109.70.1.250:2222 (tcp/http) - last seen on 2024-11-07 at 08:46:26 UTC
-
- IP
- 109.70.1.250
- Network
- 109.70.0.0/21
- Domain(s)
- terhartweb.nl
- Device
-
<enterprise field>: device.class
- Operating System
- Linux Linux Kernel
- URL
-
http://109.70.1.250:2222/ 200
- HTTP Title
- DirectAdmin Login
- Reverse DNS
- srv1b.terhartweb.nl
- ASN
- AS48635
- Organization
- CLDIN B.V.
- Protocol
- http
- Source
- datascan
-
- Operating System
- Linux Linux Kernel
This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.
-
- Data MD5
- 59945f6e5b793b1f4fa37ea108dabff7
- HTTP Header MD5
- 745e364b07767e73a5dd2a9e12516f1f
- HTTP Body MD5
- 759ac700a17528854129a8b3b524de08
-
HTTP/1.1 200 OK Cache-Control: no-cache Content-Type: text/html Pragma: no-cache Server: DirectAdmin Daemon Set-Cookie: session=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Lax; HttpOnly Vary: Origin Vary: Accept-Encoding X-Directadmin: Unauthorized X-Frame-Options: sameorigin X-Valid: yes Date: Thu, 07 Nov 2024 08:46:24 GMT Connection: close Transfer-Encoding: chunked fb8 <!DOCTYPE html><html><head><title>DirectAdmin Login</title><meta name="robots" content="noindex,nofollow"><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><style>* { font-size: 8.5pt; font-family: verdana; }b { font-weight: bold; }.listtitle { background: #425984; color: #EEEEEE; white-space: nowrap; border-radius: 3px; box-shadow: 1px 1px 3px #727272; }td.list{ background: #EEEEEE; white-space: nowrap; }input { border-radius: 3px; padding-left: 4px; padding-right: 4px; }.inset { border: 1px inset #DDDDDD; }.auth-block { display: none; }#main-auth { display: table-row-group; }#footer { position: fixed; bottom: 0; width: 100%; padding-bottom: 20px; text-align: center; color: #A1A1A1; }#outofsync { font-weight: bold; color: #990000; }</style><script type="text/javascript">var additional = '';const login = (ev, form) => { ev.preventDefault(); const data = new FormData(form); const body = { username: data.get('username'), password: data.get('password') }; if (additional === 'otp') { body.otp = { code: data.get('otp.code'), remember: data.get('otp.remember') !== null }; } const req = { method: 'POST', body: JSON.stringify(body) }; fetch('/api/login', req). then((res) => res.json()). then((data) => { switch (data.type) { case 'LOGIN_FAILED_OTP':form.querySelector('#FailMessage').innerText = (additional === 'otp' ? 'Invalid Two-Step Auth code' : ''); additional = 'otp'; form.querySelector('#main-auth').style.display = 'none'; form.querySelector('#otp-auth').style.display = 'table-row-group'; break; case undefined: const return_param = (new URLSearchParams(window.location.search)).get('return-to'); if (return_param) { const return_url = new URL(return_param, window.location); window.location.href = return_url.pathname + return_url.search + return_url.hash; } else { window.location.reload(); } break; default:form.querySelector('#FailMessage').innerText = 'Invalid login. Please verify your Username and Password'; } }). catch((e) => console.error(e));};document.addEventListener('DOMContentLoaded', () => { const form = document.getElementById('login'); form.addEventListener('submit', (ev) => login(ev, form));const serverTime = 1730969184;const allowedTimeOffset = 86400; const localTime = Math.floor(Date.now() / 1000); const timeDiff = Math.abs(localTime - serverTime); if (timeDiff > allowedTimeOffset) { const hoursStr = (timeDiff / 3600).toFixed(2); document.getElementById('outofsync').innerText = 'Computer or server time out of sync by ' + hoursStr + ' hours.'; }});</script></head><body><center><br><br><br><br><h1>DirectAdmin Login Page</h1><form id="login" name="form"><h1 id="FailMessage"></h1><table cellspacing="1" cellpadding="5"><tbody id="main-auth" class="auth-block"><tr><td class="listtitle" colspan="2">Please enter your Username and Password</td></tr><tr><td class="list" align="right">Username</td><td class="list"><input name="username" type="text" class="inset" autocapitalize="none"></td></tr><tr><td class="list" align="right">Password</td><td class="list"><input name="password" type="password" class="inset"></td></tr></tbody><tbody id="otp-auth" class="auth-block"><tr><td class="listtitle" colspan="2">Enter your Two-Step Authentication Code</td></tr><tr><td class="list" align="right">Code</td><td class="list"><input name="otp.code" type="text" class="inset"></td></tr><tr><td class="list" align="right">Trust this device for 30 days</td><td class="list"><input name="otp.remember" type="checkbox"></td></tr></tbody><tr><td class="listtitle" align="right" colspan="2"><input type="submit" value="Login"></td></tr><tr><td align="center" colspan="2"><a href="/CMD_LOST_PASSWORD">Forgot your Password?</a></td></tr></table></form></center><div id="footer">Thu Nov 7 09:46:24 2024 <div id="outofsync"></div></div></body></html> 0 -
{ "@category" : "datascan", "@timestamp" : "2024-11-07T08:46:26.000Z", "app" : { "http" : { "bodymd5" : "759ac700a17528854129a8b3b524de08", "bodymmh3" : 538880315, "headermd5" : "745e364b07767e73a5dd2a9e12516f1f", "headermmh3" : -1309678691, "title" : "DirectAdmin Login" }, "length" : 4437 }, "asn" : "AS48635", "country" : "NL", "data" : "HTTP/1.1 200 OK\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\nPragma: no-cache\r\nServer: DirectAdmin Daemon\r\nSet-Cookie: session=; path=/; expires=Thu, 01 Jan 1970 00:00:00 GMT; SameSite=Lax; HttpOnly\r\nVary: Origin\r\nVary: Accept-Encoding\r\nX-Directadmin: Unauthorized\r\nX-Frame-Options: sameorigin\r\nX-Valid: yes\r\nDate: Thu, 07 Nov 2024 08:46:24 GMT\r\nConnection: close\r\nTransfer-Encoding: chunked\r\n\r\nfb8\r\n<!DOCTYPE html><html><head><title>DirectAdmin Login</title><meta name=\"robots\" content=\"noindex,nofollow\"><meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\"><style>* { font-size: 8.5pt; font-family: verdana; }b { font-weight: bold; }.listtitle { background: #425984; color: #EEEEEE; white-space: nowrap; border-radius: 3px; box-shadow: 1px 1px 3px #727272; }td.list{ background: #EEEEEE; white-space: nowrap; }input { border-radius: 3px; padding-left: 4px; padding-right: 4px; }.inset { border: 1px inset #DDDDDD; }.auth-block { display: none; }#main-auth { display: table-row-group; }#footer { position: fixed; bottom: 0; width: 100%; padding-bottom: 20px; text-align: center; color: #A1A1A1; }#outofsync { font-weight: bold; color: #990000; }</style><script type=\"text/javascript\">var additional = '';const login = (ev, form) => { ev.preventDefault(); const data = new FormData(form); const body = { username: data.get('username'), password: data.get('password') }; if (additional === 'otp') { body.otp = { code: data.get('otp.code'), remember: data.get('otp.remember') !== null }; } const req = { method: 'POST', body: JSON.stringify(body) }; fetch('/api/login', req). then((res) => res.json()). then((data) => { switch (data.type) { case 'LOGIN_FAILED_OTP':form.querySelector('#FailMessage').innerText = (additional === 'otp' ? 'Invalid Two-Step Auth code' : ''); additional = 'otp'; form.querySelector('#main-auth').style.display = 'none'; form.querySelector('#otp-auth').style.display = 'table-row-group'; break; case undefined: const return_param = (new URLSearchParams(window.location.search)).get('return-to'); if (return_param) { const return_url = new URL(return_param, window.location); window.location.href = return_url.pathname + return_url.search + return_url.hash; } else { window.location.reload(); } break; default:form.querySelector('#FailMessage').innerText = 'Invalid login. Please verify your Username and Password'; } }). catch((e) => console.error(e));};document.addEventListener('DOMContentLoaded', () => { const form = document.getElementById('login'); form.addEventListener('submit', (ev) => login(ev, form));const serverTime = 1730969184;const allowedTimeOffset = 86400; const localTime = Math.floor(Date.now() / 1000); const timeDiff = Math.abs(localTime - serverTime); if (timeDiff > allowedTimeOffset) { const hoursStr = (timeDiff / 3600).toFixed(2); document.getElementById('outofsync').innerText = 'Computer or server time out of sync by ' + hoursStr + ' hours.'; }});</script></head><body><center><br><br><br><br><h1>DirectAdmin Login Page</h1><form id=\"login\" name=\"form\"><h1 id=\"FailMessage\"></h1><table cellspacing=\"1\" cellpadding=\"5\"><tbody id=\"main-auth\" class=\"auth-block\"><tr><td class=\"listtitle\" colspan=\"2\">Please enter your Username and Password</td></tr><tr><td class=\"list\" align=\"right\">Username</td><td class=\"list\"><input name=\"username\" type=\"text\" class=\"inset\" autocapitalize=\"none\"></td></tr><tr><td class=\"list\" align=\"right\">Password</td><td class=\"list\"><input name=\"password\" type=\"password\" class=\"inset\"></td></tr></tbody><tbody id=\"otp-auth\" class=\"auth-block\"><tr><td class=\"listtitle\" colspan=\"2\">Enter your Two-Step Authentication Code</td></tr><tr><td class=\"list\" align=\"right\">Code</td><td class=\"list\"><input name=\"otp.code\" type=\"text\" class=\"inset\"></td></tr><tr><td class=\"list\" align=\"right\">Trust this device for 30 days</td><td class=\"list\"><input name=\"otp.remember\" type=\"checkbox\"></td></tr></tbody><tr><td class=\"listtitle\" align=\"right\" colspan=\"2\"><input type=\"submit\" value=\"Login\"></td></tr><tr><td align=\"center\" colspan=\"2\"><a href=\"/CMD_LOST_PASSWORD\">Forgot your Password?</a></td></tr></table></form></center><div id=\"footer\">Thu Nov 7 09:46:24 2024\n<div id=\"outofsync\"></div></div></body></html>\r\n0\r\n\r\n", "datamd5" : "59945f6e5b793b1f4fa37ea108dabff7", "datammh3" : -1754027744, "device" : { "class" : "<enterprise field>: device.class" }, "domain" : [ "terhartweb.nl" ], "host" : [ "srv1b" ], "hostname" : [ "srv1b.terhartweb.nl" ], "ip" : "109.70.1.250", "ipv6" : "false", "latitude" : "52.3824", "location" : "52.3824,4.8995", "longitude" : "4.8995", "node" : { "country" : "<enterprise field>: node.country", "groupid" : "<enterprise field>: node.groupid", "id" : "<enterprise field>: node.id", "physicalcountry" : "<enterprise field>: node.physicalcountry" }, "organization" : "CLDIN B.V.", "os" : "Linux Kernel", "osvendor" : "Linux", "port" : 2222, "protocol" : "http", "protocolversion" : "1.1", "reason" : "OK", "reverse" : [ "srv1b.terhartweb.nl" ], "seen_date" : "2024-11-07", "source" : "datascan", "status" : 200, "subnet" : "109.70.0.0/21", "tag" : "<enterprise field>: tag", "tld" : [ "nl" ], "tls" : "false", "transport" : "tcp", "url" : "/" }