Returning 10 result(s) out of 13,322 in 0.203 second(s)

  • 103.43.16.71:24284 (tcp/http) - last seen on 2024-11-07 at 05:38:43 UTC

    • IP
      103.43.16.71
      Network
      103.43.16.0/22
      Device

      <enterprise field>: device.class

      URL

      http://103.43.16.71:24284/$%7BrandomUrl%7D 200

      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a921ec0c33b287a5b32845ce36a9f9b4
      HTTP Header MD5
      7cb8a64a5c41d5db44d85d677dbec3ce
      HTTP Body MD5
      db475c674e230d3b59b9d4c51e192872
    • HTTP/1.1 200 OK
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 05:38:02 GMT
      Content-Type: text/html
      Content-Length: 1728
      Last-Modified: Mon, 04 Nov 2024 11:57:54 GMT
      Connection: close
      ETag: "6728b6c2-6c0"
      Accept-Ranges: bytes
      
      <!DOCTYPE html>
      <html lang="zh-CN">
      <head>
          <!-- Google tag (gtag.js) -->
          <script async src="https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"></script>
          <script>
              <script>
                  window.dataLayer = window.dataLayer || [];
                  function gtag(){dataLayer.push(arguments);}
                  gtag('js', new Date());
      
                  gtag('config', 'G-0GJHN159XX');
          </script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3IsbgF2faH56SAiO",ck:"3IsbgF2faH56SAiO"})</script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3GuWRdQLAUfAEIDe",ck:"3GuWRdQLAUfAEIDe"})</script>
      
      
      
          <meta charset="UTF-8">
          <meta name="format-detection" content="telephone=yes">
          <meta name="viewport"
                content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">
          <script>
              const urls = [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/"
              ];
              const randomUrl = urls[Math.floor(Math.random() * urls.length)];
      
              document.write(`<meta http-equiv="refresh" content="9;url=${randomUrl}">`);
              window.onload = function () {
                  document.getElementById('myiframe').src = randomUrl;
              };
          </script>
          <style>
              body, html {
                  margin: 0;
                  padding: 0;
                  height: 100%;
                  overflow: hidden;
              }
      
              iframe {
                  width: 100%;
                  height: 100vh;
                  border: none;
              }
          </style>
      </head>
      <body>
      <iframe id="myiframe" scrolling="no"></iframe>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:38:43.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "googletagmanager.com"
               ],
               "hostname" : [
                  "www.googletagmanager.com"
               ],
               "ip" : [
                  "139.155.134.148",
                  "162.14.69.113"
               ],
               "url" : [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/",
                  "https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"
               ]
            },
            "http" : {
               "bodymd5" : "db475c674e230d3b59b9d4c51e192872",
               "bodymmh3" : 488145746,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 04 Nov 2024 11:57:54 GMT"
                  },
                  {
                     "name" : "ETag",
                     "value" : "6728b6c2-6c0"
                  }
               ],
               "headermd5" : "7cb8a64a5c41d5db44d85d677dbec3ce",
               "headermmh3" : -828752798,
               "tracker" : {
                  "ga" : [
                     "G-0GJHN159XX"
                  ]
               }
            },
            "length" : 1962
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 05:38:02 GMT\r\nContent-Type: text/html\r\nContent-Length: 1728\r\nLast-Modified: Mon, 04 Nov 2024 11:57:54 GMT\r\nConnection: close\r\nETag: \"6728b6c2-6c0\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html lang=\"zh-CN\">\n<head>\n    <!-- Google tag (gtag.js) -->\n    <script async src=\"https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX\"></script>\n    <script>\n        <script>\n            window.dataLayer = window.dataLayer || [];\n            function gtag(){dataLayer.push(arguments);}\n            gtag('js', new Date());\n\n            gtag('config', 'G-0GJHN159XX');\n    </script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3IsbgF2faH56SAiO\",ck:\"3IsbgF2faH56SAiO\"})</script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3GuWRdQLAUfAEIDe\",ck:\"3GuWRdQLAUfAEIDe\"})</script>\n\n\n\n    <meta charset=\"UTF-8\">\n    <meta name=\"format-detection\" content=\"telephone=yes\">\n    <meta name=\"viewport\"\n          content=\"width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no\">\n    <script>\n        const urls = [\n            \"https://139.155.134.148/tt/test.html?333?666aaa\",\n            \"https://162.14.69.113/\"\n        ];\n        const randomUrl = urls[Math.floor(Math.random() * urls.length)];\n\n        document.write(`<meta http-equiv=\"refresh\" content=\"9;url=${randomUrl}\">`);\n        window.onload = function () {\n            document.getElementById('myiframe').src = randomUrl;\n        };\n    </script>\n    <style>\n        body, html {\n            margin: 0;\n            padding: 0;\n            height: 100%;\n            overflow: hidden;\n        }\n\n        iframe {\n            width: 100%;\n            height: 100vh;\n            border: none;\n        }\n    </style>\n</head>\n<body>\n<iframe id=\"myiframe\" scrolling=\"no\"></iframe>\n</body>\n</html>\n",
         "datamd5" : "a921ec0c33b287a5b32845ce36a9f9b4",
         "datammh3" : -1249100627,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "103.43.16.71",
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "103.43.16.0/22"
         },
         "hostname" : [
            "103.43.16.71"
         ],
         "ip" : "103.43.16.71",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "port" : 24284,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "103.43.16.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/$%7BrandomUrl%7D"
      }
      
  • 176.32.195.61:24284 (tcp/http) - last seen on 2024-11-07 at 05:38:16 UTC

    • IP
      176.32.195.61
      Network
      176.32.192.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://176.32.195.61:24284/ 200

      HTTP Title
      Pentaho Business Analytics
      ASN
      AS197834
      Organization
      Ucom CJSC
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Apache Coyote HTTP Connector 1.1
      HTTP Component(s)
      Oracle Java
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b67ed81a3561214b87e0c0294ac897d6
      HTTP Header MD5
      928c9caafadce96045404345d6246c9b
      HTTP Body MD5
      fd371e102e6a80e217fd4dd385212310
    • HTTP/1.1 200 OK
      Content-Type: text/html
      Date: Thu, 07 Nov 2024 05:38:15 UTC
      Server: Apache-Coyote/1.1
      Set-Cookie: JSESSIONID=B66DA90ECBC2A25C6E27FA27CBC8426B; Path=/
      Content-Length: 355
      Connection: keep-alive
      
      
      
      <?xml version="1.0" encoding="utf-8"?>
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml">
        <head>
          <title>Pentaho Business Analytics</title>
          <meta http-equiv="refresh" content="0;URL=/pentaho">
        </head>
        <body>
        </body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:38:16.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "fd371e102e6a80e217fd4dd385212310",
               "bodymmh3" : 66312083,
               "component" : [
                  {
                     "productvendor" : "Oracle",
                     "product" : "Java"
                  }
               ],
               "headermd5" : "928c9caafadce96045404345d6246c9b",
               "headermmh3" : -1074811983,
               "title" : "Pentaho Business Analytics"
            },
            "length" : 573
         },
         "asn" : "AS197834",
         "country" : "AM",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nDate: Thu, 07 Nov 2024 05:38:15 UTC\r\nServer: Apache-Coyote/1.1\r\nSet-Cookie: JSESSIONID=B66DA90ECBC2A25C6E27FA27CBC8426B; Path=/\r\nContent-Length: 355\r\nConnection: keep-alive\r\n\r\n\n\n<?xml version=\"1.0\" encoding=\"utf-8\"?>\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\n  <head>\n    <title>Pentaho Business Analytics</title>\n    <meta http-equiv=\"refresh\" content=\"0;URL=/pentaho\">\n  </head>\n  <body>\n  </body>\n</html>",
         "datamd5" : "b67ed81a3561214b87e0c0294ac897d6",
         "datammh3" : 1582738561,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS197834",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "AM",
            "countryname" : "Armenia",
            "domain" : [
               "interactive.am"
            ],
            "isineu" : "false",
            "latitude" : "40.069099",
            "location" : "40.069099,45.038189",
            "longitude" : "45.038189",
            "netname" : "INTERTV-NET",
            "organization" : "Interactive TV LLC",
            "subnet" : "176.32.192.0/21"
         },
         "ip" : "176.32.195.61",
         "ipv6" : "false",
         "latitude" : "40.2500",
         "location" : "40.2500,45.0000",
         "longitude" : "45.0000",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Ucom CJSC",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 24284,
         "product" : "Coyote HTTP Connector",
         "productvendor" : "Apache",
         "productversion" : "1.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "176.32.192.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 18.236.140.197:24284 (tcp/http) - last seen on 2024-11-07 at 05:38:09 UTC

    • IP
      18.236.140.197
      Network
      18.236.0.0/15
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://18.236.140.197:24284/ 200

      HTTP Title
      KACE Systems Management Appliance Service Center
      Reverse DNS
      ec2-18-236-140-197.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Apache HTTP Server
      HTTP Component(s)
      Quest KACE Systems Management Appliance Bootstrap Bootstrap
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ad14902e0fa8339104b711ebd29c4bc3
      HTTP Header MD5
      114e612087ffeaf5f76927dd76720718
      HTTP Body MD5
      d408fd011fef9e2daec83a8aa38ee7ab
    • HTTP/1.1 200 OK
      Connection: close
      Date: Thu, 07 Nov 2024 05:38:07 GMT
      Server: Apache
      Expires: Thu, 07 Nov 2024 05:38:07 GMT
      Cache-Control: no-store, no-cache, must-revalidate
      Pragma: no-cache
      Set-Cookie: kboxid=35cr3nlpxdyc6jy3krtuk58erlk0yyjs; path=/; secure; HttpOnly; SameSite=Lax
      X-Content-Type-Options: nosniff
      X-Frame-Options: sameorigin
      X-XSS-Protection: 1; mode=block
      Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
      Access-Control-Allow-Headers: x-kace-auth-timestamp, x-kace-auth-key, x-kace-auth-signature, accept, origin, content-type
      Access-Control-Allow-Methods: PUT, DELETE, POST, GET, OPTIONS
      X-Kace-Appliance: K1000
      X-Ua-Compatible: IE=9,EDGE
      Content-Length: 8986
      Content-Type: text/html
      
      <!DOCTYPE html>
      <html data-template="welcome" data-page-type="welcome" data-area="user" lang="en" ><head>
              <script id="fr-fek">try{(function (k){localStorage.FEK=k;t=document.getElementById('fr-fek');t.parentNode.removeChild(t);})('mIBEVFBOHC1d2UNYVM==')}catch(e){}</script>
              <meta http-equiv="X-UA-Compatible" content="IE=9; IE=EDGE" /><meta http-equiv="content-type" content="text/html; charset=utf-8" /><meta name="robots" content="noindex"><title>KACE Systems Management Appliance Service Center</title><link rel="shortcut icon" href="/favicon.ico"><link type="text/css" rel="stylesheet" href="/common/css/minified/vendor/select2.css?build=10.1.99" /><link type="text/css" rel="stylesheet" media="print" href="/common/css/minified/print.css?build=10.1.99" /><link type="text/css" rel="stylesheet" href="/common/css/minified/vendor/froala_style.css?build=10.1.99" /><!--[if lte IE 9]><link rel="stylesheet" type="text/css" href="/common/css/minified/kace-theme-ie.css?build=10.1.99" /><![endif]--><link type="text/css" rel="stylesheet" href="/common/css/minified/kace-theme-light.css?build=10.1.99" /><!--[if IE]><script type="text/javascript" src="/common/js/minified/vendor/html5.js?build=10.1.99"></script><![endif]--><script type="text/javascript" src="/common/js/minified/kpolyfills.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/jquery.fixes.js?build=10.1.99"></script><script type="text/javascript">jQuery.noConflict();</script><script type="text/javascript" src="/common/js/minified/vendor/jquery.cookie.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery-ui.custom.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.json.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/bootstrap.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/select2.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.form.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.wheelmouse.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/bootbox.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/google.html-sanitizer.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/lang.php?locale=en&build=10.1.99"></script><script type="text/javascript" src="/common/js/scw.php?locale=en&build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/functions.js?build=10.1.99"></script></head><body id="welcome" ><div class="k-main k-main-collapsed">
      <div class="k-page-message-box-container" style="visibility:collapse; display:none;">
      
          
              <div class="k-page-message-box k-error" style="display:none;" >
                      </div>
          
          
              <div class="k-page-message-box k-warning" style="display:none;" >
                      </div>
          
          
              <div class="k-page-message-box k-success" style="display:none;" >
                      </div>
          
          
              <div class="k-page-message-box k-info" style="display:none;" >
                      </div>
          </div>
              <form id="LoginForm" name="LoginForm" method="post" action="/userui/check_login.php" target="_self">
              <input type="hidden" name="CSRF_TOKEN" value="jwwtr9itc322uxua4l6s6j5qzhvyyievtj2bkoaozqbcsi0b5lbl3140oaf71a0ez21zki2awprm3u828d93vf5idrece40dx22lh9irla1wbosq2r07xbr9lof0zngj" />
              <img class="k-logo k-user-logo" id="welcomeLogo" alt="K1000 Logo" src="/packages/partnerlogos/userportal_logo" data-interface="user" />
              <h1>Welcome and Login...</h1>
              <div class="wysiwyg fr-view"><p>Welcome to the User Console. The &quot;Downloads&quot; tab contains software available for you to download and install. You can search on software by title, vendor, or label. Please only download and install software that you require.</p><p><br></p><p>You must login in to the User Console to browse software. Please enter your organization&#39;s common user name and password below to login.&nbsp;</p></div>
                      <div class="button_login">
                  <div class="k-login">
                      <div id='loginid'>
                          <label>Login (user name):</label>
                          <input type="text" maxlength="50" class="k-text-field" name="LOGIN_NAME" />
                      </div>
                      <div id='password'>
                          <label>Password:</label>
                          <input type="password" class="k-text-field" maxlength="50" name="LOGIN_PASSWORD" autocomplete="off" />
                      </div>
                  </div>
                  <div class="k-login-note">
                      (Note: Credentials will be saved on this computer between sessions unless you explicitly "Log Out")
                  </div>
              </div>
      
              <div class="k-login" id="org_select">
                                  <input id="orgtextbox" type="hidden" name="ORGANIZATION" value="Default" />
                          </div>
      
              <div id="samllogin" style="margin-top:10px;display:none;" class="button_saml">
                  <button id="button_saml" name="saml" class="k-btn-dark button_saml">Login</button>
                  <p style="margin-top:5px;"><a id="showotherlogin">Local Sign On</a></p>
              </div>
      
              <buttons>
                  <button id="button_login" name="save" class="k-btn-dark button_login">Login</button>
                  <p style="margin-top:5px;" class="button_login"><a id="showsamllogin">Single Sign On</a></p>
              </buttons>
      
          </form>
          </div><footer><span class="k-copyright">© 2023 Quest Software Inc. All Rights Reserved.</span></footer><div id="alert-div"></div><script type="text/javascript" src="/common/js/minified/nav.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/core.js?build=10.1.99"></script><script type="text/javascript">ShowMessageBox();</script>
      
      <script type="text/javascript">var loginmode="local";var login_timeout_active=false;const saml_orgs={ 'Default':{ 'name':'Default','id':'1','required':'','enabled':''},};function all_orgs_saml_enabled(){ var rval=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if(saml_orgs[key].enabled==false){ return false;}else{ rval=true;}}}return rval;}function show_hide_saml(org){ var saml=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if((key==org)&&(saml_orgs[key].enabled==true)){ saml=true;}}}if(saml||all_orgs_saml_enabled()){ loginmode="saml";jQuery('.button_login').hide();jQuery('.button_saml').show();jQuery('#org_select').attr('class','');jQuery('#showsamllogin').show();}else{ loginmode="local";jQuery('.button_login').show();jQuery('.button_saml').hide();jQuery('#showsamllogin').hide();jQuery('#org_select').attr('class','k-login');jQuery('[name="LOGIN_NAME"]').focus();}};function set_local_focue(){ var last_user='';if(last_user!=''){ jQuery('[name="LOGIN_NAME"]').val(last_user);jQuery('[name="LOGIN_PASSWORD"]').focus();}else{ jQuery('[name="LOGIN_NAME"]').focus();}};function lockout_timer(){ jQuery('[name="LOGIN_NAME"]').removeAttr('disabled');jQuery('[name="LOGIN_PASSWORD"]').removeAttr('disabled');jQuery('#button_login').removeAttr('disabled');jQuery('.k-error-explanation').hide();jQuery('div').removeClass("k-error-explanation");jQuery('.k-login-locked').hide();jQuery('div').removeClass("k-loader");login_timeout_active=false;}jQuery(document).ready(function(){ jQuery(document).on('keypress',function(e){ if((e.which&&e.which==13)||(e.keyCode&&e.keyCode==13)){ if(login_timeout_active==true){ return false;}if(loginmode=='local'){ jQuery('#LoginForm').submit();}else if(loginmode=='saml'){ jQuery('#button_saml').click();}return false;}else{ return true;}});jQuery('#orgselect').change(function(){ show_hide_saml(this.value);});jQuery('#showotherlogin').on('click',function(event){ jQuery('.button_saml').hide();jQuery('.button_login').show();jQuery('[name="LOGIN_NAME"]').focus();jQuery('#org_select').attr('class','k-login');loginmode="local";event.preventDefault();});jQuery('#showsamllogin').on('click',function(event){ jQuery('.button_saml').show();jQuery('.button_login').hide();jQuery('#org_select').attr('class','');loginmode='saml';event.preventDefault();});jQuery('#button_saml').on('click',function(event){ if(typeof(jQuery('[name="ORGANIZATION"]').select2('val'))=='string'){ var torg=jQuery('[name="ORGANIZATION"]').select2('val');}else{ var torg=jQuery("#orgtextbox").val();}if(torg.length==0){ torg="Default";}event.preventDefault();window.location.href="/common/saml_login.php?active="+torg;});if(typeof(torg=jQuery('[name="ORGANIZATION"]').select2('val'))=='string'){ show_hide_saml(jQuery('[name="ORGANIZATION"]').select2('val'));}else{ show_hide_saml(jQuery('#orgtextbox').val());}});</script>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:38:09.000Z",
         "app" : {
            "extract" : {
               "file" : [
                  "check_login.php"
               ]
            },
            "http" : {
               "bodymd5" : "d408fd011fef9e2daec83a8aa38ee7ab",
               "bodymmh3" : 1258079674,
               "component" : [
                  {
                     "productvendor" : "Quest",
                     "product" : "KACE Systems Management Appliance"
                  },
                  {
                     "product" : "Bootstrap",
                     "productvendor" : "Bootstrap"
                  }
               ],
               "headermd5" : "114e612087ffeaf5f76927dd76720718",
               "headermmh3" : -1751461030,
               "title" : "KACE Systems Management Appliance Service Center"
            },
            "length" : 9734
         },
         "asn" : "AS16509",
         "city" : "Boardman",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:38:07 GMT\r\nServer: Apache\r\nExpires: Thu, 07 Nov 2024 05:38:07 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: kboxid=35cr3nlpxdyc6jy3krtuk58erlk0yyjs; path=/; secure; HttpOnly; SameSite=Lax\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: sameorigin\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nAccess-Control-Allow-Headers: x-kace-auth-timestamp, x-kace-auth-key, x-kace-auth-signature, accept, origin, content-type\r\nAccess-Control-Allow-Methods: PUT, DELETE, POST, GET, OPTIONS\r\nX-Kace-Appliance: K1000\r\nX-Ua-Compatible: IE=9,EDGE\r\nContent-Length: 8986\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html>\n<html data-template=\"welcome\" data-page-type=\"welcome\" data-area=\"user\" lang=\"en\" ><head>\n        <script id=\"fr-fek\">try{(function (k){localStorage.FEK=k;t=document.getElementById('fr-fek');t.parentNode.removeChild(t);})('mIBEVFBOHC1d2UNYVM==')}catch(e){}</script>\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=9; IE=EDGE\" /><meta http-equiv=\"content-type\" content=\"text/html; charset=utf-8\" /><meta name=\"robots\" content=\"noindex\"><title>KACE Systems Management Appliance Service Center</title><link rel=\"shortcut icon\" href=\"/favicon.ico\"><link type=\"text/css\" rel=\"stylesheet\" href=\"/common/css/minified/vendor/select2.css?build=10.1.99\" /><link type=\"text/css\" rel=\"stylesheet\" media=\"print\" href=\"/common/css/minified/print.css?build=10.1.99\" /><link type=\"text/css\" rel=\"stylesheet\" href=\"/common/css/minified/vendor/froala_style.css?build=10.1.99\" /><!--[if lte IE 9]><link rel=\"stylesheet\" type=\"text/css\" href=\"/common/css/minified/kace-theme-ie.css?build=10.1.99\" /><![endif]--><link type=\"text/css\" rel=\"stylesheet\" href=\"/common/css/minified/kace-theme-light.css?build=10.1.99\" /><!--[if IE]><script type=\"text/javascript\" src=\"/common/js/minified/vendor/html5.js?build=10.1.99\"></script><![endif]--><script type=\"text/javascript\" src=\"/common/js/minified/kpolyfills.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/jquery.fixes.js?build=10.1.99\"></script><script type=\"text/javascript\">jQuery.noConflict();</script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.cookie.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery-ui.custom.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.json.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/bootstrap.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/select2.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.form.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.wheelmouse.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/bootbox.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/google.html-sanitizer.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/lang.php?locale=en&build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/scw.php?locale=en&build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/functions.js?build=10.1.99\"></script></head><body id=\"welcome\" ><div class=\"k-main k-main-collapsed\">\n<div class=\"k-page-message-box-container\" style=\"visibility:collapse; display:none;\">\n\n    \n        <div class=\"k-page-message-box k-error\" style=\"display:none;\" >\n                </div>\n    \n    \n        <div class=\"k-page-message-box k-warning\" style=\"display:none;\" >\n                </div>\n    \n    \n        <div class=\"k-page-message-box k-success\" style=\"display:none;\" >\n                </div>\n    \n    \n        <div class=\"k-page-message-box k-info\" style=\"display:none;\" >\n                </div>\n    </div>\n        <form id=\"LoginForm\" name=\"LoginForm\" method=\"post\" action=\"/userui/check_login.php\" target=\"_self\">\n        <input type=\"hidden\" name=\"CSRF_TOKEN\" value=\"jwwtr9itc322uxua4l6s6j5qzhvyyievtj2bkoaozqbcsi0b5lbl3140oaf71a0ez21zki2awprm3u828d93vf5idrece40dx22lh9irla1wbosq2r07xbr9lof0zngj\" />\n        <img class=\"k-logo k-user-logo\" id=\"welcomeLogo\" alt=\"K1000 Logo\" src=\"/packages/partnerlogos/userportal_logo\" data-interface=\"user\" />\n        <h1>Welcome and Login...</h1>\n        <div class=\"wysiwyg fr-view\"><p>Welcome to the User Console. The &quot;Downloads&quot; tab contains software available for you to download and install. You can search on software by title, vendor, or label. Please only download and install software that you require.</p><p><br></p><p>You must login in to the User Console to browse software. Please enter your organization&#39;s common user name and password below to login.&nbsp;</p></div>\n                <div class=\"button_login\">\n            <div class=\"k-login\">\n                <div id='loginid'>\n                    <label>Login (user name):</label>\n                    <input type=\"text\" maxlength=\"50\" class=\"k-text-field\" name=\"LOGIN_NAME\" />\n                </div>\n                <div id='password'>\n                    <label>Password:</label>\n                    <input type=\"password\" class=\"k-text-field\" maxlength=\"50\" name=\"LOGIN_PASSWORD\" autocomplete=\"off\" />\n                </div>\n            </div>\n            <div class=\"k-login-note\">\n                (Note: Credentials will be saved on this computer between sessions unless you explicitly \"Log Out\")\n            </div>\n        </div>\n\n        <div class=\"k-login\" id=\"org_select\">\n                            <input id=\"orgtextbox\" type=\"hidden\" name=\"ORGANIZATION\" value=\"Default\" />\n                    </div>\n\n        <div id=\"samllogin\" style=\"margin-top:10px;display:none;\" class=\"button_saml\">\n            <button id=\"button_saml\" name=\"saml\" class=\"k-btn-dark button_saml\">Login</button>\n            <p style=\"margin-top:5px;\"><a id=\"showotherlogin\">Local Sign On</a></p>\n        </div>\n\n        <buttons>\n            <button id=\"button_login\" name=\"save\" class=\"k-btn-dark button_login\">Login</button>\n            <p style=\"margin-top:5px;\" class=\"button_login\"><a id=\"showsamllogin\">Single Sign On</a></p>\n        </buttons>\n\n    </form>\n    </div><footer><span class=\"k-copyright\">\u00a9 2023 Quest Software Inc. All Rights Reserved.</span></footer><div id=\"alert-div\"></div><script type=\"text/javascript\" src=\"/common/js/minified/nav.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/core.js?build=10.1.99\"></script><script type=\"text/javascript\">ShowMessageBox();</script>\n\n<script type=\"text/javascript\">var loginmode=\"local\";var login_timeout_active=false;const saml_orgs={ 'Default':{ 'name':'Default','id':'1','required':'','enabled':''},};function all_orgs_saml_enabled(){ var rval=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if(saml_orgs[key].enabled==false){ return false;}else{ rval=true;}}}return rval;}function show_hide_saml(org){ var saml=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if((key==org)&&(saml_orgs[key].enabled==true)){ saml=true;}}}if(saml||all_orgs_saml_enabled()){ loginmode=\"saml\";jQuery('.button_login').hide();jQuery('.button_saml').show();jQuery('#org_select').attr('class','');jQuery('#showsamllogin').show();}else{ loginmode=\"local\";jQuery('.button_login').show();jQuery('.button_saml').hide();jQuery('#showsamllogin').hide();jQuery('#org_select').attr('class','k-login');jQuery('[name=\"LOGIN_NAME\"]').focus();}};function set_local_focue(){ var last_user='';if(last_user!=''){ jQuery('[name=\"LOGIN_NAME\"]').val(last_user);jQuery('[name=\"LOGIN_PASSWORD\"]').focus();}else{ jQuery('[name=\"LOGIN_NAME\"]').focus();}};function lockout_timer(){ jQuery('[name=\"LOGIN_NAME\"]').removeAttr('disabled');jQuery('[name=\"LOGIN_PASSWORD\"]').removeAttr('disabled');jQuery('#button_login').removeAttr('disabled');jQuery('.k-error-explanation').hide();jQuery('div').removeClass(\"k-error-explanation\");jQuery('.k-login-locked').hide();jQuery('div').removeClass(\"k-loader\");login_timeout_active=false;}jQuery(document).ready(function(){ jQuery(document).on('keypress',function(e){ if((e.which&&e.which==13)||(e.keyCode&&e.keyCode==13)){ if(login_timeout_active==true){ return false;}if(loginmode=='local'){ jQuery('#LoginForm').submit();}else if(loginmode=='saml'){ jQuery('#button_saml').click();}return false;}else{ return true;}});jQuery('#orgselect').change(function(){ show_hide_saml(this.value);});jQuery('#showotherlogin').on('click',function(event){ jQuery('.button_saml').hide();jQuery('.button_login').show();jQuery('[name=\"LOGIN_NAME\"]').focus();jQuery('#org_select').attr('class','k-login');loginmode=\"local\";event.preventDefault();});jQuery('#showsamllogin').on('click',function(event){ jQuery('.button_saml').show();jQuery('.button_login').hide();jQuery('#org_select').attr('class','');loginmode='saml';event.preventDefault();});jQuery('#button_saml').on('click',function(event){ if(typeof(jQuery('[name=\"ORGANIZATION\"]').select2('val'))=='string'){ var torg=jQuery('[name=\"ORGANIZATION\"]').select2('val');}else{ var torg=jQuery(\"#orgtextbox\").val();}if(torg.length==0){ torg=\"Default\";}event.preventDefault();window.location.href=\"/common/saml_login.php?active=\"+torg;});if(typeof(torg=jQuery('[name=\"ORGANIZATION\"]').select2('val'))=='string'){ show_hide_saml(jQuery('[name=\"ORGANIZATION\"]').select2('val'));}else{ show_hide_saml(jQuery('#orgtextbox').val());}});</script>\n</body></html>\n",
         "datamd5" : "ad14902e0fa8339104b711ebd29c4bc3",
         "datammh3" : 982587740,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZO-ZPDX",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "18.236.0.0/15"
         },
         "host" : [
            "ec2-18-236-140-197"
         ],
         "hostname" : [
            "ec2-18-236-140-197.us-west-2.compute.amazonaws.com"
         ],
         "ip" : "18.236.140.197",
         "ipv6" : "false",
         "latitude" : "45.8491",
         "location" : "45.8491,-119.7143",
         "longitude" : "-119.7143",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 24284,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "ec2-18-236-140-197.us-west-2.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "us-west-2.compute.amazonaws.com"
         ],
         "subnet" : "18.236.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 218.209.42.193:24284 (tcp/http) - last seen on 2024-11-07 at 05:37:12 UTC

    • IP
      218.209.42.193
      Network
      218.209.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://218.209.42.193:24284/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS23563
      Organization
      SK Broadband Co Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Thu, 07 Nov 2024 05:37:10 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Tue, 09 Jun 2020 03:45:53 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:37:12.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Tue, 09 Jun 2020 03:45:53 GMT"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : 1933662297,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS23563",
         "city" : "Suwon",
         "country" : "KR",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Thu, 07 Nov 2024 05:37:10 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 09 Jun 2020 03:45:53 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS23563",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "nic.or.kr",
               "skbroadband.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "broadNnet",
            "organization" : "SK Broadband Co Ltd",
            "subnet" : "218.209.0.0/16"
         },
         "ip" : "218.209.42.193",
         "ipv6" : "false",
         "latitude" : "37.2963",
         "location" : "37.2963,127.0506",
         "longitude" : "127.0506",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SK Broadband Co Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 24284,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "218.209.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 103.43.16.17:24284 (tcp/http) - last seen on 2024-11-07 at 05:36:28 UTC

    • IP
      103.43.16.17
      Network
      103.43.16.0/22
      Device

      <enterprise field>: device.class

      URL

      http://103.43.16.17:24284/$%7BrandomUrl%7D 200

      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a921ec0c33b287a5b32845ce36a9f9b4
      HTTP Header MD5
      7cb8a64a5c41d5db44d85d677dbec3ce
      HTTP Body MD5
      db475c674e230d3b59b9d4c51e192872
    • HTTP/1.1 200 OK
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 05:35:46 GMT
      Content-Type: text/html
      Content-Length: 1728
      Last-Modified: Mon, 04 Nov 2024 11:57:54 GMT
      Connection: close
      ETag: "6728b6c2-6c0"
      Accept-Ranges: bytes
      
      <!DOCTYPE html>
      <html lang="zh-CN">
      <head>
          <!-- Google tag (gtag.js) -->
          <script async src="https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"></script>
          <script>
              <script>
                  window.dataLayer = window.dataLayer || [];
                  function gtag(){dataLayer.push(arguments);}
                  gtag('js', new Date());
      
                  gtag('config', 'G-0GJHN159XX');
          </script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3IsbgF2faH56SAiO",ck:"3IsbgF2faH56SAiO"})</script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3GuWRdQLAUfAEIDe",ck:"3GuWRdQLAUfAEIDe"})</script>
      
      
      
          <meta charset="UTF-8">
          <meta name="format-detection" content="telephone=yes">
          <meta name="viewport"
                content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">
          <script>
              const urls = [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/"
              ];
              const randomUrl = urls[Math.floor(Math.random() * urls.length)];
      
              document.write(`<meta http-equiv="refresh" content="9;url=${randomUrl}">`);
              window.onload = function () {
                  document.getElementById('myiframe').src = randomUrl;
              };
          </script>
          <style>
              body, html {
                  margin: 0;
                  padding: 0;
                  height: 100%;
                  overflow: hidden;
              }
      
              iframe {
                  width: 100%;
                  height: 100vh;
                  border: none;
              }
          </style>
      </head>
      <body>
      <iframe id="myiframe" scrolling="no"></iframe>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:36:28.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "googletagmanager.com"
               ],
               "hostname" : [
                  "www.googletagmanager.com"
               ],
               "ip" : [
                  "139.155.134.148",
                  "162.14.69.113"
               ],
               "url" : [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/",
                  "https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"
               ]
            },
            "http" : {
               "bodymd5" : "db475c674e230d3b59b9d4c51e192872",
               "bodymmh3" : 488145746,
               "header" : [
                  {
                     "value" : "Mon, 04 Nov 2024 11:57:54 GMT",
                     "name" : "Last-Modified"
                  },
                  {
                     "name" : "ETag",
                     "value" : "6728b6c2-6c0"
                  }
               ],
               "headermd5" : "7cb8a64a5c41d5db44d85d677dbec3ce",
               "headermmh3" : -277413723,
               "tracker" : {
                  "ga" : [
                     "G-0GJHN159XX"
                  ]
               }
            },
            "length" : 1962
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 05:35:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 1728\r\nLast-Modified: Mon, 04 Nov 2024 11:57:54 GMT\r\nConnection: close\r\nETag: \"6728b6c2-6c0\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html lang=\"zh-CN\">\n<head>\n    <!-- Google tag (gtag.js) -->\n    <script async src=\"https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX\"></script>\n    <script>\n        <script>\n            window.dataLayer = window.dataLayer || [];\n            function gtag(){dataLayer.push(arguments);}\n            gtag('js', new Date());\n\n            gtag('config', 'G-0GJHN159XX');\n    </script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3IsbgF2faH56SAiO\",ck:\"3IsbgF2faH56SAiO\"})</script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3GuWRdQLAUfAEIDe\",ck:\"3GuWRdQLAUfAEIDe\"})</script>\n\n\n\n    <meta charset=\"UTF-8\">\n    <meta name=\"format-detection\" content=\"telephone=yes\">\n    <meta name=\"viewport\"\n          content=\"width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no\">\n    <script>\n        const urls = [\n            \"https://139.155.134.148/tt/test.html?333?666aaa\",\n            \"https://162.14.69.113/\"\n        ];\n        const randomUrl = urls[Math.floor(Math.random() * urls.length)];\n\n        document.write(`<meta http-equiv=\"refresh\" content=\"9;url=${randomUrl}\">`);\n        window.onload = function () {\n            document.getElementById('myiframe').src = randomUrl;\n        };\n    </script>\n    <style>\n        body, html {\n            margin: 0;\n            padding: 0;\n            height: 100%;\n            overflow: hidden;\n        }\n\n        iframe {\n            width: 100%;\n            height: 100vh;\n            border: none;\n        }\n    </style>\n</head>\n<body>\n<iframe id=\"myiframe\" scrolling=\"no\"></iframe>\n</body>\n</html>\n",
         "datamd5" : "a921ec0c33b287a5b32845ce36a9f9b4",
         "datammh3" : -1249100627,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "103.43.16.17",
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "103.43.16.0/22"
         },
         "hostname" : [
            "103.43.16.17"
         ],
         "ip" : "103.43.16.17",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "port" : 24284,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "103.43.16.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/$%7BrandomUrl%7D"
      }
      
  • 103.43.16.138:24284 (tcp/http) - last seen on 2024-11-07 at 05:34:11 UTC

    • IP
      103.43.16.138
      Network
      103.43.16.0/22
      Device

      <enterprise field>: device.class

      URL

      http://103.43.16.138:24284/$%7BrandomUrl%7D 200

      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a921ec0c33b287a5b32845ce36a9f9b4
      HTTP Header MD5
      7cb8a64a5c41d5db44d85d677dbec3ce
      HTTP Body MD5
      db475c674e230d3b59b9d4c51e192872
    • HTTP/1.1 200 OK
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 05:33:30 GMT
      Content-Type: text/html
      Content-Length: 1728
      Last-Modified: Mon, 04 Nov 2024 11:57:54 GMT
      Connection: close
      ETag: "6728b6c2-6c0"
      Accept-Ranges: bytes
      
      <!DOCTYPE html>
      <html lang="zh-CN">
      <head>
          <!-- Google tag (gtag.js) -->
          <script async src="https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"></script>
          <script>
              <script>
                  window.dataLayer = window.dataLayer || [];
                  function gtag(){dataLayer.push(arguments);}
                  gtag('js', new Date());
      
                  gtag('config', 'G-0GJHN159XX');
          </script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3IsbgF2faH56SAiO",ck:"3IsbgF2faH56SAiO"})</script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3GuWRdQLAUfAEIDe",ck:"3GuWRdQLAUfAEIDe"})</script>
      
      
      
          <meta charset="UTF-8">
          <meta name="format-detection" content="telephone=yes">
          <meta name="viewport"
                content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">
          <script>
              const urls = [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/"
              ];
              const randomUrl = urls[Math.floor(Math.random() * urls.length)];
      
              document.write(`<meta http-equiv="refresh" content="9;url=${randomUrl}">`);
              window.onload = function () {
                  document.getElementById('myiframe').src = randomUrl;
              };
          </script>
          <style>
              body, html {
                  margin: 0;
                  padding: 0;
                  height: 100%;
                  overflow: hidden;
              }
      
              iframe {
                  width: 100%;
                  height: 100vh;
                  border: none;
              }
          </style>
      </head>
      <body>
      <iframe id="myiframe" scrolling="no"></iframe>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:34:11.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "googletagmanager.com"
               ],
               "hostname" : [
                  "www.googletagmanager.com"
               ],
               "ip" : [
                  "139.155.134.148",
                  "162.14.69.113"
               ],
               "url" : [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/",
                  "https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"
               ]
            },
            "http" : {
               "bodymd5" : "db475c674e230d3b59b9d4c51e192872",
               "bodymmh3" : 488145746,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 04 Nov 2024 11:57:54 GMT"
                  },
                  {
                     "value" : "6728b6c2-6c0",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "7cb8a64a5c41d5db44d85d677dbec3ce",
               "headermmh3" : 708787657,
               "tracker" : {
                  "ga" : [
                     "G-0GJHN159XX"
                  ]
               }
            },
            "length" : 1962
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 05:33:30 GMT\r\nContent-Type: text/html\r\nContent-Length: 1728\r\nLast-Modified: Mon, 04 Nov 2024 11:57:54 GMT\r\nConnection: close\r\nETag: \"6728b6c2-6c0\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html lang=\"zh-CN\">\n<head>\n    <!-- Google tag (gtag.js) -->\n    <script async src=\"https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX\"></script>\n    <script>\n        <script>\n            window.dataLayer = window.dataLayer || [];\n            function gtag(){dataLayer.push(arguments);}\n            gtag('js', new Date());\n\n            gtag('config', 'G-0GJHN159XX');\n    </script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3IsbgF2faH56SAiO\",ck:\"3IsbgF2faH56SAiO\"})</script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3GuWRdQLAUfAEIDe\",ck:\"3GuWRdQLAUfAEIDe\"})</script>\n\n\n\n    <meta charset=\"UTF-8\">\n    <meta name=\"format-detection\" content=\"telephone=yes\">\n    <meta name=\"viewport\"\n          content=\"width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no\">\n    <script>\n        const urls = [\n            \"https://139.155.134.148/tt/test.html?333?666aaa\",\n            \"https://162.14.69.113/\"\n        ];\n        const randomUrl = urls[Math.floor(Math.random() * urls.length)];\n\n        document.write(`<meta http-equiv=\"refresh\" content=\"9;url=${randomUrl}\">`);\n        window.onload = function () {\n            document.getElementById('myiframe').src = randomUrl;\n        };\n    </script>\n    <style>\n        body, html {\n            margin: 0;\n            padding: 0;\n            height: 100%;\n            overflow: hidden;\n        }\n\n        iframe {\n            width: 100%;\n            height: 100vh;\n            border: none;\n        }\n    </style>\n</head>\n<body>\n<iframe id=\"myiframe\" scrolling=\"no\"></iframe>\n</body>\n</html>\n",
         "datamd5" : "a921ec0c33b287a5b32845ce36a9f9b4",
         "datammh3" : -1249100627,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "103.43.16.138",
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "103.43.16.0/22"
         },
         "hostname" : [
            "103.43.16.138"
         ],
         "ip" : "103.43.16.138",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "port" : 24284,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "103.43.16.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/$%7BrandomUrl%7D"
      }
      
  • 47.151.41.223:24284 (tcp/http) - last seen on 2024-11-07 at 05:33:39 UTC

    • IP
      47.151.41.223
      Network
      47.151.0.0/18
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product <enterprise field>: device.productversion

      URL

      http://47.151.41.223:24284/cgi-bin/home.ha 200

      HTTP Title
      Login
      ASN
      AS5650
      Organization
      FRONTIER-FRTR
      Protocol
      http
      Source
      urlscan::redirect
    • HTTP Component(s)
      Bootstrap Bootstrap
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e42f4d95e6452def57148db54353c56f
      HTTP Header MD5
      01bbe0dafdb36daa60940c12b6e36952
      HTTP Body MD5
      c37546de900fdd75cfa58569bf848eb8
    • HTTP/1.1 200 OK
      Connection: close
      Pragma: no-cache
      Cache-Control: no-cache, no-store, must-revalidate
      Expires: 0
      Content-Type: text/html
      X-Frame-Options: deny
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Strict-Transport-Security: max-age=31536000
      
      <!doctype html>
      <html lang="en">
          <head>
              <title>Login</title>
              <meta charset="utf-8" />
      	<meta name="viewport" content="width=device-width, initial-scale=1" />
      
      
              <link rel="icon" type="image/ico" href="/favicon.ico" />
      
      	<link rel="stylesheet" type="text/css" href="/bootstrap.css" />
      	<link rel="stylesheet" type="text/css" href="/baseres.css" />
              <link rel="stylesheet" type="text/css" href="/customnew.css" />
      	<script src="/jquery.js"></script>
      	<script src="/bootstrap.js"></script>
      <meta http-equiv="refresh" content="120; URL=/cgi-bin/home.ha" />
      <script type="text/css"><!--
      <style id="antiClickjack" type="text/css">body{display:none;}</style>
      //-->
      </script>
      
      <!-- d3 changed significantly from v3 to v4. Track versions in use.
          Previously we used 3.5.5, 3.5.17, and 4.11.0.  Now we only use 4.11.0.
          Note we also use a new d3v4 version of d3gauge in d3gaugev4.js
          Before ship verify minified versions are in use.
      -->
      
      <script type="text/javascript">
      var refreshlockout;
      var seconds=0;
      function setlock(){
          refreshlockout = 1;
      }
      function resetlock(){
          refreshlockout = 0;
      }
      /*this is the AJAX update for banner refresh */
      function banner_refresh() {
        if (refreshlockout == 0 && (seconds == 0 || seconds > 3)){
          setlock();
          $(document).ready(function(){
              $.ajax({url: "/cgi-bin/bannerstate.ha", success: function(result){
                  $("#mybanner").html(result);
              }});
          });
          //keep the lock for an extra 100ms
          setTimeout("resetlock()", 100);
        }
      }
      // * to ensure there is a graph_refresh function
      function graph_refresh() {
          console.log("We have hit the fake graph_refresh function.");
      }
      function reloadGraph(){
          // Refresh interval is 2000 msecs (2 seconds) by default, see above.
          setInterval("graph_refresh()", 2000);
      }
      var bTimeout = 10000
       var seconds=0
       seconds=121
      var msgFormat = "Auto Refresh %%S%%";
      function countDown(){
          seconds-=1;
          msgArea = document.getElementById("secTime");
          msg = msgFormat.replace(/%%S%%/g,seconds);
          msgArea.innerHTML = msg;
          if(seconds > 0)
            setTimeout("countDown()",1000);
      }
      function setBannerWithDelay(){
          setInterval("banner_refresh()", bTimeout);
      }
      
      function reloadBanner(){
          if (bTimeout != 0) {
              resetlock();
              //delay the setting of this timer by 300ms so multiple timers don't go off at once
              //and we are clear of the extra 100ms delay in the ajax code to reset the lock
              setTimeout("setBannerWithDelay()", 300);
          }
      }
        adImages=new Array('/images/Block1.gif','/images/Block3.gif','/images/Block5.gif','/images/Block7.gif','/images/Block9.gif','/images/Block11.gif','/images/Block14.gif')
        thisAd=0
        imgCt=adImages.length
      if (self == top) {
          var antiClickjack = document.getElementById("antiClickjack");
          antiClickjack.parentNode.removeChild(antiClickjack);
      } else {
          top.location = self.location;
      }
        function rotate(){
      	if (document.images) {
      		thisAd++
      		if (thisAd==imgCt){
      			thisAd=0
      		}
      		var pbar = document.getElementById("adBanner");
      		pbar.src=adImages[thisAd]
      		setTimeout('rotate()',200)
      	}
        }
      function getBootstrapDeviceSize() {
        return $('#users-device-size').find('div:visible').first().attr('id');
      }
      </script>
      </head>
              <body>
      
        <div id="wrapper" class="container" style="overflow-x: hidden">
          <div id="logoutbar" class="container-fluid">
              <div id="version">NVG468MQ Version: 9.3.0h7d91</div>
          </div>
          <div id="whole-page" class="container-fluid">
          <div style="clear: both;"></div>
             <div id="logo-div" class = "container-fluid">
               <img id="main-logo" src="/images/frontier_logo.png" alt="" />
      	 </div>
                 <div style="clear: both;"></div>
                 <div id="error-message">
                   <div id="error-message-text">
                   <img id="error-message-icon" src="/images/icon_error.png" alt="error" />
       You cannot connect to the gateway's web pages as all web server sessions are in use. Restart the gateway or wait for a session to timeout, then try refreshing this page.
                   </div>
                   <div style="clear: both;"></div>
                 </div>
                <div id="mid-section" style="background: #ffffff; min-height: 0px;">
                 <div><div><div>
                      </div> <!-- content-sub-->
                      </div> <!-- content-->
                    </div><!--content-padding-->
      <!-- the HTML below is needed by getBootstrapDeviceSize //-->
      <div id="users-device-size">
        <div id="xs" class="visible-xs"></div>
        <div id="sm" class="visible-sm"></div>
        <div id="md" class="visible-md"></div>
        <div id="lg" class="visible-lg"></div>
      </div>
                </div><!--header-->
              </div><!--main-content-->
              <div style="clear: both;"></div>
            </div><!--whole-page-->
            <div id="footer">
              <div class="inner"><p>&copy; 2021 CommScope, Inc. All rights reserved.</p></div>
            </div><!--footer-->
          </div><!--wrapper-->
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:33:39.000Z",
         "app" : {
            "favicon" : {
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "c37546de900fdd75cfa58569bf848eb8",
               "bodymmh3" : 278632045,
               "component" : [
                  {
                     "productvendor" : "Bootstrap",
                     "product" : "Bootstrap"
                  }
               ],
               "headermd5" : "01bbe0dafdb36daa60940c12b6e36952",
               "headermmh3" : 1808800474,
               "title" : "Login"
            },
            "length" : 5222
         },
         "asn" : "AS5650",
         "city" : "Whittier",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nPragma: no-cache\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: 0\r\nContent-Type: text/html\r\nX-Frame-Options: deny\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<!doctype html>\n<html lang=\"en\">\n    <head>\n        <title>Login</title>\n        <meta charset=\"utf-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n\n\n        <link rel=\"icon\" type=\"image/ico\" href=\"/favicon.ico\" />\n\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"/bootstrap.css\" />\n\t<link rel=\"stylesheet\" type=\"text/css\" href=\"/baseres.css\" />\n        <link rel=\"stylesheet\" type=\"text/css\" href=\"/customnew.css\" />\n\t<script src=\"/jquery.js\"></script>\n\t<script src=\"/bootstrap.js\"></script>\n<meta http-equiv=\"refresh\" content=\"120; URL=/cgi-bin/home.ha\" />\n<script type=\"text/css\"><!--\n<style id=\"antiClickjack\" type=\"text/css\">body{display:none;}</style>\n//-->\n</script>\n\n<!-- d3 changed significantly from v3 to v4. Track versions in use.\n    Previously we used 3.5.5, 3.5.17, and 4.11.0.  Now we only use 4.11.0.\n    Note we also use a new d3v4 version of d3gauge in d3gaugev4.js\n    Before ship verify minified versions are in use.\n-->\n\n<script type=\"text/javascript\">\nvar refreshlockout;\nvar seconds=0;\nfunction setlock(){\n    refreshlockout = 1;\n}\nfunction resetlock(){\n    refreshlockout = 0;\n}\n/*this is the AJAX update for banner refresh */\nfunction banner_refresh() {\n  if (refreshlockout == 0 && (seconds == 0 || seconds > 3)){\n    setlock();\n    $(document).ready(function(){\n        $.ajax({url: \"/cgi-bin/bannerstate.ha\", success: function(result){\n            $(\"#mybanner\").html(result);\n        }});\n    });\n    //keep the lock for an extra 100ms\n    setTimeout(\"resetlock()\", 100);\n  }\n}\n// * to ensure there is a graph_refresh function\nfunction graph_refresh() {\n    console.log(\"We have hit the fake graph_refresh function.\");\n}\nfunction reloadGraph(){\n    // Refresh interval is 2000 msecs (2 seconds) by default, see above.\n    setInterval(\"graph_refresh()\", 2000);\n}\nvar bTimeout = 10000\n var seconds=0\n seconds=121\nvar msgFormat = \"Auto Refresh %%S%%\";\nfunction countDown(){\n    seconds-=1;\n    msgArea = document.getElementById(\"secTime\");\n    msg = msgFormat.replace(/%%S%%/g,seconds);\n    msgArea.innerHTML = msg;\n    if(seconds > 0)\n      setTimeout(\"countDown()\",1000);\n}\nfunction setBannerWithDelay(){\n    setInterval(\"banner_refresh()\", bTimeout);\n}\n\nfunction reloadBanner(){\n    if (bTimeout != 0) {\n        resetlock();\n        //delay the setting of this timer by 300ms so multiple timers don't go off at once\n        //and we are clear of the extra 100ms delay in the ajax code to reset the lock\n        setTimeout(\"setBannerWithDelay()\", 300);\n    }\n}\n  adImages=new Array('/images/Block1.gif','/images/Block3.gif','/images/Block5.gif','/images/Block7.gif','/images/Block9.gif','/images/Block11.gif','/images/Block14.gif')\n  thisAd=0\n  imgCt=adImages.length\nif (self == top) {\n    var antiClickjack = document.getElementById(\"antiClickjack\");\n    antiClickjack.parentNode.removeChild(antiClickjack);\n} else {\n    top.location = self.location;\n}\n  function rotate(){\n\tif (document.images) {\n\t\tthisAd++\n\t\tif (thisAd==imgCt){\n\t\t\tthisAd=0\n\t\t}\n\t\tvar pbar = document.getElementById(\"adBanner\");\n\t\tpbar.src=adImages[thisAd]\n\t\tsetTimeout('rotate()',200)\n\t}\n  }\nfunction getBootstrapDeviceSize() {\n  return $('#users-device-size').find('div:visible').first().attr('id');\n}\n</script>\n</head>\n        <body>\n\n  <div id=\"wrapper\" class=\"container\" style=\"overflow-x: hidden\">\n    <div id=\"logoutbar\" class=\"container-fluid\">\n        <div id=\"version\">NVG468MQ Version: 9.3.0h7d91</div>\n    </div>\n    <div id=\"whole-page\" class=\"container-fluid\">\n    <div style=\"clear: both;\"></div>\n       <div id=\"logo-div\" class = \"container-fluid\">\n         <img id=\"main-logo\" src=\"/images/frontier_logo.png\" alt=\"\" />\n\t </div>\n           <div style=\"clear: both;\"></div>\n           <div id=\"error-message\">\n             <div id=\"error-message-text\">\n             <img id=\"error-message-icon\" src=\"/images/icon_error.png\" alt=\"error\" />\n You cannot connect to the gateway's web pages as all web server sessions are in use. Restart the gateway or wait for a session to timeout, then try refreshing this page.\n             </div>\n             <div style=\"clear: both;\"></div>\n           </div>\n          <div id=\"mid-section\" style=\"background: #ffffff; min-height: 0px;\">\n           <div><div><div>\n                </div> <!-- content-sub-->\n                </div> <!-- content-->\n              </div><!--content-padding-->\n<!-- the HTML below is needed by getBootstrapDeviceSize //-->\n<div id=\"users-device-size\">\n  <div id=\"xs\" class=\"visible-xs\"></div>\n  <div id=\"sm\" class=\"visible-sm\"></div>\n  <div id=\"md\" class=\"visible-md\"></div>\n  <div id=\"lg\" class=\"visible-lg\"></div>\n</div>\n          </div><!--header-->\n        </div><!--main-content-->\n        <div style=\"clear: both;\"></div>\n      </div><!--whole-page-->\n      <div id=\"footer\">\n        <div class=\"inner\"><p>&copy; 2021 CommScope, Inc. All rights reserved.</p></div>\n      </div><!--footer-->\n    </div><!--wrapper-->\n</body>\n</html>\n",
         "datamd5" : "e42f4d95e6452def57148db54353c56f",
         "datammh3" : 304113920,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor",
            "productversion" : "<enterprise field>: device.productversion"
         },
         "forward" : "47.151.41.223",
         "geolocus" : {
            "asn" : "AS5650",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "frontiernet.net",
               "ftr.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "FCC-212",
            "organization" : "Frontier Communications Corporation",
            "subnet" : "47.144.0.0/12"
         },
         "hostname" : [
            "47.151.41.223"
         ],
         "ip" : "47.151.41.223",
         "ipv6" : "false",
         "latitude" : "33.9687",
         "location" : "33.9687,-118.0370",
         "longitude" : "-118.0370",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "FRONTIER-FRTR",
         "port" : 24284,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "47.151.0.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/cgi-bin/home.ha"
      }
      
  • 103.43.16.125:24284 (tcp/http) - last seen on 2024-11-07 at 05:33:01 UTC

    • IP
      103.43.16.125
      Network
      103.43.16.0/22
      Device

      <enterprise field>: device.class

      URL

      http://103.43.16.125:24284/$%7BrandomUrl%7D 200

      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a921ec0c33b287a5b32845ce36a9f9b4
      HTTP Header MD5
      7cb8a64a5c41d5db44d85d677dbec3ce
      HTTP Body MD5
      db475c674e230d3b59b9d4c51e192872
    • HTTP/1.1 200 OK
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 05:32:20 GMT
      Content-Type: text/html
      Content-Length: 1728
      Last-Modified: Mon, 04 Nov 2024 11:57:54 GMT
      Connection: close
      ETag: "6728b6c2-6c0"
      Accept-Ranges: bytes
      
      <!DOCTYPE html>
      <html lang="zh-CN">
      <head>
          <!-- Google tag (gtag.js) -->
          <script async src="https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"></script>
          <script>
              <script>
                  window.dataLayer = window.dataLayer || [];
                  function gtag(){dataLayer.push(arguments);}
                  gtag('js', new Date());
      
                  gtag('config', 'G-0GJHN159XX');
          </script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3IsbgF2faH56SAiO",ck:"3IsbgF2faH56SAiO"})</script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3GuWRdQLAUfAEIDe",ck:"3GuWRdQLAUfAEIDe"})</script>
      
      
      
          <meta charset="UTF-8">
          <meta name="format-detection" content="telephone=yes">
          <meta name="viewport"
                content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">
          <script>
              const urls = [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/"
              ];
              const randomUrl = urls[Math.floor(Math.random() * urls.length)];
      
              document.write(`<meta http-equiv="refresh" content="9;url=${randomUrl}">`);
              window.onload = function () {
                  document.getElementById('myiframe').src = randomUrl;
              };
          </script>
          <style>
              body, html {
                  margin: 0;
                  padding: 0;
                  height: 100%;
                  overflow: hidden;
              }
      
              iframe {
                  width: 100%;
                  height: 100vh;
                  border: none;
              }
          </style>
      </head>
      <body>
      <iframe id="myiframe" scrolling="no"></iframe>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:33:01.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "googletagmanager.com"
               ],
               "hostname" : [
                  "www.googletagmanager.com"
               ],
               "ip" : [
                  "139.155.134.148",
                  "162.14.69.113"
               ],
               "url" : [
                  "https://139.155.134.148/tt/test.html?333?666aaa",
                  "https://162.14.69.113/",
                  "https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"
               ]
            },
            "http" : {
               "bodymd5" : "db475c674e230d3b59b9d4c51e192872",
               "bodymmh3" : 488145746,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 04 Nov 2024 11:57:54 GMT"
                  },
                  {
                     "value" : "6728b6c2-6c0",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "7cb8a64a5c41d5db44d85d677dbec3ce",
               "headermmh3" : -715782572,
               "tracker" : {
                  "ga" : [
                     "G-0GJHN159XX"
                  ]
               }
            },
            "length" : 1962
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 05:32:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 1728\r\nLast-Modified: Mon, 04 Nov 2024 11:57:54 GMT\r\nConnection: close\r\nETag: \"6728b6c2-6c0\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html lang=\"zh-CN\">\n<head>\n    <!-- Google tag (gtag.js) -->\n    <script async src=\"https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX\"></script>\n    <script>\n        <script>\n            window.dataLayer = window.dataLayer || [];\n            function gtag(){dataLayer.push(arguments);}\n            gtag('js', new Date());\n\n            gtag('config', 'G-0GJHN159XX');\n    </script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3IsbgF2faH56SAiO\",ck:\"3IsbgF2faH56SAiO\"})</script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3GuWRdQLAUfAEIDe\",ck:\"3GuWRdQLAUfAEIDe\"})</script>\n\n\n\n    <meta charset=\"UTF-8\">\n    <meta name=\"format-detection\" content=\"telephone=yes\">\n    <meta name=\"viewport\"\n          content=\"width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no\">\n    <script>\n        const urls = [\n            \"https://139.155.134.148/tt/test.html?333?666aaa\",\n            \"https://162.14.69.113/\"\n        ];\n        const randomUrl = urls[Math.floor(Math.random() * urls.length)];\n\n        document.write(`<meta http-equiv=\"refresh\" content=\"9;url=${randomUrl}\">`);\n        window.onload = function () {\n            document.getElementById('myiframe').src = randomUrl;\n        };\n    </script>\n    <style>\n        body, html {\n            margin: 0;\n            padding: 0;\n            height: 100%;\n            overflow: hidden;\n        }\n\n        iframe {\n            width: 100%;\n            height: 100vh;\n            border: none;\n        }\n    </style>\n</head>\n<body>\n<iframe id=\"myiframe\" scrolling=\"no\"></iframe>\n</body>\n</html>\n",
         "datamd5" : "a921ec0c33b287a5b32845ce36a9f9b4",
         "datammh3" : -1249100627,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "103.43.16.125",
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "103.43.16.0/22"
         },
         "hostname" : [
            "103.43.16.125"
         ],
         "ip" : "103.43.16.125",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "port" : 24284,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "103.43.16.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/$%7BrandomUrl%7D"
      }
      
  • 187.209.255.29:24284 (tcp/http) - last seen on 2024-11-07 at 05:29:56 UTC

    • IP
      187.209.255.29
      Network
      187.209.128.0/17
      Domain(s)
      prod-infinitum.com.mx
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://187.209.255.29:24284/ 200

      HTTP Title
      Acceso web
      Reverse DNS
      dsl-187-209-255-29-dyn.prod-infinitum.com.mx
      ASN
      AS8151
      Organization
      UNINET
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2dcca8a9454262cfe5bc14a845c507e1
      HTTP Header MD5
      93c67a2c59826d6b701560a1d2cb5e72
      HTTP Body MD5
      ef50bc296d1813a020a570eb874cc486
    • HTTP/1.1 200 OK
      Content-Length: 29412
      Accept-Ranges: bytes
      Content-Type: text/html; charset=UTF-8
      X-XSS-Protection: 1; mode=block
      Date: Thu, 07 Nov 2024 05:42:22 GMT
      Expires: 0
      Cache-Control: no-cache, no-store, must-revalidate, private, max-age=0
      Last-Modified: Thu, 07 Mar 2024 00:37:41 GMT
      Pragma: no-cache
      Connection: close
      
      <!-- TEMPLATEVALUES]|[v1]|[Photo]|[Logon]|[127.0.0.1]|[3389]|[Acceso web]|[Inicio de sesión]|[#21183D]|[33, 24, 61]|[#FFFFFF]|[Verdana, Geneva, sans-serif]|[Conectando usuarios y equipos a través de Internet]|[13]|[#0A8AB1]|[software/java/img/header_web.png]|[software/java/img/footer.png]|[Usuario:]|[Clave:]|[Dominio:]|[Inicio de sesión]|[]|[]|[]|[false]|[true]|[as_browser]|[html5]|[true]|[false]|[false]|[true]|[text]|[7]|[32]|[4]|[0]|[15]|[true]|[yes]|[true]|[true]|[false]|[index_applications.html]|[Portal remoto de aplicaciones]|[Aplicaciones]|[Cerrar Sesión]|[#AAAAAA]|[#CCCCCC]|[4]|[11]|[11]|[8]|[32]|[13]|[City]|[]|[2-step verification:]|[false]|[false]|[0]|[false]|[false]|[7]|[true]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[ -->
      <!doctype html>
      <html>
      <head>
      <meta charset="UTF-8">
      <meta http-equiv="X-UA-Compatible" content="IE=edge" />
      <meta http-equiv="X-XSS-Protection" content="1; mode=block" />
      <meta http-equiv="cache-control" content="max-age=0" />
      <meta http-equiv="cache-control" content="no-cache" />
      <meta http-equiv="cache-control" content="no-store" />
      <meta http-equiv="expires" content="0" />
      <meta http-equiv="expires" content="Tue, 01 Jan 1980 1:00:00 GMT" />
      <meta http-equiv="pragma" content="no-cache" />
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <title>Acceso web</title>
      
      <script type="text/javascript" src="software/java/third/jws.js"></script>
      <script type="text/javascript" src="software/remoteapp2.js?v=17.10"></script>
      <script type="text/javascript">
        // --------------- Page Configuration ---------------
        var page_configuration = new Array();
        page_configuration["access_type"] = "html5";     // Client Type (specify the client to use with "remoteapp2" or "html5" (legacy client types: "java", "remoteapp") ; or let the user choose between several clients with "remoteapp2+html5")
        page_configuration["is_standard"] = true;   // Standard Logon Web Page (do not edit this parameter - support only)
        page_configuration["show_domain"] = false;   // Show a Domain field (true if it must be displayed, false otherwise)
        page_configuration["is_webcredentials"] = false;   // Logon using WebCredentials (true if it is, false otherwise)
        page_configuration["allow_empty_password"] = false;   // Allow empty Password field - only intended for WebCredentials (true if it allowed, false otherwise)
        page_configuration["show_password"] = true;   // Show a Password field (true if it must be displayed, false otherwise)
        page_configuration["remember_credentials"] = true;	// Remember login and domain in a cookie (true if must be remembered, false otherwise)
        page_configuration["hide_server_list"] = false;	// Hide the server list if load-balancing is enabled
        page_configuration["applications_portal"] = "index_applications.html";	  // Display Application Portal after logon ("your_page_applications.html" to display the application portal, "" to start remote connection directly after logon)
        page_configuration["show_windows_password_reset_button"] = false;	  // Display the windows password reset button
        page_configuration["show_windows_password_expiration_alert"] = false;	  // Show a windows password expiration alert popin when password expires soon
        page_configuration["show_eye"] = true;      // Display password visibility eye icon
        // --------------- End of Page Configuration ---------------
      
        // --------------- Access Configuration ---------------
        var user = "";                              // Login to use when connecting to the remote server (leave "" to use the login typed in this page)
        var pass = "";                              // Password to use when connecting to the remote server (leave "" to use the password typed in this page)
        var domain = "";                            // Domain to use when connecting to the remote server (leave "" to use the domain typed in this page)
        var server = "127.0.0.1";                            // Server to connect to (leave "" to use localhost and/or the server chosen in this page)
        var port = "";                              // Port to connect to (leave "" to use localhost and/or the port of the server chosen in this page)
        var lang = "as_browser";                    // Language to use
        var serverhtml5 = "127.0.0.1";              // Server to connect to, when using HTML5 client
        var porthtml5 = "3389";                     // Port to connect to, when using HTML5 client
        var cmdline = "";                           // Optional text that will be put in the server's clipboard once connected
        // --------------- End of Access Configuration ---------------
      
        // --------------- Seamless Access Configuration ---------------
        var alloutside = "dummyvaro=false; ";
        alloutside += "switcher=7; ";               // Resolution to use (if your server supports RemoteApp, leave 7. Otherwise, use one of the following values: 0 = full window, 1 = full screen, 2 = 640x480, 3 = 800x600, 4 = 1024x768, 5 = 1280x1024, 6 = 1600x1200)
        alloutside += "bpp_all=32; ";               // Pixel Depth to use for Windows clients (use one of the following values: 15 for 15 bits display, 16 for 16 bits, 24 for 24 bits, 32 for 32 bits)
        alloutside += "bpp_all_mac='4'; ";          // Pixel Depth to use for MAC clients (use one of the following values: 1 for 15 bits display, 2 for 16 bits, 3 for 24 bits, 4 for 32 bits)
        alloutside += "cmdline='"+cmdline+"'; ";
        //alloutside += "server=''; ";                  // Server (leave empty '' for auto recognition)
        //alloutside += "username=''; ";                // Autologon User Login (leave empty '' if you don't want to use Autologon)
        //alloutside += "rdppass=''; ";                 // Autologon User Password (leave empty '' if you don't want to use Autologon)
        //alloutside += "mydomain=''; "                 // Domain (leave empty '' if you don't have an Active Directory domain)
        alloutside += "interval_print_option='11'; ";	// Web Printing Options
        // --------------- End of Seamless Access Configuration ---------------
      
        // --------------- Java Access Configuration ---------------
        var allinside = "dummyvari=false; ";
        allinside += "switcher=0; ";                // Resolution to use (use one of the following values: 0 = full window, 1 = full screen, 2 = 640x480, 3 = 800x600, 4 = 1024x768, 5 = 1280x1024, 6 = 1600x1200)
        allinside += "bpp_all=15; ";                // Pixel Depth to use (use one of the following values: 15 for 15 bits display, 16 for 16 bits, 24 for 24 bits)
        allinside += "cmdline='"+cmdline+"'; ";
        //allinside += "server=''; ";                   // Server (leave empty '' for auto recognition)
        //allinside += "username=''; ";                 // Autologon User Login (leave empty '' if you don't want to use Autologon)
        //allinside += "rdppass=''; ";                  // Autologon User Password (leave empty '' if you don't want to use Autologon)
        //allinside += "mydomain=''; "                  // Domain (leave empty '' if you don't have an Active Directory domain)
        allinside += "sameasweb = 'yes'; ";         // Port to use for the RDP connection ('yes' if you want to use the same port as this page's web server address, 'no' otherwise
        allinside += "insidecheck = true; ";        // Start the Java Client inside the browser (true to start it inside the browser, false to start it externally)
        allinside += "soundsup = true; ";           // Sound Support (true to activate it, false otherwise)
        allinside += "mapsup = true; ";             // Local Disk Mapping (true to activate it, false otherwise)
        allinside += "activex = false; ";           // ActiveX instead of Java in Internet Explorer browsers (true if you want to use ActiveX client instead of the Java client, false otherwise)
        allinside += "interval_print_option='11'; ";		// Web Printing Options
        // --------------- End of Java Access Configuration ---------------
        // --------------- PWA Configuration ---------------
        var isPWAEnabled = "yes";
        var edgeVersion = navigator.userAgent.match(/(Edge|Edg)\/(\d+)/i);
        var isOldEdge = edgeVersion !== null && edgeVersion[2] < 80;
        var isIE = typeof window.document.documentMode !== "undefined";
        var isFirefox = navigator.userAgent.indexOf("Firefox") > -1;
        var isPWASupported = !(isOldEdge || isIE || isFirefox);
        
        // Delete previous service worker cache
        if (typeof(caches) != 'undefined') {
          caches.delete('site-dynamic-v1');
        }
        
        if(isPWAEnabled != "no" && isPWASupported && 'serviceWorker' in navigator){
          var link = document.createElement('link');
          link.rel = 'manifest';
          link.href = 'manifest.json';
          document.head.append(link);
          navigator.serviceWorker.register('./sw.js')
            .then(function(reg) {console.log('Service Worker registered')})
            .catch(function(err) {console.log('Service Worker not registered', err)});
        }
        else {
      	if('serviceWorker' in navigator) {
      		navigator.serviceWorker.getRegistration('./sw.js').then(function(reg) {
      			if(reg !== undefined) {
      				console.log('Unregistering Service Worker');
      				reg.unregister();
      			}
      		}).catch(function(err) {
      			console.log('Service Worker unregistration failed: ', err);
      		});
      	}
        }
        // --------------- End of PWA Configuration ---------------
      </script>
      <!--[if IE]><script type="text/javascript">window.iecondition = true;</script><![endif]-->
      <script type="text/javascript" src="software/lang.js"></script>
      <script type="text/javascript" src="software/common.js"></script>
      <style type="text/css">
      @font-face{font-family:Exo;font-style:normal;font-weight:400;src:local('Exo Regular'),local('Exo-Regular'),url(software/js/exo-latin-ext.woff2) format('woff2');unicode-range:U+0100024F,U+1E00-1EFF,U+20A0-20AB,U+20AD-20CF,U+2C60-2C7F,U+A720-A7FF}
      @font-face{font-family:Exo;font-style:normal;font-weight:400;src:local('Exo Regular'),local('Exo-Regular'),url(software/js/exo-latin.woff2) format('woff2');unicode-range:U+000000FF,U+0131,U+01520153,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2212,U+2215,U+E0FF,U+EFFD,U+F000}
      </style>
      <script src="software/js/jquery.min.js"></script>
      <style type="text/css">
      html { 
      	margin:0;
      	padding:0;
      	font-size: 12px;
      	color: #FFFFFF;
      	background: url('templates/photo/img/City.jpg') no-repeat center fixed;
      	-webkit-background-size: cover;
      	background-size: cover;
      	font-family: Verdana;
      	height: 100%;
      	width: 100%;
      }
      input {
      	font-family: 'Exo', sans-serif;
      	width: 178px;
      	height: 20px;
      	line-height: 20px;
      	background: none;
      	color: #FFFFFF;
      	border: 1px solid #FFFFFF;
      	padding: 5px;
      	margin: 5px;
      	display: block;
      	-webkit-border-radius: 2px;
      	-moz-border-radius: 2px;
      	-moz-border-radius: 2px;
      	border-radius: 2px;
      }
      select {
      	font-family: 'Exo', sans-serif;
      	width: 190px;
      	height: 32px;
      	margin: 5px;
      	padding: 5px;
      	background: transparent url('templates/photo/img/select.png') no-repeat 174px 50%;
      	color: #FFFFFF;
      	border: 1px solid #FFFFFF;
      	-webkit-border-radius: 2px;
      	-moz-border-radius: 2px;
      	border-radius: 2px;
      	-webkit-appearance: none;
      }
      select option { color: #000000; }
      input[type="button"] {
      	width: 192px;
      	background: #FFFFFF;
      	color: #21183D;
      	padding: 15px;
      	line-height: 0;
      	font-weight: bold;
      	font-size: 15px;
      }
      input[type="radio"] {
      	display: inline;
      	width: auto;
      	height: 12px;
      	width: 12px;
      	margin: 0;
      	padding: 0;
      	border: none;
      }
      label {
      	line-height: 30px;
      	display: inline-block;
      	margin: 5px;
      }
      ::-webkit-input-placeholder {
      	color: #FFFFFF;
      	opacity: 1;
      }
      :-moz-placeholder {
      	color: #FFFFFF;
      	opacity: 1;
      }
      ::-moz-placeholder {
      	color: #FFFFFF;
      	opacity: 1;
      }
      :-ms-input-placeholder {
      	color: #FFFFFF;
      	opacity: 1;
      }
      .styled-select select
      {
      appearance:none;
      -moz-appearance:none;
      -webkit-appearance:none;
      }
      .center {
      	width:220px;
      	position:relative;
      	left:50%;
      	top:80px;
      	padding: 20px 20px 20px 35px;
      	margin:0 0 20px -137px;
      	background: rgb(33, 24, 61);
      	background: rgba(33, 24, 61,0.7);
      	-webkit-border-radius: 5px;
      	-moz-border-radius: 5px;
      	border-radius: 5px;
      }
      .logo {
      	max-width: 200px;
      }
      .collapsible {
          color: white;
          cursor: pointer;
          padding: 18px;
          width: 100%;
         	border: none;
          text-align: left;
          outline: none;
          font-size: 15px;
          background-color: #777;
         }
         .active, .collapsible:hover {
             background-color: #555;
         }
         .collapsiblecontent {
             padding: 0 18px;
             max-height: 0;
             overflow: hidden;
             transition: max-height 0.2s ease-out;
             background-color: #f1f1f1;
         }
      
      #tr-domain, #tr-password, #tr-verifypassword {
      	display: none;
      	margin-top: 0px;
      }
      #select-server {
      	display: none;
      }
      #span-login-ok, #span-password-ok, #span-login-ko, #span-password-ko, #span-credentials-ko, #span-twofa-ko {
          display: none;
      }
      #retype-password-input, #retype-password-label {
      	display: none;
      }
      #span-credentials-ko {
      	font-weight: bold;
      	text-align: center;
      }
      #accesstypeuserpanel {
      	display: none;
      	text-align: center;
      	margin-top: 0px;
      }
      #accesstypeuserpanel label {
      	display: none;
      }
      #top_right_menu_actions input {
      	width: auto;
      }
      .fa-eye {
          background-image: url("data:image/svg+xml,%3Csvg fill='%23#FFFFFF' width='20' height='16' viewBox='0 0 20 16' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M9.99844 2.5C7.96111 2.5 6.28626 3.425 5.002 4.61562C3.79898 5.73437 2.9678 7.0625 2.54283 8C2.9678 8.9375 3.79898 10.2656 4.99887 11.3844C6.28626 12.575 7.96111 13.5 9.99844 13.5C12.0358 13.5 13.7106 12.575 14.9949 11.3844C16.1979 10.2656 17.0291 8.9375 17.454 8C17.0291 7.0625 16.1979 5.73437 14.998 4.61562C13.7106 3.425 12.0358 2.5 9.99844 2.5ZM3.98021 3.51875C5.45196 2.15 7.47366 1 9.99844 1C12.5232 1 14.5449 2.15 16.0167 3.51875C17.479 4.87812 18.4571 6.5 18.9227 7.61562C19.0258 7.8625 19.0258 8.1375 18.9227 8.38437C18.4571 9.5 17.479 11.125 16.0167 12.4812C14.5449 13.85 12.5232 15 9.99844 15C7.47366 15 5.45196 13.85 3.98021 12.4812C2.51784 11.125 1.5398 9.5 1.07734 8.38437C0.974221 8.1375 0.974221 7.8625 1.07734 7.61562C1.5398 6.5 2.51784 4.875 3.98021 3.51875ZM9.99844 10.5C11.3796 10.5 12.4982 9.38125 12.4982 8C12.4982 6.61875 11.3796 5.5 9.99844 5.5C9.97656 5.5 9.95782 5.5 9.93594 5.5C9.97656 5.65937 9.99844 5.82812 9.99844 6C9.99844 7.10312 9.10164 8 7.99861 8C7.82675 8 7.65802 7.97812 7.49865 7.9375C7.49865 7.95937 7.49865 7.97813 7.49865 8C7.49865 9.38125 8.61731 10.5 9.99844 10.5ZM9.99844 4C11.0592 4 12.0765 4.42143 12.8266 5.17157C13.5767 5.92172 13.9981 6.93913 13.9981 8C13.9981 9.06087 13.5767 10.0783 12.8266 10.8284C12.0765 11.5786 11.0592 12 9.99844 12C8.93766 12 7.92034 11.5786 7.17026 10.8284C6.42018 10.0783 5.99879 9.06087 5.99879 8C5.99879 6.93913 6.42018 5.92172 7.17026 5.17157C7.92034 4.42143 8.93766 4 9.99844 4Z' /%3E%3C/svg%3E");
          /* dans le "fill" du code svg -> fill='%23#FFFFFF' */
          /* bien garder le %23 sinon KO */
          height: 16px;
          width: 20px;
      }
      
      .fa-eye-slash {
          background-image: url("data:image/svg+xml,%3Csvg fill='%23#FFFFFF' width='20' height='16' viewBox='0 0 20 16' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M1.21268 0.159551C0.887676 -0.0966993 0.415801 -0.0373243 0.159551 0.287676C-0.0966993 0.612676 -0.0373243 1.08455 0.287676 1.3408L18.7877 15.8408C19.1127 16.0971 19.5846 16.0377 19.8408 15.7127C20.0971 15.3877 20.0377 14.9158 19.7127 14.6596L16.4252 12.0846C17.6627 10.8158 18.5002 9.39393 18.9221 8.38455C19.0252 8.13768 19.0252 7.86268 18.9221 7.6158C18.4564 6.50018 17.4783 4.87518 16.0158 3.51893C14.5471 2.15018 12.5252 1.00018 10.0002 1.00018C7.86893 1.00018 6.09393 1.82205 4.70955 2.90018L1.21268 0.159551ZM5.93143 3.85643C7.06268 3.0533 8.42205 2.50018 10.0002 2.50018C12.0377 2.50018 13.7127 3.42518 14.9971 4.6158C16.2002 5.73455 17.0314 7.06268 17.4564 8.00018C17.0627 8.87518 16.3127 10.0877 15.2408 11.1533L13.5596 9.83455C13.8439 9.2
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:29:56.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "file" : [
                  "manifest.json"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "ip" : [
                  "127.0.0.1"
               ],
               "url" : [
                  "http://www.w3.org/2000/svg"
               ]
            },
            "http" : {
               "bodymd5" : "ef50bc296d1813a020a570eb874cc486",
               "bodymmh3" : -2088482108,
               "header" : [
                  {
                     "value" : "Thu, 07 Mar 2024 00:37:41 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "93c67a2c59826d6b701560a1d2cb5e72",
               "headermmh3" : -980437344,
               "title" : "Acceso web"
            },
            "length" : 16384
         },
         "asn" : "AS8151",
         "city" : "Monclova",
         "country" : "MX",
         "data" : "HTTP/1.1 200 OK\r\nContent-Length: 29412\r\nAccept-Ranges: bytes\r\nContent-Type: text/html; charset=UTF-8\r\nX-XSS-Protection: 1; mode=block\r\nDate: Thu, 07 Nov 2024 05:42:22 GMT\r\nExpires: 0\r\nCache-Control: no-cache, no-store, must-revalidate, private, max-age=0\r\nLast-Modified: Thu, 07 Mar 2024 00:37:41 GMT\r\nPragma: no-cache\r\nConnection: close\r\n\r\n<!-- TEMPLATEVALUES]|[v1]|[Photo]|[Logon]|[127.0.0.1]|[3389]|[Acceso web]|[Inicio de sesi\u00f3n]|[#21183D]|[33, 24, 61]|[#FFFFFF]|[Verdana, Geneva, sans-serif]|[Conectando usuarios y equipos a trav\u00e9s de Internet]|[13]|[#0A8AB1]|[software/java/img/header_web.png]|[software/java/img/footer.png]|[Usuario:]|[Clave:]|[Dominio:]|[Inicio de sesi\u00f3n]|[]|[]|[]|[false]|[true]|[as_browser]|[html5]|[true]|[false]|[false]|[true]|[text]|[7]|[32]|[4]|[0]|[15]|[true]|[yes]|[true]|[true]|[false]|[index_applications.html]|[Portal remoto de aplicaciones]|[Aplicaciones]|[Cerrar Sesi\u00f3n]|[#AAAAAA]|[#CCCCCC]|[4]|[11]|[11]|[8]|[32]|[13]|[City]|[]|[2-step verification:]|[false]|[false]|[0]|[false]|[false]|[7]|[true]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[]|[ -->\r\n<!doctype html>\r\n<html>\r\n<head>\r\n<meta charset=\"UTF-8\">\r\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />\r\n<meta http-equiv=\"X-XSS-Protection\" content=\"1; mode=block\" />\r\n<meta http-equiv=\"cache-control\" content=\"max-age=0\" />\r\n<meta http-equiv=\"cache-control\" content=\"no-cache\" />\r\n<meta http-equiv=\"cache-control\" content=\"no-store\" />\r\n<meta http-equiv=\"expires\" content=\"0\" />\r\n<meta http-equiv=\"expires\" content=\"Tue, 01 Jan 1980 1:00:00 GMT\" />\r\n<meta http-equiv=\"pragma\" content=\"no-cache\" />\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\">\r\n<title>Acceso web</title>\r\n\r\n<script type=\"text/javascript\" src=\"software/java/third/jws.js\"></script>\r\n<script type=\"text/javascript\" src=\"software/remoteapp2.js?v=17.10\"></script>\r\n<script type=\"text/javascript\">\r\n  // --------------- Page Configuration ---------------\r\n  var page_configuration = new Array();\r\n  page_configuration[\"access_type\"] = \"html5\";     // Client Type (specify the client to use with \"remoteapp2\" or \"html5\" (legacy client types: \"java\", \"remoteapp\") ; or let the user choose between several clients with \"remoteapp2+html5\")\r\n  page_configuration[\"is_standard\"] = true;   // Standard Logon Web Page (do not edit this parameter - support only)\r\n  page_configuration[\"show_domain\"] = false;   // Show a Domain field (true if it must be displayed, false otherwise)\r\n  page_configuration[\"is_webcredentials\"] = false;   // Logon using WebCredentials (true if it is, false otherwise)\r\n  page_configuration[\"allow_empty_password\"] = false;   // Allow empty Password field - only intended for WebCredentials (true if it allowed, false otherwise)\r\n  page_configuration[\"show_password\"] = true;   // Show a Password field (true if it must be displayed, false otherwise)\r\n  page_configuration[\"remember_credentials\"] = true;\t// Remember login and domain in a cookie (true if must be remembered, false otherwise)\r\n  page_configuration[\"hide_server_list\"] = false;\t// Hide the server list if load-balancing is enabled\r\n  page_configuration[\"applications_portal\"] = \"index_applications.html\";\t  // Display Application Portal after logon (\"your_page_applications.html\" to display the application portal, \"\" to start remote connection directly after logon)\r\n  page_configuration[\"show_windows_password_reset_button\"] = false;\t  // Display the windows password reset button\r\n  page_configuration[\"show_windows_password_expiration_alert\"] = false;\t  // Show a windows password expiration alert popin when password expires soon\r\n  page_configuration[\"show_eye\"] = true;      // Display password visibility eye icon\r\n  // --------------- End of Page Configuration ---------------\r\n\r\n  // --------------- Access Configuration ---------------\r\n  var user = \"\";                              // Login to use when connecting to the remote server (leave \"\" to use the login typed in this page)\r\n  var pass = \"\";                              // Password to use when connecting to the remote server (leave \"\" to use the password typed in this page)\r\n  var domain = \"\";                            // Domain to use when connecting to the remote server (leave \"\" to use the domain typed in this page)\r\n  var server = \"127.0.0.1\";                            // Server to connect to (leave \"\" to use localhost and/or the server chosen in this page)\r\n  var port = \"\";                              // Port to connect to (leave \"\" to use localhost and/or the port of the server chosen in this page)\r\n  var lang = \"as_browser\";                    // Language to use\r\n  var serverhtml5 = \"127.0.0.1\";              // Server to connect to, when using HTML5 client\r\n  var porthtml5 = \"3389\";                     // Port to connect to, when using HTML5 client\r\n  var cmdline = \"\";                           // Optional text that will be put in the server's clipboard once connected\r\n  // --------------- End of Access Configuration ---------------\r\n\r\n  // --------------- Seamless Access Configuration ---------------\r\n  var alloutside = \"dummyvaro=false; \";\r\n  alloutside += \"switcher=7; \";               // Resolution to use (if your server supports RemoteApp, leave 7. Otherwise, use one of the following values: 0 = full window, 1 = full screen, 2 = 640x480, 3 = 800x600, 4 = 1024x768, 5 = 1280x1024, 6 = 1600x1200)\r\n  alloutside += \"bpp_all=32; \";               // Pixel Depth to use for Windows clients (use one of the following values: 15 for 15 bits display, 16 for 16 bits, 24 for 24 bits, 32 for 32 bits)\r\n  alloutside += \"bpp_all_mac='4'; \";          // Pixel Depth to use for MAC clients (use one of the following values: 1 for 15 bits display, 2 for 16 bits, 3 for 24 bits, 4 for 32 bits)\r\n  alloutside += \"cmdline='\"+cmdline+\"'; \";\r\n  //alloutside += \"server=''; \";                  // Server (leave empty '' for auto recognition)\r\n  //alloutside += \"username=''; \";                // Autologon User Login (leave empty '' if you don't want to use Autologon)\r\n  //alloutside += \"rdppass=''; \";                 // Autologon User Password (leave empty '' if you don't want to use Autologon)\r\n  //alloutside += \"mydomain=''; \"                 // Domain (leave empty '' if you don't have an Active Directory domain)\r\n  alloutside += \"interval_print_option='11'; \";\t// Web Printing Options\r\n  // --------------- End of Seamless Access Configuration ---------------\r\n\r\n  // --------------- Java Access Configuration ---------------\r\n  var allinside = \"dummyvari=false; \";\r\n  allinside += \"switcher=0; \";                // Resolution to use (use one of the following values: 0 = full window, 1 = full screen, 2 = 640x480, 3 = 800x600, 4 = 1024x768, 5 = 1280x1024, 6 = 1600x1200)\r\n  allinside += \"bpp_all=15; \";                // Pixel Depth to use (use one of the following values: 15 for 15 bits display, 16 for 16 bits, 24 for 24 bits)\r\n  allinside += \"cmdline='\"+cmdline+\"'; \";\r\n  //allinside += \"server=''; \";                   // Server (leave empty '' for auto recognition)\r\n  //allinside += \"username=''; \";                 // Autologon User Login (leave empty '' if you don't want to use Autologon)\r\n  //allinside += \"rdppass=''; \";                  // Autologon User Password (leave empty '' if you don't want to use Autologon)\r\n  //allinside += \"mydomain=''; \"                  // Domain (leave empty '' if you don't have an Active Directory domain)\r\n  allinside += \"sameasweb = 'yes'; \";         // Port to use for the RDP connection ('yes' if you want to use the same port as this page's web server address, 'no' otherwise\r\n  allinside += \"insidecheck = true; \";        // Start the Java Client inside the browser (true to start it inside the browser, false to start it externally)\r\n  allinside += \"soundsup = true; \";           // Sound Support (true to activate it, false otherwise)\r\n  allinside += \"mapsup = true; \";             // Local Disk Mapping (true to activate it, false otherwise)\r\n  allinside += \"activex = false; \";           // ActiveX instead of Java in Internet Explorer browsers (true if you want to use ActiveX client instead of the Java client, false otherwise)\r\n  allinside += \"interval_print_option='11'; \";\t\t// Web Printing Options\r\n  // --------------- End of Java Access Configuration ---------------\r\n  // --------------- PWA Configuration ---------------\r\n  var isPWAEnabled = \"yes\";\r\n  var edgeVersion = navigator.userAgent.match(/(Edge|Edg)\\/(\\d+)/i);\r\n  var isOldEdge = edgeVersion !== null && edgeVersion[2] < 80;\r\n  var isIE = typeof window.document.documentMode !== \"undefined\";\r\n  var isFirefox = navigator.userAgent.indexOf(\"Firefox\") > -1;\r\n  var isPWASupported = !(isOldEdge || isIE || isFirefox);\r\n  \r\n  // Delete previous service worker cache\r\n  if (typeof(caches) != 'undefined') {\r\n    caches.delete('site-dynamic-v1');\r\n  }\r\n  \r\n  if(isPWAEnabled != \"no\" && isPWASupported && 'serviceWorker' in navigator){\r\n    var link = document.createElement('link');\r\n    link.rel = 'manifest';\r\n    link.href = 'manifest.json';\r\n    document.head.append(link);\r\n    navigator.serviceWorker.register('./sw.js')\r\n      .then(function(reg) {console.log('Service Worker registered')})\r\n      .catch(function(err) {console.log('Service Worker not registered', err)});\r\n  }\r\n  else {\r\n\tif('serviceWorker' in navigator) {\r\n\t\tnavigator.serviceWorker.getRegistration('./sw.js').then(function(reg) {\r\n\t\t\tif(reg !== undefined) {\r\n\t\t\t\tconsole.log('Unregistering Service Worker');\r\n\t\t\t\treg.unregister();\r\n\t\t\t}\r\n\t\t}).catch(function(err) {\r\n\t\t\tconsole.log('Service Worker unregistration failed: ', err);\r\n\t\t});\r\n\t}\r\n  }\r\n  // --------------- End of PWA Configuration ---------------\r\n</script>\r\n<!--[if IE]><script type=\"text/javascript\">window.iecondition = true;</script><![endif]-->\r\n<script type=\"text/javascript\" src=\"software/lang.js\"></script>\r\n<script type=\"text/javascript\" src=\"software/common.js\"></script>\r\n<style type=\"text/css\">\r\n@font-face{font-family:Exo;font-style:normal;font-weight:400;src:local('Exo Regular'),local('Exo-Regular'),url(software/js/exo-latin-ext.woff2) format('woff2');unicode-range:U+0100024F,U+1E00-1EFF,U+20A0-20AB,U+20AD-20CF,U+2C60-2C7F,U+A720-A7FF}\r\n@font-face{font-family:Exo;font-style:normal;font-weight:400;src:local('Exo Regular'),local('Exo-Regular'),url(software/js/exo-latin.woff2) format('woff2');unicode-range:U+000000FF,U+0131,U+01520153,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2212,U+2215,U+E0FF,U+EFFD,U+F000}\r\n</style>\r\n<script src=\"software/js/jquery.min.js\"></script>\r\n<style type=\"text/css\">\r\nhtml { \r\n\tmargin:0;\r\n\tpadding:0;\r\n\tfont-size: 12px;\r\n\tcolor: #FFFFFF;\r\n\tbackground: url('templates/photo/img/City.jpg') no-repeat center fixed;\r\n\t-webkit-background-size: cover;\r\n\tbackground-size: cover;\r\n\tfont-family: Verdana;\r\n\theight: 100%;\r\n\twidth: 100%;\r\n}\r\ninput {\r\n\tfont-family: 'Exo', sans-serif;\r\n\twidth: 178px;\r\n\theight: 20px;\r\n\tline-height: 20px;\r\n\tbackground: none;\r\n\tcolor: #FFFFFF;\r\n\tborder: 1px solid #FFFFFF;\r\n\tpadding: 5px;\r\n\tmargin: 5px;\r\n\tdisplay: block;\r\n\t-webkit-border-radius: 2px;\r\n\t-moz-border-radius: 2px;\r\n\t-moz-border-radius: 2px;\r\n\tborder-radius: 2px;\r\n}\r\nselect {\r\n\tfont-family: 'Exo', sans-serif;\r\n\twidth: 190px;\r\n\theight: 32px;\r\n\tmargin: 5px;\r\n\tpadding: 5px;\r\n\tbackground: transparent url('templates/photo/img/select.png') no-repeat 174px 50%;\r\n\tcolor: #FFFFFF;\r\n\tborder: 1px solid #FFFFFF;\r\n\t-webkit-border-radius: 2px;\r\n\t-moz-border-radius: 2px;\r\n\tborder-radius: 2px;\r\n\t-webkit-appearance: none;\r\n}\r\nselect option { color: #000000; }\r\ninput[type=\"button\"] {\r\n\twidth: 192px;\r\n\tbackground: #FFFFFF;\r\n\tcolor: #21183D;\r\n\tpadding: 15px;\r\n\tline-height: 0;\r\n\tfont-weight: bold;\r\n\tfont-size: 15px;\r\n}\r\ninput[type=\"radio\"] {\r\n\tdisplay: inline;\r\n\twidth: auto;\r\n\theight: 12px;\r\n\twidth: 12px;\r\n\tmargin: 0;\r\n\tpadding: 0;\r\n\tborder: none;\r\n}\r\nlabel {\r\n\tline-height: 30px;\r\n\tdisplay: inline-block;\r\n\tmargin: 5px;\r\n}\r\n::-webkit-input-placeholder {\r\n\tcolor: #FFFFFF;\r\n\topacity: 1;\r\n}\r\n:-moz-placeholder {\r\n\tcolor: #FFFFFF;\r\n\topacity: 1;\r\n}\r\n::-moz-placeholder {\r\n\tcolor: #FFFFFF;\r\n\topacity: 1;\r\n}\r\n:-ms-input-placeholder {\r\n\tcolor: #FFFFFF;\r\n\topacity: 1;\r\n}\r\n.styled-select select\r\n{\r\nappearance:none;\r\n-moz-appearance:none;\r\n-webkit-appearance:none;\r\n}\r\n.center {\r\n\twidth:220px;\r\n\tposition:relative;\r\n\tleft:50%;\r\n\ttop:80px;\r\n\tpadding: 20px 20px 20px 35px;\r\n\tmargin:0 0 20px -137px;\r\n\tbackground: rgb(33, 24, 61);\r\n\tbackground: rgba(33, 24, 61,0.7);\r\n\t-webkit-border-radius: 5px;\r\n\t-moz-border-radius: 5px;\r\n\tborder-radius: 5px;\r\n}\r\n.logo {\r\n\tmax-width: 200px;\r\n}\r\n.collapsible {\r\n    color: white;\r\n    cursor: pointer;\r\n    padding: 18px;\r\n    width: 100%;\r\n   \tborder: none;\r\n    text-align: left;\r\n    outline: none;\r\n    font-size: 15px;\r\n    background-color: #777;\r\n   }\r\n   .active, .collapsible:hover {\r\n       background-color: #555;\r\n   }\r\n   .collapsiblecontent {\r\n       padding: 0 18px;\r\n       max-height: 0;\r\n       overflow: hidden;\r\n       transition: max-height 0.2s ease-out;\r\n       background-color: #f1f1f1;\r\n   }\r\n\r\n#tr-domain, #tr-password, #tr-verifypassword {\r\n\tdisplay: none;\r\n\tmargin-top: 0px;\r\n}\r\n#select-server {\r\n\tdisplay: none;\r\n}\r\n#span-login-ok, #span-password-ok, #span-login-ko, #span-password-ko, #span-credentials-ko, #span-twofa-ko {\r\n    display: none;\r\n}\r\n#retype-password-input, #retype-password-label {\r\n\tdisplay: none;\r\n}\r\n#span-credentials-ko {\r\n\tfont-weight: bold;\r\n\ttext-align: center;\r\n}\r\n#accesstypeuserpanel {\r\n\tdisplay: none;\r\n\ttext-align: center;\r\n\tmargin-top: 0px;\r\n}\r\n#accesstypeuserpanel label {\r\n\tdisplay: none;\r\n}\r\n#top_right_menu_actions input {\r\n\twidth: auto;\r\n}\r\n.fa-eye {\r\n    background-image: url(\"data:image/svg+xml,%3Csvg fill='%23#FFFFFF' width='20' height='16' viewBox='0 0 20 16' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M9.99844 2.5C7.96111 2.5 6.28626 3.425 5.002 4.61562C3.79898 5.73437 2.9678 7.0625 2.54283 8C2.9678 8.9375 3.79898 10.2656 4.99887 11.3844C6.28626 12.575 7.96111 13.5 9.99844 13.5C12.0358 13.5 13.7106 12.575 14.9949 11.3844C16.1979 10.2656 17.0291 8.9375 17.454 8C17.0291 7.0625 16.1979 5.73437 14.998 4.61562C13.7106 3.425 12.0358 2.5 9.99844 2.5ZM3.98021 3.51875C5.45196 2.15 7.47366 1 9.99844 1C12.5232 1 14.5449 2.15 16.0167 3.51875C17.479 4.87812 18.4571 6.5 18.9227 7.61562C19.0258 7.8625 19.0258 8.1375 18.9227 8.38437C18.4571 9.5 17.479 11.125 16.0167 12.4812C14.5449 13.85 12.5232 15 9.99844 15C7.47366 15 5.45196 13.85 3.98021 12.4812C2.51784 11.125 1.5398 9.5 1.07734 8.38437C0.974221 8.1375 0.974221 7.8625 1.07734 7.61562C1.5398 6.5 2.51784 4.875 3.98021 3.51875ZM9.99844 10.5C11.3796 10.5 12.4982 9.38125 12.4982 8C12.4982 6.61875 11.3796 5.5 9.99844 5.5C9.97656 5.5 9.95782 5.5 9.93594 5.5C9.97656 5.65937 9.99844 5.82812 9.99844 6C9.99844 7.10312 9.10164 8 7.99861 8C7.82675 8 7.65802 7.97812 7.49865 7.9375C7.49865 7.95937 7.49865 7.97813 7.49865 8C7.49865 9.38125 8.61731 10.5 9.99844 10.5ZM9.99844 4C11.0592 4 12.0765 4.42143 12.8266 5.17157C13.5767 5.92172 13.9981 6.93913 13.9981 8C13.9981 9.06087 13.5767 10.0783 12.8266 10.8284C12.0765 11.5786 11.0592 12 9.99844 12C8.93766 12 7.92034 11.5786 7.17026 10.8284C6.42018 10.0783 5.99879 9.06087 5.99879 8C5.99879 6.93913 6.42018 5.92172 7.17026 5.17157C7.92034 4.42143 8.93766 4 9.99844 4Z' /%3E%3C/svg%3E\");\r\n    /* dans le \"fill\" du code svg -> fill='%23#FFFFFF' */\r\n    /* bien garder le %23 sinon KO */\r\n    height: 16px;\r\n    width: 20px;\r\n}\r\n\r\n.fa-eye-slash {\r\n    background-image: url(\"data:image/svg+xml,%3Csvg fill='%23#FFFFFF' width='20' height='16' viewBox='0 0 20 16' xmlns='http://www.w3.org/2000/svg'%3E%3Cpath d='M1.21268 0.159551C0.887676 -0.0966993 0.415801 -0.0373243 0.159551 0.287676C-0.0966993 0.612676 -0.0373243 1.08455 0.287676 1.3408L18.7877 15.8408C19.1127 16.0971 19.5846 16.0377 19.8408 15.7127C20.0971 15.3877 20.0377 14.9158 19.7127 14.6596L16.4252 12.0846C17.6627 10.8158 18.5002 9.39393 18.9221 8.38455C19.0252 8.13768 19.0252 7.86268 18.9221 7.6158C18.4564 6.50018 17.4783 4.87518 16.0158 3.51893C14.5471 2.15018 12.5252 1.00018 10.0002 1.00018C7.86893 1.00018 6.09393 1.82205 4.70955 2.90018L1.21268 0.159551ZM5.93143 3.85643C7.06268 3.0533 8.42205 2.50018 10.0002 2.50018C12.0377 2.50018 13.7127 3.42518 14.9971 4.6158C16.2002 5.73455 17.0314 7.06268 17.4564 8.00018C17.0627 8.87518 16.3127 10.0877 15.2408 11.1533L13.5596 9.83455C13.8439 9.2",
         "datamd5" : "2dcca8a9454262cfe5bc14a845c507e1",
         "datammh3" : 1927590120,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "prod-infinitum.com.mx"
         ],
         "geolocus" : {
            "asn" : "AS8151",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "MX",
            "countryname" : "Mexico",
            "domain" : [
               "prod-infinitum.com.mx",
               "uninet.com.mx"
            ],
            "isineu" : "false",
            "latitude" : "23.634501",
            "location" : "23.634501,-102.552784",
            "longitude" : "-102.552784",
            "netname" : "MX-USCV4-LACNIC",
            "organization" : "UNINET",
            "subnet" : "187.209.128.0/17"
         },
         "host" : [
            "dsl-187-209-255-29-dyn"
         ],
         "hostname" : [
            "dsl-187-209-255-29-dyn.prod-infinitum.com.mx"
         ],
         "ip" : "187.209.255.29",
         "ipv6" : "false",
         "latitude" : "26.9345",
         "location" : "26.9345,-101.3757",
         "longitude" : "-101.3757",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "UNINET",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 24284,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "dsl-187-209-255-29-dyn.prod-infinitum.com.mx"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "187.209.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com.mx"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 87.200.211.14:24284 (tcp/http) - last seen on 2024-11-07 at 05:28:24 UTC

    • IP
      87.200.211.14
      Network
      87.200.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://87.200.211.14:24284/ 200

      ASN
      AS15802
      Organization
      Emirates Integrated Telecommunications Company PJSC
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Kestrel Kestrel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      819e0bcdf2d3841e19a8142225902251
      HTTP Header MD5
      bcc2c9e16d03553e933e218e6aa512b0
      HTTP Body MD5
      e1be569b4a15510e3e607cabad500a25
    • HTTP/1.1 200 OK
      Connection: close
      Content-Type: text/html; charset=utf-8
      Date: Thu, 07 Nov 2024 05:28:22 GMT
      Server: Kestrel
      Cache-Control: no-cache, no-store
      Pragma: no-cache
      Set-Cookie: .AspNetCore.Antiforgery.iMdwd0HU0kk=CfDJ8PgVqHwXmcVFlNn0tOFNlPK4zLHiqi8EG56tPkX8qzWHFM-hH8XX_XHa7OGDSRh_hNDBB5AE7rdg5o72NZEP_Z9vQBJS19_BMDqwiCpVrGMm-o08Yod1SSz4_E6sGitME_tEjFXvtRysAd8_MFI2b38; path=/; samesite=strict; httponly
      Transfer-Encoding: chunked
      X-Frame-Options: SAMEORIGIN
      
      1225
      
      <!DOCTYPE html>
      <html>
      <head>
          <meta name="viewport" content="width=device-width, initial-scale=1">
          <meta http-equiv="Cache-Control" content="max-age=345600">
      
          <link rel="icon" type="image/png" href="Zk.png">
          <link href="css/bootstrap.min.css" rel="stylesheet">
          <style>
              .fade {
                  opacity: 1;
                  transition: opacity 1.5s ease-in-out;
              }
      
                  .fade.out {
                      opacity: 0;
                  }
              body {
                  font-family: Arial, Helvetica, sans-serif;
              }
      
              form {
                  border: 3px solid #f1f1f1;
                  max-width: 700px;
              }
      
              .ml-10 {
                  margin-left: 10px;
              }
      
              .container input.mb-25 {
                  margin-bottom: 25px;
              }
      
              form {
                  border: 3px solid #f1f1f1;
                  max-width: 700px;
              }
      
              input[type=text], input[type=password] {
                  width: 100%;
                  padding: 12px 20px;
                  margin: 8px 0;
                  display: inline-block;
                  border: 1px solid #ccc;
                  box-sizing: border-box;
              }
      
              button {
                  background-color: #4CAF50;
                  color: white;
                  padding: 14px 20px;
                  margin: 8px 0;
                  border: none;
                  cursor: pointer;
                  width: 100%;
              }
      
                  button:hover {
                      opacity: 0.8;
                  }
      
              .cancelbtn {
                  width: auto;
                  padding: 10px 18px;
                  background-color: #f44336;
              }
      
              .container {
                  padding: 16px;
              }
      
              span.psw {
                  float: right;
                  padding-top: 16px;
              }
      
              .form-overlay {
                  width: 35%;
                  display: block;
                  position: absolute;
                  top: 35%;
                  left: 77%;
                  /*transform: translate(-40%, -35%);*/
                  transform: translate(-40%, -35%);
              }
      
              @media (max-width: 675px) {
                  img {
                      display: block;
                      margin: 0 auto;
                  }
      
                  .form-overlay,.NoImgform-overlay {
                      width: auto;
                      display: block;
                      position: relative;
                      top: 0;
                      left: 0;
                      transform: translate(0,0);
                      margin: 0 8px;
                      margin-top: 5px;
      
                  }
              }
              .hightLighText {
                  filter: drop-shadow(0.1em 0em 0.01428451em rgba(255, 242, 242, 0.950000)) drop-shadow(0em 0em 0.07142256em rgba(255, 255, 255, 0.950000)) drop-shadow(0em 0em 0.091426769em rgba(255, 255, 255, 0.940000))
              }
              .bordered{
                  border: 1px solid #fff;
                  border-radius: 5px
              }
          </style>
      </head>
      <body>
          <div style="position: relative;">
              <img src="/Images/start.jpg" alt="Your Image" id="adsImg" style="width: 100%; height: auto;">
              <form method="POST" id="loginForm" class="form-overlay bordered" action="/Home/Password">
                      <h1 class="hightLighText ml-10">Bio<span style="margin-left:10px;color:#4CAF50">Cloud</span> Login</h1>
                  <p style="color:red"> </p>
                  <div class="container">
                      <label for="Username" style="color:#fff"><b>User Name</b></label>
                      <input type="text" id="Username" placeholder="Enter Username" name="Username" class="mb-25 bordered" required>
                      <label for="Password" style="color:#fff"><b>Password</b></label>
                      <input type="password" id="Password" placeholder="Enter Password" name="Password" class="mb-25 bordered" required>
                      <button type="submit" class="bordered">
                          <span style="font-size: 120%">
                              Login
                          </span>
                      </button>
                      <p style="color:#777;font-size:12px">By clicking on login, you agree to our <a target="_blank" href="/Terms">License Agreement</a></p>
                  </div>
              <input name="__RequestVerificationToken" type="hidden" value="CfDJ8PgVqHwXmcVFlNn0tOFNlPLFSFEPJ6pffA6-KgPh9RNajik8poeqXsODd0d097hreNRaRXN3n73rT2PCuu1DcAgDyc2uEj4UKmlvjo09d-uM4tYiIrPIWiN3DaQEZodtfjcOSdjBvY5VOy7Q6aNeSYM" /></form>
          </div>
      
      </body>
      </html>
      <script>
          var img = new Image();
          img.onload = function () {
             
              var myImg = document.getElementById('adsImg');
              myImg.src = img.src;
          };
          
          img.src = 'http://65.108.192.26:4000/start.jpg';
      </script>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:28:24.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "65.108.192.26"
               ],
               "url" : [
                  "http://65.108.192.26:4000/start.jpg"
               ]
            },
            "favicon" : {
               "url" : "/Zk.png"
            },
            "http" : {
               "bodymd5" : "e1be569b4a15510e3e607cabad500a25",
               "bodymmh3" : -1601121923,
               "headermd5" : "bcc2c9e16d03553e933e218e6aa512b0",
               "headermmh3" : 960376669
            },
            "length" : 5140
         },
         "asn" : "AS15802",
         "city" : "Dubai",
         "country" : "AE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nContent-Type: text/html; charset=utf-8\r\nDate: Thu, 07 Nov 2024 05:28:22 GMT\r\nServer: Kestrel\r\nCache-Control: no-cache, no-store\r\nPragma: no-cache\r\nSet-Cookie: .AspNetCore.Antiforgery.iMdwd0HU0kk=CfDJ8PgVqHwXmcVFlNn0tOFNlPK4zLHiqi8EG56tPkX8qzWHFM-hH8XX_XHa7OGDSRh_hNDBB5AE7rdg5o72NZEP_Z9vQBJS19_BMDqwiCpVrGMm-o08Yod1SSz4_E6sGitME_tEjFXvtRysAd8_MFI2b38; path=/; samesite=strict; httponly\r\nTransfer-Encoding: chunked\r\nX-Frame-Options: SAMEORIGIN\r\n\r\n1225\r\n\r\n<!DOCTYPE html>\r\n<html>\r\n<head>\r\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\r\n    <meta http-equiv=\"Cache-Control\" content=\"max-age=345600\">\r\n\r\n    <link rel=\"icon\" type=\"image/png\" href=\"Zk.png\">\r\n    <link href=\"css/bootstrap.min.css\" rel=\"stylesheet\">\r\n    <style>\r\n        .fade {\r\n            opacity: 1;\r\n            transition: opacity 1.5s ease-in-out;\r\n        }\r\n\r\n            .fade.out {\r\n                opacity: 0;\r\n            }\r\n        body {\r\n            font-family: Arial, Helvetica, sans-serif;\r\n        }\r\n\r\n        form {\r\n            border: 3px solid #f1f1f1;\r\n            max-width: 700px;\r\n        }\r\n\r\n        .ml-10 {\r\n            margin-left: 10px;\r\n        }\r\n\r\n        .container input.mb-25 {\r\n            margin-bottom: 25px;\r\n        }\r\n\r\n        form {\r\n            border: 3px solid #f1f1f1;\r\n            max-width: 700px;\r\n        }\r\n\r\n        input[type=text], input[type=password] {\r\n            width: 100%;\r\n            padding: 12px 20px;\r\n            margin: 8px 0;\r\n            display: inline-block;\r\n            border: 1px solid #ccc;\r\n            box-sizing: border-box;\r\n        }\r\n\r\n        button {\r\n            background-color: #4CAF50;\r\n            color: white;\r\n            padding: 14px 20px;\r\n            margin: 8px 0;\r\n            border: none;\r\n            cursor: pointer;\r\n            width: 100%;\r\n        }\r\n\r\n            button:hover {\r\n                opacity: 0.8;\r\n            }\r\n\r\n        .cancelbtn {\r\n            width: auto;\r\n            padding: 10px 18px;\r\n            background-color: #f44336;\r\n        }\r\n\r\n        .container {\r\n            padding: 16px;\r\n        }\r\n\r\n        span.psw {\r\n            float: right;\r\n            padding-top: 16px;\r\n        }\r\n\r\n        .form-overlay {\r\n            width: 35%;\r\n            display: block;\r\n            position: absolute;\r\n            top: 35%;\r\n            left: 77%;\r\n            /*transform: translate(-40%, -35%);*/\r\n            transform: translate(-40%, -35%);\r\n        }\r\n\r\n        @media (max-width: 675px) {\r\n            img {\r\n                display: block;\r\n                margin: 0 auto;\r\n            }\r\n\r\n            .form-overlay,.NoImgform-overlay {\r\n                width: auto;\r\n                display: block;\r\n                position: relative;\r\n                top: 0;\r\n                left: 0;\r\n                transform: translate(0,0);\r\n                margin: 0 8px;\r\n                margin-top: 5px;\r\n\r\n            }\r\n        }\r\n        .hightLighText {\r\n            filter: drop-shadow(0.1em 0em 0.01428451em rgba(255, 242, 242, 0.950000)) drop-shadow(0em 0em 0.07142256em rgba(255, 255, 255, 0.950000)) drop-shadow(0em 0em 0.091426769em rgba(255, 255, 255, 0.940000))\r\n        }\r\n        .bordered{\r\n            border: 1px solid #fff;\r\n            border-radius: 5px\r\n        }\r\n    </style>\r\n</head>\r\n<body>\r\n    <div style=\"position: relative;\">\r\n        <img src=\"/Images/start.jpg\" alt=\"Your Image\" id=\"adsImg\" style=\"width: 100%; height: auto;\">\r\n        <form method=\"POST\" id=\"loginForm\" class=\"form-overlay bordered\" action=\"/Home/Password\">\r\n                <h1 class=\"hightLighText ml-10\">Bio<span style=\"margin-left:10px;color:#4CAF50\">Cloud</span> Login</h1>\r\n            <p style=\"color:red\"> </p>\r\n            <div class=\"container\">\r\n                <label for=\"Username\" style=\"color:#fff\"><b>User Name</b></label>\r\n                <input type=\"text\" id=\"Username\" placeholder=\"Enter Username\" name=\"Username\" class=\"mb-25 bordered\" required>\r\n                <label for=\"Password\" style=\"color:#fff\"><b>Password</b></label>\r\n                <input type=\"password\" id=\"Password\" placeholder=\"Enter Password\" name=\"Password\" class=\"mb-25 bordered\" required>\r\n                <button type=\"submit\" class=\"bordered\">\r\n                    <span style=\"font-size: 120%\">\r\n                        Login\r\n                    </span>\r\n                </button>\r\n                <p style=\"color:#777;font-size:12px\">By clicking on login, you agree to our <a target=\"_blank\" href=\"/Terms\">License Agreement</a></p>\r\n            </div>\r\n        <input name=\"__RequestVerificationToken\" type=\"hidden\" value=\"CfDJ8PgVqHwXmcVFlNn0tOFNlPLFSFEPJ6pffA6-KgPh9RNajik8poeqXsODd0d097hreNRaRXN3n73rT2PCuu1DcAgDyc2uEj4UKmlvjo09d-uM4tYiIrPIWiN3DaQEZodtfjcOSdjBvY5VOy7Q6aNeSYM\" /></form>\r\n    </div>\r\n\r\n</body>\r\n</html>\r\n<script>\r\n    var img = new Image();\r\n    img.onload = function () {\r\n       \r\n        var myImg = document.getElementById('adsImg');\r\n        myImg.src = img.src;\r\n    };\r\n    \r\n    img.src = 'http://65.108.192.26:4000/start.jpg';\r\n</script>\r\n0\r\n\r\n",
         "datamd5" : "819e0bcdf2d3841e19a8142225902251",
         "datammh3" : 1090330057,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS15802",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "AE",
            "countryname" : "United Arab Emirates",
            "domain" : [
               "du.ae"
            ],
            "isineu" : "false",
            "latitude" : "23.424076",
            "location" : "23.424076,53.847818",
            "longitude" : "53.847818",
            "netname" : "DIC-NET",
            "organization" : "Emirates Integrated Telecommunications Company PJSC",
            "subnet" : "87.200.0.0/16"
         },
         "ip" : "87.200.211.14",
         "ipv6" : "false",
         "latitude" : "25.0731",
         "location" : "25.0731,55.2980",
         "longitude" : "55.2980",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Emirates Integrated Telecommunications Company PJSC",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 24284,
         "product" : "Kestrel",
         "productvendor" : "Kestrel",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "87.200.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }