Returning 10 result(s) out of 47 in 0.115 second(s)

  • 122.45.156.117:4899 (tcp/http) - last seen on 2024-11-07 at 03:18:24 UTC

    • IP
      122.45.156.117
      Network
      122.32.0.0/12
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://122.45.156.117:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS17858
      Organization
      LG POWERCOMM
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Thu, 07 Nov 2024 03:18:23 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Wed, 11 Nov 2020 03:00:06 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:18:24.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Wed, 11 Nov 2020 03:00:06 GMT"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : 417594921,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS17858",
         "city" : "Yongsan-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Thu, 07 Nov 2024 03:18:23 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 11 Nov 2020 03:00:06 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17858",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "lguplus.co.kr",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "Xpeed",
            "organization" : "Xpeed",
            "subnet" : "122.32.0.0/12"
         },
         "ip" : "122.45.156.117",
         "ipv6" : "false",
         "latitude" : "37.5332",
         "location" : "37.5332,126.9692",
         "longitude" : "126.9692",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LG POWERCOMM",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "122.32.0.0/12",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 124.199.187.191:4899 (tcp/http) - last seen on 2024-11-06 at 10:05:05 UTC

    • IP
      124.199.187.191
      Network
      124.199.128.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://124.199.187.191:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS17864
      Organization
      SK Broadband Co Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Wed, 06 Nov 2024 10:05:04 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Mon, 22 Apr 2019 04:59:23 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T10:05:05.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 22 Apr 2019 04:59:23 GMT"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : 1550541462,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS17864",
         "city" : "Gwangmyeong",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Wed, 06 Nov 2024 10:05:04 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 22 Apr 2019 04:59:23 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17864",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "nic.or.kr",
               "skbroadband.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "broadNnet",
            "organization" : "SK Broadband Co Ltd",
            "subnet" : "124.199.128.0/17"
         },
         "ip" : "124.199.187.191",
         "ipv6" : "false",
         "latitude" : "37.4636",
         "location" : "37.4636,126.8865",
         "longitude" : "126.8865",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SK Broadband Co Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "124.199.128.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 122.44.102.57:4899 (tcp/http) - last seen on 2024-11-06 at 01:05:49 UTC

    • IP
      122.44.102.57
      Network
      122.32.0.0/12
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://122.44.102.57:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS17858
      Organization
      LG POWERCOMM
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Wed, 06 Nov 2024 01:05:48 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Tue, 10 Sep 2019 11:26:42 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T01:05:49.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "value" : "Tue, 10 Sep 2019 11:26:42 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : 945516347,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS17858",
         "city" : "Gangnam-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Wed, 06 Nov 2024 01:05:48 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 10 Sep 2019 11:26:42 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17858",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "lguplus.co.kr",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "Xpeed",
            "organization" : "Xpeed",
            "subnet" : "122.32.0.0/12"
         },
         "ip" : "122.44.102.57",
         "ipv6" : "false",
         "latitude" : "37.5245",
         "location" : "37.5245,127.0354",
         "longitude" : "127.0354",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LG POWERCOMM",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "122.32.0.0/12",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 124.80.223.231:4899 (tcp/http) - last seen on 2024-11-05 at 11:12:33 UTC

    • IP
      124.80.223.231
      Network
      124.80.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://124.80.223.231:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS17849
      Organization
      SK Broadband Co Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Tue, 05 Nov 2024 11:12:32 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Wed, 07 Oct 2020 12:11:21 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-05T11:12:33.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "value" : "Wed, 07 Oct 2020 12:11:21 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : -1871439036,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS17849",
         "city" : "Yongin-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Tue, 05 Nov 2024 11:12:32 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 07 Oct 2020 12:11:21 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17849",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "nic.or.kr",
               "skbroadband.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "broadNnet",
            "organization" : "SK Broadband Co Ltd",
            "subnet" : "124.80.0.0/16"
         },
         "ip" : "124.80.223.231",
         "ipv6" : "false",
         "latitude" : "37.2980",
         "location" : "37.2980,127.0777",
         "longitude" : "127.0777",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SK Broadband Co Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-05",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "124.80.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 203.128.191.123:4899 (tcp/http) - last seen on 2024-11-05 at 07:51:09 UTC

    • IP
      203.128.191.123
      Network
      203.128.160.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://203.128.191.123:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS9976
      Organization
      Namincheon Brodcasting Co., Ltd.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Thu, 01 Jan 1970 02:12:40 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Fri, 13 Oct 2017 09:05:53 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-05T07:51:09.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Fri, 13 Oct 2017 09:05:53 GMT"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : -1227087553,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS9976",
         "city" : "Yeonsu-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Thu, 01 Jan 1970 02:12:40 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 13 Oct 2017 09:05:53 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS9976",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "nibtv.co.kr",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "NIBDIGITAL",
            "organization" : "Namincheon broadcasting Co.",
            "subnet" : "203.128.160.0/19"
         },
         "ip" : "203.128.191.123",
         "ipv6" : "false",
         "latitude" : "37.4336",
         "location" : "37.4336,126.6680",
         "longitude" : "126.6680",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Namincheon Brodcasting Co., Ltd.",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-05",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "203.128.160.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 180.66.203.30:4899 (tcp/http) - last seen on 2024-11-04 at 17:43:38 UTC

    • IP
      180.66.203.30
      Network
      180.66.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://180.66.203.30:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS9318
      Organization
      SK Broadband Co Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Mon, 04 Nov 2024 17:43:38 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Thu, 24 Mar 2022 07:22:57 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-04T17:43:38.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Thu, 24 Mar 2022 07:22:57 GMT"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : -2034765992,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS9318",
         "city" : "Seongbuk-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Mon, 04 Nov 2024 17:43:38 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 24 Mar 2022 07:22:57 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS9318",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "nic.or.kr",
               "skbroadband.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "broadNnet",
            "organization" : "SK Broadband Co Ltd",
            "subnet" : "180.66.0.0/16"
         },
         "ip" : "180.66.203.30",
         "ipv6" : "false",
         "latitude" : "37.5814",
         "location" : "37.5814,127.0227",
         "longitude" : "127.0227",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SK Broadband Co Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-04",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "180.66.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 175.208.162.64:4899 (tcp/http) - last seen on 2024-11-03 at 16:47:03 UTC

    • IP
      175.208.162.64
      Network
      175.208.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://175.208.162.64:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Sun, 03 Nov 2024 16:47:02 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Mon, 31 Aug 2020 13:05:54 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-03T16:47:03.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 31 Aug 2020 13:05:54 GMT"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : 1019104063,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS4766",
         "city" : "Seoul",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Sun, 03 Nov 2024 16:47:02 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Mon, 31 Aug 2020 13:05:54 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "175.208.0.0/16"
         },
         "ip" : "175.208.162.64",
         "ipv6" : "false",
         "latitude" : "37.5794",
         "location" : "37.5794,126.9754",
         "longitude" : "126.9754",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-03",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "175.208.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 58.127.212.49:4899 (tcp/http) - last seen on 2024-11-03 at 05:40:04 UTC

    • IP
      58.127.212.49
      Network
      58.126.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://58.127.212.49:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS9318
      Organization
      SK Broadband Co Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Sun, 03 Nov 2024 05:40:03 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Thu, 04 Jul 2019 09:18:33 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-03T05:40:04.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Thu, 04 Jul 2019 09:18:33 GMT"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : -1683933891,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS9318",
         "city" : "Dongdaemun-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Sun, 03 Nov 2024 05:40:03 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 04 Jul 2019 09:18:33 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS9318",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "nic.or.kr",
               "skbroadband.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "broadNnet",
            "organization" : "SK Broadband Co Ltd",
            "subnet" : "58.126.0.0/15"
         },
         "ip" : "58.127.212.49",
         "ipv6" : "false",
         "latitude" : "37.5655",
         "location" : "37.5655,127.0753",
         "longitude" : "127.0753",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SK Broadband Co Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-03",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "58.126.0.0/15",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 49.174.219.217:4899 (tcp/http) - last seen on 2024-11-03 at 05:03:24 UTC

    • IP
      49.174.219.217
      Network
      49.160.0.0/12
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://49.174.219.217:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS17858
      Organization
      LG POWERCOMM
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Sun, 03 Nov 2024 05:03:23 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Thu, 24 Mar 2022 07:22:57 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-03T05:03:24.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Thu, 24 Mar 2022 07:22:57 GMT"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : 1458473198,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS17858",
         "city" : "Seoul",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Sun, 03 Nov 2024 05:03:23 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 24 Mar 2022 07:22:57 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17858",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "lguplus.co.kr",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "Xpeed",
            "organization" : "LG POWERCOMM",
            "subnet" : "49.160.0.0/12"
         },
         "ip" : "49.174.219.217",
         "ipv6" : "false",
         "latitude" : "37.5794",
         "location" : "37.5794,126.9754",
         "longitude" : "126.9754",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LG POWERCOMM",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-03",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "49.160.0.0/12",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 123.99.112.172:4899 (tcp/http) - last seen on 2024-11-02 at 23:40:05 UTC

    • IP
      123.99.112.172
      Network
      123.99.64.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://123.99.112.172:4899/ 200

      HTTP Title
      HCMSActiveX Viewer
      ASN
      AS17857
      Organization
      SK Broadband Co Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ad2eb29d3c6f78d0f61249e88cef835
      HTTP Header MD5
      ba860b3caca90736d63774a542763ca1
      HTTP Body MD5
      ec7d5b0ba383f43c5276c73269d63e31
    • HTTP/1.0 200 OK
      Content-type: text/html
      Date: Sat, 02 Nov 2024 23:29:53 GMT
      Connection: close
      Accept-Ranges: bytes
      Last-Modified: Tue, 02 Nov 2021 12:58:22 GMT
      Content-length: 812
      
      <!DOCTYPE html>
      <html>
      <head>
      <title>HCMSActiveX Viewer</title>
      <script language="JavaScript">
      <!--
      function start()
      {
      	var href = document.URL.split("//");
      	var host;
      	if (href.length > 1) {
      		host = href[1].split("/")[0];
      	} else {
      		host = href[0].split("/")[0];
      	}
      
      	host = host.split(":");
      
      	var address = host[0];
      	var port = 80;
      	if (host.length > 1) {
      		port = Number(host[1]);
      	} else {
      		port = 80;
      	}
      
      	HCMSActiveX.Connect(address, port);
      }
      
      function stop()
      {
      	HCMSActiveX.Disconnect();
      }
      //-->
      </script>
      </head>
      <body onload="start()" onUnload="stop()">
      <div align="center">
      <object id="HCMSActiveX"
      	width=1050 height=700
      	classid="clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2"
      	codebase="http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602">
      </object>
      </div>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-02T23:40:05.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "eznetdns.com"
               ],
               "hostname" : [
                  "www.eznetdns.com"
               ],
               "url" : [
                  "http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab"
               ]
            },
            "http" : {
               "bodymd5" : "ec7d5b0ba383f43c5276c73269d63e31",
               "bodymmh3" : 336110476,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Tue, 02 Nov 2021 12:58:22 GMT"
                  }
               ],
               "headermd5" : "ba860b3caca90736d63774a542763ca1",
               "headermmh3" : 206079629,
               "title" : "HCMSActiveX Viewer"
            },
            "length" : 1001
         },
         "asn" : "AS17857",
         "city" : "Sasang-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\nContent-type: text/html\r\nDate: Sat, 02 Nov 2024 23:29:53 GMT\r\nConnection: close\r\nAccept-Ranges: bytes\r\nLast-Modified: Tue, 02 Nov 2021 12:58:22 GMT\r\nContent-length: 812\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<title>HCMSActiveX Viewer</title>\n<script language=\"JavaScript\">\n<!--\nfunction start()\n{\n\tvar href = document.URL.split(\"//\");\n\tvar host;\n\tif (href.length > 1) {\n\t\thost = href[1].split(\"/\")[0];\n\t} else {\n\t\thost = href[0].split(\"/\")[0];\n\t}\n\n\thost = host.split(\":\");\n\n\tvar address = host[0];\n\tvar port = 80;\n\tif (host.length > 1) {\n\t\tport = Number(host[1]);\n\t} else {\n\t\tport = 80;\n\t}\n\n\tHCMSActiveX.Connect(address, port);\n}\n\nfunction stop()\n{\n\tHCMSActiveX.Disconnect();\n}\n//-->\n</script>\n</head>\n<body onload=\"start()\" onUnload=\"stop()\">\n<div align=\"center\">\n<object id=\"HCMSActiveX\"\n\twidth=1050 height=700\n\tclassid=\"clsid:91B34397-1200-4BCA-BC91-8B3D12BE75C2\"\n\tcodebase=\"http://www.eznetdns.com/webviewer/common/HCMSActiveX.cab#version=0,2,0,10602\">\n</object>\n</div>\n</body>\n</html>\n",
         "datamd5" : "9ad2eb29d3c6f78d0f61249e88cef835",
         "datammh3" : -164014901,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17857",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "nic.or.kr",
               "skbroadband.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "broadNnet",
            "organization" : "SK Broadband Co Ltd",
            "subnet" : "123.99.64.0/18"
         },
         "ip" : "123.99.112.172",
         "ipv6" : "false",
         "latitude" : "35.1394",
         "location" : "35.1394,128.9780",
         "longitude" : "128.9780",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SK Broadband Co Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4899,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-02",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "123.99.64.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }