Returning 10 result(s) out of 3,483 in 0.112 second(s)

  • 43.251.236.10:5040 (tcp/http) - last seen on 2024-11-07 at 05:28:16 UTC

    • IP
      43.251.236.10
      Network
      43.251.236.0/22
      Device

      <enterprise field>: device.class

      URL

      http://43.251.236.10:5040/$%7BrandomUrl%7D 200

      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a1a952682e73758a5ad3c1462ccfc9e8
      HTTP Header MD5
      7cb8a64a5c41d5db44d85d677dbec3ce
      HTTP Body MD5
      f676b85516c6adce06fd47604ce661a9
    • HTTP/1.1 200 OK
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 05:28:15 GMT
      Content-Type: text/html
      Content-Length: 1731
      Last-Modified: Mon, 04 Nov 2024 06:13:00 GMT
      Connection: close
      ETag: "672865ec-6c3"
      Accept-Ranges: bytes
      
      <!DOCTYPE html>
      <html lang="zh-CN">
      <head>
          <!-- Google tag (gtag.js) -->
          <script async src="https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"></script>
          <script>
              <script>
                  window.dataLayer = window.dataLayer || [];
                  function gtag(){dataLayer.push(arguments);}
                  gtag('js', new Date());
      
                  gtag('config', 'G-0GJHN159XX');
          </script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3IsbgF2faH56SAiO",ck:"3IsbgF2faH56SAiO"})</script>
      
      <script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
      <script>LA.init({id:"3HIVnf9pT2UywXqw",ck:"3HIVnf9pT2UywXqw"})</script>
      
      
      
      
          <meta charset="UTF-8">
          <meta name="format-detection" content="telephone=yes">
          <meta name="viewport"
                content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">
          <script>
              const urls = [
                  "https://103.86.44.21/sanfang/index.html?303111aaa",
                  "https://162.14.69.113/"
              ];
              const randomUrl = urls[Math.floor(Math.random() * urls.length)];
      
              document.write(`<meta http-equiv="refresh" content="9;url=${randomUrl}">`);
              window.onload = function () {
                  document.getElementById('myiframe').src = randomUrl;
              };
          </script>
          <style>
              body, html {
                  margin: 0;
                  padding: 0;
                  height: 100%;
                  overflow: hidden;
              }
      
              iframe {
                  width: 100%;
                  height: 100vh;
                  border: none;
              }
          </style>
      </head>
      <body>
      <iframe id="myiframe" scrolling="no"></iframe>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:28:16.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "googletagmanager.com"
               ],
               "hostname" : [
                  "www.googletagmanager.com"
               ],
               "ip" : [
                  "103.86.44.21",
                  "162.14.69.113"
               ],
               "url" : [
                  "https://103.86.44.21/sanfang/index.html?303111aaa",
                  "https://162.14.69.113/",
                  "https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"
               ]
            },
            "http" : {
               "bodymd5" : "f676b85516c6adce06fd47604ce661a9",
               "bodymmh3" : 1332320570,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Mon, 04 Nov 2024 06:13:00 GMT"
                  },
                  {
                     "name" : "ETag",
                     "value" : "672865ec-6c3"
                  }
               ],
               "headermd5" : "7cb8a64a5c41d5db44d85d677dbec3ce",
               "headermmh3" : -1034830193,
               "tracker" : {
                  "ga" : [
                     "G-0GJHN159XX"
                  ]
               }
            },
            "length" : 1965
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 05:28:15 GMT\r\nContent-Type: text/html\r\nContent-Length: 1731\r\nLast-Modified: Mon, 04 Nov 2024 06:13:00 GMT\r\nConnection: close\r\nETag: \"672865ec-6c3\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html lang=\"zh-CN\">\n<head>\n    <!-- Google tag (gtag.js) -->\n    <script async src=\"https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX\"></script>\n    <script>\n        <script>\n            window.dataLayer = window.dataLayer || [];\n            function gtag(){dataLayer.push(arguments);}\n            gtag('js', new Date());\n\n            gtag('config', 'G-0GJHN159XX');\n    </script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3IsbgF2faH56SAiO\",ck:\"3IsbgF2faH56SAiO\"})</script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3HIVnf9pT2UywXqw\",ck:\"3HIVnf9pT2UywXqw\"})</script>\n\n\n\n\n    <meta charset=\"UTF-8\">\n    <meta name=\"format-detection\" content=\"telephone=yes\">\n    <meta name=\"viewport\"\n          content=\"width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no\">\n    <script>\n        const urls = [\n            \"https://103.86.44.21/sanfang/index.html?303111aaa\",\n            \"https://162.14.69.113/\"\n        ];\n        const randomUrl = urls[Math.floor(Math.random() * urls.length)];\n\n        document.write(`<meta http-equiv=\"refresh\" content=\"9;url=${randomUrl}\">`);\n        window.onload = function () {\n            document.getElementById('myiframe').src = randomUrl;\n        };\n    </script>\n    <style>\n        body, html {\n            margin: 0;\n            padding: 0;\n            height: 100%;\n            overflow: hidden;\n        }\n\n        iframe {\n            width: 100%;\n            height: 100vh;\n            border: none;\n        }\n    </style>\n</head>\n<body>\n<iframe id=\"myiframe\" scrolling=\"no\"></iframe>\n</body>\n</html>\n",
         "datamd5" : "a1a952682e73758a5ad3c1462ccfc9e8",
         "datammh3" : -1968554267,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "forward" : "43.251.236.10",
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "43.251.236.0/22"
         },
         "hostname" : [
            "43.251.236.10"
         ],
         "ip" : "43.251.236.10",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "urlscan::redirect",
         "status" : 200,
         "subnet" : "43.251.236.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/$%7BrandomUrl%7D"
      }
      
  • 62.49.67.96:5040 (tcp/http) - last seen on 2024-11-07 at 05:09:31 UTC

    • IP
      62.49.67.96
      Network
      62.49.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://62.49.67.96:5040/ 200

      ASN
      AS5378
      Organization
      Vodafone Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0f5e20d26e3d98e7771a1a61e9fb4da9
      HTTP Header MD5
      02a88d0b55d926fb60eeacd022b3c97e
      HTTP Body MD5
      2516ba498b9758a8503bc6352a6e731f
    • HTTP/1.1 200 OK
      Server: nginx
      Date: Thu, 07 Nov 2024 05:09:30 GMT
      Transfer-Encoding: chunked
      Connection: close
      Cache-control: no-store
      
      e8
      <!DOCTYPE html>
      <html>
        <script type="text/javascript">
          var uri = location.pathname + location.search + location.hash;
          var URL = 'https://' + location.hostname + ':5045' + uri;
          location.replace(URL);
        </script>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:09:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "2516ba498b9758a8503bc6352a6e731f",
               "bodymmh3" : 1255042496,
               "headermd5" : "02a88d0b55d926fb60eeacd022b3c97e",
               "headermmh3" : -434019162
            },
            "length" : 386
         },
         "asn" : "AS5378",
         "city" : "Fulham",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:09:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nCache-control: no-store\r\n\r\ne8\r\n<!DOCTYPE html>\n<html>\n  <script type=\"text/javascript\">\n    var uri = location.pathname + location.search + location.hash;\n    var URL = 'https://' + location.hostname + ':5045' + uri;\n    location.replace(URL);\n  </script>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "0f5e20d26e3d98e7771a1a61e9fb4da9",
         "datammh3" : 726905153,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "62.49.67.96",
         "ipv6" : "false",
         "latitude" : "51.5042",
         "location" : "51.5042,-0.2199",
         "longitude" : "-0.2199",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Vodafone Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "62.49.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 168.235.110.20:5040 (tcp/http) - last seen on 2024-11-07 at 05:07:37 UTC

    • IP
      168.235.110.20
      Network
      168.235.96.0/20
      Domain(s)
      ramnode.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://168.235.110.20:5040/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      168-235-110-20.cloud.ramnode.com
      ASN
      AS3842
      Organization
      RAMNODE
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 05:07:37 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:07:37.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -700624883,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS3842",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:07:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ramnode.com"
         ],
         "geolocus" : {
            "asn" : "AS3842",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "inmotionhosting.com",
               "ramnode.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "RAMNODE-10",
            "organization" : "RAMNODE",
            "subnet" : "168.235.96.0/20"
         },
         "host" : [
            "168-235-110-20"
         ],
         "hostname" : [
            "168-235-110-20.cloud.ramnode.com"
         ],
         "ip" : "168.235.110.20",
         "ipv6" : "false",
         "latitude" : "40.7064",
         "location" : "40.7064,-73.9473",
         "longitude" : "-73.9473",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "RAMNODE",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "168-235-110-20.cloud.ramnode.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "cloud.ramnode.com"
         ],
         "subnet" : "168.235.96.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 13.244.97.126:5040 (tcp/http) - last seen on 2024-11-07 at 05:07:05 UTC

    • IP
      13.244.97.126
      Network
      13.244.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Linux Linux Kernel
      URL

      http://13.244.97.126:5040/ 200

      HTTP Title
      AiCloud
      Reverse DNS
      ec2-13-244-97-126.af-south-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      eec2f4120ab9a23d5cfaf3bfdc2425a1
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      5ca568bf96622aad854cce25a37f12ad
    • HTTP/1.1 200 OK
      Connection: close
      Date: Thu, 07 Nov 2024 05:07:05 GMT
      Server: nginx
      Content-Length: 16915
      Content-Type: text/html
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml">
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
      <meta http-equiv="Cache-control" content="no-cache">
      <meta name="viewport" content="width=device-width, minimum-scale=1.0, maximum-scale=1, user-scalable=no" />
      <meta name="apple-mobile-web-app-capable" content="yes">
      <meta name="apple-mobile-web-app-status-bar-style" content="black">
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <meta http-equiv="X-Frame-Options" content="SAMEORIGIN">
      <title>AiCloud</title>
      <style>
      html{
      margin:0 0;
      padding:0px;
      font-family:"Segoe UI",Arial;
      }
      body{
      display: block;
      overflow: hidden;
      }
      
      input,#ok {
      background:transparent url("/smb/css/style-theme.png") no-repeat top left;
      }
      
      #login_logo{
      width:300px;
      height:76px;
      background:transparent url("/smb/css/logo.jpg") no-repeat top left;
      position: absolute;
      top: 60px;
      }
      
      #ok{
      background-position: -200px -390px;
      width:40px;
      height:40px;
      float:right;
      }
      #title1{
      color:#fff;
      font-size:30px
      }
      #title2{
      color:#fff;
      font-size:20px
      }
      input {
      font-size: 14px;
      text-shadow: 0px 1px 0px white;
      outline: none;
      background-position: 0 -540px;
      -webkit-border-radius: 0;
      -moz-border-radius: 0;
      border-radius: 0;
      border: 0;
      -webkit-box-shadow: 0 0 0;
      -moz-box-shadow: 0 0 0;
      box-shadow: 0 0 0;
      padding-left:3px;
      }
      div.cap_num{
      width:40px;
      height:40px;
      float:right;
      }
      .unselectable {
      -moz-user-select: -moz-none;
      -khtml-user-select: none;
      -webkit-user-select: none;
      -o-user-select: none;
      user-select: none;
      }
      .table_x{
      position: relative;
      padding: 20px 40px 0 40px;
      font-size: 20px;
      display:none;
      }
      .table_x input{
      width:220px;
      height:36px;
      font-size: 20px;
      }
      .table_x .table_label_x{
      color:#ffffff;
      }
      </style>
      <script type="text/javascript" src="/smb/js/tools.js"></script>
      <script type='text/javascript' src='/smb/js/davclient_tools.js'></script>
      <script type="text/javascript">
      var this_url;
      var m = new lang();
      var g_storage = new myStorage();
      var g_captcha = -1;
      
      function makeid(){
          var text = "";
          var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
      
          for( var i=0; i < 20; i++ )
              text += possible.charAt(Math.floor(Math.random() * possible.length));
      
          return text;
      }
      
      $("document").ready(function() {
              //- create access token
              var asus_token = ( g_storage.gett('asus_token') == undefined ) ? '' : g_storage.gett('asus_token');
              if(asus_token==""){
                      asus_token = makeid();
                      g_storage.sett('asus_token', asus_token);
              }
      
              var loc_lan = String(window.navigator.userLanguage || window.navigator.language).toLowerCase();
              var lan = ( g_storage.get('lan') == undefined ) ? loc_lan : g_storage.get('lan');
              m.setLanguage(lan);
      
              $('label#username').text(m.getString('title_username2'));
              $('label#password').text(m.getString('title_password2'));
              // $('label#captcha').text(m.getString('title_captcha'));
      
              this_url = $("input.urlInfo").attr("value");
      
              if(this_url!="/"){
                      $("div#title1").text(m.getString('title_login'));
                      $("div#title2").text(this_url);
              }
      
              var browserVer = navigator.userAgent.toLowerCase();
              if( isIE() &&
                      getInternetExplorerVersion() <= 7 ){
      
                      $("table#table_login").remove();
      
                      var append_html = '<table border="0" cellpadding="0" cellspacing="3" style="position: relative;left:40px;padding-top:20px"><tbody><tr><td width="240px">';
                      append_html += '<font color="white" size="4">';
                      append_html += '<label>';
                      append_html += m.getString('msg_browsersupport');
                      append_html += '</label>';
                      append_html += '</font>';
                      append_html += '</td>';
                      append_html += '</tr>';
                      append_html += '</tbody>';
                      append_html += '</table>';
                      $(append_html).appendTo($("#main"));
      
                      return;
              }
      
              // $(".captcha").css("display","none");
              // generateCaptcha();
      
              adjustUI();
      
              $(window).resize(adjustUI);
      
              $("table#table_login").css("display", "block");
      
              $("input#username").focus();
      });
      
      function sanitize(input) {
          //- Use replacement methods to remove or encode potentially malicious characters
          return input
              .replace(/&/g, "&amp;")
              .replace(/</g, "&lt;")
              .replace(/>/g, "&gt;")
              .replace(/"/g, "&quot;")
              .replace(/'/g, "&#x27;")
              .replace(/\//g, "&#x2F;");
      }
      
      function generateCaptcha(){
      
              if(this_url!="/")
                      return;
      
              $.ajax({
                      url: 'GetCaptchaImage',
                      data: '',
                      type: 'GET',
                      dataType: 'xml',
                      timeout: 20000,
                      error: function(){
                              //alert('Error loading XML document');
                      },
                      success: function(xml){
      
                              var data = parseXml(xml);
                              var captcha_enable = sanitize($(data).find('enable').text());
                              if(captcha_enable==1){
                                      var image_data1 = sanitize($(data).find('img1').text());
                                      var image_data1 = sanitize($(data).find('img1').text());
                                      var image_data2 = sanitize($(data).find('img2').text());
                                      var image_data3 = sanitize($(data).find('img3').text());
                                      var image_data4 = sanitize($(data).find('img4').text());
                                      g_captcha = sanitize($(data).find('code').text());
      
                                      var captcha_pattern = "";
                                      $("#captcha_pattern").empty();
      
                                      captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data4 + ")'></div>";
                                      captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data3 + ")'></div>";
                                      captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data2 + ")'></div>";
                                      captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data1 + ")'></div>";
      
                                      $(captcha_pattern).appendTo("#captcha_pattern");
      
                                      $(".captcha").css("display","block");
      
                                      $("#main").css("height",420);
                              }
      
                      }
              });
      }
      
      function adjustUI(){
              var logo_left = ($(document).width() - $("div#login_logo").width())/2;
              $("div#login_logo").css("left", logo_left);
      }
      
      function doOK(e) {
              var captcha = "";//$('input#captcha').val();
              var user = "";
              var pass = "";
              var auth = "";
      
              if(g_captcha!=-1&&captcha!=g_captcha){
                      alert(m.getString('msg_error_captcha'));
              }
              else{
                      user = $('input#username').val();
                      pass = $('input#password').val();
                      auth = "Basic " + Base64.encode(user + ":" + pass);
              }
      
              var client = new davlib.DavClient();
              client.initialize();
      
              g_storage.set('openurl', this_url);
      
              /*
              //var enc = "crypt:6166393232616536393164633730316238643463326264313735363031393961:3d593c297c1c6539356237383035663530353462633939646666313138643561";
              var enc = "";
              g_storage.set('openurl', this_url);
      
              client.OAUTH(this_url, auth, enc, function(error, statusstring, content){
      
                      if(error==401){
      
                              $('input#password').attr("value","");
      
                              var the_left = parseInt($('div#login_logo').css("left"));
      
                              for(var i=0; i<6; i++){
      
                                      var x = i%2;
                                      var new_left = 0;
                                      if(x==0)
                                              new_left = the_left + i*5;
                                      else if(x==1)
                                              new_left = the_left - i*5;
      
                                      $('div#login_logo').animate({
                                      left: new_left
                                      }, 100, function(){
                                              if(i=5)
                                                      adjustUI();
                                      });
                              }
      
                      }
                      else{
                              $.cookie("TestAuth", content);
      
                              setTimeout(function(){
                                      window.location.reload(true);
                              }, 100);
      
                      }
              });
              */
      
              client.PROPFIND(this_url, auth, function(error, statusstring, content){
                      if(error==401){
                              $('input#password').attr("value","");
      
                              var the_left = parseInt($('div#login_logo').css("left"));
      
                              for(var i=0; i<6; i++){
      
                                      var x = i%2;
                                      var new_left = 0;
                                      if(x==0)
                                              new_left = the_left + i*5;
                                      else if(x==1)
                                              new_left = the_left - i*5;
      
                                      $('div#login_logo').animate({
                                      left: new_left
                                      }, 100, function(){
                                              if(i=5)
                                                      adjustUI();
                                      });
                              }
      
                      }
                      else{
                              setTimeout(function(){
                                      window.location.reload(true);
                              }, 100);
                      }
              });
      }
      
      function onKeyHandler(e){
              if(e.keyCode==13)
                      doOK(e);
      }
      
      </script>
      </head>
      <body style='padding-top:20px;margin:0;background-color:#313131'>
      
      <table id="logo" width="100%" border="0" valign="middle" align="center" cellpadding="0" cellspacing="0">
              <tbody><tr height="128px">
                      <tr><td valign="middle" align="center"><div id="login_logo"></div></td></tr>
              </tr></tbody>
      </table>
      
      <table width="100%" border="0" valign="middle" align="center" cellpadding="0" cellspacing="0">
              <tbody>
                      <tr>
                      <td valign="middle" align="center">
                              <div style="width:300px;height:88px;background-color:#595F62;padding-top:10px">
                                      <div id="title1">Welcome.</div>
                                      <div id="title2">Who’s coming home?</div>
                              </div>
                      </td>
                      </tr>
                      <tr height="7px"></tr>
              </tbody>
      </table>
      
      <table width="100%" height="100%">
              <tbody><tr>
                      <td valign="middle" align="center">
      
                              <table valign="middle" align="center" border="0" cellpadding="0" cellspacing="0">
                                      <tbody><tr>
                                              <td align="left" background="" height="106" alt="">
                                                      <div id="main" style="width:300px;height:385px;background-color:#595F62">
                                                              <table id="table_login" class="table_x" border="0" cellpadding="0" cellspacing="3">
                                                                      <tbody>
                                                                              <tr>
                                                                                      <td>
                                                                                              <label class="table_label_x" id="username">Username :</label>
                                                                                      </td>
                                                                              </tr>
                                                                              <tr height="5px"></tr>
                                                                              <tr>
                                                                              <td>
                                                                                      <input id="username" name="username" type="text" maxlength="32" autocapitalize="off">
                                                                              </td>
                                                                      </tr>
                                                                      <tr style="height:10px"></tr>
                                              <tr>
                                              <td>
                                                      <label class="table_label_x" id="password">Password :</label>
                                              </td>
                                              </tr>
                                                                      <tr height="5px"></tr>
                                                                      <tr>
                                                                      <td>
                                                                              <input id="password" name="password" type="password" maxlength="32" onkeydown="return onKeyHandler(event)">
                                                                      </td>
                                                                      </tr>
                                                                              <tr style="height:10px"></tr>
                                                                              <!--
                                                                      <tr class="captcha" style="display:none">
                                                                                      <td>
                                                                                              <font color="white" size="4">
                                                                                                      <label id="captcha">Random no. :</label>
                                                                                              </font>
                                                                                      </td>
                                                                              </tr>
                                                                              <tr class="captcha" height="5px" style="display:none"></tr>
                                                                              <tr class="captcha" style="display:none">
                                                                              <td>
                                                                                      <input id="captcha" name="captcha" type="text" autocapitalize="off" maxlength="4" style="font-size:20px;width:220px;height:36px" onkeydown="return onKeyHandler(event)">
                                                                              </td>
                                                                      </tr>
                                                                      <tr class="captcha" height="5px" style="display:none"></tr>
                                                                       <tr class="captcha" style="display:none">
                                                                              <td>
                                                                                      <div id="captcha_pattern" class="unselectable" name="captcha_pattern" style="width:220px;height:40px;float:left" onclick="generateCaptcha()"></div>
                                                                              </td>
                                                                      </tr>
                                                                              <tr style="height:10px"></tr>
                                                                
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:07:05.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "5ca568bf96622aad854cce25a37f12ad",
               "bodymmh3" : 2122725594,
               "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
               "headermmh3" : -556079309,
               "title" : "AiCloud"
            },
            "length" : 16384
         },
         "asn" : "AS16509",
         "city" : "Cape Town",
         "country" : "ZA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:07:05 GMT\r\nServer: nginx\r\nContent-Length: 16915\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta http-equiv=\"Cache-control\" content=\"no-cache\">\n<meta name=\"viewport\" content=\"width=device-width, minimum-scale=1.0, maximum-scale=1, user-scalable=no\" />\n<meta name=\"apple-mobile-web-app-capable\" content=\"yes\">\n<meta name=\"apple-mobile-web-app-status-bar-style\" content=\"black\">\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<meta http-equiv=\"X-Frame-Options\" content=\"SAMEORIGIN\">\n<title>AiCloud</title>\n<style>\nhtml{\nmargin:0 0;\npadding:0px;\nfont-family:\"Segoe UI\",Arial;\n}\nbody{\ndisplay: block;\noverflow: hidden;\n}\n\ninput,#ok {\nbackground:transparent url(\"/smb/css/style-theme.png\") no-repeat top left;\n}\n\n#login_logo{\nwidth:300px;\nheight:76px;\nbackground:transparent url(\"/smb/css/logo.jpg\") no-repeat top left;\nposition: absolute;\ntop: 60px;\n}\n\n#ok{\nbackground-position: -200px -390px;\nwidth:40px;\nheight:40px;\nfloat:right;\n}\n#title1{\ncolor:#fff;\nfont-size:30px\n}\n#title2{\ncolor:#fff;\nfont-size:20px\n}\ninput {\nfont-size: 14px;\ntext-shadow: 0px 1px 0px white;\noutline: none;\nbackground-position: 0 -540px;\n-webkit-border-radius: 0;\n-moz-border-radius: 0;\nborder-radius: 0;\nborder: 0;\n-webkit-box-shadow: 0 0 0;\n-moz-box-shadow: 0 0 0;\nbox-shadow: 0 0 0;\npadding-left:3px;\n}\ndiv.cap_num{\nwidth:40px;\nheight:40px;\nfloat:right;\n}\n.unselectable {\n-moz-user-select: -moz-none;\n-khtml-user-select: none;\n-webkit-user-select: none;\n-o-user-select: none;\nuser-select: none;\n}\n.table_x{\nposition: relative;\npadding: 20px 40px 0 40px;\nfont-size: 20px;\ndisplay:none;\n}\n.table_x input{\nwidth:220px;\nheight:36px;\nfont-size: 20px;\n}\n.table_x .table_label_x{\ncolor:#ffffff;\n}\n</style>\n<script type=\"text/javascript\" src=\"/smb/js/tools.js\"></script>\n<script type='text/javascript' src='/smb/js/davclient_tools.js'></script>\n<script type=\"text/javascript\">\nvar this_url;\nvar m = new lang();\nvar g_storage = new myStorage();\nvar g_captcha = -1;\n\nfunction makeid(){\n    var text = \"\";\n    var possible = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\";\n\n    for( var i=0; i < 20; i++ )\n        text += possible.charAt(Math.floor(Math.random() * possible.length));\n\n    return text;\n}\n\n$(\"document\").ready(function() {\n        //- create access token\n        var asus_token = ( g_storage.gett('asus_token') == undefined ) ? '' : g_storage.gett('asus_token');\n        if(asus_token==\"\"){\n                asus_token = makeid();\n                g_storage.sett('asus_token', asus_token);\n        }\n\n        var loc_lan = String(window.navigator.userLanguage || window.navigator.language).toLowerCase();\n        var lan = ( g_storage.get('lan') == undefined ) ? loc_lan : g_storage.get('lan');\n        m.setLanguage(lan);\n\n        $('label#username').text(m.getString('title_username2'));\n        $('label#password').text(m.getString('title_password2'));\n        // $('label#captcha').text(m.getString('title_captcha'));\n\n        this_url = $(\"input.urlInfo\").attr(\"value\");\n\n        if(this_url!=\"/\"){\n                $(\"div#title1\").text(m.getString('title_login'));\n                $(\"div#title2\").text(this_url);\n        }\n\n        var browserVer = navigator.userAgent.toLowerCase();\n        if( isIE() &&\n                getInternetExplorerVersion() <= 7 ){\n\n                $(\"table#table_login\").remove();\n\n                var append_html = '<table border=\"0\" cellpadding=\"0\" cellspacing=\"3\" style=\"position: relative;left:40px;padding-top:20px\"><tbody><tr><td width=\"240px\">';\n                append_html += '<font color=\"white\" size=\"4\">';\n                append_html += '<label>';\n                append_html += m.getString('msg_browsersupport');\n                append_html += '</label>';\n                append_html += '</font>';\n                append_html += '</td>';\n                append_html += '</tr>';\n                append_html += '</tbody>';\n                append_html += '</table>';\n                $(append_html).appendTo($(\"#main\"));\n\n                return;\n        }\n\n        // $(\".captcha\").css(\"display\",\"none\");\n        // generateCaptcha();\n\n        adjustUI();\n\n        $(window).resize(adjustUI);\n\n        $(\"table#table_login\").css(\"display\", \"block\");\n\n        $(\"input#username\").focus();\n});\n\nfunction sanitize(input) {\n    //- Use replacement methods to remove or encode potentially malicious characters\n    return input\n        .replace(/&/g, \"&amp;\")\n        .replace(/</g, \"&lt;\")\n        .replace(/>/g, \"&gt;\")\n        .replace(/\"/g, \"&quot;\")\n        .replace(/'/g, \"&#x27;\")\n        .replace(/\\//g, \"&#x2F;\");\n}\n\nfunction generateCaptcha(){\n\n        if(this_url!=\"/\")\n                return;\n\n        $.ajax({\n                url: 'GetCaptchaImage',\n                data: '',\n                type: 'GET',\n                dataType: 'xml',\n                timeout: 20000,\n                error: function(){\n                        //alert('Error loading XML document');\n                },\n                success: function(xml){\n\n                        var data = parseXml(xml);\n                        var captcha_enable = sanitize($(data).find('enable').text());\n                        if(captcha_enable==1){\n                                var image_data1 = sanitize($(data).find('img1').text());\n                                var image_data1 = sanitize($(data).find('img1').text());\n                                var image_data2 = sanitize($(data).find('img2').text());\n                                var image_data3 = sanitize($(data).find('img3').text());\n                                var image_data4 = sanitize($(data).find('img4').text());\n                                g_captcha = sanitize($(data).find('code').text());\n\n                                var captcha_pattern = \"\";\n                                $(\"#captcha_pattern\").empty();\n\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data4 + \")'></div>\";\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data3 + \")'></div>\";\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data2 + \")'></div>\";\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data1 + \")'></div>\";\n\n                                $(captcha_pattern).appendTo(\"#captcha_pattern\");\n\n                                $(\".captcha\").css(\"display\",\"block\");\n\n                                $(\"#main\").css(\"height\",420);\n                        }\n\n                }\n        });\n}\n\nfunction adjustUI(){\n        var logo_left = ($(document).width() - $(\"div#login_logo\").width())/2;\n        $(\"div#login_logo\").css(\"left\", logo_left);\n}\n\nfunction doOK(e) {\n        var captcha = \"\";//$('input#captcha').val();\n        var user = \"\";\n        var pass = \"\";\n        var auth = \"\";\n\n        if(g_captcha!=-1&&captcha!=g_captcha){\n                alert(m.getString('msg_error_captcha'));\n        }\n        else{\n                user = $('input#username').val();\n                pass = $('input#password').val();\n                auth = \"Basic \" + Base64.encode(user + \":\" + pass);\n        }\n\n        var client = new davlib.DavClient();\n        client.initialize();\n\n        g_storage.set('openurl', this_url);\n\n        /*\n        //var enc = \"crypt:6166393232616536393164633730316238643463326264313735363031393961:3d593c297c1c6539356237383035663530353462633939646666313138643561\";\n        var enc = \"\";\n        g_storage.set('openurl', this_url);\n\n        client.OAUTH(this_url, auth, enc, function(error, statusstring, content){\n\n                if(error==401){\n\n                        $('input#password').attr(\"value\",\"\");\n\n                        var the_left = parseInt($('div#login_logo').css(\"left\"));\n\n                        for(var i=0; i<6; i++){\n\n                                var x = i%2;\n                                var new_left = 0;\n                                if(x==0)\n                                        new_left = the_left + i*5;\n                                else if(x==1)\n                                        new_left = the_left - i*5;\n\n                                $('div#login_logo').animate({\n                                left: new_left\n                                }, 100, function(){\n                                        if(i=5)\n                                                adjustUI();\n                                });\n                        }\n\n                }\n                else{\n                        $.cookie(\"TestAuth\", content);\n\n                        setTimeout(function(){\n                                window.location.reload(true);\n                        }, 100);\n\n                }\n        });\n        */\n\n        client.PROPFIND(this_url, auth, function(error, statusstring, content){\n                if(error==401){\n                        $('input#password').attr(\"value\",\"\");\n\n                        var the_left = parseInt($('div#login_logo').css(\"left\"));\n\n                        for(var i=0; i<6; i++){\n\n                                var x = i%2;\n                                var new_left = 0;\n                                if(x==0)\n                                        new_left = the_left + i*5;\n                                else if(x==1)\n                                        new_left = the_left - i*5;\n\n                                $('div#login_logo').animate({\n                                left: new_left\n                                }, 100, function(){\n                                        if(i=5)\n                                                adjustUI();\n                                });\n                        }\n\n                }\n                else{\n                        setTimeout(function(){\n                                window.location.reload(true);\n                        }, 100);\n                }\n        });\n}\n\nfunction onKeyHandler(e){\n        if(e.keyCode==13)\n                doOK(e);\n}\n\n</script>\n</head>\n<body style='padding-top:20px;margin:0;background-color:#313131'>\n\n<table id=\"logo\" width=\"100%\" border=\"0\" valign=\"middle\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\n        <tbody><tr height=\"128px\">\n                <tr><td valign=\"middle\" align=\"center\"><div id=\"login_logo\"></div></td></tr>\n        </tr></tbody>\n</table>\n\n<table width=\"100%\" border=\"0\" valign=\"middle\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\n        <tbody>\n                <tr>\n                <td valign=\"middle\" align=\"center\">\n                        <div style=\"width:300px;height:88px;background-color:#595F62;padding-top:10px\">\n                                <div id=\"title1\">Welcome.</div>\n                                <div id=\"title2\">Who\u2019s coming home?</div>\n                        </div>\n                </td>\n                </tr>\n                <tr height=\"7px\"></tr>\n        </tbody>\n</table>\n\n<table width=\"100%\" height=\"100%\">\n        <tbody><tr>\n                <td valign=\"middle\" align=\"center\">\n\n                        <table valign=\"middle\" align=\"center\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\">\n                                <tbody><tr>\n                                        <td align=\"left\" background=\"\" height=\"106\" alt=\"\">\n                                                <div id=\"main\" style=\"width:300px;height:385px;background-color:#595F62\">\n                                                        <table id=\"table_login\" class=\"table_x\" border=\"0\" cellpadding=\"0\" cellspacing=\"3\">\n                                                                <tbody>\n                                                                        <tr>\n                                                                                <td>\n                                                                                        <label class=\"table_label_x\" id=\"username\">Username :</label>\n                                                                                </td>\n                                                                        </tr>\n                                                                        <tr height=\"5px\"></tr>\n                                                                        <tr>\n                                                                        <td>\n                                                                                <input id=\"username\" name=\"username\" type=\"text\" maxlength=\"32\" autocapitalize=\"off\">\n                                                                        </td>\n                                                                </tr>\n                                                                <tr style=\"height:10px\"></tr>\n                                        <tr>\n                                        <td>\n                                                <label class=\"table_label_x\" id=\"password\">Password :</label>\n                                        </td>\n                                        </tr>\n                                                                <tr height=\"5px\"></tr>\n                                                                <tr>\n                                                                <td>\n                                                                        <input id=\"password\" name=\"password\" type=\"password\" maxlength=\"32\" onkeydown=\"return onKeyHandler(event)\">\n                                                                </td>\n                                                                </tr>\n                                                                        <tr style=\"height:10px\"></tr>\n                                                                        <!--\n                                                                <tr class=\"captcha\" style=\"display:none\">\n                                                                                <td>\n                                                                                        <font color=\"white\" size=\"4\">\n                                                                                                <label id=\"captcha\">Random no. :</label>\n                                                                                        </font>\n                                                                                </td>\n                                                                        </tr>\n                                                                        <tr class=\"captcha\" height=\"5px\" style=\"display:none\"></tr>\n                                                                        <tr class=\"captcha\" style=\"display:none\">\n                                                                        <td>\n                                                                                <input id=\"captcha\" name=\"captcha\" type=\"text\" autocapitalize=\"off\" maxlength=\"4\" style=\"font-size:20px;width:220px;height:36px\" onkeydown=\"return onKeyHandler(event)\">\n                                                                        </td>\n                                                                </tr>\n                                                                <tr class=\"captcha\" height=\"5px\" style=\"display:none\"></tr>\n                                                                 <tr class=\"captcha\" style=\"display:none\">\n                                                                        <td>\n                                                                                <div id=\"captcha_pattern\" class=\"unselectable\" name=\"captcha_pattern\" style=\"width:220px;height:40px;float:left\" onclick=\"generateCaptcha()\"></div>\n                                                                        </td>\n                                                                </tr>\n                                                                        <tr style=\"height:10px\"></tr>\n                                                          ",
         "datamd5" : "eec2f4120ab9a23d5cfaf3bfdc2425a1",
         "datammh3" : -58520762,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "AF",
            "continentname" : "Africa",
            "country" : "ZA",
            "countryname" : "South Africa",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "-30.559482",
            "location" : "-30.559482,22.937506",
            "longitude" : "22.937506",
            "netname" : "AMAZON-CPT",
            "organization" : "Amazon Data Services South Africa",
            "subnet" : "13.244.0.0/14"
         },
         "host" : [
            "ec2-13-244-97-126"
         ],
         "hostname" : [
            "ec2-13-244-97-126.af-south-1.compute.amazonaws.com"
         ],
         "ip" : "13.244.97.126",
         "ipv6" : "false",
         "latitude" : "-34.0486",
         "location" : "-34.0486,18.4811",
         "longitude" : "18.4811",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "ec2-13-244-97-126.af-south-1.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "af-south-1.compute.amazonaws.com",
            "compute.amazonaws.com"
         ],
         "subnet" : "13.244.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 167.88.120.108:5040 (tcp/http) - last seen on 2024-11-07 at 05:06:08 UTC

    • IP
      167.88.120.108
      Network
      167.88.120.0/24
      Domain(s)
      ramnode.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://167.88.120.108:5040/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      167-88-120-108.cloud.ramnode.com
      ASN
      AS3842
      Organization
      RAMNODE
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 05:06:08 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:06:08.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 1674110144,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS3842",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:06:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ramnode.com"
         ],
         "geolocus" : {
            "asn" : "AS3842",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "inmotionhosting.com",
               "ramnode.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "RAMNODE-8",
            "organization" : "RAMNODE",
            "subnet" : "167.88.120.0/24"
         },
         "host" : [
            "167-88-120-108"
         ],
         "hostname" : [
            "167-88-120-108.cloud.ramnode.com"
         ],
         "ip" : "167.88.120.108",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "RAMNODE",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "167-88-120-108.cloud.ramnode.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "cloud.ramnode.com"
         ],
         "subnet" : "167.88.120.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 192.46.210.171:5040 (tcp/http) - last seen on 2024-11-07 at 05:04:12 UTC

    • IP
      192.46.210.171
      Network
      192.46.208.0/20
      Domain(s)
      linodeusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://192.46.210.171:5040/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      192-46-210-171.ip.linodeusercontent.com
      ASN
      AS63949
      Organization
      Akamai Connected Cloud
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 05:04:11 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:04:12.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 1355628583,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS63949",
         "city" : "Mumbai",
         "country" : "IN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:04:11 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "linodeusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS63949",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "linode.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "US-LINODE-19881220",
            "organization" : "Linode, LLC",
            "subnet" : "192.46.208.0/20"
         },
         "host" : [
            "192-46-210-171"
         ],
         "hostname" : [
            "192-46-210-171.ip.linodeusercontent.com"
         ],
         "ip" : "192.46.210.171",
         "ipv6" : "false",
         "latitude" : "19.0748",
         "location" : "19.0748,72.8856",
         "longitude" : "72.8856",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Akamai Connected Cloud",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "192-46-210-171.ip.linodeusercontent.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "ip.linodeusercontent.com"
         ],
         "subnet" : "192.46.208.0/20",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 198.204.229.180:5040 (tcp/http) - last seen on 2024-11-07 at 05:04:09 UTC

    • IP
      198.204.229.180
      Alternative IP(s)
      104.21.72.56 172.67.175.169 2606:4700:3031:0:0:0:6815:4838 2606:4700:3036:0:0:0:ac43:afa9
      Network
      198.204.224.0/19
      Domain(s)
      philmoresms.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Ubuntu
      URL

      http://198.204.229.180:5040/ 404

      HTTP Title
      404 Not Found
      Reverse DNS
      philmoresms.com
      ASN
      AS33387
      Organization
      NOCIX
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Ubuntu
      Product
      F5 Nginx 1.18.0
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      025e5519b88ee5c0b33f248f759fa570
      HTTP Header MD5
      46fc2a34a99bc09ae1f601f7c1dbc35e
      HTTP Body MD5
      e46c4e5e1fbc64b1bae9ebd9bcef7fcf
    • HTTP/1.1 404 NOT FOUND
      Server: nginx/1.18.0 (Ubuntu)
      Date: Thu, 07 Nov 2024 05:04:07 GMT
      Content-Type: text/html; charset=utf-8
      Content-Length: 207
      Connection: close
      
      <!doctype html>
      <html lang=en>
      <title>404 Not Found</title>
      <h1>Not Found</h1>
      <p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:04:09.000Z",
         "alternativeip" : [
            "104.21.72.56",
            "172.67.175.169",
            "2606:4700:3031:0:0:0:6815:4838",
            "2606:4700:3036:0:0:0:ac43:afa9"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "e46c4e5e1fbc64b1bae9ebd9bcef7fcf",
               "bodymmh3" : 1185329514,
               "headermd5" : "46fc2a34a99bc09ae1f601f7c1dbc35e",
               "headermmh3" : 1792553977,
               "title" : "404 Not Found"
            },
            "length" : 381
         },
         "asn" : "AS33387",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 404 NOT FOUND\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 07 Nov 2024 05:04:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 207\r\nConnection: close\r\n\r\n<!doctype html>\n<html lang=en>\n<title>404 Not Found</title>\n<h1>Not Found</h1>\n<p>The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.</p>\n",
         "datamd5" : "025e5519b88ee5c0b33f248f759fa570",
         "datammh3" : -572040986,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "philmoresms.com"
         ],
         "geolocus" : {
            "asn" : "AS33387",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "datashack.net",
               "nocix.net",
               "wholesaleinternet.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "DS-198-204-224-1-7",
            "organization" : "Nocix, LLC",
            "subnet" : "198.204.224.0/19"
         },
         "hostname" : [
            "philmoresms.com"
         ],
         "ip" : "198.204.229.180",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "NOCIX",
         "os" : "Linux",
         "osdistribution" : "Ubuntu",
         "osvendor" : "Linux",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.18.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "NOT FOUND",
         "reverse" : [
            "philmoresms.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 404,
         "subnet" : "198.204.224.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 139.162.86.45:5040 (tcp/http) - last seen on 2024-11-07 at 05:04:02 UTC

    • IP
      139.162.86.45
      Network
      139.162.0.0/16
      Domain(s)
      linodeusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://139.162.86.45:5040/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      139-162-86-45.ip.linodeusercontent.com
      ASN
      AS63949
      Organization
      Akamai Connected Cloud
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 05:04:01 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:04:02.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -876427046,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS63949",
         "city" : "Tokyo",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:04:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "linodeusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS63949",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "linode.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "EU-LINODE-20141229",
            "organization" : "Linode, LLC",
            "subnet" : "139.162.0.0/16"
         },
         "host" : [
            "139-162-86-45"
         ],
         "hostname" : [
            "139-162-86-45.ip.linodeusercontent.com"
         ],
         "ip" : "139.162.86.45",
         "ipv6" : "false",
         "latitude" : "35.6893",
         "location" : "35.6893,139.6899",
         "longitude" : "139.6899",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Akamai Connected Cloud",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "139-162-86-45.ip.linodeusercontent.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "ip.linodeusercontent.com"
         ],
         "subnet" : "139.162.0.0/16",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 45.58.37.249:5040 (tcp/http) - last seen on 2024-11-07 at 05:03:45 UTC

    • IP
      45.58.37.249
      Network
      45.58.32.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://45.58.37.249:5040/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS6364
      Organization
      ATLANTIC-NET-1
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 05:03:43 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:03:45.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 959055625,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS6364",
         "city" : "Toronto",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:03:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS6364",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "atlantic.net"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "ATLORL-45-58-36-0",
            "organization" : "Atlantic.Net - Toronto, LLC.",
            "subnet" : "45.58.36.0/23"
         },
         "ip" : "45.58.37.249",
         "ipv6" : "false",
         "latitude" : "43.6547",
         "location" : "43.6547,-79.3623",
         "longitude" : "-79.3623",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ATLANTIC-NET-1",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "45.58.32.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 13.56.180.225:5040 (tcp/http) - last seen on 2024-11-07 at 05:03:17 UTC

    • IP
      13.56.180.225
      Network
      13.56.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://13.56.180.225:5040/ 200

      HTTP Title
      ServiceNow
      Reverse DNS
      ec2-13-56-180-225.us-west-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8fa99d6203111ea7c849f7781cd918ff
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      455a6a60e799d8ef8c09cad5e1100d47
    • HTTP/1.1 200 OK
      Connection: close
      Date: Thu, 07 Nov 2024 05:03:15 GMT
      Server: nginx
      Content-Length: 46782
      Content-Type: text/html
      
      <!DOCTYPE html><html lang="en" class=" ltr " data-doctype="true" dir="ltr" ontouchend="CustomEvent.fireAll('body_clicked', event);" onclick="CustomEvent.fireAll('body_clicked', event);"><head><script type="text/javascript"></script><title>ServiceNow</title><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"></meta><meta http-equiv="cache-control" content="public"></meta><script src="/uxasset/externals/service-worker/loader.jsdbx?sysparm_substitute=false"></script><script>var mswDisabledValue = "false";
                              var disabled = mswDisabledValue === 'true' ? true : false;
                              var serviceWorkers = JSON.parse("[{\"scope\":\"/\",\"serviceWorkerUrl\":\"/uxsw/scope/root.js\"},{\"scope\":\"/x\",\"serviceWorkerUrl\":\"/uxsw/scope/now_x.js\"},{\"scope\":\"/now\",\"serviceWorkerUrl\":\"/uxsw/scope/now_x.js\"}]");
                              var SERVICE_WORKER_MANAGER_CONFIG = {disabled, serviceWorkers};
                              if (window.serviceWorkerManager) window.serviceWorkerManager.init(SERVICE_WORKER_MANAGER_CONFIG);</script><meta name="viewport" content="initial-scale=1.0"></meta><script type="text/javascript" data-description="globals population">
              window.NOW = window.NOW || {};
              var g_loadTime = new Date();
              var lastActivity = new Date();
              var g_lang = 'en';
              var g_system_lang = 'en';
              var g_enhanced_activated = 'true';
                var g_popup_timeout = parseInt(100);
              var g_export_warn_threshold = parseInt(10000);
                var g_event_handler_ids = {};
              var g_event_handlers = [];
              var g_event_handlers_onLoad = [];
              var g_event_handlers_onSubmit = [];
              var g_event_handlers_onChange = [];
              var g_event_handlers_onCellEdit = {};
              var g_event_handlers_localCache = {};
              var g_event_handlers_queryTracking = true;
              var g_user_date_time_format = "yyyy-MM-dd HH:mm:ss";
              var g_user_date_format = "yyyy-MM-dd";
              var g_user_decimal_separator = ".";
              var g_user_grouping_separator = ",";
              var g_glide_list_separator = ", ";
              var g_allow_field_dependency_for_templates = ("true" === "true");
              var g_tz_offset = 0;
                var g_tz_user_offset = true;
              var g_first_day_of_week = parseInt(1, 10);
              var g_date_picker_first_day_of_week = parseInt(0, 10);
                var g_full_calendar_edit = true;
              var g_submitted = false;
              var g_max_table_length = 80;
              var g_fontSizePreference = "";
              var g_fontSize = "10pt";
              // use to be the sys_property glide.ui.js_error_notify, hard coded for PRB603998
              var g_jsErrorNotify = "true";
              var g_cancelPreviousTransaction = true;
              var g_text_direction = "ltr";
              var g_glide_list_filter_max_length =  parseInt("0", 10);
              var g_accessibility = false;
              var g_accessibility_tooltips = false;
              var g_accessibility_tooltip_duration = parseInt("10", 10);
              var g_accessibility_visual_patterns = false;
              var g_accessibility_screen_reader_table = false;
              var g_detail_row = false;
              var g_builddate = "09-16-2022_1610";
              // default values to be used in absence of user preferences are hard coded below
              // as well as in keyboardShortcuts.js and keyboard_preference_changer.xml
              window.g_keyboard_shortcuts = {};
              window.g_keyboard_shortcuts.allow_in_input_fields = false;
              window.g_keyboard_shortcuts.enabled = true;
              window.g_keyboard_shortcuts.global_search = {};
              window.g_keyboard_shortcuts.global_search.enabled = true;
              window.g_keyboard_shortcuts.global_search.key_combination = 'ctrl+alt+g';
              window.g_keyboard_shortcuts.main_frame = {};
              window.g_keyboard_shortcuts.main_frame.enabled = true;
              window.g_keyboard_shortcuts.main_frame.key_combination = 'ctrl+alt+p';
              window.g_keyboard_shortcuts.navigator_toggle = {};
              window.g_keyboard_shortcuts.navigator_toggle.enabled = true;
              window.g_keyboard_shortcuts.navigator_toggle.key_combination = 'ctrl+alt+c';
              window.g_keyboard_shortcuts.navigator_filter = {};
              window.g_keyboard_shortcuts.navigator_filter.enabled = true;
              window.g_keyboard_shortcuts.navigator_filter.key_combination = 'ctrl+alt+f';
              window.g_keyboard_shortcuts.impersonator = {}
              window.g_keyboard_shortcuts.impersonator.enabled = true;
              window.g_keyboard_shortcuts.impersonator.key_combination = 'ctrl+alt+i';
              var g_concourse_onmessage_enforce_same_origin = 'true'.toLowerCase() === 'true';
              var g_concourse_onmessage_enforce_same_origin_whitelist = '';
              window.g_load_functions = [];
              window.g_render_functions = [];
              window.g_late_load_functions = [];
              window.g_tiny_url = {};
              window.g_tiny_url.use_tiny = 'true' === 'true';
              window.g_tiny_url.min_length = parseInt('1024');
      
      
              var g_ck = '613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc';
      
      
      
              var g_acWaitTime = parseInt(250);
      
      
              var g_autoRequest = '';
      
              try {
                      window.NOW.dateFormat = JSON.parse("{\"timeAgo\": false, \"dateBoth\": false}");
              } catch (e) {
                      window.NOW.dateFormat = {timeAgo: false, dateBoth: false};
              }
      
              window.NOW.dateFormat.dateStringFormat = "yyyy-MM-dd";
              window.NOW.dateFormat.timeStringFormat = "HH:mm:ss";
              window.NOW.shortDateFormat = false;
              window.NOW.listTableWrap = true;
              window.NOW.compact = false;
              window.NOW.templateToggle = false;
              window.NOW.tabbed = true;
              window.NOW.permalink = true;
              window.NOW.useSimpleStorage = true;
              window.NOW.httpRequestCompressionThreshold = 40000;
              window.NOW.httpRequestCompressionLevel = -1;
              window.NOW.httpRequestCompressionMemoryLevel = -1;
              window.NOW.deferAmbConnection = false;
              window.NOW.deferredAmbConnectionTimeout = 10000;
              window.NOW.simpleStorageSynch = "a38d0130e03102107f446d41db8bd865";
              window.NOW.language =  'en';
              window.NOW.listOpenInAppTab = false;
              window.NOW.floatingScrollbars = false;
      
              window.NOW.user = {};
              window.NOW.user.preferences = [];
              window.NOW.user.roles = '';
              window.NOW.user.allRoles = '';
              window.NOW.user.userID = '5136503cc611227c0183e96598c4f706';
              window.NOW.user.departmentID = '';
              window.NOW.user.firstName = '';
              window.NOW.user.lastName = 'Guest';
              window.NOW.user.name = 'guest';
              window.NOW.user.isImpersonating = false;
              window.NOW.batch_glide_ajax_requests = 'true' === 'true';
              window.NOW.batch_glide_ajax_requests_max_time_in_queue = ~~'50';
              window.NOW.batch_glide_ajax_disable_time = ~~'1000';
      
              window.NOW.currency = {};
              window.NOW.currency.code = 'USD';
              window.NOW.locale = {};
              window.NOW.locale.code = 'en_US';
      
              window.NOW.attachment = {};
      
              window.NOW.attachment.overflow_limit =  parseInt('3', 10);
              window.NOW.isPolarisEnabled = "true";
              window.NOW.polaris_page_info ={"canUsePolarisCSS":true,"canUsePolarisTemplates":true,"jvar_form_name":"welcome"};</script><script data-comment="GlideUser initialization">(function() {
                       g_render_functions.push(setGlideUser);
                      function setGlideUser() {
                              if (window.g_user || !window.GlideUser)
                      return;
      
                      window.g_user = new GlideUser(NOW.user.name,
                                NOW.user.firstName,
                                NOW.user.lastName,
                                NOW.user.roles,
                                NOW.user.userID,
                                NOW.user.departmentID);
                      window.g_user.setRoles(NOW.user.allRoles, true);
                      }
              })();</script><script data-description="NOW glide web analytics siteid and url">window.snWebaConfig = window.snWebaConfig || {};
                      // glide web analytics config
                      window.snWebaConfig.siteId = "0";
                      window.snWebaConfig.trackerURL = "";
                      window.snWebaConfig.webaScriptPath = "/scripts/piwik-3.1.1/thirdparty/piwik.min.js";
                      window.snWebaConfig.ambClient = (window.g_ambClient) ? window.g_ambClient : ((window.amb)? window.amb.getClient(): "");
                      window.snWebaConfig.subscribed = false;</script><script type="text/javascript" src="/ConditionalFocus.jsdbx?v=09-16-2022_1610&amp;c=8_102"></script><link href="favicon.ico?v=5" rel="shortcut icon"></link><script>// window.performance in Chrome, Firefox, and Internet Explorer 9+ (not Safari)
                                      window.NOW.xperf = window.performance || {};
                                      if (!NOW.xperf.now) {
                                              NOW.xperf.now = function() { return new Date().getTime(); };
                                      }
                                      NOW.xperf.parseBegin = NOW.xperf.now();
                                      NOW.xperf.cssBegin = NOW.xperf.now();</script><link type="text/css" rel="stylesheet" href="/styles/css_includes_doctype_polaris.cssx?v=09-16-2022_1610&amp;c=6a025a33e0c1d21c7f446d41db8bd877&amp;theme=Polaris"></link><script>window.NOW = window.NOW || {};
                       NOW.isUsingPolaris = true;</script><link type="text/css" rel="stylesheet" href="/styles/polarisberg/css_includes_polarisberg.cssx?v=09-16-2022_1610&amp;c=6a025a33e0c1d21c7f446d41db8bd877&amp;theme=Polaris"></link><script>NOW.exclude_dark_theme = "true";</script><link type="text/css" rel="stylesheet" href="/polarisberg_theme_variables.do?c=UL3tmCMCcC9tXGL%2F%2FmIVU5V1gyk%3D&amp;exclude_dark=true" id="polarisberg_theme_variables"></link><script>NOW.xperf.cssEnd = NOW.xperf.now();
                              NOW.xperf.scriptBegin = NOW.xperf.now();</script><script type="text/javascript" src="/scripts/doctype/js_includes_doctype.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102"></script><script type="text/javascript" src="/scripts/js_includes_customer.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102"></script><script>NOW.xperf.scriptEnd = NOW.xperf.now();
                                      NOW.xperf.parseEnd = NOW.xperf.now();
                                      $j(function() {
                                              var x = NOW.xperf;
                                              var last = x.lastDoctypeEnd - x.lastDoctypeBegin;
                                              if (window.console) {
                                                      console.log("+-- Parse times");
                                                      console.log("| CSS parse: " + (x.cssEnd - x.cssBegin));
                                                      console.log("| JS  doctype: " + (x.scriptEnd - x.scriptBegin));
                                                      console.log("| JS at end of page: " + last);
                                                      console.log("+-- All parsing: " + (x.parseEnd - x.parseBegin + last));
                                              }
      
                                              var ms = Math.round(x.parseEnd - x.parseBegin + last);
                                              CustomEvent.fire('page_timing', { name: 'PARS', ms: ms, win: window });
      
                                              if (window.performance && performance.timing) {
                                                      NOW.xperf.z = new Date().getTime();
                                                      setTimeout(function () {
                                                         var x = performance.timing.loadEventEnd - performance.timing.domContentLoadedEventStart;
                                                         CustomEvent.fire('page_timing', { name: 'DOMC', ms: x, win: window });
                                                         x = performance.timing.loadEventStart - NOW.xperf.z;
                                                         CustomEvent.fire('page_timing', { name: 'PROC', ms: x, win: window });
                                                      }, 250);  // has to be done after the loadEvent ends
                                              }
                                      })</script><script type="text/javascript" src="/scripts/doctype/js_includes_legacy.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102"></script><script type="text/javascript" data-comment="navpage layout preferences, onfocus observation">/**
              * Every window needs to observe these events.
              */
              if (Prototype.Browser.IE && !isMSIE9) {
                      document.onfocusout = function() { CustomEvent.fireTop(GlideEvent.WINDOW_BLURRED, window); };
                      document.onfocusin = function() { CustomEvent.fireTop(GlideEvent.WINDOW_FOCUSED, window); };
              } else {
                      Event.observe(window, 'blur', function() { CustomEvent.fireTop(GlideEvent.WINDOW_BLURRED, window); });
                      Event.observe(window, 'focus', function() { CustomEvent.fireTop(GlideEvent.WINDOW_FOCUSED, window); });
              }</script><script type="text/javascript">g_swLoadTime = new StopWatch(g_loadTime);
      
          if (window.CustomEvent){
              CustomEvent.fireAll("ck_updated", "613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc");
                  CustomEvent.fireTop("navigation.complete", window);
              }
      
          addLoadEvent( function() {
      
                      if (isValidTouchDevice())
                              addTouchScrollClassToBody();
      
            if (typeof g_ck != 'undefined') {
              CustomEvent.observe("ck_updated", function(ck) { g_ck = ck; });
              CustomEvent.fireAll("ck_updated", "613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc");}try {
                    var helpico = getTopWindow().document.getElementById("help_ico");
      
                    if (helpico) {
                      var urlname=window.location.pathname.split("?");
                      var search_str = window.location.search;
      
                      // if this is a form, extract the record's sys_id...
                      var sys_id_loc = search_str.search(/sys_id=[0-9a-f]{32}/i);
                      var sys_id_str = (sys_id_loc != -1) ? search_str.substr(sys_id_loc, 39) : null;
      
                      // make the URL to our context help processor...
                      var url_search = "?sysparm_url=" + urlname[0];
                      if (sys_id_loc != -1)
                         url_search += "&" + sys_id_str;
      
                      helpico.href="context_help.do" + url_search;
                    }
                  } catch (exception) {}
      
            synchCache();
            pageLoaded();
          });
      
          function synchCache() {
            try {
              var w = getTopWindow();
              if (w.g_cache_message)
                w.g_cache_message.stamp("a38d0130e03102107f446d41db8bd865");
      
              if (w.g_cache_td)
                w.g_cache_td.stamp("f7505c96e059da1c7f446d41db8bd8ef");
            } catch(e) {}
          }
      
          function isValidTouchDevice() {
                      var navigator = window.navigator || {};
                      var devices;
                      try {
                              devices = 'iPad,Android'.split(',');
                      } catch(ex) {
                              devices = [];
                      }
                      return devices.some(function(item) {return item.trim() === navigator.platform;});
              }
      
              function addTouchScrollClassToBody() {
                      if ('ontouchstart' in window ||
                                      (navigator.maxTouchPoints !== 'undefined' && navigator.maxTouchPoints > 0) ||
                                      (navigator.msMaxTouchPoints !== 'undefined' && navigator.msMaxTouchPoints > 0)) {
                              if (typeof document.body != undefined) {
                                      document.body.classList.add('touch_scroll');
                              }
                      }
              }
        </script><!--googleoff: all--><noscript>This site requires JavaScript to be enabled</noscript> <!--googleon: all--><script type="text/javascript" src="/scripts/app.guided_tours/js_guided_tours_includes.jsx?v=09-16-2022_1610"></script></head><body class="                -polaris " data-formName="welcome"><span class="sr-only"><div id="html_page_aria_live_polite" r
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:03:17.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "455a6a60e799d8ef8c09cad5e1100d47",
               "bodymmh3" : 231945519,
               "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
               "headermmh3" : -510598680,
               "title" : "ServiceNow"
            },
            "length" : 16384
         },
         "asn" : "AS16509",
         "city" : "San Jose",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:03:15 GMT\r\nServer: nginx\r\nContent-Length: 46782\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html><html lang=\"en\" class=\" ltr \" data-doctype=\"true\" dir=\"ltr\" ontouchend=\"CustomEvent.fireAll('body_clicked', event);\" onclick=\"CustomEvent.fireAll('body_clicked', event);\"><head><script type=\"text/javascript\"></script><title>ServiceNow</title><meta http-equiv=\"X-UA-Compatible\" content=\"IE=Edge,chrome=1\"></meta><meta http-equiv=\"cache-control\" content=\"public\"></meta><script src=\"/uxasset/externals/service-worker/loader.jsdbx?sysparm_substitute=false\"></script><script>var mswDisabledValue = \"false\";\n                        var disabled = mswDisabledValue === 'true' ? true : false;\n                        var serviceWorkers = JSON.parse(\"[{\\\"scope\\\":\\\"/\\\",\\\"serviceWorkerUrl\\\":\\\"/uxsw/scope/root.js\\\"},{\\\"scope\\\":\\\"/x\\\",\\\"serviceWorkerUrl\\\":\\\"/uxsw/scope/now_x.js\\\"},{\\\"scope\\\":\\\"/now\\\",\\\"serviceWorkerUrl\\\":\\\"/uxsw/scope/now_x.js\\\"}]\");\n                        var SERVICE_WORKER_MANAGER_CONFIG = {disabled, serviceWorkers};\n                        if (window.serviceWorkerManager) window.serviceWorkerManager.init(SERVICE_WORKER_MANAGER_CONFIG);</script><meta name=\"viewport\" content=\"initial-scale=1.0\"></meta><script type=\"text/javascript\" data-description=\"globals population\">\n        window.NOW = window.NOW || {};\n        var g_loadTime = new Date();\n        var lastActivity = new Date();\n        var g_lang = 'en';\n        var g_system_lang = 'en';\n        var g_enhanced_activated = 'true';\n          var g_popup_timeout = parseInt(100);\n        var g_export_warn_threshold = parseInt(10000);\n          var g_event_handler_ids = {};\n        var g_event_handlers = [];\n        var g_event_handlers_onLoad = [];\n        var g_event_handlers_onSubmit = [];\n        var g_event_handlers_onChange = [];\n        var g_event_handlers_onCellEdit = {};\n        var g_event_handlers_localCache = {};\n        var g_event_handlers_queryTracking = true;\n        var g_user_date_time_format = \"yyyy-MM-dd HH:mm:ss\";\n        var g_user_date_format = \"yyyy-MM-dd\";\n        var g_user_decimal_separator = \".\";\n        var g_user_grouping_separator = \",\";\n        var g_glide_list_separator = \", \";\n        var g_allow_field_dependency_for_templates = (\"true\" === \"true\");\n        var g_tz_offset = 0;\n          var g_tz_user_offset = true;\n        var g_first_day_of_week = parseInt(1, 10);\n        var g_date_picker_first_day_of_week = parseInt(0, 10);\n          var g_full_calendar_edit = true;\n        var g_submitted = false;\n        var g_max_table_length = 80;\n        var g_fontSizePreference = \"\";\n        var g_fontSize = \"10pt\";\n        // use to be the sys_property glide.ui.js_error_notify, hard coded for PRB603998\n        var g_jsErrorNotify = \"true\";\n        var g_cancelPreviousTransaction = true;\n        var g_text_direction = \"ltr\";\n        var g_glide_list_filter_max_length =  parseInt(\"0\", 10);\n        var g_accessibility = false;\n        var g_accessibility_tooltips = false;\n        var g_accessibility_tooltip_duration = parseInt(\"10\", 10);\n        var g_accessibility_visual_patterns = false;\n        var g_accessibility_screen_reader_table = false;\n        var g_detail_row = false;\n        var g_builddate = \"09-16-2022_1610\";\n        // default values to be used in absence of user preferences are hard coded below\n        // as well as in keyboardShortcuts.js and keyboard_preference_changer.xml\n        window.g_keyboard_shortcuts = {};\n        window.g_keyboard_shortcuts.allow_in_input_fields = false;\n        window.g_keyboard_shortcuts.enabled = true;\n        window.g_keyboard_shortcuts.global_search = {};\n        window.g_keyboard_shortcuts.global_search.enabled = true;\n        window.g_keyboard_shortcuts.global_search.key_combination = 'ctrl+alt+g';\n        window.g_keyboard_shortcuts.main_frame = {};\n        window.g_keyboard_shortcuts.main_frame.enabled = true;\n        window.g_keyboard_shortcuts.main_frame.key_combination = 'ctrl+alt+p';\n        window.g_keyboard_shortcuts.navigator_toggle = {};\n        window.g_keyboard_shortcuts.navigator_toggle.enabled = true;\n        window.g_keyboard_shortcuts.navigator_toggle.key_combination = 'ctrl+alt+c';\n        window.g_keyboard_shortcuts.navigator_filter = {};\n        window.g_keyboard_shortcuts.navigator_filter.enabled = true;\n        window.g_keyboard_shortcuts.navigator_filter.key_combination = 'ctrl+alt+f';\n        window.g_keyboard_shortcuts.impersonator = {}\n        window.g_keyboard_shortcuts.impersonator.enabled = true;\n        window.g_keyboard_shortcuts.impersonator.key_combination = 'ctrl+alt+i';\n        var g_concourse_onmessage_enforce_same_origin = 'true'.toLowerCase() === 'true';\n        var g_concourse_onmessage_enforce_same_origin_whitelist = '';\n        window.g_load_functions = [];\n        window.g_render_functions = [];\n        window.g_late_load_functions = [];\n        window.g_tiny_url = {};\n        window.g_tiny_url.use_tiny = 'true' === 'true';\n        window.g_tiny_url.min_length = parseInt('1024');\n\n\n        var g_ck = '613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc';\n\n\n\n        var g_acWaitTime = parseInt(250);\n\n\n        var g_autoRequest = '';\n\n        try {\n                window.NOW.dateFormat = JSON.parse(\"{\\\"timeAgo\\\": false, \\\"dateBoth\\\": false}\");\n        } catch (e) {\n                window.NOW.dateFormat = {timeAgo: false, dateBoth: false};\n        }\n\n        window.NOW.dateFormat.dateStringFormat = \"yyyy-MM-dd\";\n        window.NOW.dateFormat.timeStringFormat = \"HH:mm:ss\";\n        window.NOW.shortDateFormat = false;\n        window.NOW.listTableWrap = true;\n        window.NOW.compact = false;\n        window.NOW.templateToggle = false;\n        window.NOW.tabbed = true;\n        window.NOW.permalink = true;\n        window.NOW.useSimpleStorage = true;\n        window.NOW.httpRequestCompressionThreshold = 40000;\n        window.NOW.httpRequestCompressionLevel = -1;\n        window.NOW.httpRequestCompressionMemoryLevel = -1;\n        window.NOW.deferAmbConnection = false;\n        window.NOW.deferredAmbConnectionTimeout = 10000;\n        window.NOW.simpleStorageSynch = \"a38d0130e03102107f446d41db8bd865\";\n        window.NOW.language =  'en';\n        window.NOW.listOpenInAppTab = false;\n        window.NOW.floatingScrollbars = false;\n\n        window.NOW.user = {};\n        window.NOW.user.preferences = [];\n        window.NOW.user.roles = '';\n        window.NOW.user.allRoles = '';\n        window.NOW.user.userID = '5136503cc611227c0183e96598c4f706';\n        window.NOW.user.departmentID = '';\n        window.NOW.user.firstName = '';\n        window.NOW.user.lastName = 'Guest';\n        window.NOW.user.name = 'guest';\n        window.NOW.user.isImpersonating = false;\n        window.NOW.batch_glide_ajax_requests = 'true' === 'true';\n        window.NOW.batch_glide_ajax_requests_max_time_in_queue = ~~'50';\n        window.NOW.batch_glide_ajax_disable_time = ~~'1000';\n\n        window.NOW.currency = {};\n        window.NOW.currency.code = 'USD';\n        window.NOW.locale = {};\n        window.NOW.locale.code = 'en_US';\n\n        window.NOW.attachment = {};\n\n        window.NOW.attachment.overflow_limit =  parseInt('3', 10);\n        window.NOW.isPolarisEnabled = \"true\";\n        window.NOW.polaris_page_info ={\"canUsePolarisCSS\":true,\"canUsePolarisTemplates\":true,\"jvar_form_name\":\"welcome\"};</script><script data-comment=\"GlideUser initialization\">(function() {\n                 g_render_functions.push(setGlideUser);\n                function setGlideUser() {\n                        if (window.g_user || !window.GlideUser)\n                return;\n\n                window.g_user = new GlideUser(NOW.user.name,\n                          NOW.user.firstName,\n                          NOW.user.lastName,\n                          NOW.user.roles,\n                          NOW.user.userID,\n                          NOW.user.departmentID);\n                window.g_user.setRoles(NOW.user.allRoles, true);\n                }\n        })();</script><script data-description=\"NOW glide web analytics siteid and url\">window.snWebaConfig = window.snWebaConfig || {};\n                // glide web analytics config\n                window.snWebaConfig.siteId = \"0\";\n                window.snWebaConfig.trackerURL = \"\";\n                window.snWebaConfig.webaScriptPath = \"/scripts/piwik-3.1.1/thirdparty/piwik.min.js\";\n                window.snWebaConfig.ambClient = (window.g_ambClient) ? window.g_ambClient : ((window.amb)? window.amb.getClient(): \"\");\n                window.snWebaConfig.subscribed = false;</script><script type=\"text/javascript\" src=\"/ConditionalFocus.jsdbx?v=09-16-2022_1610&amp;c=8_102\"></script><link href=\"favicon.ico?v=5\" rel=\"shortcut icon\"></link><script>// window.performance in Chrome, Firefox, and Internet Explorer 9+ (not Safari)\n                                window.NOW.xperf = window.performance || {};\n                                if (!NOW.xperf.now) {\n                                        NOW.xperf.now = function() { return new Date().getTime(); };\n                                }\n                                NOW.xperf.parseBegin = NOW.xperf.now();\n                                NOW.xperf.cssBegin = NOW.xperf.now();</script><link type=\"text/css\" rel=\"stylesheet\" href=\"/styles/css_includes_doctype_polaris.cssx?v=09-16-2022_1610&amp;c=6a025a33e0c1d21c7f446d41db8bd877&amp;theme=Polaris\"></link><script>window.NOW = window.NOW || {};\n                 NOW.isUsingPolaris = true;</script><link type=\"text/css\" rel=\"stylesheet\" href=\"/styles/polarisberg/css_includes_polarisberg.cssx?v=09-16-2022_1610&amp;c=6a025a33e0c1d21c7f446d41db8bd877&amp;theme=Polaris\"></link><script>NOW.exclude_dark_theme = \"true\";</script><link type=\"text/css\" rel=\"stylesheet\" href=\"/polarisberg_theme_variables.do?c=UL3tmCMCcC9tXGL%2F%2FmIVU5V1gyk%3D&amp;exclude_dark=true\" id=\"polarisberg_theme_variables\"></link><script>NOW.xperf.cssEnd = NOW.xperf.now();\n                        NOW.xperf.scriptBegin = NOW.xperf.now();</script><script type=\"text/javascript\" src=\"/scripts/doctype/js_includes_doctype.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102\"></script><script type=\"text/javascript\" src=\"/scripts/js_includes_customer.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102\"></script><script>NOW.xperf.scriptEnd = NOW.xperf.now();\n                                NOW.xperf.parseEnd = NOW.xperf.now();\n                                $j(function() {\n                                        var x = NOW.xperf;\n                                        var last = x.lastDoctypeEnd - x.lastDoctypeBegin;\n                                        if (window.console) {\n                                                console.log(\"+-- Parse times\");\n                                                console.log(\"| CSS parse: \" + (x.cssEnd - x.cssBegin));\n                                                console.log(\"| JS  doctype: \" + (x.scriptEnd - x.scriptBegin));\n                                                console.log(\"| JS at end of page: \" + last);\n                                                console.log(\"+-- All parsing: \" + (x.parseEnd - x.parseBegin + last));\n                                        }\n\n                                        var ms = Math.round(x.parseEnd - x.parseBegin + last);\n                                        CustomEvent.fire('page_timing', { name: 'PARS', ms: ms, win: window });\n\n                                        if (window.performance && performance.timing) {\n                                                NOW.xperf.z = new Date().getTime();\n                                                setTimeout(function () {\n                                                   var x = performance.timing.loadEventEnd - performance.timing.domContentLoadedEventStart;\n                                                   CustomEvent.fire('page_timing', { name: 'DOMC', ms: x, win: window });\n                                                   x = performance.timing.loadEventStart - NOW.xperf.z;\n                                                   CustomEvent.fire('page_timing', { name: 'PROC', ms: x, win: window });\n                                                }, 250);  // has to be done after the loadEvent ends\n                                        }\n                                })</script><script type=\"text/javascript\" src=\"/scripts/doctype/js_includes_legacy.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102\"></script><script type=\"text/javascript\" data-comment=\"navpage layout preferences, onfocus observation\">/**\n        * Every window needs to observe these events.\n        */\n        if (Prototype.Browser.IE && !isMSIE9) {\n                document.onfocusout = function() { CustomEvent.fireTop(GlideEvent.WINDOW_BLURRED, window); };\n                document.onfocusin = function() { CustomEvent.fireTop(GlideEvent.WINDOW_FOCUSED, window); };\n        } else {\n                Event.observe(window, 'blur', function() { CustomEvent.fireTop(GlideEvent.WINDOW_BLURRED, window); });\n                Event.observe(window, 'focus', function() { CustomEvent.fireTop(GlideEvent.WINDOW_FOCUSED, window); });\n        }</script><script type=\"text/javascript\">g_swLoadTime = new StopWatch(g_loadTime);\n\n    if (window.CustomEvent){\n        CustomEvent.fireAll(\"ck_updated\", \"613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc\");\n            CustomEvent.fireTop(\"navigation.complete\", window);\n        }\n\n    addLoadEvent( function() {\n\n                if (isValidTouchDevice())\n                        addTouchScrollClassToBody();\n\n      if (typeof g_ck != 'undefined') {\n        CustomEvent.observe(\"ck_updated\", function(ck) { g_ck = ck; });\n        CustomEvent.fireAll(\"ck_updated\", \"613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc\");}try {\n              var helpico = getTopWindow().document.getElementById(\"help_ico\");\n\n              if (helpico) {\n                var urlname=window.location.pathname.split(\"?\");\n                var search_str = window.location.search;\n\n                // if this is a form, extract the record's sys_id...\n                var sys_id_loc = search_str.search(/sys_id=[0-9a-f]{32}/i);\n                var sys_id_str = (sys_id_loc != -1) ? search_str.substr(sys_id_loc, 39) : null;\n\n                // make the URL to our context help processor...\n                var url_search = \"?sysparm_url=\" + urlname[0];\n                if (sys_id_loc != -1)\n                   url_search += \"&\" + sys_id_str;\n\n                helpico.href=\"context_help.do\" + url_search;\n              }\n            } catch (exception) {}\n\n      synchCache();\n      pageLoaded();\n    });\n\n    function synchCache() {\n      try {\n        var w = getTopWindow();\n        if (w.g_cache_message)\n          w.g_cache_message.stamp(\"a38d0130e03102107f446d41db8bd865\");\n\n        if (w.g_cache_td)\n          w.g_cache_td.stamp(\"f7505c96e059da1c7f446d41db8bd8ef\");\n      } catch(e) {}\n    }\n\n    function isValidTouchDevice() {\n                var navigator = window.navigator || {};\n                var devices;\n                try {\n                        devices = 'iPad,Android'.split(',');\n                } catch(ex) {\n                        devices = [];\n                }\n                return devices.some(function(item) {return item.trim() === navigator.platform;});\n        }\n\n        function addTouchScrollClassToBody() {\n                if ('ontouchstart' in window ||\n                                (navigator.maxTouchPoints !== 'undefined' && navigator.maxTouchPoints > 0) ||\n                                (navigator.msMaxTouchPoints !== 'undefined' && navigator.msMaxTouchPoints > 0)) {\n                        if (typeof document.body != undefined) {\n                                document.body.classList.add('touch_scroll');\n                        }\n                }\n        }\n  </script><!--googleoff: all--><noscript>This site requires JavaScript to be enabled</noscript> <!--googleon: all--><script type=\"text/javascript\" src=\"/scripts/app.guided_tours/js_guided_tours_includes.jsx?v=09-16-2022_1610\"></script></head><body class=\"                -polaris \" data-formName=\"welcome\"><span class=\"sr-only\"><div id=\"html_page_aria_live_polite\" r",
         "datamd5" : "8fa99d6203111ea7c849f7781cd918ff",
         "datammh3" : 86490418,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AT-88-Z",
            "organization" : "Amazon Technologies Inc.",
            "subnet" : "13.56.0.0/14"
         },
         "host" : [
            "ec2-13-56-180-225"
         ],
         "hostname" : [
            "ec2-13-56-180-225.us-west-1.compute.amazonaws.com"
         ],
         "ip" : "13.56.180.225",
         "ipv6" : "false",
         "latitude" : "37.1835",
         "location" : "37.1835,-121.7714",
         "longitude" : "-121.7714",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5040,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "ec2-13-56-180-225.us-west-1.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "us-west-1.compute.amazonaws.com"
         ],
         "subnet" : "13.56.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }