Returning 10 result(s) out of 10 in 0.363 second(s)

  • 192.236.192.200:4570 (tcp/http) - last seen on 2024-11-21 at 08:35:29 UTC

    • IP
      192.236.192.200
      Network
      192.236.128.0/17
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://192.236.192.200:4570/ 200

      HTTP Title
      Apache Tomcat/8.5.53
      Reverse DNS
      client-192-236-192-200.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      http
      Source
      datascan
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      hostwindsdns.com
      Hostname(s)
      23.254.225.168 client-104-168-201-213.hostwindsdns.com client-104-168-202-21.hostwindsdns.com client-104-168-202-24.hostwindsdns.com client-142-11-210-136.hostwindsdns.com client-192-236-192-200.hostwindsdns.com hwsrv-1067198.hostwindsdns.com hwsrv-571070.hostwindsdns.com hwsrv-742874.hostwindsdns.com
      IP(s)
      104.168.160.78 104.168.190.93 104.168.201.213 104.168.202.21 104.168.202.24 142.11.210.136 192.236.192.200 23.254.225.168
      Port(s)
      4570
      Protocol(s)
      http
      Tag(s)
      URL(s)
      / /api/sonicos/tfa /vpn/index.html
    • Operating System
      Linux Linux Kernel
      Product
      Apache HTTP Server 2.4.41
      HTTP Component(s)
      OpenSSL OpenSSL 1.1.0l Apache Tomcat 8.5.53
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ed0944ac473b16a68e75f8ebe5ae91d
      HTTP Header MD5
      90861f3c0f92126929cf68e73629faa1
      HTTP Body MD5
      6c22ed3ac115bdef49809a6847e03801
    • HTTP/1.1 200 200
      Date: Thu, 21 Nov 2024 08:35:29 UTC
      Server: Apache/2.4.41 (Unix) OpenSSL/1.1.0l
      Content-Type: text/html;charset=UTF-8
      Vary: Accept-Encoding
      Transfer-Encoding: chunked
      
      2bbb
      
      
      
      <!DOCTYPE html>
      <html lang="en">
          <head>
              <meta charset="UTF-8" />
              <title>Apache Tomcat/8.5.53</title>
              <link href="favicon.ico" rel="icon" type="image/x-icon" />
              <link href="favicon.ico" rel="shortcut icon" type="image/x-icon" />
              <link href="tomcat.css" rel="stylesheet" type="text/css" />
          </head>
      
          <body>
              <div id="wrapper">
                  <div id="navigation" class="curved container">
                      <span id="nav-home"><a href="https://tomcat.apache.org/">Home</a></span>
                      <span id="nav-hosts"><a href="/docs/">Documentation</a></span>
                      <span id="nav-config"><a href="/docs/config/">Configuration</a></span>
                      <span id="nav-examples"><a href="/examples/">Examples</a></span>
                      <span id="nav-wiki"><a href="https://wiki.apache.org/tomcat/FrontPage">Wiki</a></span>
                      <span id="nav-lists"><a href="https://tomcat.apache.org/lists.html">Mailing Lists</a></span>
                      <span id="nav-help"><a href="https://tomcat.apache.org/findhelp.html">Find Help</a></span>
                      <br class="separator" />
                  </div>
                  <div id="asf-box">
                      <h1>Apache Tomcat/8.5.53</h1>
                  </div>
                  <div id="upper" class="curved container">
                      <div id="congrats" class="curved container">
                          <h2>If you're seeing this, you've successfully installed Tomcat. Congratulations!</h2>
                      </div>
                      <div id="notice">
                          <img src="tomcat.png" alt="[tomcat logo]" />
                          <div id="tasks">
                              <h3>Recommended Reading:</h3>
                              <h4><a href="/docs/security-howto.html">Security Considerations How-To</a></h4>
                              <h4><a href="/docs/manager-howto.html">Manager Application How-To</a></h4>
                              <h4><a href="/docs/cluster-howto.html">Clustering/Session Replication How-To</a></h4>
                          </div>
                      </div>
                      <div id="actions">
                          <div class="button">
                              <a class="container shadow" href="/manager/status"><span>Server Status</span></a>
                          </div>
                          <div class="button">
                              <a class="container shadow" href="/manager/html"><span>Manager App</span></a>
                          </div>
                          <div class="button">
                              <a class="container shadow" href="/host-manager/html"><span>Host Manager</span></a>
                          </div>
                      </div>
                      <br class="separator" />
                  </div>
                  <div id="middle" class="curved container">
                      <h3>Developer Quick Start</h3>
                      <div class="col25">
                          <div class="container">
                              <p><a href="/docs/setup.html">Tomcat Setup</a></p>
                              <p><a href="/docs/appdev/">First Web Application</a></p>
                          </div>
                      </div>
                      <div class="col25">
                          <div class="container">
                              <p><a href="/docs/realm-howto.html">Realms &amp; AAA</a></p>
                              <p><a href="/docs/jndi-datasource-examples-howto.html">JDBC DataSources</a></p>
                          </div>
                      </div>
                      <div class="col25">
                          <div class="container">
                              <p><a href="/examples/">Examples</a></p>
                          </div>
                      </div>
                      <div class="col25">
                          <div class="container">
                              <p><a href="https://wiki.apache.org/tomcat/Specifications">Servlet Specifications</a></p>
                              <p><a href="https://wiki.apache.org/tomcat/TomcatVersions">Tomcat Versions</a></p>
                          </div>
                      </div>
                      <br class="separator" />
                  </div>
                  <div id="lower">
                      <div id="low-manage" class="">
                          <div class="curved container">
                              <h3>Managing Tomcat</h3>
                              <p>For security, access to the <a href="/manager/html">manager webapp</a> is restricted.
                              Users are defined in:</p>
                              <pre>$CATALINA_HOME/conf/tomcat-users.xml</pre>
                              <p>In Tomcat 8.5 access to the manager application is split between
                                 different users. &nbsp; <a href="/docs/manager-howto.html">Read more...</a></p>
                              <br />
                              <h4><a href="/docs/RELEASE-NOTES.txt">Release Notes</a></h4>
                              <h4><a href="/docs/changelog.html">Changelog</a></h4>
                              <h4><a href="https://tomcat.apache.org/migration.html">Migration Guide</a></h4>
                              <h4><a href="https://tomcat.apache.org/security.html">Security Notices</a></h4>
                          </div>
                      </div>
                      <div id="low-docs" class="">
                          <div class="curved container">
                              <h3>Documentation</h3>
                              <h4><a href="/docs/">Tomcat 8.5 Documentation</a></h4>
                              <h4><a href="/docs/config/">Tomcat 8.5 Configuration</a></h4>
                              <h4><a href="https://wiki.apache.org/tomcat/FrontPage">Tomcat Wiki</a></h4>
                              <p>Find additional important configuration information in:</p>
                              <pre>$CATALINA_HOME/RUNNING.txt</pre>
                              <p>Developers may be interested in:</p>
                              <ul>
                                  <li><a href="https://tomcat.apache.org/bugreport.html">Tomcat 8.5 Bug Database</a></li>
                                  <li><a href="/docs/api/index.html">Tomcat 8.5 JavaDocs</a></li>
                                  <li><a href="https://github.com/apache/tomcat/tree/8.5.x">Tomcat 8.5 Git Repository at GitHub</a></li>
                              </ul>
                          </div>
                      </div>
                      <div id="low-help" class="">
                          <div class="curved container">
                              <h3>Getting Help</h3>
                              <h4><a href="https://tomcat.apache.org/faq/">FAQ</a> and <a href="https://tomcat.apache.org/lists.html">Mailing Lists</a></h4>
                              <p>The following mailing lists are available:</p>
                              <ul>
                                  <li id="list-announce"><strong><a href="https://tomcat.apache.org/lists.html#tomcat-announce">tomcat-announce</a><br />
                                      Important announcements, releases, security vulnerability notifications. (Low volume).</strong>
                                  </li>
                                  <li><a href="https://tomcat.apache.org/lists.html#tomcat-users">tomcat-users</a><br />
                                      User support and discussion
                                  </li>
                                  <li><a href="https://tomcat.apache.org/lists.html#taglibs-user">taglibs-user</a><br />
                                      User support and discussion for <a href="https://tomcat.apache.org/taglibs/">Apache Taglibs</a>
                                  </li>
                                  <li><a href="https://tomcat.apache.org/lists.html#tomcat-dev">tomcat-dev</a><br />
                                      Development mailing list, including commit messages
                                  </li>
                              </ul>
                          </div>
                      </div>
                      <br class="separator" />
                  </div>
                  <div id="footer" class="curved container">
                      <div class="col20">
                          <div class="container">
                              <h4>Other Downloads</h4>
                              <ul>
                                  <li><a href="https://tomcat.apache.org/download-connectors.cgi">Tomcat Connectors</a></li>
                                  <li><a href="https://tomcat.apache.org/download-native.cgi">Tomcat Native</a></li>
                                  <li><a href="https://tomcat.apache.org/taglibs/">Taglibs</a></li>
                                  <li><a href="/docs/deployer-howto.html">Deployer</a></li>
                              </ul>
                          </div>
                      </div>
                      <div class="col20">
                          <div class="container">
                              <h4>Other Documentation</h4>
                              <ul>
                                  <li><a href="https://tomcat.apache.org/connectors-doc/">Tomcat Connectors</a></li>
                                  <li><a href="https://tomcat.apache.org/connectors-doc/">mod_jk Documentation</a></li>
                                  <li><a href="https://tomcat.apache.org/native-doc/">Tomcat Native</a></li>
                                  <li><a href="/docs/deployer-howto.html">Deployer</a></li>
                              </ul>
                          </div>
                      </div>
                      <div class="col20">
                          <div class="container">
                              <h4>Get Involved</h4>
                              <ul>
                                  <li><a href="https://tomcat.apache.org/getinvolved.html">Overview</a></li>
                                  <li><a href="https://tomcat.apache.org/source.html">Source Repositories</a></li>
                                  <li><a href="https://tomcat.apache.org/lists.html">Mailing Lists</a></li>
                                  <li><a href="https://wiki.apache.org/tomcat/FrontPage">Wiki</a></li>
                              </ul>
                          </div>
                      </div>
                      <div class="col20">
                          <div class="container">
                              <h4>Miscellaneous</h4>
                              <ul>
                                  <li><a href="https://tomcat.apache.org/contact.html">Contact</a></li>
                                  <li><a href="https://tomcat.apache.org/legal.html">Legal</a></li>
                                  <li><a href="https://www.apache.org/foundation/sponsorship.html">Sponsorship</a></li>
                                  <li><a href="https://www.apache.org/foundation/thanks.html">Thanks</a></li>
                              </ul>
                          </div>
                      </div>
                      <div class="col20">
                          <div class="container">
                              <h4>Apache Software Foundation</h4>
                              <ul>
                                  <li><a href="https://tomcat.apache.org/whoweare.html">Who We Are</a></li>
                                  <li><a href="https://tomcat.apache.org/heritage.html">Heritage</a></li>
                                  <li><a href="https://www.apache.org">Apache Home</a></li>
                                  <li><a href="https://tomcat.apache.org/resources.html">Resources</a></li>
                              </ul>
                          </div>
                      </div>
                      <br class="separator" />
                  </div>
                  <p class="copyright">Copyright &copy;1999-2024 Apache Software Foundation.  All Rights Reserved</p>
              </div>
          </body>
      
      </html>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:35:29.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "apache.org",
                  "github.com"
               ],
               "file" : [
                  "release-notes.txt",
                  "download-connectors.cgi",
                  "download-native.cgi"
               ],
               "hostname" : [
                  "github.com",
                  "tomcat.apache.org",
                  "wiki.apache.org",
                  "www.apache.org"
               ],
               "url" : [
                  "https://github.com/apache/tomcat/tree/8.5.x",
                  "https://tomcat.apache.org/",
                  "https://tomcat.apache.org/bugreport.html",
                  "https://tomcat.apache.org/connectors-doc/",
                  "https://tomcat.apache.org/contact.html",
                  "https://tomcat.apache.org/download-connectors.cgi",
                  "https://tomcat.apache.org/download-native.cgi",
                  "https://tomcat.apache.org/faq/",
                  "https://tomcat.apache.org/findhelp.html",
                  "https://tomcat.apache.org/getinvolved.html",
                  "https://tomcat.apache.org/heritage.html",
                  "https://tomcat.apache.org/legal.html",
                  "https://tomcat.apache.org/lists.html",
                  "https://tomcat.apache.org/migration.html",
                  "https://tomcat.apache.org/native-doc/",
                  "https://tomcat.apache.org/resources.html",
                  "https://tomcat.apache.org/security.html",
                  "https://tomcat.apache.org/source.html",
                  "https://tomcat.apache.org/taglibs/",
                  "https://tomcat.apache.org/whoweare.html",
                  "https://wiki.apache.org/tomcat/FrontPage",
                  "https://wiki.apache.org/tomcat/Specifications",
                  "https://wiki.apache.org/tomcat/TomcatVersions",
                  "https://www.apache.org",
                  "https://www.apache.org/foundation/sponsorship.html",
                  "https://www.apache.org/foundation/thanks.html"
               ]
            },
            "http" : {
               "bodymd5" : "6c22ed3ac115bdef49809a6847e03801",
               "bodymmh3" : -814932448,
               "component" : [
                  {
                     "product" : "Tomcat",
                     "productversion" : "8.5.53",
                     "productvendor" : "Apache"
                  },
                  {
                     "productversion" : "1.1.0l",
                     "productvendor" : "OpenSSL",
                     "product" : "OpenSSL"
                  }
               ],
               "headermd5" : "90861f3c0f92126929cf68e73629faa1",
               "headermmh3" : 412212996,
               "title" : "Apache Tomcat/8.5.53"
            },
            "length" : 11400
         },
         "asn" : "AS54290",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 200\r\nDate: Thu, 21 Nov 2024 08:35:29 UTC\r\nServer: Apache/2.4.41 (Unix) OpenSSL/1.1.0l\r\nContent-Type: text/html;charset=UTF-8\r\nVary: Accept-Encoding\r\nTransfer-Encoding: chunked\r\n\r\n2bbb\r\n\n\n\n<!DOCTYPE html>\n<html lang=\"en\">\n    <head>\n        <meta charset=\"UTF-8\" />\n        <title>Apache Tomcat/8.5.53</title>\n        <link href=\"favicon.ico\" rel=\"icon\" type=\"image/x-icon\" />\n        <link href=\"favicon.ico\" rel=\"shortcut icon\" type=\"image/x-icon\" />\n        <link href=\"tomcat.css\" rel=\"stylesheet\" type=\"text/css\" />\n    </head>\n\n    <body>\n        <div id=\"wrapper\">\n            <div id=\"navigation\" class=\"curved container\">\n                <span id=\"nav-home\"><a href=\"https://tomcat.apache.org/\">Home</a></span>\n                <span id=\"nav-hosts\"><a href=\"/docs/\">Documentation</a></span>\n                <span id=\"nav-config\"><a href=\"/docs/config/\">Configuration</a></span>\n                <span id=\"nav-examples\"><a href=\"/examples/\">Examples</a></span>\n                <span id=\"nav-wiki\"><a href=\"https://wiki.apache.org/tomcat/FrontPage\">Wiki</a></span>\n                <span id=\"nav-lists\"><a href=\"https://tomcat.apache.org/lists.html\">Mailing Lists</a></span>\n                <span id=\"nav-help\"><a href=\"https://tomcat.apache.org/findhelp.html\">Find Help</a></span>\n                <br class=\"separator\" />\n            </div>\n            <div id=\"asf-box\">\n                <h1>Apache Tomcat/8.5.53</h1>\n            </div>\n            <div id=\"upper\" class=\"curved container\">\n                <div id=\"congrats\" class=\"curved container\">\n                    <h2>If you're seeing this, you've successfully installed Tomcat. Congratulations!</h2>\n                </div>\n                <div id=\"notice\">\n                    <img src=\"tomcat.png\" alt=\"[tomcat logo]\" />\n                    <div id=\"tasks\">\n                        <h3>Recommended Reading:</h3>\n                        <h4><a href=\"/docs/security-howto.html\">Security Considerations How-To</a></h4>\n                        <h4><a href=\"/docs/manager-howto.html\">Manager Application How-To</a></h4>\n                        <h4><a href=\"/docs/cluster-howto.html\">Clustering/Session Replication How-To</a></h4>\n                    </div>\n                </div>\n                <div id=\"actions\">\n                    <div class=\"button\">\n                        <a class=\"container shadow\" href=\"/manager/status\"><span>Server Status</span></a>\n                    </div>\n                    <div class=\"button\">\n                        <a class=\"container shadow\" href=\"/manager/html\"><span>Manager App</span></a>\n                    </div>\n                    <div class=\"button\">\n                        <a class=\"container shadow\" href=\"/host-manager/html\"><span>Host Manager</span></a>\n                    </div>\n                </div>\n                <br class=\"separator\" />\n            </div>\n            <div id=\"middle\" class=\"curved container\">\n                <h3>Developer Quick Start</h3>\n                <div class=\"col25\">\n                    <div class=\"container\">\n                        <p><a href=\"/docs/setup.html\">Tomcat Setup</a></p>\n                        <p><a href=\"/docs/appdev/\">First Web Application</a></p>\n                    </div>\n                </div>\n                <div class=\"col25\">\n                    <div class=\"container\">\n                        <p><a href=\"/docs/realm-howto.html\">Realms &amp; AAA</a></p>\n                        <p><a href=\"/docs/jndi-datasource-examples-howto.html\">JDBC DataSources</a></p>\n                    </div>\n                </div>\n                <div class=\"col25\">\n                    <div class=\"container\">\n                        <p><a href=\"/examples/\">Examples</a></p>\n                    </div>\n                </div>\n                <div class=\"col25\">\n                    <div class=\"container\">\n                        <p><a href=\"https://wiki.apache.org/tomcat/Specifications\">Servlet Specifications</a></p>\n                        <p><a href=\"https://wiki.apache.org/tomcat/TomcatVersions\">Tomcat Versions</a></p>\n                    </div>\n                </div>\n                <br class=\"separator\" />\n            </div>\n            <div id=\"lower\">\n                <div id=\"low-manage\" class=\"\">\n                    <div class=\"curved container\">\n                        <h3>Managing Tomcat</h3>\n                        <p>For security, access to the <a href=\"/manager/html\">manager webapp</a> is restricted.\n                        Users are defined in:</p>\n                        <pre>$CATALINA_HOME/conf/tomcat-users.xml</pre>\n                        <p>In Tomcat 8.5 access to the manager application is split between\n                           different users. &nbsp; <a href=\"/docs/manager-howto.html\">Read more...</a></p>\n                        <br />\n                        <h4><a href=\"/docs/RELEASE-NOTES.txt\">Release Notes</a></h4>\n                        <h4><a href=\"/docs/changelog.html\">Changelog</a></h4>\n                        <h4><a href=\"https://tomcat.apache.org/migration.html\">Migration Guide</a></h4>\n                        <h4><a href=\"https://tomcat.apache.org/security.html\">Security Notices</a></h4>\n                    </div>\n                </div>\n                <div id=\"low-docs\" class=\"\">\n                    <div class=\"curved container\">\n                        <h3>Documentation</h3>\n                        <h4><a href=\"/docs/\">Tomcat 8.5 Documentation</a></h4>\n                        <h4><a href=\"/docs/config/\">Tomcat 8.5 Configuration</a></h4>\n                        <h4><a href=\"https://wiki.apache.org/tomcat/FrontPage\">Tomcat Wiki</a></h4>\n                        <p>Find additional important configuration information in:</p>\n                        <pre>$CATALINA_HOME/RUNNING.txt</pre>\n                        <p>Developers may be interested in:</p>\n                        <ul>\n                            <li><a href=\"https://tomcat.apache.org/bugreport.html\">Tomcat 8.5 Bug Database</a></li>\n                            <li><a href=\"/docs/api/index.html\">Tomcat 8.5 JavaDocs</a></li>\n                            <li><a href=\"https://github.com/apache/tomcat/tree/8.5.x\">Tomcat 8.5 Git Repository at GitHub</a></li>\n                        </ul>\n                    </div>\n                </div>\n                <div id=\"low-help\" class=\"\">\n                    <div class=\"curved container\">\n                        <h3>Getting Help</h3>\n                        <h4><a href=\"https://tomcat.apache.org/faq/\">FAQ</a> and <a href=\"https://tomcat.apache.org/lists.html\">Mailing Lists</a></h4>\n                        <p>The following mailing lists are available:</p>\n                        <ul>\n                            <li id=\"list-announce\"><strong><a href=\"https://tomcat.apache.org/lists.html#tomcat-announce\">tomcat-announce</a><br />\n                                Important announcements, releases, security vulnerability notifications. (Low volume).</strong>\n                            </li>\n                            <li><a href=\"https://tomcat.apache.org/lists.html#tomcat-users\">tomcat-users</a><br />\n                                User support and discussion\n                            </li>\n                            <li><a href=\"https://tomcat.apache.org/lists.html#taglibs-user\">taglibs-user</a><br />\n                                User support and discussion for <a href=\"https://tomcat.apache.org/taglibs/\">Apache Taglibs</a>\n                            </li>\n                            <li><a href=\"https://tomcat.apache.org/lists.html#tomcat-dev\">tomcat-dev</a><br />\n                                Development mailing list, including commit messages\n                            </li>\n                        </ul>\n                    </div>\n                </div>\n                <br class=\"separator\" />\n            </div>\n            <div id=\"footer\" class=\"curved container\">\n                <div class=\"col20\">\n                    <div class=\"container\">\n                        <h4>Other Downloads</h4>\n                        <ul>\n                            <li><a href=\"https://tomcat.apache.org/download-connectors.cgi\">Tomcat Connectors</a></li>\n                            <li><a href=\"https://tomcat.apache.org/download-native.cgi\">Tomcat Native</a></li>\n                            <li><a href=\"https://tomcat.apache.org/taglibs/\">Taglibs</a></li>\n                            <li><a href=\"/docs/deployer-howto.html\">Deployer</a></li>\n                        </ul>\n                    </div>\n                </div>\n                <div class=\"col20\">\n                    <div class=\"container\">\n                        <h4>Other Documentation</h4>\n                        <ul>\n                            <li><a href=\"https://tomcat.apache.org/connectors-doc/\">Tomcat Connectors</a></li>\n                            <li><a href=\"https://tomcat.apache.org/connectors-doc/\">mod_jk Documentation</a></li>\n                            <li><a href=\"https://tomcat.apache.org/native-doc/\">Tomcat Native</a></li>\n                            <li><a href=\"/docs/deployer-howto.html\">Deployer</a></li>\n                        </ul>\n                    </div>\n                </div>\n                <div class=\"col20\">\n                    <div class=\"container\">\n                        <h4>Get Involved</h4>\n                        <ul>\n                            <li><a href=\"https://tomcat.apache.org/getinvolved.html\">Overview</a></li>\n                            <li><a href=\"https://tomcat.apache.org/source.html\">Source Repositories</a></li>\n                            <li><a href=\"https://tomcat.apache.org/lists.html\">Mailing Lists</a></li>\n                            <li><a href=\"https://wiki.apache.org/tomcat/FrontPage\">Wiki</a></li>\n                        </ul>\n                    </div>\n                </div>\n                <div class=\"col20\">\n                    <div class=\"container\">\n                        <h4>Miscellaneous</h4>\n                        <ul>\n                            <li><a href=\"https://tomcat.apache.org/contact.html\">Contact</a></li>\n                            <li><a href=\"https://tomcat.apache.org/legal.html\">Legal</a></li>\n                            <li><a href=\"https://www.apache.org/foundation/sponsorship.html\">Sponsorship</a></li>\n                            <li><a href=\"https://www.apache.org/foundation/thanks.html\">Thanks</a></li>\n                        </ul>\n                    </div>\n                </div>\n                <div class=\"col20\">\n                    <div class=\"container\">\n                        <h4>Apache Software Foundation</h4>\n                        <ul>\n                            <li><a href=\"https://tomcat.apache.org/whoweare.html\">Who We Are</a></li>\n                            <li><a href=\"https://tomcat.apache.org/heritage.html\">Heritage</a></li>\n                            <li><a href=\"https://www.apache.org\">Apache Home</a></li>\n                            <li><a href=\"https://tomcat.apache.org/resources.html\">Resources</a></li>\n                        </ul>\n                    </div>\n                </div>\n                <br class=\"separator\" />\n            </div>\n            <p class=\"copyright\">Copyright &copy;1999-2024 Apache Software Foundation.  All Rights Reserved</p>\n        </div>\n    </body>\n\n</html>\n\r\n0\r\n\r\n",
         "datamd5" : "9ed0944ac473b16a68e75f8ebe5ae91d",
         "datammh3" : 1058207474,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "hostwindsdns.com"
         ],
         "geolocus" : {
            "asn" : "AS54290",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "hostwinds.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HOSTWINDS-17-3",
            "organization" : "Hostwinds LLC.",
            "subnet" : "192.236.192.0/22"
         },
         "host" : [
            "client-192-236-192-200"
         ],
         "hostname" : [
            "client-192-236-192-200.hostwindsdns.com"
         ],
         "ip" : "192.236.192.200",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HOSTWINDS",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4570,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "productversion" : "2.4.41",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : 200,
         "reverse" : [
            "client-192-236-192-200.hostwindsdns.com"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "192.236.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 23.254.225.168:4570 (tcp/http) - last seen on 2024-11-15 at 21:34:06 UTC

    • IP
      23.254.225.168
      Network
      23.254.128.0/17
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product <enterprise field>: device.productversion

      Operating System
      Citrix Gateway Firmware
      URL

      http://23.254.225.168:4570/vpn/index.html 200

      HTTP Title
      Citrix Gateway
      Reverse DNS
      hwsrv-571070.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      http
      Source
      urlscan::redirect
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      hostwindsdns.com
      Hostname(s)
      23.254.225.168 client-104-168-201-213.hostwindsdns.com client-104-168-202-21.hostwindsdns.com client-104-168-202-24.hostwindsdns.com client-142-11-210-136.hostwindsdns.com client-192-236-192-200.hostwindsdns.com hwsrv-1067198.hostwindsdns.com hwsrv-571070.hostwindsdns.com hwsrv-742874.hostwindsdns.com
      IP(s)
      104.168.160.78 104.168.190.93 104.168.201.213 104.168.202.21 104.168.202.24 142.11.210.136 192.236.192.200 23.254.225.168
      Port(s)
      4570
      Protocol(s)
      http
      Tag(s)
      URL(s)
      / /api/sonicos/tfa /vpn/index.html
    • Operating System
      Citrix Gateway Firmware
      Product
      Apache HTTP Server
      HTTP Component(s)
      Citrix Gateway
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f5076bfab82894487b3c8e00a485d3ca
      HTTP Header MD5
      42ba6d64082ee5d2d9eb458298a900f2
      HTTP Body MD5
      bb15632ebb2b0c235f7fa44d76097552
    • HTTP/1.1 200 OK
      Date: Fri, 15 Nov 2024 21:34:06 UTC
      Server: Apache
      X-Frame-Options: SAMEORIGIN
      Last-Modified: Sat, 24 Jun 2023 01:06:24 GMT
      ETag: af8-5fed5b9e78400
      Accept-Ranges: bytes
      Content-Length: 2808
      Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none'
      Referrer-Policy: no-referrer
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Cache-Control: no-cache, no-store, must-revalidate
      Pragma: no-cache
      Expires: 0
      Content-Type: text/html; charset=utf-8
      Set-Cookie: pwcount=0;Secure;HttpOnly;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Cache-Control: no-cache
      Strict-Transport-Security: max-age=157680000
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XDEV_HTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml">
      <head>
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <title>Citrix Gateway</title>
      <link rel="SHORTCUT ICON" href="/vpn/images/AccessGateway.ico" type="image/vnd.microsoft.icon">
      <META http-equiv="Content-Type" content="text/html; charset=UTF-8">
      <META content=noindex,nofollow,noarchive name=robots>
      <link href="/vpn/js/rdx/core/css/rdx.css?v=1884e7877a13a991b6d3fac01efbaf79" rel="stylesheet" type="text/css"/>
      <link href="/logon/themes/Default/css/base.css?v=1884e7877a13a991b6d3fac01efbaf79" rel="stylesheet" type="text/css" media="screen" />
      <link rel="stylesheet" href="/logon/fonts/citrix-fonts.css?v=1884e7877a13a991b6d3fac01efbaf79" type="text/css">
      <link href="/logon/themes/Default/css/custom.css?v=1884e7877a13a991b6d3fac01efbaf79" rel="stylesheet" type="text/css"/>
      <script type="text/javascript" src="/vpn/js/rdx.js?v=1884e7877a13a991b6d3fac01efbaf79"></script>
      <script type="text/javascript" src="/vpn/resources.js?v=1884e7877a13a991b6d3fac01efbaf79"></script>
      <script type="text/javascript" src="/vpn/nsshare.js?v=1884e7877a13a991b6d3fac01efbaf79"></script>
      <script type="text/javascript" src="/vpn/init/index.js?v=1884e7877a13a991b6d3fac01efbaf79"></script> 
      <script type="text/javascript" src="/vpn/login.js?v=1884e7877a13a991b6d3fac01efbaf79"></script>
      <script type="text/javascript" src="/vpn/js/views.js?v=1884e7877a13a991b6d3fac01efbaf79"></script>
      <script type="text/javascript" src="/vpn/js/gateway_login_view.js?v=1884e7877a13a991b6d3fac01efbaf79"></script>
      <script type="text/javascript" src="/vpn/js/gateway_login_form_view.js?v=1884e7877a13a991b6d3fac01efbaf79"></script> 
      
      <style type="text/css">
      body
      {
        display : none;
        visibility: hidden;
      }
      </style>
      
      <META content="MSHTML 6.00.2900.2802" name=GENERATOR>
      </head>
      <body class="ns_body" id=bodyTag>
      <!-- Copyright 2001-2005 Citrix Systems, Inc. All Rights Reserved -->
      <NOSCRIPT>
      <BR><BR>
      <table style="WIDTH: 100%">
      <tr>
       	<td align="center">
      		<table class="CTXMSAM_LogonFont">
      			<tr id="errorMessageRow">
      				<td class="glowBoxLeft">&nbsp;</td>                            
      				<td class="loginTableMidWidth">
      					<div id="feedbackArea">
      					<div id="feedbackStyle" class="feedbackStyleError">
      					<span id="errorMessageLabel" class="messageStyle">
      					JavaScript is either disabled in or not supported by the Web browser.  
      					To continue logon, use a Web browser that supports JavaScript or enable JavaScript in your current browser.
      					</span>
      					</div>
      					</div>
      				</td>                           
      				<td class="glowBoxRight">&nbsp;</td>
      			</tr>
      		</table>
      	</td>
      </tr>
      </table>
      
      <table style="display:none">
      </NOSCRIPT>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-15T21:34:06.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "bb15632ebb2b0c235f7fa44d76097552",
               "bodymmh3" : 1421907982,
               "component" : [
                  {
                     "productvendor" : "Citrix",
                     "product" : "Gateway"
                  }
               ],
               "header" : [
                  {
                     "value" : "Sat, 24 Jun 2023 01:06:24 GMT",
                     "name" : "Last-Modified"
                  },
                  {
                     "value" : "af8-5fed5b9e78400",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "42ba6d64082ee5d2d9eb458298a900f2",
               "headermmh3" : 1948666091,
               "title" : "Citrix Gateway"
            },
            "length" : 3473
         },
         "asn" : "AS54290",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Fri, 15 Nov 2024 21:34:06 UTC\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nLast-Modified: Sat, 24 Jun 2023 01:06:24 GMT\r\nETag: af8-5fed5b9e78400\r\nAccept-Ranges: bytes\r\nContent-Length: 2808\r\nFeature-Policy: camera 'none'; microphone 'none'; geolocation 'none'\r\nReferrer-Policy: no-referrer\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nExpires: 0\r\nContent-Type: text/html; charset=utf-8\r\nSet-Cookie: pwcount=0;Secure;HttpOnly;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nCache-Control: no-cache\r\nStrict-Transport-Security: max-age=157680000\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XDEV_HTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\n<head>\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<title>Citrix Gateway</title>\n<link rel=\"SHORTCUT ICON\" href=\"/vpn/images/AccessGateway.ico\" type=\"image/vnd.microsoft.icon\">\n<META http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\">\n<META content=noindex,nofollow,noarchive name=robots>\n<link href=\"/vpn/js/rdx/core/css/rdx.css?v=1884e7877a13a991b6d3fac01efbaf79\" rel=\"stylesheet\" type=\"text/css\"/>\n<link href=\"/logon/themes/Default/css/base.css?v=1884e7877a13a991b6d3fac01efbaf79\" rel=\"stylesheet\" type=\"text/css\" media=\"screen\" />\n<link rel=\"stylesheet\" href=\"/logon/fonts/citrix-fonts.css?v=1884e7877a13a991b6d3fac01efbaf79\" type=\"text/css\">\n<link href=\"/logon/themes/Default/css/custom.css?v=1884e7877a13a991b6d3fac01efbaf79\" rel=\"stylesheet\" type=\"text/css\"/>\n<script type=\"text/javascript\" src=\"/vpn/js/rdx.js?v=1884e7877a13a991b6d3fac01efbaf79\"></script>\n<script type=\"text/javascript\" src=\"/vpn/resources.js?v=1884e7877a13a991b6d3fac01efbaf79\"></script>\n<script type=\"text/javascript\" src=\"/vpn/nsshare.js?v=1884e7877a13a991b6d3fac01efbaf79\"></script>\n<script type=\"text/javascript\" src=\"/vpn/init/index.js?v=1884e7877a13a991b6d3fac01efbaf79\"></script> \n<script type=\"text/javascript\" src=\"/vpn/login.js?v=1884e7877a13a991b6d3fac01efbaf79\"></script>\n<script type=\"text/javascript\" src=\"/vpn/js/views.js?v=1884e7877a13a991b6d3fac01efbaf79\"></script>\n<script type=\"text/javascript\" src=\"/vpn/js/gateway_login_view.js?v=1884e7877a13a991b6d3fac01efbaf79\"></script>\n<script type=\"text/javascript\" src=\"/vpn/js/gateway_login_form_view.js?v=1884e7877a13a991b6d3fac01efbaf79\"></script> \n\n<style type=\"text/css\">\nbody\n{\n  display : none;\n  visibility: hidden;\n}\n</style>\n\n<META content=\"MSHTML 6.00.2900.2802\" name=GENERATOR>\n</head>\n<body class=\"ns_body\" id=bodyTag>\n<!-- Copyright 2001-2005 Citrix Systems, Inc. All Rights Reserved -->\n<NOSCRIPT>\n<BR><BR>\n<table style=\"WIDTH: 100%\">\n<tr>\n \t<td align=\"center\">\n\t\t<table class=\"CTXMSAM_LogonFont\">\n\t\t\t<tr id=\"errorMessageRow\">\n\t\t\t\t<td class=\"glowBoxLeft\">&nbsp;</td>                            \n\t\t\t\t<td class=\"loginTableMidWidth\">\n\t\t\t\t\t<div id=\"feedbackArea\">\n\t\t\t\t\t<div id=\"feedbackStyle\" class=\"feedbackStyleError\">\n\t\t\t\t\t<span id=\"errorMessageLabel\" class=\"messageStyle\">\n\t\t\t\t\tJavaScript is either disabled in or not supported by the Web browser.  \n\t\t\t\t\tTo continue logon, use a Web browser that supports JavaScript or enable JavaScript in your current browser.\n\t\t\t\t\t</span>\n\t\t\t\t\t</div>\n\t\t\t\t\t</div>\n\t\t\t\t</td>                           \n\t\t\t\t<td class=\"glowBoxRight\">&nbsp;</td>\n\t\t\t</tr>\n\t\t</table>\n\t</td>\n</tr>\n</table>\n\n<table style=\"display:none\">\n</NOSCRIPT>\n</body>\n</html>\n",
         "datamd5" : "f5076bfab82894487b3c8e00a485d3ca",
         "datammh3" : 2022055807,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor",
            "productversion" : "<enterprise field>: device.productversion"
         },
         "domain" : [
            "hostwindsdns.com"
         ],
         "forward" : "23.254.225.168",
         "geolocus" : {
            "asn" : "AS54290",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "hostwinds.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HOSTWINDS-17-6",
            "organization" : "Hostwinds LLC.",
            "subnet" : "23.254.224.0/21"
         },
         "host" : [
            "hwsrv-571070"
         ],
         "hostname" : [
            "23.254.225.168",
            "hwsrv-571070.hostwindsdns.com"
         ],
         "ip" : "23.254.225.168",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HOSTWINDS",
         "os" : "Gateway Firmware",
         "osvendor" : "Citrix",
         "port" : 4570,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "hwsrv-571070.hostwindsdns.com"
         ],
         "seen_date" : "2024-11-15",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "23.254.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/vpn/index.html"
      }
      
  • 23.254.225.168:4570 (tcp/http) - last seen on 2024-11-15 at 21:27:40 UTC

    • IP
      23.254.225.168
      Alternative IP(s)
      2a0d:7c40:3000:6dd:0:0:0:2
      Network
      23.254.128.0/17
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Citrix Gateway Firmware
      URL

      http://23.254.225.168:4570/ 302

      Reverse DNS
      hwsrv-571070.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      http
      Source
      datascan
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      hostwindsdns.com
      Hostname(s)
      23.254.225.168 client-104-168-201-213.hostwindsdns.com client-104-168-202-21.hostwindsdns.com client-104-168-202-24.hostwindsdns.com client-142-11-210-136.hostwindsdns.com client-192-236-192-200.hostwindsdns.com hwsrv-1067198.hostwindsdns.com hwsrv-571070.hostwindsdns.com hwsrv-742874.hostwindsdns.com
      IP(s)
      104.168.160.78 104.168.190.93 104.168.201.213 104.168.202.21 104.168.202.24 142.11.210.136 192.236.192.200 23.254.225.168
      Port(s)
      4570
      Protocol(s)
      http
      Tag(s)
      URL(s)
      / /api/sonicos/tfa /vpn/index.html
    • Operating System
      Citrix Gateway Firmware
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      44849f87bcf4bb81918e40b71919d9da
      HTTP Header MD5
      18ace997d16ca637eae1e741b04b6e3e
      HTTP Body MD5
      7f568770b024b5f553c2f46a4315d749
    • HTTP/1.1 302 Found
      Location: /vpn/index.html
      Set-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_EPAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_USER=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_BASEURL=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: CsrfToken=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: CtxsAuthId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: ASP.NET_SessionId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_TMAA=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Set-Cookie: NSC_TMAS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Set-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Set-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Connection: close
      Content-Length: 398
      Cache-control: no-cache, no-store, must-revalidate
      Pragma: no-cache
      Content-Type: text/html; charset=utf-8
      
      <html><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-8"><script type="text/javascript" src="/vpn/resources.js"></script><script type="text/javascript" src="/vpn/init/redirection_body_resources.js"></script></head><body><span id="This object may be found "></span><a href="/vpn/index.html"><span id="here"></span></a><span id="Trailing phrase after here"></span></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-15T21:27:40.000Z",
         "alternativeip" : [
            "2a0d:7c40:3000:6dd:0:0:0:2"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "7f568770b024b5f553c2f46a4315d749",
               "bodymmh3" : -1140647885,
               "headermd5" : "18ace997d16ca637eae1e741b04b6e3e",
               "headermmh3" : 985755436
            },
            "length" : 1826
         },
         "asn" : "AS54290",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nLocation: /vpn/index.html\r\nSet-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_EPAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_USER=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_BASEURL=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: CsrfToken=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: CtxsAuthId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: ASP.NET_SessionId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_TMAA=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nSet-Cookie: NSC_TMAS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nSet-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nSet-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nConnection: close\r\nContent-Length: 398\r\nCache-control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nContent-Type: text/html; charset=utf-8\r\n\r\n<html><head><META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=UTF-8\"><script type=\"text/javascript\" src=\"/vpn/resources.js\"></script><script type=\"text/javascript\" src=\"/vpn/init/redirection_body_resources.js\"></script></head><body><span id=\"This object may be found \"></span><a href=\"/vpn/index.html\"><span id=\"here\"></span></a><span id=\"Trailing phrase after here\"></span></body></html>",
         "datamd5" : "44849f87bcf4bb81918e40b71919d9da",
         "datammh3" : -1525738187,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "hostwindsdns.com"
         ],
         "geolocus" : {
            "asn" : "AS54290",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "hostwinds.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HOSTWINDS-17-6",
            "organization" : "Hostwinds LLC.",
            "subnet" : "23.254.224.0/21"
         },
         "host" : [
            "hwsrv-571070"
         ],
         "hostname" : [
            "hwsrv-571070.hostwindsdns.com"
         ],
         "ip" : "23.254.225.168",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HOSTWINDS",
         "os" : "Gateway Firmware",
         "osvendor" : "Citrix",
         "port" : 4570,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "reverse" : [
            "hwsrv-571070.hostwindsdns.com"
         ],
         "seen_date" : "2024-11-15",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "23.254.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 104.168.160.78:4570 (tcp/http) - last seen on 2024-11-14 at 10:48:24 UTC

  • 104.168.202.21:4570 (tcp/http) - last seen on 2024-11-11 at 00:11:21 UTC

    • IP
      104.168.202.21
      Network
      104.168.128.0/17
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Juniper JunOS
      URL

      http://104.168.202.21:4570/ 200

      HTTP Title
      Log In - Juniper Web Device Manager
      Reverse DNS
      client-104-168-202-21.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      http
      Source
      datascan
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      hostwindsdns.com
      Hostname(s)
      23.254.225.168 client-104-168-201-213.hostwindsdns.com client-104-168-202-21.hostwindsdns.com client-104-168-202-24.hostwindsdns.com client-142-11-210-136.hostwindsdns.com client-192-236-192-200.hostwindsdns.com hwsrv-1067198.hostwindsdns.com hwsrv-571070.hostwindsdns.com hwsrv-742874.hostwindsdns.com
      IP(s)
      104.168.160.78 104.168.190.93 104.168.201.213 104.168.202.21 104.168.202.24 142.11.210.136 192.236.192.200 23.254.225.168
      Port(s)
      4570
      Protocol(s)
      http
      Tag(s)
      URL(s)
      / /api/sonicos/tfa /vpn/index.html
    • Operating System
      Juniper JunOS
      Product
      Embedthis Appweb 3.2.3
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1cc580767f43269e1c91c65e9cdb1934
      HTTP Header MD5
      deb479572d67a048c542720fdc218a0f
      HTTP Body MD5
      f247dbe1c7af24dd3bdd2b9cb3f41f27
    • HTTP/1.1 200 OK
      Date: Mon, 11 Nov 2024 00:11:20 UTC
      Server: Embedthis-Appweb/3.2.3
      Cache-Control: no-cache
      ETag: "8817c-64cb-5a39ae5a"
      Content-Type: text/html
      Connection: keep-alive
      Keep-Alive: timeout=120, max=199
      x-frame-options: SAMEORIGIN
      cache-control: no-cache, must-revalidate
      Last-Modified: Mon, 11 Nov 2024 00:11:20 UTC
      Transfer-Encoding: chunked
      expires: Mon, 26 Jul 1997 05:00:00 GMT
      
      25a9
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
      <html>
        <head>
          <meta http-equiv="Content-Type" content="text/html"/>
          <meta http-equiv="X-UA-Compatible" content="IE=9;IE=10;IE=Edge,chrome=1"/>
          <style id="antiClickjack">body{display:none !important;}</style>
          <script type="text/javascript">
             if (self === top) {
                 var antiClickjack = document.getElementById("antiClickjack");
                 antiClickjack.parentNode.removeChild(antiClickjack);
             } else {
                 top.location = self.location;
             }
          </script>
          <link rel="stylesheet" href="/stylesheet/juniper.css" type="text/css"/>
          <title>Log In - Juniper Web Device Manager</title>
          <link rel="shortcut icon" href='images/favicon.ico' type="image/x-icon"/>
        </head>
        <script language="javascript" type="text/javascript">
          <!--
            if (top.location.href != location.href) {
              top.location.href = location.href;
            }
          -->
        </script>
        <body id='loginbody' onLoad="">
      <!--    <a name="top"></a>
          <table class="header" width="100%" border="0" cellspacing="0" cellpadding="0">
            <tr>
              <td align="left" width="25%">
                <div class="logo">
      	    <a target="_new" href="http://www.juniper.net"><img src="/images/hdr_logo.gif" alt="Juniper Networks Home"/></a>
      	  </div>
              </td>
              <td align="center" width="50%">
                <div class="jweb-title uppercase"> - srx345-dc</div>
              </td>
              <td align="right" width="25%">&nbsp;</td>
            </tr>
          </table>
          <table id="nav" cellspacing="0" cellpadding="0">
            <tr>
              <td align="right">
      	  <table class="rightnav" cellspacing="0" cellpadding="0">
      	    <tr>
      	      <td valign="center">
      	        <a href="#" onClick="window.open('/about','About','width=500,height=170,location=no');">About</a>
      	      </td>
      	    </tr>
      	  </table>
      	</td>
            </tr>
          </table>
          <div class="bldivider"></div>
      !--><script type="text/javascript" src="/javascript/global.js"></script>       <script type="text/javascript" src="/javascript/aes/aes.js"></script>
             <script type="text/javascript" src="/javascript/aes/aes-ctr.js"></script>
             <script type="text/javascript" src="/javascript/aes/base64.js"></script>
             <script type="text/javascript" src="/javascript/aes/utf8.js"></script>
             <script>
                        var modelphpStr = "srx345-dc";
                        var useKey = "1";
      
                        function isEmpty(str) {
                                 return (!str || 0 === str.length);
                             }
      
                             function encryptCredential(password, key) {
                                 if(!isEmpty(password)) {
                                        if (useKey == "1") {
                                          document.login.password.value = Aes.Ctr.encrypt(password, key, 256);
                                        } else {
                                          document.login.password.value = Aes.Ctr.encrypt(password, Base64.encode(modelphpStr + "#js2nr0px1R2"), 256);
                                        }
                                        
                                 }
                             }
             </script>		<div class='logoimage'>&nbsp;</div>								
      		
      		<table id="loginpage" border="0" align="center" valign="middle">
      			<tr>
      				<td valign="top" align="center">                
      
      				
      		<div id ="imageDiv" class="alert-box error" style="display: none; margin: 0 auto;">You are using a browser that is not fully supported.<br>
                   J-Web works best with IE9.0, Firefox 24, Chrome 27 ( and later versions ).
              </div>	                 
      				 
      	    
      
      <!-- form starts here -->
      
      <form name="login" method="post" action="/login" id='loginform' class="loginform" style="background-color:white; width: 550px;"> 
          <input type="hidden" name="login" value="login" />
      <!-- Title and device name -->    
          <table style="width: 100%; border-collapse: collapse; border: 0px;">
                                                          <tr valign="middle">
      														<td align='left'>
      															<div class='juniperformheader'>Juniper Web Device Manager</div>
      														</td>
      													</tr>
      													<tr valign="middle">
      														<td align="left">
      															<div class='formversionheader'>SRX345-DC</div>
      														</td>
      													</tr>    
          </table>
      <!-- End Title and device name -->    
      
      <!-- Input fields -->
      <table align="left" height="220" width="100%">
      													<tr>
      														<td height="15" width='100%' valign="middle" align='left'>&nbsp;<div id='formerror' class="formerror"></div></td>
      													</tr>
      													<tr valign="middle">														
      														<td align='left'>                                                            
      															<input class="small username" type="input" name="username" size="35" placeholder='Username' id="username"  value=""   TABINDEX=1 style="height:30px;" onblur="ValidateName()"/>
                                                                  
      
      														</td>
      													</tr>
      													<tr valign="middle">														
      														<td style='padding: 0px; margin: 0px; height: 20px; text-align: left;'>                                                            
                                                                  <span id="formnamevalidation">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;This field is required.</span>
      														</td>
      													</tr>                                                    
                                                          
      													<tr valign="middle">														
      														<td align='left'>                                                        
      															<input class="small password" type="password" placeholder='Password' autocomplete="off" name="password"  size="35" id="password" TABINDEX=2  style="height:30px;" onblur="ValidatePwd()" />
      
      														</td>
      													</tr>
      													<tr valign="middle">														
      														<td style='padding: 0px; margin: 0px; height: 20px; text-align: left;'>                                                            
                                                              <span id="formpassvalidation">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;This field is required.</span>
      														</td>
      													</tr>                                                    
                                                          <tr valign="middle">														
      														<td align='left'>                                                        
      															<input class="small" type="input" autocomplete="off" name="key" value="N3KfjVJiR80j40O5Ff89YkWh3lQPU9NI" size="35" id="key" TABINDEX=3 style="display:none;" />
      														</td>
      													</tr>                                                    
                                                          
      													<tr valign="middle">
      														<td align="left" valign="middle" nowrap>
      	                                                        <input type="submit" value="Log In" id="login" onclick="return loginValidate();" />
      														</td>
      													</tr>                                                    
      </table>            
      <!-- end input fields -->                                        
      </form>
      <!-- form ends here -->                 
                       
      <div class="browserinfo">Recommended browsers are IE 10/11, Firefox 44+ and Chrome 55+</div>
      <div class='browserinfo'>Best Viewed in 1440 * 900 Resolution</div><br><br>
      <div id='copyrighttxt'>Copyright &copy; 2017, Juniper Networks, Inc. <a id='footerlink1' target="_new" href="http://www.juniper.net/footer
      							legal.html">All Rights Reserved</a> | <a id='footerlink2' target="_new" href="http://www.juniper.net/footerlegal.html#05">Trademark Notice</a> | 
      							<a id='footerlink3' target="_new" href="http://www.juniper.net/privacy.html">Privacy Policy</a> 
      </div>
      <div style='width: 100%; height: 50px;'>&nbsp;</div>
      				</td>
      			</tr>
      		</table><script language="javascript">
      
      var body = document.body, html = document.documentElement;
      var height = Math.max( body.scrollHeight, body.offsetHeight, html.clientHeight, html.scrollHeight, html.offsetHeight );
      
      document.getElementById('copyrighttxt').style.top = (height - 40) + 'px';
      
      var lform = document.getElementById('loginpage');
      
      lform.style.marginTop = ((height/2) - (lform.offsetHeight/2)) + 80 + 'px';
      
      if(!document.login.username.disabled)                                                                                                                           
      document.login.username.focus();  
      
      function ValidateName(){
          
      	if((document.getElementById('username').value)=="")
      		 document.getElementById('formnamevalidation').style.display='block';
      	else		
      		document.getElementById('formnamevalidation').style.display='none';
      }
      
      function ValidatePwd(){
          
      	if((document.getElementById('password').value)=='')
      		 document.getElementById('formpassvalidation').style.display='block';
      	else		
      		document.getElementById('formpassvalidation').style.display='none';
      }
      
      function loginValidate() {
      	
          var usrname = document.login.username.value;
          if(usrname.length > 0 && (usrname.search(/[<>]+/g) >= 0)) {
      		
              document.getElementById('formerror').innerHTML = 'Username cannot include certain characters, including < and >';
              return false;
          }
      	encryptCredential(document.login.password.value, document.login.key.value);
          return true;
      }
      </script>
      
          <link rel="stylesheet" type="text/css" href="/extjs/resources/css/ext-all.css"/>
          <script type="text/javascript" src="/extjs/ext-all.js?ver=17.4R1.16"></script>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-11T00:11:21.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "juniper.net"
               ],
               "hostname" : [
                  "www.juniper.net"
               ],
               "url" : [
                  "http://www.juniper.net",
                  "http://www.juniper.net/footer",
                  "http://www.juniper.net/footerlegal.html",
                  "http://www.juniper.net/privacy.html"
               ]
            },
            "http" : {
               "bodymd5" : "f247dbe1c7af24dd3bdd2b9cb3f41f27",
               "bodymmh3" : -629854771,
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "8817c-64cb-5a39ae5a"
                  },
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 11 Nov 2024 00:11:20 UTC"
                  }
               ],
               "headermd5" : "deb479572d67a048c542720fdc218a0f",
               "headermmh3" : 477236144,
               "title" : "Log In - Juniper Web Device Manager"
            },
            "length" : 10064
         },
         "asn" : "AS54290",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Mon, 11 Nov 2024 00:11:20 UTC\r\nServer: Embedthis-Appweb/3.2.3\r\nCache-Control: no-cache\r\nETag: \"8817c-64cb-5a39ae5a\"\r\nContent-Type: text/html\r\nConnection: keep-alive\r\nKeep-Alive: timeout=120, max=199\r\nx-frame-options: SAMEORIGIN\r\ncache-control: no-cache, must-revalidate\r\nLast-Modified: Mon, 11 Nov 2024 00:11:20 UTC\r\nTransfer-Encoding: chunked\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\n\r\n25a9\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\">\n<html>\n  <head>\n    <meta http-equiv=\"Content-Type\" content=\"text/html\"/>\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=9;IE=10;IE=Edge,chrome=1\"/>\n    <style id=\"antiClickjack\">body{display:none !important;}</style>\n    <script type=\"text/javascript\">\n       if (self === top) {\n           var antiClickjack = document.getElementById(\"antiClickjack\");\n           antiClickjack.parentNode.removeChild(antiClickjack);\n       } else {\n           top.location = self.location;\n       }\n    </script>\n    <link rel=\"stylesheet\" href=\"/stylesheet/juniper.css\" type=\"text/css\"/>\n    <title>Log In - Juniper Web Device Manager</title>\n    <link rel=\"shortcut icon\" href='images/favicon.ico' type=\"image/x-icon\"/>\n  </head>\n  <script language=\"javascript\" type=\"text/javascript\">\n    <!--\n      if (top.location.href != location.href) {\n        top.location.href = location.href;\n      }\n    -->\n  </script>\n  <body id='loginbody' onLoad=\"\">\n<!--    <a name=\"top\"></a>\n    <table class=\"header\" width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\n      <tr>\n        <td align=\"left\" width=\"25%\">\n          <div class=\"logo\">\n\t    <a target=\"_new\" href=\"http://www.juniper.net\"><img src=\"/images/hdr_logo.gif\" alt=\"Juniper Networks Home\"/></a>\n\t  </div>\n        </td>\n        <td align=\"center\" width=\"50%\">\n          <div class=\"jweb-title uppercase\"> - srx345-dc</div>\n        </td>\n        <td align=\"right\" width=\"25%\">&nbsp;</td>\n      </tr>\n    </table>\n    <table id=\"nav\" cellspacing=\"0\" cellpadding=\"0\">\n      <tr>\n        <td align=\"right\">\n\t  <table class=\"rightnav\" cellspacing=\"0\" cellpadding=\"0\">\n\t    <tr>\n\t      <td valign=\"center\">\n\t        <a href=\"#\" onClick=\"window.open('/about','About','width=500,height=170,location=no');\">About</a>\n\t      </td>\n\t    </tr>\n\t  </table>\n\t</td>\n      </tr>\n    </table>\n    <div class=\"bldivider\"></div>\n!--><script type=\"text/javascript\" src=\"/javascript/global.js\"></script>       <script type=\"text/javascript\" src=\"/javascript/aes/aes.js\"></script>\n       <script type=\"text/javascript\" src=\"/javascript/aes/aes-ctr.js\"></script>\n       <script type=\"text/javascript\" src=\"/javascript/aes/base64.js\"></script>\n       <script type=\"text/javascript\" src=\"/javascript/aes/utf8.js\"></script>\n       <script>\n                  var modelphpStr = \"srx345-dc\";\n                  var useKey = \"1\";\n\n                  function isEmpty(str) {\n                           return (!str || 0 === str.length);\n                       }\n\n                       function encryptCredential(password, key) {\n                           if(!isEmpty(password)) {\n                                  if (useKey == \"1\") {\n                                    document.login.password.value = Aes.Ctr.encrypt(password, key, 256);\n                                  } else {\n                                    document.login.password.value = Aes.Ctr.encrypt(password, Base64.encode(modelphpStr + \"#js2nr0px1R2\"), 256);\n                                  }\n                                  \n                           }\n                       }\n       </script>\t\t<div class='logoimage'>&nbsp;</div>\t\t\t\t\t\t\t\t\n\t\t\n\t\t<table id=\"loginpage\" border=\"0\" align=\"center\" valign=\"middle\">\n\t\t\t<tr>\n\t\t\t\t<td valign=\"top\" align=\"center\">                \n\n\t\t\t\t\n\t\t<div id =\"imageDiv\" class=\"alert-box error\" style=\"display: none; margin: 0 auto;\">You are using a browser that is not fully supported.<br>\n             J-Web works best with IE9.0, Firefox 24, Chrome 27 ( and later versions ).\n        </div>\t                 \n\t\t\t\t \n\t    \n\n<!-- form starts here -->\n\n<form name=\"login\" method=\"post\" action=\"/login\" id='loginform' class=\"loginform\" style=\"background-color:white; width: 550px;\"> \n    <input type=\"hidden\" name=\"login\" value=\"login\" />\n<!-- Title and device name -->    \n    <table style=\"width: 100%; border-collapse: collapse; border: 0px;\">\n                                                    <tr valign=\"middle\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<td align='left'>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class='juniperformheader'>Juniper Web Device Manager</div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t</td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t</tr>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<tr valign=\"middle\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<td align=\"left\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class='formversionheader'>SRX345-DC</div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t</td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t</tr>    \n    </table>\n<!-- End Title and device name -->    \n\n<!-- Input fields -->\n<table align=\"left\" height=\"220\" width=\"100%\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<tr>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<td height=\"15\" width='100%' valign=\"middle\" align='left'>&nbsp;<div id='formerror' class=\"formerror\"></div></td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t</tr>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<tr valign=\"middle\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<td align='left'>                                                            \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<input class=\"small username\" type=\"input\" name=\"username\" size=\"35\" placeholder='Username' id=\"username\"  value=\"\"   TABINDEX=1 style=\"height:30px;\" onblur=\"ValidateName()\"/>\n                                                            \n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t</td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t</tr>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<tr valign=\"middle\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<td style='padding: 0px; margin: 0px; height: 20px; text-align: left;'>                                                            \n                                                            <span id=\"formnamevalidation\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;This field is required.</span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t</td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t</tr>                                                    \n                                                    \n\t\t\t\t\t\t\t\t\t\t\t\t\t<tr valign=\"middle\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<td align='left'>                                                        \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<input class=\"small password\" type=\"password\" placeholder='Password' autocomplete=\"off\" name=\"password\"  size=\"35\" id=\"password\" TABINDEX=2  style=\"height:30px;\" onblur=\"ValidatePwd()\" />\n\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t</td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t</tr>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<tr valign=\"middle\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<td style='padding: 0px; margin: 0px; height: 20px; text-align: left;'>                                                            \n                                                        <span id=\"formpassvalidation\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;This field is required.</span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t</td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t</tr>                                                    \n                                                    <tr valign=\"middle\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<td align='left'>                                                        \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<input class=\"small\" type=\"input\" autocomplete=\"off\" name=\"key\" value=\"N3KfjVJiR80j40O5Ff89YkWh3lQPU9NI\" size=\"35\" id=\"key\" TABINDEX=3 style=\"display:none;\" />\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t</td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t</tr>                                                    \n                                                    \n\t\t\t\t\t\t\t\t\t\t\t\t\t<tr valign=\"middle\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<td align=\"left\" valign=\"middle\" nowrap>\n\t                                                        <input type=\"submit\" value=\"Log In\" id=\"login\" onclick=\"return loginValidate();\" />\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t</td>\n\t\t\t\t\t\t\t\t\t\t\t\t\t</tr>                                                    \n</table>            \n<!-- end input fields -->                                        \n</form>\n<!-- form ends here -->                 \n                 \n<div class=\"browserinfo\">Recommended browsers are IE 10/11, Firefox 44+ and Chrome 55+</div>\n<div class='browserinfo'>Best Viewed in 1440 * 900 Resolution</div><br><br>\n<div id='copyrighttxt'>Copyright &copy; 2017, Juniper Networks, Inc. <a id='footerlink1' target=\"_new\" href=\"http://www.juniper.net/footer\n\t\t\t\t\t\t\tlegal.html\">All Rights Reserved</a> | <a id='footerlink2' target=\"_new\" href=\"http://www.juniper.net/footerlegal.html#05\">Trademark Notice</a> | \n\t\t\t\t\t\t\t<a id='footerlink3' target=\"_new\" href=\"http://www.juniper.net/privacy.html\">Privacy Policy</a> \n</div>\n<div style='width: 100%; height: 50px;'>&nbsp;</div>\n\t\t\t\t</td>\n\t\t\t</tr>\n\t\t</table><script language=\"javascript\">\n\nvar body = document.body, html = document.documentElement;\nvar height = Math.max( body.scrollHeight, body.offsetHeight, html.clientHeight, html.scrollHeight, html.offsetHeight );\n\ndocument.getElementById('copyrighttxt').style.top = (height - 40) + 'px';\n\nvar lform = document.getElementById('loginpage');\n\nlform.style.marginTop = ((height/2) - (lform.offsetHeight/2)) + 80 + 'px';\n\nif(!document.login.username.disabled)                                                                                                                           \ndocument.login.username.focus();  \n\nfunction ValidateName(){\n    \n\tif((document.getElementById('username').value)==\"\")\n\t\t document.getElementById('formnamevalidation').style.display='block';\n\telse\t\t\n\t\tdocument.getElementById('formnamevalidation').style.display='none';\n}\n\nfunction ValidatePwd(){\n    \n\tif((document.getElementById('password').value)=='')\n\t\t document.getElementById('formpassvalidation').style.display='block';\n\telse\t\t\n\t\tdocument.getElementById('formpassvalidation').style.display='none';\n}\n\nfunction loginValidate() {\n\t\n    var usrname = document.login.username.value;\n    if(usrname.length > 0 && (usrname.search(/[<>]+/g) >= 0)) {\n\t\t\n        document.getElementById('formerror').innerHTML = 'Username cannot include certain characters, including < and >';\n        return false;\n    }\n\tencryptCredential(document.login.password.value, document.login.key.value);\n    return true;\n}\n</script>\n\n    <link rel=\"stylesheet\" type=\"text/css\" href=\"/extjs/resources/css/ext-all.css\"/>\n    <script type=\"text/javascript\" src=\"/extjs/ext-all.js?ver=17.4R1.16\"></script>\r\n0\r\n\r\n",
         "datamd5" : "1cc580767f43269e1c91c65e9cdb1934",
         "datammh3" : 121208818,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "hostwindsdns.com"
         ],
         "geolocus" : {
            "asn" : "AS54290",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "hostwinds.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HOSTWINDS-17-7",
            "organization" : "Hostwinds LLC.",
            "subnet" : "104.168.128.0/17"
         },
         "host" : [
            "client-104-168-202-21"
         ],
         "hostname" : [
            "client-104-168-202-21.hostwindsdns.com"
         ],
         "ip" : "104.168.202.21",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HOSTWINDS",
         "os" : "JunOS",
         "osvendor" : "Juniper",
         "port" : 4570,
         "product" : "Appweb",
         "productvendor" : "Embedthis",
         "productversion" : "3.2.3",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "client-104-168-202-21.hostwindsdns.com"
         ],
         "seen_date" : "2024-11-11",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "104.168.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 104.168.202.24:4570 (tcp/http) - last seen on 2024-11-10 at 11:03:16 UTC

    • IP
      104.168.202.24
      Network
      104.168.128.0/17
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor

      Operating System
      SonicWall SonicOS
      URL

      http://104.168.202.24:4570/api/sonicos/tfa 404

      HTTP Title
      File not found!
      Reverse DNS
      client-104-168-202-24.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      http
      Source
      sonicwall::mfa
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      hostwindsdns.com
      Hostname(s)
      23.254.225.168 client-104-168-201-213.hostwindsdns.com client-104-168-202-21.hostwindsdns.com client-104-168-202-24.hostwindsdns.com client-142-11-210-136.hostwindsdns.com client-192-236-192-200.hostwindsdns.com hwsrv-1067198.hostwindsdns.com hwsrv-571070.hostwindsdns.com hwsrv-742874.hostwindsdns.com
      IP(s)
      104.168.160.78 104.168.190.93 104.168.201.213 104.168.202.21 104.168.202.24 142.11.210.136 192.236.192.200 23.254.225.168
      Port(s)
      4570
      Protocol(s)
      http
      Tag(s)
      URL(s)
      / /api/sonicos/tfa /vpn/index.html
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      5755cb1445e9589ecab966c61b395fa7
      HTTP Header MD5
      0e862c2c5c858aca5aaf86c297935dc8
      HTTP Body MD5
      326456eeee37a65622c86c2f63664d55
    • HTTP/1.0 404 Not Found
      Server: SonicWALL
      Expires: -1
      Cache-Control: no-cache
      Content-type: text/html;charset=UTF-8
      X-Content-Type-Options: nosniff
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN""http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><title>File not found!</title><style type="text/css"><!--/*--><![CDATA[/*><!--*/ body { color: #000000; background-color: #FFFFFF; }
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-10T11:03:16.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "326456eeee37a65622c86c2f63664d55",
               "bodymmh3" : 67183679,
               "component" : [
                  {
                     "productvendor" : "SonicWall",
                     "product" : "SonicWall"
                  }
               ],
               "headermd5" : "0e862c2c5c858aca5aaf86c297935dc8",
               "headermmh3" : 762823540,
               "title" : "File not found!"
            },
            "length" : 468
         },
         "asn" : "AS54290",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 404 Not Found\r\nServer: SonicWALL\r\nExpires: -1\r\nCache-Control: no-cache\r\nContent-type: text/html;charset=UTF-8\r\nX-Content-Type-Options: nosniff\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\"\"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\"><html xmlns=\"http://www.w3.org/1999/xhtml\" lang=\"en\" xml:lang=\"en\"><head><title>File not found!</title><style type=\"text/css\"><!--/*--><![CDATA[/*><!--*/ body { color: #000000; background-color: #FFFFFF; }",
         "datamd5" : "5755cb1445e9589ecab966c61b395fa7",
         "datammh3" : 1575132516,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "hostwindsdns.com"
         ],
         "geolocus" : {
            "asn" : "AS54290",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "hostwinds.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HOSTWINDS-17-7",
            "organization" : "Hostwinds LLC.",
            "subnet" : "104.168.128.0/17"
         },
         "host" : [
            "client-104-168-202-24"
         ],
         "hostname" : [
            "client-104-168-202-24.hostwindsdns.com"
         ],
         "ip" : "104.168.202.24",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HOSTWINDS",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4570,
         "productvendor" : "SonicWall",
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Not Found",
         "reverse" : [
            "client-104-168-202-24.hostwindsdns.com"
         ],
         "seen_date" : "2024-11-10",
         "source" : "sonicwall::mfa",
         "status" : 404,
         "subnet" : "104.168.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/api/sonicos/tfa"
      }
      
  • 104.168.202.24:4570 (tcp/http) - last seen on 2024-11-10 at 03:30:05 UTC

    • IP
      104.168.202.24
      Network
      104.168.128.0/17
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor

      Operating System
      SonicWall SonicOS
      URL

      http://104.168.202.24:4570/ 302

      HTTP Title
      Page Redirecting
      Reverse DNS
      client-104-168-202-24.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      http
      Source
      datascan
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      hostwindsdns.com
      Hostname(s)
      23.254.225.168 client-104-168-201-213.hostwindsdns.com client-104-168-202-21.hostwindsdns.com client-104-168-202-24.hostwindsdns.com client-142-11-210-136.hostwindsdns.com client-192-236-192-200.hostwindsdns.com hwsrv-1067198.hostwindsdns.com hwsrv-571070.hostwindsdns.com hwsrv-742874.hostwindsdns.com
      IP(s)
      104.168.160.78 104.168.190.93 104.168.201.213 104.168.202.21 104.168.202.24 142.11.210.136 192.236.192.200 23.254.225.168
      Port(s)
      4570
      Protocol(s)
      http
      Tag(s)
      URL(s)
      / /api/sonicos/tfa /vpn/index.html
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      cdc40c83342cff5d12bf51835f726bb3
      HTTP Header MD5
      c0515da5a4149103e88e0dca5c2445f1
      HTTP Body MD5
      b9ef01d8be6287889aaf2b0bc3d240b0
    • HTTP/1.0 302 Found
      Server: SonicWALL
      Content-type: text/html;charset=UTF-8
      X-Frame-Options: SAMEORIGIN
      Location: https://<ip>:4570/sonicui/7/login/
      
      <HTML>
      <HEAD><TITLE>Page Redirecting</TITLE>
      <META HTTP-EQUIV="Pragma" CONTENT="no-cache">
      <META HTTP-EQUIV="Expires" CONTENT="-1">
      </HEAD>
      <BODY onLoad="location.href = 'https://<ip>:4570/sonicui/7/login/';">
      This page is redirecting! Click <A HREF="https://<ip>:4570/sonicui/7/login/">here</A>
      </BODY>
      </HTML>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-10T03:30:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b9ef01d8be6287889aaf2b0bc3d240b0",
               "bodymmh3" : -1709570849,
               "component" : [
                  {
                     "product" : "SonicWall",
                     "productvendor" : "SonicWall"
                  }
               ],
               "headermd5" : "c0515da5a4149103e88e0dca5c2445f1",
               "headermmh3" : -1184832719,
               "title" : "Page Redirecting"
            },
            "length" : 466
         },
         "asn" : "AS54290",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nServer: SonicWALL\r\nContent-type: text/html;charset=UTF-8\r\nX-Frame-Options: SAMEORIGIN\r\nLocation: https://<ip>:4570/sonicui/7/login/\r\n\r\n<HTML>\n<HEAD><TITLE>Page Redirecting</TITLE>\n<META HTTP-EQUIV=\"Pragma\" CONTENT=\"no-cache\">\n<META HTTP-EQUIV=\"Expires\" CONTENT=\"-1\">\n</HEAD>\n<BODY onLoad=\"location.href = 'https://<ip>:4570/sonicui/7/login/';\">\nThis page is redirecting! Click <A HREF=\"https://<ip>:4570/sonicui/7/login/\">here</A>\n</BODY>\n</HTML>",
         "datamd5" : "cdc40c83342cff5d12bf51835f726bb3",
         "datammh3" : 190933354,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "hostwindsdns.com"
         ],
         "geolocus" : {
            "asn" : "AS54290",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "hostwinds.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HOSTWINDS-17-7",
            "organization" : "Hostwinds LLC.",
            "subnet" : "104.168.128.0/17"
         },
         "host" : [
            "client-104-168-202-24"
         ],
         "hostname" : [
            "client-104-168-202-24.hostwindsdns.com"
         ],
         "ip" : "104.168.202.24",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HOSTWINDS",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 4570,
         "productvendor" : "SonicWall",
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "reverse" : [
            "client-104-168-202-24.hostwindsdns.com"
         ],
         "seen_date" : "2024-11-10",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "104.168.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 142.11.210.136:4570 (tcp/http) - last seen on 2024-11-10 at 02:20:33 UTC

    • IP
      142.11.210.136
      Network
      142.11.192.0/18
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux sUse
      URL

      http://142.11.210.136:4570/ 200

      Reverse DNS
      client-142-11-210-136.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      http
      Source
      datascan
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      hostwindsdns.com
      Hostname(s)
      23.254.225.168 client-104-168-201-213.hostwindsdns.com client-104-168-202-21.hostwindsdns.com client-104-168-202-24.hostwindsdns.com client-142-11-210-136.hostwindsdns.com client-192-236-192-200.hostwindsdns.com hwsrv-1067198.hostwindsdns.com hwsrv-571070.hostwindsdns.com hwsrv-742874.hostwindsdns.com
      IP(s)
      104.168.160.78 104.168.190.93 104.168.201.213 104.168.202.21 104.168.202.24 142.11.210.136 192.236.192.200 23.254.225.168
      Port(s)
      4570
      Protocol(s)
      http
      Tag(s)
      URL(s)
      / /api/sonicos/tfa /vpn/index.html
    • Operating System
      Linux Linux sUse
      Product
      ConnectWise Control 21.14.5924.8013
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      89c681eaf8fb01680ba06a248c645aff
      HTTP Header MD5
      ed6e16a0ab763a80791a11bd17323549
      HTTP Body MD5
      1c2dccd5fe68b91cc0324c00dfb3a621
    • HTTP/1.1 200 OK
      Cache-Control: private
      Content-Length: 143555
      Content-Type: text/html; charset=utf-8
      Server: ScreenConnect/21.14.5924.8013-1372366428 Microsoft-HTTPAPI/2.0
      X-Robots-Tag: noindex
      P3P: CP="NON CUR OUR STP STA PRE"
      Date: Sun, 10 Nov 2024 02:20:31 UTC
      
      
      <!DOCTYPE html>
      <html>
      <head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" />
      	<script>
      
      		function setTaggedSessionInfo(tag, taggedSessionInfo) {
      			var oldTaggedSessionInfo = window._taggedSessionInfos[tag];
      			window._taggedSessionInfos[tag] = taggedSessionInfo;
      
      			if (!oldTaggedSessionInfo || taggedSessionInfo.SessionID != oldTaggedSessionInfo.SessionID || taggedSessionInfo.Code != oldTaggedSessionInfo.Code)
      				SC.pagedata.notifyDirty();
      		}
      
      		// backwards compatibility with extensions
      		function setTaggedSessionID(tag, sessionID) {
      			window.setTaggedSessionInfo(tag, { SessionID: sessionID });
      		}
      
      		function getTaggedSessionInfo(tag) {
      			return window._taggedSessionInfos[tag];
      		}
      
      	</script>
      <script src="Script.ashx?__Cache=d3f0e1a0-3d38-4627-b55e-fc0e7a52411e" id="defaultScript"></script>
      <link href="App_Themes/DarkWithBlue/Default.css?__Cache=26fdcedc-32d6-4732-97d3-63ae494b3d3a" type="text/css" rel="stylesheet" /><link href="FavIcon.axd?__Cache=9ac7c99e-d8e6-44f8-a2e8-fca7417035b0" rel="shortcut icon" />
      <script>SC.util.mergeIntoContext({"focusedControlID":null,"userName":"","userDisplayName":"","isUserAuthenticated":false,"antiForgeryToken":"THtoAUxH4sS9Sucsl1qCcEN6XdS3BrDxLYSJrioJ9dgBAAB9A3kYzrotQg==","isUserAdministrator":false,"canManageSharedToolbox":false,"pageBaseFileName":"Guest","notifyActivityFrequencyMilliseconds":600000,"loginAfterInactivityMilliseconds":36000000,"canChangePassword":false,"controlPanelUrl":null,"pageType":"GuestPage","processType":2,"userAgentOverride":null,"sessionTypeInfos":[]});</script>
      <script src="App_Extensions/edb5cea7-1d6c-40eb-b486-6b18a9a54a6a/json_search.js"></script>
      <link href="App_Extensions/fd656f55-7f36-4c5c-ac92-67533d630386/flatpickr.min.css" type="text/css" rel="stylesheet" />
      <link href="App_Extensions/fd656f55-7f36-4c5c-ac92-67533d630386/ChatTranscriptStylesheet.css" type="text/css" rel="stylesheet" />
      <link href="App_Extensions/82ff7736-d40b-43f0-9375-3394e4cdfb61/Style.css" type="text/css" rel="stylesheet" />
      <script>SC.extension.addInitializeProc('2e5882e3-fb36-4ad4-bdf7-0f14f3bdcf7e', function (extensionContext) {
      SC.event.addGlobalHandler(SC.event.PreRender, function (eventArgs) {
      	if (SC.context.pageType == 'GuestPage')
      	{
      		SC.util.includeStyleSheet(extensionContext.baseUrl + 'LogoLinkStyle.css');
      		var logoImage = $('.LogoPanel');
      		
      		if (extensionContext.settingValues.LogoImageLinkURL !== ''){
      			logoImage.onclick=function() {
      				window.open(extensionContext.settingValues.LogoImageLinkURL);
      			};
      			logoImage.onmouseover=function(){
      				logoImage.style.cursor = "pointer";
      			};
      		}
      	}
      });
      });</script>
      <script>SC.extension.addInitializeProc('c42e9fe5-f4aa-4698-bb71-ae68b8a23890', function (extensionContext) {
      /** Advanced SMTP Settings (1.2.3.0) **/
      var extensionId = extensionContext.baseUrl.split("/").slice(-2)[0];
      IS_CLOUD = /^.*\.(screenconnect|hostedrmm)\.com$/.test(SC.context.clp.h);
      EMPTY_PASSWORD = "\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd";
      
      /***** Extension Help Option *****/
      var helpLink = "https://help.screenconnect.com/Extension:Advanced_SMTP_Settings";
      var extensionResourceID = "EditSMTPSettings";
      
      SC.event.addGlobalHandler(SC.event.QueryCommandButtonState, function (eventArgs) {
      	switch (eventArgs.commandName) {
      		case 'EditExtensionSettings':
      			if (eventArgs.commandContext.extensionInfo.ExtensionID == extensionId && eventArgs.commandElement._commandName == "EditExtensionSettings")
      				SC.ui.addElement(eventArgs.target.parentElement, "A", {
      					href: "#",
      					_commandName: (SC.context.scriptBaseUrl.indexOf("https://") == helpLink.indexOf("https://") ? 'ShowHelpLink_' : 'OpenHelpLink_') + extensionId,
      					_innerText: SC.res['Command.Help.Text'].replace(" ▽", "")
      				});
      			break;
      	}
      });
      
      SC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) {
      	switch (eventArgs.commandName) {
      		case 'ShowHelpLink_' + extensionId:
      			SC.dialog.showModalPage(SC.res['Command.Help.Text'].replace(" ▽", ""), helpLink, null);
      			break;
      		case 'OpenHelpLink_' + extensionId:
      			window.open(helpLink, "_blank");
      			break;
      	}
      });
      /*********************************/
      
      SC.service.GetMailConfigurationInfo = SC.service.GetAdvancedMailConfigurationInfo;
      SC.res['Command.EditAdvancedMailConfiguration.Text'] = SC.res['Command.EditMailConfiguration.Text'];
      
      SC.event.addGlobalHandler(SC.event.PageDataRefreshed, function () {
      	if (SC.context.pageType == 'AdministrationPage' && SC.context.tabKeys[SC.context.tabIndex] == 'Mail') {
      		var mailConfiguration = SC.pagedata.get();
      		SC.types.SmtpDeliveryMethod = mailConfiguration.SmtpDeliveryMethod;
      
      		SC.ui.setContents($('.MailPanel'), [
      			$dt([
      				$h3({_textResource: 'MailPanel.MailTitle'}),
      				$p({className: 'CommandList'}, SC.command.createCommandButtons([{commandName: 'EditAdvancedMailConfiguration'}])),
      			]),
      			$dd([
      				$dl([
      					$dt({_textResource: 'MailPanel.MailDeliveryText'}),
      					$dd(mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod.Network
      						? SC.util.isNullOrEmpty(mailConfiguration.smtpRelayServerHostName)
      							? SC.res['MailPanel.SmtpDirectRadioButtonText']
      							: SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.RelaySettingsTextFormat'],
      								mailConfiguration.smtpRelayServerHostName,
      								mailConfiguration.smtpRelayServerPort == 25 ? null : ':' + mailConfiguration.smtpRelayServerPort,
      								mailConfiguration.enableSSL ? SC.res['Extension.SMTPSettings.MailPanel.UseSSLText'] : null,
      								mailConfiguration.smtpUseDefaultCredentials
      									? SC.util.formatString(
      										SC.res['Extension.SMTPSettings.MailPanel.UsingDefaultCredentialsTextFormat'],
      										(!SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkTargetName)
      												? SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.SPNLabelTextFormat'], mailConfiguration.smtpNetworkTargetName)
      												: ''
      										)
      									)
      									: !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword)
      										? SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.UsernameLabelTextFormat'], mailConfiguration.smtpNetworkUserName)
      										: null
      							)
      						: mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod.PickupDirectoryFromIis
      							? SC.res['Extension.SMTPSettings.MailPanel.UsingIISPickupDirectoryText']
      							: SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.UsingSpecifiedPickupDirectoryTextFormat'], mailConfiguration.smtpPickupDirectoryLocation)
      					),
      					$dt({_textResource: 'MailPanel.DefaultFromAddressLabelText'}),
      					$dd(mailConfiguration.defaultMailFromAddress || SC.res['MailPanel.UnsetLabelText']),
      					$dt({_textResource: 'MailPanel.DefaultToAddressLabelText'}),
      					$dd(mailConfiguration.defaultMailToAddress || SC.res['MailPanel.UnsetLabelText']),
      				]),
      			]),
      		]);
      	}
      });
      
      SC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) {
      	switch (eventArgs.commandName) {
      		case 'EditAdvancedMailConfiguration':
      			var mailConfiguration = SC.pagedata.get();
      
      		function getControlsForDeliveryMethod(deliveryMethodName) {
      			var setRadioButtonChecked = function () {
      				SC.dialog.getModalDialog().querySelector('.' + deliveryMethodName + 'RadioButton').checked = true;
      			};
      			var setBothRadioButtonsChecked = function (eventArgs) {
      				setRadioButtonChecked();
      				SC.ui.findDescendantBreadthFirst(SC.ui.findAncestorByTag(eventArgs.target, 'DD'), function (_) {
      					return _.name == 'SmtpAuthenticationType'
      				}).checked = true;
      			};
      
      			switch (deliveryMethodName) {
      				case 'Relay': // this isn't a value of SmtpDeliveryMethod, just Network with extra parameters
      					return $dl({className: 'SmtpRelaySettingsList'}, [
      						$dt(SC.res['Extension.SMTPSettings.NetworkSettingsLabelText']),
      						$dd([
      							$label([
      								$span(SC.res['Extension.SMTPSettings.RelayServerLabelText']),
      								$input({
      									type: 'text',
      									className: 'SmtpRelayServerBox',
      									value: mailConfiguration.smtpRelayServerHostName,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      								}),
      							]),
      						]),
      						$dd([
      							$label([
      								$span(SC.res['Extension.SMTPSettings.RelayServerPortLabelText']),
      								$input({
      									type: 'number',
      									className: 'SmtpRelayServerPortBox',
      									value: mailConfiguration.smtpRelayServerPort,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      									_attributeMap: {
      										max: 65535,
      										min: 1,
      										placeholder: 25,
      									},
      								}),
      							]),
      						]),
      						$dd([
      							$label([
      								$input({
      									type: 'checkbox',
      									className: 'SmtpRelayServerEnableSSLCheckbox',
      									checked: mailConfiguration.enableSSL,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      								}),
      								$span(SC.res['Extension.SMTPSettings.UseSSLLabelText']),
      							]),
      						]),
      						$dt(SC.res['Extension.SMTPSettings.AuthenticationSettingsLabelText']),
      						$dd([
      							$label([
      								$input({
      									type: 'radio',
      									name: 'SmtpAuthenticationType',
      									value: 'None',
      									checked: (SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) || SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword)) && !mailConfiguration.smtpUseDefaultCredentials,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      								}),
      								$span(SC.res['Extension.SMTPSettings.AnonymousCredentialsLabelText']),
      							]),
      						]),
      						$dd([
      							$label([
      								$input({
      									type: 'radio',
      									name: 'SmtpAuthenticationType',
      									value: 'Windows',
      									checked: mailConfiguration.smtpUseDefaultCredentials,
      									_eventHandlerMap: {focus: setRadioButtonChecked},
      								}),
      								$span(SC.res['Extension.SMTPSettings.DefaultCredentialsLabelText']),
      							]),
      							$label([
      								$span(SC.res['Extension.SMTPSettings.NetworkTargetNameLabelText']),
      								$input({
      									type: 'text',
      									className: 'SmtpAuthSPNBox',
      									value: mailConfiguration.smtpNetworkTargetName,
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      							]),
      						]),
      						$dd([
      							$label([
      								$input({
      									type: 'radio',
      									name: 'SmtpAuthenticationType',
      									value: 'Credentials',
      									checked: !mailConfiguration.smtpUseDefaultCredentials && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword),
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      								$span(SC.res['Extension.SMTPSettings.AccountCredentialsLabelText']),
      							]),
      							$label([
      								$span(SC.res['Extension.SMTPSettings.UsernameLabelText']),
      								$input({
      									type: 'text',
      									className: 'SmtpAuthUsernameBox',
      									value: mailConfiguration.smtpNetworkUserName,
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      							]),
      							$label([
      								$span(SC.res['Extension.SMTPSettings.PasswordLabelText']),
      								$input({
      									type: 'password',
      									className: 'SmtpAuthPasswordBox',
      									value: mailConfiguration.smtpNetworkPassword,
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      							]),
      							$label([
      								$span(SC.res['Extension.SMTPSettings.ConfirmPasswordLabelText']),
      								$input({
      									type: 'password',
      									className: 'SmtpAuthConfirmPasswordBox',
      									value: mailConfiguration.smtpNetworkPassword,
      									_eventHandlerMap: {focus: setBothRadioButtonsChecked},
      								}),
      							]),
      						]),
      					]);
      
      				case 'SpecifiedPickupDirectory':
      					return $input({
      						type: 'text',
      						className: 'SmtpPickupDirectoryLocationBox',
      						value: mailConfiguration.smtpPickupDirectoryLocation,
      						_eventHandlerMap: {focus: setRadioButtonChecked},
      					});
      
      				default: // network, iispickup
      					return null;
      			}
      		}
      
      			SC.dialog.showModalDialog('EditMailConfiguration', {
      				titleResourceName: 'EditMailConfigurationPanel.Title',
      				content: [
      					$dl([
      						$dt({_textResource: 'MailPanel.MailDeliveryText'}),
      						$dd(
      							['Network', 'PickupDirectoryFromIis', 'SpecifiedPickupDirectory', 'Relay'].filter(function (_) {
      								return !IS_CLOUD || _ == 'Network' || _ == 'Relay'
      							}).map(function (_) {
      								return [
      									$label([
      										$input({
      											type: 'radio',
      											name: 'MailDelivery',
      											className: _ + 'RadioButton',
      											value: _,
      											checked: _ == 'Relay' ? !SC.util.isNullOrEmpty(mailConfiguration.smtpRelayServerHostName) : mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod[_],
      										}),
      										$span({_textResource: 'MailPanel.Smtp' + (_ == 'Network' ? 'Direct' : _) + 'RadioButtonText'}),
      									]),
      									getControlsForDeliveryMethod(_),
      								];
      							})
      						),
      						$dt({_textResource: 'MailPanel.DefaultFromAddressLabelText'}),
      						$dd([
      							$input({
      								type: 'text',
      								className: 'DefaultMailFromAddressBox',
      								value: mailConfiguration.defaultMailFromAddress,
      							}),
      						]),
      						$dt({_textResource: 'MailPanel.DefaultToAddressLabelText'}),
      						$dd([
      							$div([
      								$input({
      									type: 'text',
      									className: 'DefaultMailToAddressBox',
      									value: mailConfiguration.defaultMailToAddress,
      								}),
      								$button({
      									className: 'SecondaryButton',
      									_textResource: 'MailPanel.SendTestMailButtonText',
      									_commandName: 'SendAdvancedTestEmail',
      								}),
      							]),
      						]),
      					]),
      					$p({className: 'ResultPanel'}),
      				],
      				buttonTextResourceName: 'EditMailConfigurationPanel.ButtonText',
      				onExecuteCommandProc: function (dialogEventArgs, dialog, closeDialogProc, setDialogErrorProc) {
      					var authenticationMethod = SC.ui.getSelectedRadioButtonValue(dialog.querySelector('.SmtpRelaySettingsList'));
      
      					var smtpDeliveryMethodName = SC.ui.getSelectedRadioButtonValue(dialog);
      					var useExtraNetworkSettings = false;
      					if (smtpDeliveryMethodName == 'Relay') {
      						smtpDeliveryMethodName = 'Network'; // convert to valid SmtpDeliveryMethod value
      						useExtraNetworkSettings = true;
      					}
      
      					var defaultMailFromAddress = dialog.querySelector('.DefaultMailFromAddressBox').value.trim();
      					var defaultMailToAddress = dialog.querySelector('.DefaultMailToAddressBox').value.trim();
      					var smtpRelayServerHostName = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerBox').value.trim() || null : null;
      					var smtpRelayServerPort = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerPortBox').value.trim() || null : null;
      					var enableSSL = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerEnableSSLCheckbox').checked : null;
      					var smtpPickupDirectoryLocation = smtpDeliveryMethodName == 'SpecifiedPickupDirectory' ? dialog.querySelector('.SmtpPickupDirectoryLocationBox').value.trim() || null : null;
      					var smtpUseDefaultCredentials = useExtraNetworkSettings && authenticationMethod == 'Windows' || null;
      					var smtpNetworkTargetName = useExtraNetworkSettings && authenticationMethod == 'Windows' ? dialog.querySelector('.SmtpAuthSPNBox').value.trim() || null : null;
      					var smtpNetworkUserName = useExtraNetworkSettings && authenticationMethod == 'Credentials' ? dialog.querySelector('.SmtpAuthUsernameBox').value.trim() || null : null;
      					var smtpNetworkPassword = useExtraNetworkSettings && authenticationMethod == 'Credentials' ? dialog.querySelector('.SmtpAuthPasswordBox').value.trim() || null : null;
      
      					va
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-10T02:20:33.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "screenconnect.com"
               ],
               "hostname" : [
                  "help.screenconnect.com"
               ],
               "ip" : [
                  "1.2.3.0"
               ],
               "url" : [
                  "https://help.screenconnect.com/Extension:Advanced_SMTP_Settings"
               ]
            },
            "http" : {
               "bodymd5" : "1c2dccd5fe68b91cc0324c00dfb3a621",
               "bodymmh3" : 1957778549,
               "headermd5" : "ed6e16a0ab763a80791a11bd17323549",
               "headermmh3" : -2002685557
            },
            "length" : 16384
         },
         "asn" : "AS54290",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nCache-Control: private\r\nContent-Length: 143555\r\nContent-Type: text/html; charset=utf-8\r\nServer: ScreenConnect/21.14.5924.8013-1372366428 Microsoft-HTTPAPI/2.0\r\nX-Robots-Tag: noindex\r\nP3P: CP=\"NON CUR OUR STP STA PRE\"\r\nDate: Sun, 10 Nov 2024 02:20:31 UTC\r\n\r\n\r\n<!DOCTYPE html>\r\n<html>\r\n<head><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" /><meta name=\"viewport\" content=\"width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no\" />\r\n\t<script>\r\n\r\n\t\tfunction setTaggedSessionInfo(tag, taggedSessionInfo) {\r\n\t\t\tvar oldTaggedSessionInfo = window._taggedSessionInfos[tag];\r\n\t\t\twindow._taggedSessionInfos[tag] = taggedSessionInfo;\r\n\r\n\t\t\tif (!oldTaggedSessionInfo || taggedSessionInfo.SessionID != oldTaggedSessionInfo.SessionID || taggedSessionInfo.Code != oldTaggedSessionInfo.Code)\r\n\t\t\t\tSC.pagedata.notifyDirty();\r\n\t\t}\r\n\r\n\t\t// backwards compatibility with extensions\r\n\t\tfunction setTaggedSessionID(tag, sessionID) {\r\n\t\t\twindow.setTaggedSessionInfo(tag, { SessionID: sessionID });\r\n\t\t}\r\n\r\n\t\tfunction getTaggedSessionInfo(tag) {\r\n\t\t\treturn window._taggedSessionInfos[tag];\r\n\t\t}\r\n\r\n\t</script>\r\n<script src=\"Script.ashx?__Cache=d3f0e1a0-3d38-4627-b55e-fc0e7a52411e\" id=\"defaultScript\"></script>\r\n<link href=\"App_Themes/DarkWithBlue/Default.css?__Cache=26fdcedc-32d6-4732-97d3-63ae494b3d3a\" type=\"text/css\" rel=\"stylesheet\" /><link href=\"FavIcon.axd?__Cache=9ac7c99e-d8e6-44f8-a2e8-fca7417035b0\" rel=\"shortcut icon\" />\r\n<script>SC.util.mergeIntoContext({\"focusedControlID\":null,\"userName\":\"\",\"userDisplayName\":\"\",\"isUserAuthenticated\":false,\"antiForgeryToken\":\"THtoAUxH4sS9Sucsl1qCcEN6XdS3BrDxLYSJrioJ9dgBAAB9A3kYzrotQg==\",\"isUserAdministrator\":false,\"canManageSharedToolbox\":false,\"pageBaseFileName\":\"Guest\",\"notifyActivityFrequencyMilliseconds\":600000,\"loginAfterInactivityMilliseconds\":36000000,\"canChangePassword\":false,\"controlPanelUrl\":null,\"pageType\":\"GuestPage\",\"processType\":2,\"userAgentOverride\":null,\"sessionTypeInfos\":[]});</script>\r\n<script src=\"App_Extensions/edb5cea7-1d6c-40eb-b486-6b18a9a54a6a/json_search.js\"></script>\r\n<link href=\"App_Extensions/fd656f55-7f36-4c5c-ac92-67533d630386/flatpickr.min.css\" type=\"text/css\" rel=\"stylesheet\" />\r\n<link href=\"App_Extensions/fd656f55-7f36-4c5c-ac92-67533d630386/ChatTranscriptStylesheet.css\" type=\"text/css\" rel=\"stylesheet\" />\r\n<link href=\"App_Extensions/82ff7736-d40b-43f0-9375-3394e4cdfb61/Style.css\" type=\"text/css\" rel=\"stylesheet\" />\r\n<script>SC.extension.addInitializeProc('2e5882e3-fb36-4ad4-bdf7-0f14f3bdcf7e', function (extensionContext) {\r\nSC.event.addGlobalHandler(SC.event.PreRender, function (eventArgs) {\r\n\tif (SC.context.pageType == 'GuestPage')\r\n\t{\r\n\t\tSC.util.includeStyleSheet(extensionContext.baseUrl + 'LogoLinkStyle.css');\r\n\t\tvar logoImage = $('.LogoPanel');\r\n\t\t\r\n\t\tif (extensionContext.settingValues.LogoImageLinkURL !== ''){\r\n\t\t\tlogoImage.onclick=function() {\r\n\t\t\t\twindow.open(extensionContext.settingValues.LogoImageLinkURL);\r\n\t\t\t};\r\n\t\t\tlogoImage.onmouseover=function(){\r\n\t\t\t\tlogoImage.style.cursor = \"pointer\";\r\n\t\t\t};\r\n\t\t}\r\n\t}\r\n});\r\n});</script>\r\n<script>SC.extension.addInitializeProc('c42e9fe5-f4aa-4698-bb71-ae68b8a23890', function (extensionContext) {\r\n/** Advanced SMTP Settings (1.2.3.0) **/\r\nvar extensionId = extensionContext.baseUrl.split(\"/\").slice(-2)[0];\r\nIS_CLOUD = /^.*\\.(screenconnect|hostedrmm)\\.com$/.test(SC.context.clp.h);\r\nEMPTY_PASSWORD = \"\\ufffd\\ufffd\\ufffd\\ufffd\\ufffd\\ufffd\\ufffd\\ufffd\";\r\n\r\n/***** Extension Help Option *****/\r\nvar helpLink = \"https://help.screenconnect.com/Extension:Advanced_SMTP_Settings\";\r\nvar extensionResourceID = \"EditSMTPSettings\";\r\n\r\nSC.event.addGlobalHandler(SC.event.QueryCommandButtonState, function (eventArgs) {\r\n\tswitch (eventArgs.commandName) {\r\n\t\tcase 'EditExtensionSettings':\r\n\t\t\tif (eventArgs.commandContext.extensionInfo.ExtensionID == extensionId && eventArgs.commandElement._commandName == \"EditExtensionSettings\")\r\n\t\t\t\tSC.ui.addElement(eventArgs.target.parentElement, \"A\", {\r\n\t\t\t\t\thref: \"#\",\r\n\t\t\t\t\t_commandName: (SC.context.scriptBaseUrl.indexOf(\"https://\") == helpLink.indexOf(\"https://\") ? 'ShowHelpLink_' : 'OpenHelpLink_') + extensionId,\r\n\t\t\t\t\t_innerText: SC.res['Command.Help.Text'].replace(\" \u25bd\", \"\")\r\n\t\t\t\t});\r\n\t\t\tbreak;\r\n\t}\r\n});\r\n\r\nSC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) {\r\n\tswitch (eventArgs.commandName) {\r\n\t\tcase 'ShowHelpLink_' + extensionId:\r\n\t\t\tSC.dialog.showModalPage(SC.res['Command.Help.Text'].replace(\" \u25bd\", \"\"), helpLink, null);\r\n\t\t\tbreak;\r\n\t\tcase 'OpenHelpLink_' + extensionId:\r\n\t\t\twindow.open(helpLink, \"_blank\");\r\n\t\t\tbreak;\r\n\t}\r\n});\r\n/*********************************/\r\n\r\nSC.service.GetMailConfigurationInfo = SC.service.GetAdvancedMailConfigurationInfo;\r\nSC.res['Command.EditAdvancedMailConfiguration.Text'] = SC.res['Command.EditMailConfiguration.Text'];\r\n\r\nSC.event.addGlobalHandler(SC.event.PageDataRefreshed, function () {\r\n\tif (SC.context.pageType == 'AdministrationPage' && SC.context.tabKeys[SC.context.tabIndex] == 'Mail') {\r\n\t\tvar mailConfiguration = SC.pagedata.get();\r\n\t\tSC.types.SmtpDeliveryMethod = mailConfiguration.SmtpDeliveryMethod;\r\n\r\n\t\tSC.ui.setContents($('.MailPanel'), [\r\n\t\t\t$dt([\r\n\t\t\t\t$h3({_textResource: 'MailPanel.MailTitle'}),\r\n\t\t\t\t$p({className: 'CommandList'}, SC.command.createCommandButtons([{commandName: 'EditAdvancedMailConfiguration'}])),\r\n\t\t\t]),\r\n\t\t\t$dd([\r\n\t\t\t\t$dl([\r\n\t\t\t\t\t$dt({_textResource: 'MailPanel.MailDeliveryText'}),\r\n\t\t\t\t\t$dd(mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod.Network\r\n\t\t\t\t\t\t? SC.util.isNullOrEmpty(mailConfiguration.smtpRelayServerHostName)\r\n\t\t\t\t\t\t\t? SC.res['MailPanel.SmtpDirectRadioButtonText']\r\n\t\t\t\t\t\t\t: SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.RelaySettingsTextFormat'],\r\n\t\t\t\t\t\t\t\tmailConfiguration.smtpRelayServerHostName,\r\n\t\t\t\t\t\t\t\tmailConfiguration.smtpRelayServerPort == 25 ? null : ':' + mailConfiguration.smtpRelayServerPort,\r\n\t\t\t\t\t\t\t\tmailConfiguration.enableSSL ? SC.res['Extension.SMTPSettings.MailPanel.UseSSLText'] : null,\r\n\t\t\t\t\t\t\t\tmailConfiguration.smtpUseDefaultCredentials\r\n\t\t\t\t\t\t\t\t\t? SC.util.formatString(\r\n\t\t\t\t\t\t\t\t\t\tSC.res['Extension.SMTPSettings.MailPanel.UsingDefaultCredentialsTextFormat'],\r\n\t\t\t\t\t\t\t\t\t\t(!SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkTargetName)\r\n\t\t\t\t\t\t\t\t\t\t\t\t? SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.SPNLabelTextFormat'], mailConfiguration.smtpNetworkTargetName)\r\n\t\t\t\t\t\t\t\t\t\t\t\t: ''\r\n\t\t\t\t\t\t\t\t\t\t)\r\n\t\t\t\t\t\t\t\t\t)\r\n\t\t\t\t\t\t\t\t\t: !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword)\r\n\t\t\t\t\t\t\t\t\t\t? SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.UsernameLabelTextFormat'], mailConfiguration.smtpNetworkUserName)\r\n\t\t\t\t\t\t\t\t\t\t: null\r\n\t\t\t\t\t\t\t)\r\n\t\t\t\t\t\t: mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod.PickupDirectoryFromIis\r\n\t\t\t\t\t\t\t? SC.res['Extension.SMTPSettings.MailPanel.UsingIISPickupDirectoryText']\r\n\t\t\t\t\t\t\t: SC.util.formatString(SC.res['Extension.SMTPSettings.MailPanel.UsingSpecifiedPickupDirectoryTextFormat'], mailConfiguration.smtpPickupDirectoryLocation)\r\n\t\t\t\t\t),\r\n\t\t\t\t\t$dt({_textResource: 'MailPanel.DefaultFromAddressLabelText'}),\r\n\t\t\t\t\t$dd(mailConfiguration.defaultMailFromAddress || SC.res['MailPanel.UnsetLabelText']),\r\n\t\t\t\t\t$dt({_textResource: 'MailPanel.DefaultToAddressLabelText'}),\r\n\t\t\t\t\t$dd(mailConfiguration.defaultMailToAddress || SC.res['MailPanel.UnsetLabelText']),\r\n\t\t\t\t]),\r\n\t\t\t]),\r\n\t\t]);\r\n\t}\r\n});\r\n\r\nSC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) {\r\n\tswitch (eventArgs.commandName) {\r\n\t\tcase 'EditAdvancedMailConfiguration':\r\n\t\t\tvar mailConfiguration = SC.pagedata.get();\r\n\r\n\t\tfunction getControlsForDeliveryMethod(deliveryMethodName) {\r\n\t\t\tvar setRadioButtonChecked = function () {\r\n\t\t\t\tSC.dialog.getModalDialog().querySelector('.' + deliveryMethodName + 'RadioButton').checked = true;\r\n\t\t\t};\r\n\t\t\tvar setBothRadioButtonsChecked = function (eventArgs) {\r\n\t\t\t\tsetRadioButtonChecked();\r\n\t\t\t\tSC.ui.findDescendantBreadthFirst(SC.ui.findAncestorByTag(eventArgs.target, 'DD'), function (_) {\r\n\t\t\t\t\treturn _.name == 'SmtpAuthenticationType'\r\n\t\t\t\t}).checked = true;\r\n\t\t\t};\r\n\r\n\t\t\tswitch (deliveryMethodName) {\r\n\t\t\t\tcase 'Relay': // this isn't a value of SmtpDeliveryMethod, just Network with extra parameters\r\n\t\t\t\t\treturn $dl({className: 'SmtpRelaySettingsList'}, [\r\n\t\t\t\t\t\t$dt(SC.res['Extension.SMTPSettings.NetworkSettingsLabelText']),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.RelayServerLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpRelayServerBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpRelayServerHostName,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.RelayServerPortLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'number',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpRelayServerPortBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpRelayServerPort,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t\t_attributeMap: {\r\n\t\t\t\t\t\t\t\t\t\tmax: 65535,\r\n\t\t\t\t\t\t\t\t\t\tmin: 1,\r\n\t\t\t\t\t\t\t\t\t\tplaceholder: 25,\r\n\t\t\t\t\t\t\t\t\t},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'checkbox',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpRelayServerEnableSSLCheckbox',\r\n\t\t\t\t\t\t\t\t\tchecked: mailConfiguration.enableSSL,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.UseSSLLabelText']),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dt(SC.res['Extension.SMTPSettings.AuthenticationSettingsLabelText']),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'radio',\r\n\t\t\t\t\t\t\t\t\tname: 'SmtpAuthenticationType',\r\n\t\t\t\t\t\t\t\t\tvalue: 'None',\r\n\t\t\t\t\t\t\t\t\tchecked: (SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) || SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword)) && !mailConfiguration.smtpUseDefaultCredentials,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.AnonymousCredentialsLabelText']),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'radio',\r\n\t\t\t\t\t\t\t\t\tname: 'SmtpAuthenticationType',\r\n\t\t\t\t\t\t\t\t\tvalue: 'Windows',\r\n\t\t\t\t\t\t\t\t\tchecked: mailConfiguration.smtpUseDefaultCredentials,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.DefaultCredentialsLabelText']),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.NetworkTargetNameLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpAuthSPNBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpNetworkTargetName,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'radio',\r\n\t\t\t\t\t\t\t\t\tname: 'SmtpAuthenticationType',\r\n\t\t\t\t\t\t\t\t\tvalue: 'Credentials',\r\n\t\t\t\t\t\t\t\t\tchecked: !mailConfiguration.smtpUseDefaultCredentials && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkUserName) && !SC.util.isNullOrEmpty(mailConfiguration.smtpNetworkPassword),\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.AccountCredentialsLabelText']),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.UsernameLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpAuthUsernameBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpNetworkUserName,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.PasswordLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'password',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpAuthPasswordBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpNetworkPassword,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t$span(SC.res['Extension.SMTPSettings.ConfirmPasswordLabelText']),\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'password',\r\n\t\t\t\t\t\t\t\t\tclassName: 'SmtpAuthConfirmPasswordBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.smtpNetworkPassword,\r\n\t\t\t\t\t\t\t\t\t_eventHandlerMap: {focus: setBothRadioButtonsChecked},\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t]);\r\n\r\n\t\t\t\tcase 'SpecifiedPickupDirectory':\r\n\t\t\t\t\treturn $input({\r\n\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\tclassName: 'SmtpPickupDirectoryLocationBox',\r\n\t\t\t\t\t\tvalue: mailConfiguration.smtpPickupDirectoryLocation,\r\n\t\t\t\t\t\t_eventHandlerMap: {focus: setRadioButtonChecked},\r\n\t\t\t\t\t});\r\n\r\n\t\t\t\tdefault: // network, iispickup\r\n\t\t\t\t\treturn null;\r\n\t\t\t}\r\n\t\t}\r\n\r\n\t\t\tSC.dialog.showModalDialog('EditMailConfiguration', {\r\n\t\t\t\ttitleResourceName: 'EditMailConfigurationPanel.Title',\r\n\t\t\t\tcontent: [\r\n\t\t\t\t\t$dl([\r\n\t\t\t\t\t\t$dt({_textResource: 'MailPanel.MailDeliveryText'}),\r\n\t\t\t\t\t\t$dd(\r\n\t\t\t\t\t\t\t['Network', 'PickupDirectoryFromIis', 'SpecifiedPickupDirectory', 'Relay'].filter(function (_) {\r\n\t\t\t\t\t\t\t\treturn !IS_CLOUD || _ == 'Network' || _ == 'Relay'\r\n\t\t\t\t\t\t\t}).map(function (_) {\r\n\t\t\t\t\t\t\t\treturn [\r\n\t\t\t\t\t\t\t\t\t$label([\r\n\t\t\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\t\t\ttype: 'radio',\r\n\t\t\t\t\t\t\t\t\t\t\tname: 'MailDelivery',\r\n\t\t\t\t\t\t\t\t\t\t\tclassName: _ + 'RadioButton',\r\n\t\t\t\t\t\t\t\t\t\t\tvalue: _,\r\n\t\t\t\t\t\t\t\t\t\t\tchecked: _ == 'Relay' ? !SC.util.isNullOrEmpty(mailConfiguration.smtpRelayServerHostName) : mailConfiguration.smtpDeliveryMethod == SC.types.SmtpDeliveryMethod[_],\r\n\t\t\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t\t\t$span({_textResource: 'MailPanel.Smtp' + (_ == 'Network' ? 'Direct' : _) + 'RadioButtonText'}),\r\n\t\t\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t\t\t\tgetControlsForDeliveryMethod(_),\r\n\t\t\t\t\t\t\t\t];\r\n\t\t\t\t\t\t\t})\r\n\t\t\t\t\t\t),\r\n\t\t\t\t\t\t$dt({_textResource: 'MailPanel.DefaultFromAddressLabelText'}),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\tclassName: 'DefaultMailFromAddressBox',\r\n\t\t\t\t\t\t\t\tvalue: mailConfiguration.defaultMailFromAddress,\r\n\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t$dt({_textResource: 'MailPanel.DefaultToAddressLabelText'}),\r\n\t\t\t\t\t\t$dd([\r\n\t\t\t\t\t\t\t$div([\r\n\t\t\t\t\t\t\t\t$input({\r\n\t\t\t\t\t\t\t\t\ttype: 'text',\r\n\t\t\t\t\t\t\t\t\tclassName: 'DefaultMailToAddressBox',\r\n\t\t\t\t\t\t\t\t\tvalue: mailConfiguration.defaultMailToAddress,\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t\t$button({\r\n\t\t\t\t\t\t\t\t\tclassName: 'SecondaryButton',\r\n\t\t\t\t\t\t\t\t\t_textResource: 'MailPanel.SendTestMailButtonText',\r\n\t\t\t\t\t\t\t\t\t_commandName: 'SendAdvancedTestEmail',\r\n\t\t\t\t\t\t\t\t}),\r\n\t\t\t\t\t\t\t]),\r\n\t\t\t\t\t\t]),\r\n\t\t\t\t\t]),\r\n\t\t\t\t\t$p({className: 'ResultPanel'}),\r\n\t\t\t\t],\r\n\t\t\t\tbuttonTextResourceName: 'EditMailConfigurationPanel.ButtonText',\r\n\t\t\t\tonExecuteCommandProc: function (dialogEventArgs, dialog, closeDialogProc, setDialogErrorProc) {\r\n\t\t\t\t\tvar authenticationMethod = SC.ui.getSelectedRadioButtonValue(dialog.querySelector('.SmtpRelaySettingsList'));\r\n\r\n\t\t\t\t\tvar smtpDeliveryMethodName = SC.ui.getSelectedRadioButtonValue(dialog);\r\n\t\t\t\t\tvar useExtraNetworkSettings = false;\r\n\t\t\t\t\tif (smtpDeliveryMethodName == 'Relay') {\r\n\t\t\t\t\t\tsmtpDeliveryMethodName = 'Network'; // convert to valid SmtpDeliveryMethod value\r\n\t\t\t\t\t\tuseExtraNetworkSettings = true;\r\n\t\t\t\t\t}\r\n\r\n\t\t\t\t\tvar defaultMailFromAddress = dialog.querySelector('.DefaultMailFromAddressBox').value.trim();\r\n\t\t\t\t\tvar defaultMailToAddress = dialog.querySelector('.DefaultMailToAddressBox').value.trim();\r\n\t\t\t\t\tvar smtpRelayServerHostName = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerBox').value.trim() || null : null;\r\n\t\t\t\t\tvar smtpRelayServerPort = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerPortBox').value.trim() || null : null;\r\n\t\t\t\t\tvar enableSSL = useExtraNetworkSettings ? dialog.querySelector('.SmtpRelayServerEnableSSLCheckbox').checked : null;\r\n\t\t\t\t\tvar smtpPickupDirectoryLocation = smtpDeliveryMethodName == 'SpecifiedPickupDirectory' ? dialog.querySelector('.SmtpPickupDirectoryLocationBox').value.trim() || null : null;\r\n\t\t\t\t\tvar smtpUseDefaultCredentials = useExtraNetworkSettings && authenticationMethod == 'Windows' || null;\r\n\t\t\t\t\tvar smtpNetworkTargetName = useExtraNetworkSettings && authenticationMethod == 'Windows' ? dialog.querySelector('.SmtpAuthSPNBox').value.trim() || null : null;\r\n\t\t\t\t\tvar smtpNetworkUserName = useExtraNetworkSettings && authenticationMethod == 'Credentials' ? dialog.querySelector('.SmtpAuthUsernameBox').value.trim() || null : null;\r\n\t\t\t\t\tvar smtpNetworkPassword = useExtraNetworkSettings && authenticationMethod == 'Credentials' ? dialog.querySelector('.SmtpAuthPasswordBox').value.trim() || null : null;\r\n\r\n\t\t\t\t\tva",
         "datamd5" : "89c681eaf8fb01680ba06a248c645aff",
         "datammh3" : 1466396074,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "hostwindsdns.com"
         ],
         "geolocus" : {
            "asn" : "AS54290",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "hostwinds.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HOSTWINDS-18-1",
            "organization" : "Hostwinds LLC.",
            "subnet" : "142.11.192.0/18"
         },
         "host" : [
            "client-142-11-210-136"
         ],
         "hostname" : [
            "client-142-11-210-136.hostwindsdns.com"
         ],
         "ip" : "142.11.210.136",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HOSTWINDS",
         "os" : "Linux",
         "osdistribution" : "sUse",
         "osvendor" : "Linux",
         "port" : 4570,
         "product" : "Control",
         "productvendor" : "ConnectWise",
         "productversion" : "21.14.5924.8013",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "client-142-11-210-136.hostwindsdns.com"
         ],
         "seen_date" : "2024-11-10",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "142.11.192.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 104.168.201.213:4570 (tcp/http) - last seen on 2024-11-05 at 06:32:38 UTC

    • IP
      104.168.201.213
      Network
      104.168.128.0/17
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Citrix Gateway Firmware
      URL

      http://104.168.201.213:4570/ 302

      Reverse DNS
      client-104-168-201-213.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      http
      Source
      datascan
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      hostwindsdns.com
      Hostname(s)
      23.254.225.168 client-104-168-201-213.hostwindsdns.com client-104-168-202-21.hostwindsdns.com client-104-168-202-24.hostwindsdns.com client-142-11-210-136.hostwindsdns.com client-192-236-192-200.hostwindsdns.com hwsrv-1067198.hostwindsdns.com hwsrv-571070.hostwindsdns.com hwsrv-742874.hostwindsdns.com
      IP(s)
      104.168.160.78 104.168.190.93 104.168.201.213 104.168.202.21 104.168.202.24 142.11.210.136 192.236.192.200 23.254.225.168
      Port(s)
      4570
      Protocol(s)
      http
      Tag(s)
      URL(s)
      / /api/sonicos/tfa /vpn/index.html
    • Operating System
      Citrix Gateway Firmware
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      44849f87bcf4bb81918e40b71919d9da
      HTTP Header MD5
      18ace997d16ca637eae1e741b04b6e3e
      HTTP Body MD5
      7f568770b024b5f553c2f46a4315d749
    • HTTP/1.1 302 Found
      Location: /vpn/index.html
      Set-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_EPAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_USER=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_BASEURL=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: CsrfToken=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: CtxsAuthId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: ASP.NET_SessionId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_TMAA=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Set-Cookie: NSC_TMAS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure
      Set-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Set-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      Set-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Connection: close
      Content-Length: 398
      Cache-control: no-cache, no-store, must-revalidate
      Pragma: no-cache
      Content-Type: text/html; charset=utf-8
      
      <html><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=UTF-8"><script type="text/javascript" src="/vpn/resources.js"></script><script type="text/javascript" src="/vpn/init/redirection_body_resources.js"></script></head><body><span id="This object may be found "></span><a href="/vpn/index.html"><span id="here"></span></a><span id="Trailing phrase after here"></span></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-05T06:32:38.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "7f568770b024b5f553c2f46a4315d749",
               "bodymmh3" : -1140647885,
               "headermd5" : "18ace997d16ca637eae1e741b04b6e3e",
               "headermmh3" : 985755436
            },
            "length" : 1826
         },
         "asn" : "AS54290",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nLocation: /vpn/index.html\r\nSet-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_EPAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_USER=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_BASEURL=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: CsrfToken=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: CtxsAuthId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: ASP.NET_SessionId=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_TMAA=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nSet-Cookie: NSC_TMAS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure\r\nSet-Cookie: NSC_TEMP=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nSet-Cookie: NSC_PERS=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nSet-Cookie: NSC_AAAC=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nConnection: close\r\nContent-Length: 398\r\nCache-control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nContent-Type: text/html; charset=utf-8\r\n\r\n<html><head><META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=UTF-8\"><script type=\"text/javascript\" src=\"/vpn/resources.js\"></script><script type=\"text/javascript\" src=\"/vpn/init/redirection_body_resources.js\"></script></head><body><span id=\"This object may be found \"></span><a href=\"/vpn/index.html\"><span id=\"here\"></span></a><span id=\"Trailing phrase after here\"></span></body></html>",
         "datamd5" : "44849f87bcf4bb81918e40b71919d9da",
         "datammh3" : -1525738187,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "hostwindsdns.com"
         ],
         "geolocus" : {
            "asn" : "AS54290",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "hostwinds.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HOSTWINDS-17-7",
            "organization" : "Hostwinds LLC.",
            "subnet" : "104.168.128.0/17"
         },
         "host" : [
            "client-104-168-201-213"
         ],
         "hostname" : [
            "client-104-168-201-213.hostwindsdns.com"
         ],
         "ip" : "104.168.201.213",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HOSTWINDS",
         "os" : "Gateway Firmware",
         "osvendor" : "Citrix",
         "port" : 4570,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "reverse" : [
            "client-104-168-201-213.hostwindsdns.com"
         ],
         "seen_date" : "2024-11-05",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "104.168.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 104.168.190.93:4570 (tcp/http) - last seen on 2024-11-02 at 04:46:19 UTC

    • IP
      104.168.190.93
      Alternative IP(s)
      2607:5501:3000:11a1:0:0:0:2
      Network
      104.168.128.0/17
      Domain(s)
      hostwindsdns.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      http://104.168.190.93:4570/ 200

      Reverse DNS
      hwsrv-742874.hostwindsdns.com
      ASN
      AS54290
      Organization
      HOSTWINDS
      Protocol
      http
      Source
      datascan
    • NOTE
      This tab is a merge from current page results.
      CPE(s)
      Domain(s)
      hostwindsdns.com
      Hostname(s)
      23.254.225.168 client-104-168-201-213.hostwindsdns.com client-104-168-202-21.hostwindsdns.com client-104-168-202-24.hostwindsdns.com client-142-11-210-136.hostwindsdns.com client-192-236-192-200.hostwindsdns.com hwsrv-1067198.hostwindsdns.com hwsrv-571070.hostwindsdns.com hwsrv-742874.hostwindsdns.com
      IP(s)
      104.168.160.78 104.168.190.93 104.168.201.213 104.168.202.21 104.168.202.24 142.11.210.136 192.236.192.200 23.254.225.168
      Port(s)
      4570
      Protocol(s)
      http
      Tag(s)
      URL(s)
      / /api/sonicos/tfa /vpn/index.html
    • Operating System
      Cisco IOS
      Product
      OpenResty OpenResty
      HTTP Component(s)
      Cisco IOS XE
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d30f413838542e1da0a5e0ea356a4358
      HTTP Header MD5
      bfaa0347c56bed3076716b0280a51f7c
      HTTP Body MD5
      f9a1ab8d92bcb3c2f7dfcf96bdb23e2e
    • HTTP/1.1 200 OK
      Server: openresty
      Date: Sat, 02 Nov 2024 04:46:19 UTC
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Expires: Thu, 19 Oct 2023 15:43:08 GMT
      Last-Modified: Thu, 19 Oct 2023 15:43:08 GMT
      Cache-Control: no-store, no-cache, must-revalidate
      Accept-Ranges: none
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Frame-Options: SAMEORIGIN
      Strict-Transport-Security: max-age=7884000
      
      53
      <script>window.onload=function(){ url ='/webui';window.location.href=url;}</script>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-02T04:46:19.000Z",
         "alternativeip" : [
            "2607:5501:3000:11a1:0:0:0:2"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "f9a1ab8d92bcb3c2f7dfcf96bdb23e2e",
               "bodymmh3" : 2145332677,
               "component" : [
                  {
                     "productvendor" : "Cisco",
                     "product" : "IOS XE"
                  }
               ],
               "header" : [
                  {
                     "value" : "Thu, 19 Oct 2023 15:43:08 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "bfaa0347c56bed3076716b0280a51f7c",
               "headermmh3" : 1389607871
            },
            "length" : 559
         },
         "asn" : "AS54290",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Sat, 02 Nov 2024 04:46:19 UTC\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nExpires: Thu, 19 Oct 2023 15:43:08 GMT\r\nLast-Modified: Thu, 19 Oct 2023 15:43:08 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nAccept-Ranges: none\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=7884000\r\n\r\n53\r\n<script>window.onload=function(){ url ='/webui';window.location.href=url;}</script>\r\n0\r\n\r\n",
         "datamd5" : "d30f413838542e1da0a5e0ea356a4358",
         "datammh3" : -27477020,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "hostwindsdns.com"
         ],
         "geolocus" : {
            "asn" : "AS54290",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "hostwinds.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "HOSTWINDS-17-7",
            "organization" : "Hostwinds LLC.",
            "subnet" : "104.168.128.0/17"
         },
         "host" : [
            "hwsrv-742874"
         ],
         "hostname" : [
            "hwsrv-742874.hostwindsdns.com"
         ],
         "ip" : "104.168.190.93",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HOSTWINDS",
         "os" : "IOS",
         "osvendor" : "Cisco",
         "port" : 4570,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "hwsrv-742874.hostwindsdns.com"
         ],
         "seen_date" : "2024-11-02",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "104.168.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }