    var p = window.name.split('=');\r\n    if (p[0] == 'error' && p[1]) {\r\n        var err = get('error');\r\n        err.appendChild(document.createTextNode(p[1]));\r\n        err.style.display = 'block';\r\n    } else if (p[0] != 'noautologin' || p[1] != 1) {\r\n        var user = '';\r\n        if (user) {\r\n            login(user, '', true);\r\n            return;\r\n        }\r\n    }\r\n    window.name = '';\r\n\r\n    document.onkeydown = function(e) {\r\n        e = e || event;\r\n        if (e.keyCode == 13) {\r\n            dologin();\r\n            return false;\r\n        }\r\n        return true;\r\n    };\r\n\r\n    var username = null;\r\n    var cookies = document.cookie.split(';');\r\n    for (var i in cookies) {\r\n\tvar c = trim(cookies[i]).split('=');\r\n\tif (c[0] == 'username') {\r\n\t    username = c[1];\r\n\t    break;\r\n\t}\r\n    }\r\n    \r\n    if (username != null) {\r\n\tget('name').value = username;\r\n\tget('password').focus();\r\n    } else {\r\n        get('name').value = 'admin';\r\n\tget('name').focus();\r\n    }\r\n}\r\n</script>\r\n</head>\r\n\r\n<body onload=\"loaded()\">\r\n\r\n<div id=\"container\">\r\n\r\n    <div id=\"box\">\r\n    <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\r\n\r\n    <br style=\"clear: both;\"/>\r\n    \r\n\t\t<h1>RouterOS v6.48.6</h1>\r\n        \r\n        <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>\r\n        \r\n      <table id=\"login\">\r\n\t<tr><td colspan=\"3\"><h2>WebFig Login:</h2>\r\n        <tr><td class=\"label\">Login: <td><input id=\"name\" type=\"text\" tabindex=\"1\">\r\n\t <td class=\"toolbar\" rowspan=\"2\">\r\n         <ul class=\"toolbar\">\r\n\t   <li><a onclick=\"dologin()\" ondragstart=\"return false;\"><span>Login</span></a></li>\r\n         </ul>\r\n         <tr><td class=\"label\">Password: <td><input id=\"password\" type=\"password\" tabindex=\"2\">\r\n\t<tr><td colspan=\"3\">\r\n\t    <div id=\"error\"></div>\r\n      </table>\r\n            \r\n            <fieldset>\r\n            <div class=\"floater\"> \r\n            \t<a href=\"http://www.mikrotik.com/download/winbox.exe\"><img src=\"winbox.png\"/></a><br/>\r\n                <label>Winbox</label>\r\n            </div>\r\n            \r\n            <div class=\"floater\"> \r\n            \t<a href=\"telnet://192.168.1.134\"><img src=\"console.png\"/></a><br/>\r\n                <label>Telnet</label>\r\n            </div>\r\n\r\n            \r\n            \r\n            <div class=\"floater\"> \r\n            \t<a href=\"/graphs\"><img src=\"green.png\"/></a><br/>\r\n                <label>Graphs</label>\r\n            </div>\r\n           \r\n            \r\n            <div class=\"floater\"> \r\n            \t<a href=\"/help/license.html\"><img src=\"license.png\"/></a><br/>\r\n                <label>License</label>\r\n            </div>\r\n            \r\n\t\t\t<div class=\"floater\"> \r\n            \t<a href=\"http://wiki.mikrotik.com\"><img src=\"help.png\"/></a><br/>\r\n                <label>Help</label>\r\n            </div>\r\n\r\n</fieldset>\r\n           \r\n            <br style=\"clear: both\"/> \r\n                            <div style=\"float: right\">&copy; mikrotik</div>\r\n\r\n    </div>\r\n</div>\r\n\r\n</div>\r\n\r\n</body>\r\n</html>\r\n",
         "datamd5" : "08e8a5aa1a23a16635621b4be4fbe2b7",
         "datammh3" : 1979562087,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "3bb.in.th"
         ],
         "geolocus" : {
            "asn" : "AS45758",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "TH",
            "countryname" : "Thailand",
            "domain" : [
               "3bb.in.th",
               "3bbmail.com",
               "jasmine.com"
            ],
            "isineu" : "false",
            "latitude" : "15.870032",
            "location" : "15.870032,100.992541",
            "longitude" : "100.992541",
            "netname" : "TTBP-TH",
            "organization" : "Triple T Broadband Public Company Limited",
            "subnet" : "171.7.0.0/17"
         },
         "host" : [
            "mx-ll-171"
         ],
         "hostname" : [
            "mx-ll-171.7.86-119.dynamic.3bb.in.th"
         ],
         "ip" : "171.7.86.119",
         "ipv6" : "false",
         "latitude" : "13.6984",
         "location" : "13.6984,100.4638",
         "longitude" : "100.4638",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Triple T Broadband Public Company Limited",
         "os" : "RouterOS",
         "osvendor" : "Mikrotik",
         "port" : 8292,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "mx-ll-171.7.86-119.dynamic.3bb.in.th"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "86-119.dynamic.3bb.in.th",
            "7.86-119.dynamic.3bb.in.th",
            "dynamic.3bb.in.th"
         ],
         "subnet" : "171.7.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "in.th"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }