Returning 10 result(s) out of 877 in 0.033 second(s)

  • 36.95.83.251:53354 (tcp/http) - last seen on 2024-11-07 at 05:30:27 UTC

    • IP
      36.95.83.251
      Network
      36.80.0.0/12
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Ubuntu
      URL

      http://36.95.83.251:53354/ 200

      HTTP Title
      SIMDONDAR
      ASN
      AS7713
      Organization
      PT Telekomunikasi Indonesia
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Ubuntu
      Product
      Apache HTTP Server 2.2.22
      HTTP Component(s)
      Bootstrap Bootstrap PHP PHP 5.3.10
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      cb8c5f6ac98bb2dc5978d75b7bf6d953
      HTTP Header MD5
      86809562416cc86e212dbf2054e91a52
      HTTP Body MD5
      586c6261b27ac1b7e5b787e43bd2c6df
    • HTTP/1.1 200 OK
      Date: Thu, 07 Nov 2024 05:30:14 GMT
      Server: Apache/2.2.22 (Ubuntu)
      X-Powered-By: PHP/5.3.10-1ubuntu3.26
      Vary: Accept-Encoding
      Content-Length: 5345
      Connection: close
      Content-Type: text/html
      
      <!DOCTYPE html>
      <html lang="en">
      <head>
          <link rel="shortcut icon" href="images/index.ico" type="image/x-icon"/>
          <title>SIMDONDAR</title>
          <meta charset="utf-8">
          <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
          
          
      
          <link rel="stylesheet" href="main/css/animate.css">
          
          <link rel="stylesheet" href="main/css/owl.carousel.min.css">
          <link rel="stylesheet" href="main/css/owl.theme.default.min.css">
          <link rel="stylesheet" href="main/css/magnific-popup.css">
      
          <link rel="stylesheet" href="main/css/bootstrap-datepicker.css">
          <link rel="stylesheet" href="main/css/jquery.timepicker.css">
      
          
          <link rel="stylesheet" href="main/css/flaticon.css">
          <link rel="stylesheet" href="main/css/style.css">
      </head>
      <body>
       <nav class="navbar navbar-expand-lg navbar-dark ftco_navbar bg-dark ftco-navbar-light" id="ftco-navbar">
         <div class="container">
      	<!--<a class="" href="index.php"><img id="logo" height="75px" width="auto" alt="Header Back" class="img-responsive" src="images/index.ico" align="left" ></a>-->
      	
           <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#ftco-nav" aria-controls="ftco-nav" aria-expanded="false" aria-label="Toggle navigation">
             <span class="oi oi-menu"></span> 
         </button>
      </div>
      </nav>
      <!-- END nav -->
      
      <div class="hero-wrap js-fullheight" style="background-image: url('main/images/bg_a.jpg');">
        <div class="overlay"></div>
        <div class="container">
          <div class="row no-gutters slider-text js-fullheight align-items-center" data-scrollax-parent="true">
            <div class="col-md-7 ftco-animate">
              <!--<span class="subheading" style="color:#039dfc;">Welcome</span>-->
              <h1 class="subheading" style="color:#D21F3C;">SIMDONDAR</h1>
              <!--<p class="caps" style="color:#039dfc;">Direct to url</p>-->
              <p class="subheading">
      		<a href="http://utdp-pmi.or.id/" target="_blank" class="btn btn-primary" title="Website UDD Pusat PMI">UDDP Sites</a>
      		
      		<a href="info-mu/index.php" target="_blank" class="btn btn-primary" title="Cek Jadwal Mobile Unit">Info Mobile Unit</a>
      			
      	</p>
          </div>
      	<section class="ftco-section ftco-no-pb ftco-no-pt">
      	   <div class="container">
      	      <div class="row">
      		 <div class="col-md-7"></div>
      		 <div class="col-md-5 order-md-last">
      		  <div class="login-wrap p-4 p-md-5">
      		      <img id="logo" height="50px" width="auto" alt="Header Back" class="img-responsive" 
      src="images/pmi.png" align="right" ><br/><h3 class="mb-4">&nbsp;User Login</h3>
      		      <form method="post" id="signin" action="cek_login.php" class="form">
      		         <div class="form-group">
      		            <label class="label" for="name">Username</label>
      		            <input type="text" class="form-control" name="username" placeholder="" required="">
      		        </div>
      		        <div class="form-group">
      		         <label class="label" for="password">Password</label>
      		         <input id="password-field" type="password" name="password" class="form-control" 
      placeholder="" required="">
      		     </div>
      		     <div class="form-group">
      		         <label class="label" for="password">Kode</label>
      			 <img src="/config/acak.php" width="95" height="auto" display="block" style="margin-left:100px;" alt="Kode Acak" />
      		         <input id="password-field" type="text" class="form-control" name="kodeval" 
      placeholder="" required="">
      			 
      		     </div>
      		     <div class="form-group" style="margin-left:200px;">
      		     </div>
      		     <div class="form-group d-flex justify-content-end mt-4">
      		         <button type="submit" class="btn btn-primary submit"><span class="">Sign In</span></button>
      		     </div>
               	     <p class="text-center">
      			
      				
      			<h6 style="color:#039dfc; text-align:center;">UDD PMI KABUPATEN BEKASI - [ID: 3216]</h6></p>
      			<h6 style="color:#039dfc; text-align:center;">
      			<a href="info-update/index.php" target="_blank" title="Info Update">&copy Versi : V3.5.2 - Update : 10-01-2022</a></h6></p>
      		 </form>
      	     </div>
      	 </div>
      	</div>
      	</div>
      	</section>
      <footer class="ftco-footer ftco-no-pt">
        
      </footer>
      </div>
      </div>
      </div>
      
      
      
      
      
      <!-- loader -->
      <div id="ftco-loader" class="show fullscreen"><svg class="circular" width="48px" height="48px"><circle class="path-bg" cx="24" cy="24" r="22" fill="none" stroke-width="4" stroke="#eeeeee"/><circle class="path" cx="24" cy="24" r="22" fill="none" stroke-width="4" stroke-miterlimit="10" stroke=""/></svg></div>
      
      
      <script src="main/js/jquery.min.js"></script>
      <script src="main/js/jquery-migrate-3.0.1.min.js"></script>
      <script src="main/js/popper.min.js"></script>
      <script src="main/js/bootstrap.min.js"></script>
      <script src="main/js/jquery.easing.1.3.js"></script>
      <script src="main/js/jquery.waypoints.min.js"></script>
      <script src="main/js/jquery.stellar.min.js"></script>
      <script src="main/js/owl.carousel.min.js"></script>
      <script src="main/js/jquery.magnific-popup.min.js"></script>
      <script src="main/js/jquery.animateNumber.min.js"></script>
      <script src="main/js/bootstrap-datepicker.js"></script>
      <script src="main/js/scrollax.min.js"></script>
      <script src="main/https://maps.googleapis.com/maps/api/js?key=AIzaSyBVWaKrjvy3MaE7SQ74_uJiULgl1JY0H2s&sensor=false"></script>
      <script src="main/js/google-map.js"></script>
      <script src="main/js/main.js"></script>
      
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:30:27.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "utdp-pmi.or.id",
                  "googleapis.com"
               ],
               "file" : [
                  "acak.php",
                  "index.php",
                  "cek_login.php"
               ],
               "hostname" : [
                  "maps.googleapis.com",
                  "utdp-pmi.or.id"
               ],
               "url" : [
                  "http://utdp-pmi.or.id/",
                  "https://maps.googleapis.com/maps/api/js?key=AIzaSyBVWaKrjvy3MaE7SQ74_uJiULgl1JY0H2s&sensor=false"
               ]
            },
            "http" : {
               "bodymd5" : "586c6261b27ac1b7e5b787e43bd2c6df",
               "bodymmh3" : -760298297,
               "component" : [
                  {
                     "productvendor" : "Bootstrap",
                     "product" : "Bootstrap"
                  },
                  {
                     "productvendor" : "PHP",
                     "productversion" : "5.3.10",
                     "product" : "PHP"
                  }
               ],
               "headermd5" : "86809562416cc86e212dbf2054e91a52",
               "headermmh3" : 828021774,
               "title" : "SIMDONDAR"
            },
            "length" : 5560
         },
         "asn" : "AS7713",
         "city" : "Galur",
         "country" : "ID",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 07 Nov 2024 05:30:14 GMT\r\nServer: Apache/2.2.22 (Ubuntu)\r\nX-Powered-By: PHP/5.3.10-1ubuntu3.26\r\nVary: Accept-Encoding\r\nContent-Length: 5345\r\nConnection: close\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n    <link rel=\"shortcut icon\" href=\"images/index.ico\" type=\"image/x-icon\"/>\n    <title>SIMDONDAR</title>\n    <meta charset=\"utf-8\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1, shrink-to-fit=no\">\n    \n    \n\n    <link rel=\"stylesheet\" href=\"main/css/animate.css\">\n    \n    <link rel=\"stylesheet\" href=\"main/css/owl.carousel.min.css\">\n    <link rel=\"stylesheet\" href=\"main/css/owl.theme.default.min.css\">\n    <link rel=\"stylesheet\" href=\"main/css/magnific-popup.css\">\n\n    <link rel=\"stylesheet\" href=\"main/css/bootstrap-datepicker.css\">\n    <link rel=\"stylesheet\" href=\"main/css/jquery.timepicker.css\">\n\n    \n    <link rel=\"stylesheet\" href=\"main/css/flaticon.css\">\n    <link rel=\"stylesheet\" href=\"main/css/style.css\">\n</head>\n<body>\n <nav class=\"navbar navbar-expand-lg navbar-dark ftco_navbar bg-dark ftco-navbar-light\" id=\"ftco-navbar\">\n   <div class=\"container\">\n\t<!--<a class=\"\" href=\"index.php\"><img id=\"logo\" height=\"75px\" width=\"auto\" alt=\"Header Back\" class=\"img-responsive\" src=\"images/index.ico\" align=\"left\" ></a>-->\n\t\n     <button class=\"navbar-toggler\" type=\"button\" data-toggle=\"collapse\" data-target=\"#ftco-nav\" aria-controls=\"ftco-nav\" aria-expanded=\"false\" aria-label=\"Toggle navigation\">\n       <span class=\"oi oi-menu\"></span> \n   </button>\n</div>\n</nav>\n<!-- END nav -->\n\n<div class=\"hero-wrap js-fullheight\" style=\"background-image: url('main/images/bg_a.jpg');\">\n  <div class=\"overlay\"></div>\n  <div class=\"container\">\n    <div class=\"row no-gutters slider-text js-fullheight align-items-center\" data-scrollax-parent=\"true\">\n      <div class=\"col-md-7 ftco-animate\">\n        <!--<span class=\"subheading\" style=\"color:#039dfc;\">Welcome</span>-->\n        <h1 class=\"subheading\" style=\"color:#D21F3C;\">SIMDONDAR</h1>\n        <!--<p class=\"caps\" style=\"color:#039dfc;\">Direct to url</p>-->\n        <p class=\"subheading\">\n\t\t<a href=\"http://utdp-pmi.or.id/\" target=\"_blank\" class=\"btn btn-primary\" title=\"Website UDD Pusat PMI\">UDDP Sites</a>\n\t\t\n\t\t<a href=\"info-mu/index.php\" target=\"_blank\" class=\"btn btn-primary\" title=\"Cek Jadwal Mobile Unit\">Info Mobile Unit</a>\n\t\t\t\n\t</p>\n    </div>\n\t<section class=\"ftco-section ftco-no-pb ftco-no-pt\">\n\t   <div class=\"container\">\n\t      <div class=\"row\">\n\t\t <div class=\"col-md-7\"></div>\n\t\t <div class=\"col-md-5 order-md-last\">\n\t\t  <div class=\"login-wrap p-4 p-md-5\">\n\t\t      <img id=\"logo\" height=\"50px\" width=\"auto\" alt=\"Header Back\" class=\"img-responsive\" \nsrc=\"images/pmi.png\" align=\"right\" ><br/><h3 class=\"mb-4\">&nbsp;User Login</h3>\n\t\t      <form method=\"post\" id=\"signin\" action=\"cek_login.php\" class=\"form\">\n\t\t         <div class=\"form-group\">\n\t\t            <label class=\"label\" for=\"name\">Username</label>\n\t\t            <input type=\"text\" class=\"form-control\" name=\"username\" placeholder=\"\" required=\"\">\n\t\t        </div>\n\t\t        <div class=\"form-group\">\n\t\t         <label class=\"label\" for=\"password\">Password</label>\n\t\t         <input id=\"password-field\" type=\"password\" name=\"password\" class=\"form-control\" \nplaceholder=\"\" required=\"\">\n\t\t     </div>\n\t\t     <div class=\"form-group\">\n\t\t         <label class=\"label\" for=\"password\">Kode</label>\n\t\t\t <img src=\"/config/acak.php\" width=\"95\" height=\"auto\" display=\"block\" style=\"margin-left:100px;\" alt=\"Kode Acak\" />\n\t\t         <input id=\"password-field\" type=\"text\" class=\"form-control\" name=\"kodeval\" \nplaceholder=\"\" required=\"\">\n\t\t\t \n\t\t     </div>\n\t\t     <div class=\"form-group\" style=\"margin-left:200px;\">\n\t\t     </div>\n\t\t     <div class=\"form-group d-flex justify-content-end mt-4\">\n\t\t         <button type=\"submit\" class=\"btn btn-primary submit\"><span class=\"\">Sign In</span></button>\n\t\t     </div>\n         \t     <p class=\"text-center\">\n\t\t\t\n\t\t\t\t\n\t\t\t<h6 style=\"color:#039dfc; text-align:center;\">UDD PMI KABUPATEN BEKASI - [ID: 3216]</h6></p>\n\t\t\t<h6 style=\"color:#039dfc; text-align:center;\">\n\t\t\t<a href=\"info-update/index.php\" target=\"_blank\" title=\"Info Update\">&copy Versi : V3.5.2 - Update : 10-01-2022</a></h6></p>\n\t\t </form>\n\t     </div>\n\t </div>\n\t</div>\n\t</div>\n\t</section>\n<footer class=\"ftco-footer ftco-no-pt\">\n  \n</footer>\n</div>\n</div>\n</div>\n\n\n\n\n\n<!-- loader -->\n<div id=\"ftco-loader\" class=\"show fullscreen\"><svg class=\"circular\" width=\"48px\" height=\"48px\"><circle class=\"path-bg\" cx=\"24\" cy=\"24\" r=\"22\" fill=\"none\" stroke-width=\"4\" stroke=\"#eeeeee\"/><circle class=\"path\" cx=\"24\" cy=\"24\" r=\"22\" fill=\"none\" stroke-width=\"4\" stroke-miterlimit=\"10\" stroke=\"\"/></svg></div>\n\n\n<script src=\"main/js/jquery.min.js\"></script>\n<script src=\"main/js/jquery-migrate-3.0.1.min.js\"></script>\n<script src=\"main/js/popper.min.js\"></script>\n<script src=\"main/js/bootstrap.min.js\"></script>\n<script src=\"main/js/jquery.easing.1.3.js\"></script>\n<script src=\"main/js/jquery.waypoints.min.js\"></script>\n<script src=\"main/js/jquery.stellar.min.js\"></script>\n<script src=\"main/js/owl.carousel.min.js\"></script>\n<script src=\"main/js/jquery.magnific-popup.min.js\"></script>\n<script src=\"main/js/jquery.animateNumber.min.js\"></script>\n<script src=\"main/js/bootstrap-datepicker.js\"></script>\n<script src=\"main/js/scrollax.min.js\"></script>\n<script src=\"main/https://maps.googleapis.com/maps/api/js?key=AIzaSyBVWaKrjvy3MaE7SQ74_uJiULgl1JY0H2s&sensor=false\"></script>\n<script src=\"main/js/google-map.js\"></script>\n<script src=\"main/js/main.js\"></script>\n\n</body>\n</html>\n",
         "datamd5" : "cb8c5f6ac98bb2dc5978d75b7bf6d953",
         "datammh3" : 604334272,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS7713",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "ID",
            "countryname" : "Indonesia",
            "domain" : [
               "telin.net",
               "telkom.co.id",
               "telkom.net.id"
            ],
            "isineu" : "false",
            "latitude" : "-0.789275",
            "location" : "-0.789275,113.921327",
            "longitude" : "113.921327",
            "netname" : "TELKOMNET",
            "organization" : "Telekomunikasi Indonesia (PT)",
            "subnet" : "36.95.80.0/21"
         },
         "ip" : "36.95.83.251",
         "ipv6" : "false",
         "latitude" : "-6.2294",
         "location" : "-6.2294,106.8870",
         "longitude" : "106.8870",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "PT Telekomunikasi Indonesia",
         "os" : "Linux",
         "osdistribution" : "Ubuntu",
         "osvendor" : "Linux",
         "port" : 53354,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "productversion" : "2.2.22",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "36.80.0.0/12",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 20.217.211.77:53354 (tcp/http) - last seen on 2024-11-07 at 04:37:50 UTC

    • IP
      20.217.211.77
      Network
      20.192.0.0/10
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://20.217.211.77:53354/ 200

      HTTP Title
      Linear eMerge
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      lighttpd lighttpd 1.4.22
      HTTP Component(s)
      PHP PHP 5.6.23 jQuery jQuery 1.5.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      17a4aedb75a41fb6915354294224e7d1
      HTTP Header MD5
      642cc846589cfde63a9504616c8be5fa
      HTTP Body MD5
      29ec9c03d581cfbaa496e08552c6a601
    • HTTP/1.1 200 OK
      X-Powered-By: PHP/5.6.23
      Set-Cookie: PHPSESSID=64301f5f0b3c50e1611df5085a023e2b; path=/
      Expires: Mon, 26 Jul 1997 05:00:00 GMT
      Cache-Control: no-store, no-cache, must-revalidate
      Cache-Control: post-check=0, pre-check=0
      Pragma: no-cache
      Content-type: text/html; charset=utf-8
      Content-Length: 6417
      Server: lighttpd/1.4.22
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
      <head>
      <meta http-equiv="content-type" content="text/html; charset=utf-8" />
      <meta http-equiv="Expires" content="0"/> 
      <title>Linear eMerge</title>
      <link rel="shortcut icon" href="./img/emerge.ico">
      <link rel="stylesheet" href="./css/common.css" type="text/css" />
      
      <link rel="stylesheet" href="./css/language/.css" type="text/css" />
      
      
      <script type="text/javascript" src="./js/jquery-1.5.1.min.js" charset="utf-8"></script>
      <script type="text/javascript" src="./js/jquery.browser.min.js" charset="utf-8"></script>
      
      <link rel="stylesheet" href="./js/plugin/jquery.datepicker/css/datepicker.css" type="text/css" />
      <script type="text/javascript" src="./js/plugin/jquery.datepicker/js/datepicker.js" charset="utf-8"></script>
      
      <script type="text/javascript" src="./js/plugin/jquery.simplemodal/jquery.simplemodal-1.3.5.min.js" charset="utf-8"></script>
      
      <script type="text/javascript" src="./js/plugin/jquery.flash/jquery.flash.min_.js" charset="utf-8"></script>
      <script type="text/javascript" src="./js/plugin/jquery.jw/jwUploader.js" charset="utf-8"></script>
      <script type="text/javascript" src="./js/plugin/sprintf-0.6.js" charset="utf-8"></script>
      
      <script type="text/javascript">
      /******************************************************************************
      전역 변수
      ******************************************************************************/
      
      var _class = "layout";
      var _data;
      var _current;
      var _seq;
      var _circiut_type;
      
      
      /******************************************************************************
      jwUploader 기본 설정
      ******************************************************************************/
      
      var jwUploaderSettings = {
      	"width"			: 80,
      	"height"		: 20,
      	"sizeLimit"		: 150 * 1024,
      	"fileExt"		: "image",
      	"uploaderMovie"	: "./js/plugin/jquery.jw/FileUploader.swf",
      	"script"		: "/?c=fileupload&m=receive"
      };
      
      
      /******************************************************************************
      로딩창
      ******************************************************************************/
      
      // 로딩창 열기
      function show_loading()
      {
      	try
      	{
      		$.modal('<div><img src="./img/loading.gif" width="200" /></div>', {
      			overlayCss		: {backgroundColor:"#000"},
      			overlayClose	: false
      		});
      	}
      	catch (e)
      	{
      	}
      }
      
      // 로딩창 닫기
      function hide_loading()
      {
      	try
      	{
      		$.modal.close();
      	}
      	catch (e)
      	{
      	}
      }
      
      
      
      </script>
      
      <script type="text/javascript" src="./js/common.js" charset="utf-8"></script>
      <style>
      body { background:url("") }
      </style>
      </head>
      
      
      <body oncontextmenu="return false;">
      
      <div id="wrap">
      <style type="text/css">
      <!--
      #wrap {  height:100%; background:url("/img/bg_login.jpg"); }
      
      body.login {
      	background-color: #000000;
      	background-image: url(/img/bg_login.jpg);
      	background-repeat: repeat-x;
      	text-align: center;
      }
      
      .Title {	
      	font-family: Arial, Helvetica, sans-serif;
      	color: #A0A0A4;
      	text-align: left;
      	font-size: 12px;
      	width: 30px;
      }
      
      .Data {
      	font-family: Arial, Helvetica, sans-serif;
      	color: #A0A0A4;
      	text-align: left;
      	font-size: 12px;
      	width: 50px;
      }
      
      
      -->
      </style>
      
      <script type="text/javascript">
      function layout_center(layerId)
      {
      	$("#"+layerId).css({
      		'position'	: 'absolute',
      		'top'		: (($(document).height() - $("#"+layerId).height()) / 2) + "px",
      		'left'		: (($(document).width() - $("#"+layerId).width()) / 2) + "px"
      	});
      }
      
      $(document).ready(function() 
      {
      	$(window).resize(function() 
      	{
      		layout_center("login_box")
      	});
      	layout_center("login_box");
      });
      
      function enter_submit()
      {
      	if (document.form_id)
      	{
      		document.form_id.action="/";
      		document.form_id.submit();
      	}
      }
      
      function forgot_password()
      {
          var login_id = $("#form_id input[name=login_id]").val();
          if( login_id == '' ) {
              alert("Enter User ID");
          } else {
              $.ajax({
                  type: "post",
                  dataType: "script",
                  url: "/?c=user&m=forgot_password",
                  data: "login_id=" + login_id,
                  success: function(data) {
                  }
              });
          }
      }
      </script>
      
      <body class="login" oncontextmenu="return false;">
      	<table class="login" id="login_box" style="width:274px; table-layout:fixed">
      		<div>
      		    <td>
      		        <img src="/img/logo.png" width="179px" height="72px" align="center" hspace="47">
      		    </td>
      		</div>
      		<div>
      		    <tr>
      		    	<td width="274px" height="31px" style="background:url('/img/login_window_top.png');">
      		    		<img src="/img/login_window_login.png" alt="" width="48px" height="26px" style="float:left;">
      		    	</td>
      		    </tr>
      		</div>
      		<div>
      	    	<td style="background:url('/img/login_window_middle.png');">
      	        	<form id="form_id" method="post" action="/" onsubmit="enter_submit();">
      	        		<table class="login_table">
      	        			<div height="15">
      		            		<tr height="15"></tr>		            		
      						</div>
      								                <div height="25">
      		            		<tr height="25">
      		            			<td width="25">&nbsp;</td>
      		            			<td class="Title">User ID</td>
      		            			<td width="5">&nbsp;</td>
      		            			<td class="Data"><input type="text" name="login_id" value="" width="20" /></td>
      		            		</tr>
      		            	</div>
      		            	<div height="2">
      		            		<tr height="2"></tr>
      						</div>
      	                    <div height="25">
      		            		<tr height="25">
      		            			<td width="25">&nbsp;</td>
      		            			<td class="Title">Password</td>
      		            		    <td width="5">&nbsp;</td>
      		            			<td class="Data"><input type="password" name="login_pw" value="" SIZE="20" /></td>
      		            		</tr>
      		            	</div>
      	                	<div height="10">
      		            		<tr height="10"></tr>
      						</div>
      					</table>
      					<table>						
      	            		<div height="33">
      		            		<tr>
      		                        <td align="center">
      		                        	<button class="btn_login" type="submit">
      		                        </td>
      		                    </tr>
      		                </div>
      	                	<div height="10">
      		            		<tr height="10"></tr>		            		
      						</div>
      
      	        		</table>
      
                          <a href="javascript:forgot_password();">Forgot your password?</a>
      	        	</form>
      	        </td>
      	    </div>
      	    <div>
      		    <tr height="7">
      		    	<td style="background:url('/img/login_window_bottom.png');"></td>
      		    </tr>
      		</div>
      	</table>
      </body>
      </div>
      
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:37:50.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "29ec9c03d581cfbaa496e08552c6a601",
               "bodymmh3" : -2066495351,
               "component" : [
                  {
                     "product" : "PHP",
                     "productvendor" : "PHP",
                     "productversion" : "5.6.23"
                  },
                  {
                     "productvendor" : "jQuery",
                     "productversion" : "1.5.1",
                     "product" : "jQuery"
                  }
               ],
               "headermd5" : "642cc846589cfde63a9504616c8be5fa",
               "headermmh3" : 714760315,
               "title" : "Linear eMerge"
            },
            "length" : 6795
         },
         "asn" : "AS8075",
         "city" : "Tel Aviv",
         "country" : "IL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\nX-Powered-By: PHP/5.6.23\nSet-Cookie: PHPSESSID=64301f5f0b3c50e1611df5085a023e2b; path=/\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\nCache-Control: no-store, no-cache, must-revalidate\nCache-Control: post-check=0, pre-check=0\nPragma: no-cache\nContent-type: text/html; charset=utf-8\nContent-Length: 6417\nServer: lighttpd/1.4.22\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=utf-8\" />\n<meta http-equiv=\"Expires\" content=\"0\"/> \n<title>Linear eMerge</title>\n<link rel=\"shortcut icon\" href=\"./img/emerge.ico\">\n<link rel=\"stylesheet\" href=\"./css/common.css\" type=\"text/css\" />\n\n<link rel=\"stylesheet\" href=\"./css/language/.css\" type=\"text/css\" />\n\n\n<script type=\"text/javascript\" src=\"./js/jquery-1.5.1.min.js\" charset=\"utf-8\"></script>\n<script type=\"text/javascript\" src=\"./js/jquery.browser.min.js\" charset=\"utf-8\"></script>\n\n<link rel=\"stylesheet\" href=\"./js/plugin/jquery.datepicker/css/datepicker.css\" type=\"text/css\" />\n<script type=\"text/javascript\" src=\"./js/plugin/jquery.datepicker/js/datepicker.js\" charset=\"utf-8\"></script>\n\n<script type=\"text/javascript\" src=\"./js/plugin/jquery.simplemodal/jquery.simplemodal-1.3.5.min.js\" charset=\"utf-8\"></script>\n\n<script type=\"text/javascript\" src=\"./js/plugin/jquery.flash/jquery.flash.min_.js\" charset=\"utf-8\"></script>\n<script type=\"text/javascript\" src=\"./js/plugin/jquery.jw/jwUploader.js\" charset=\"utf-8\"></script>\n<script type=\"text/javascript\" src=\"./js/plugin/sprintf-0.6.js\" charset=\"utf-8\"></script>\n\n<script type=\"text/javascript\">\n/******************************************************************************\n\uc804\uc5ed \ubcc0\uc218\n******************************************************************************/\n\nvar _class = \"layout\";\nvar _data;\nvar _current;\nvar _seq;\nvar _circiut_type;\n\n\n/******************************************************************************\njwUploader \uae30\ubcf8 \uc124\uc815\n******************************************************************************/\n\nvar jwUploaderSettings = {\n\t\"width\"\t\t\t: 80,\n\t\"height\"\t\t: 20,\n\t\"sizeLimit\"\t\t: 150 * 1024,\n\t\"fileExt\"\t\t: \"image\",\n\t\"uploaderMovie\"\t: \"./js/plugin/jquery.jw/FileUploader.swf\",\n\t\"script\"\t\t: \"/?c=fileupload&m=receive\"\n};\n\n\n/******************************************************************************\n\ub85c\ub529\ucc3d\n******************************************************************************/\n\n// \ub85c\ub529\ucc3d \uc5f4\uae30\nfunction show_loading()\n{\n\ttry\n\t{\n\t\t$.modal('<div><img src=\"./img/loading.gif\" width=\"200\" /></div>', {\n\t\t\toverlayCss\t\t: {backgroundColor:\"#000\"},\n\t\t\toverlayClose\t: false\n\t\t});\n\t}\n\tcatch (e)\n\t{\n\t}\n}\n\n// \ub85c\ub529\ucc3d \ub2eb\uae30\nfunction hide_loading()\n{\n\ttry\n\t{\n\t\t$.modal.close();\n\t}\n\tcatch (e)\n\t{\n\t}\n}\n\n\n\n</script>\n\n<script type=\"text/javascript\" src=\"./js/common.js\" charset=\"utf-8\"></script>\n<style>\nbody { background:url(\"\") }\n</style>\n</head>\n\n\n<body oncontextmenu=\"return false;\">\n\n<div id=\"wrap\">\n<style type=\"text/css\">\n<!--\n#wrap {  height:100%; background:url(\"/img/bg_login.jpg\"); }\n\nbody.login {\n\tbackground-color: #000000;\n\tbackground-image: url(/img/bg_login.jpg);\n\tbackground-repeat: repeat-x;\n\ttext-align: center;\n}\n\n.Title {\t\n\tfont-family: Arial, Helvetica, sans-serif;\n\tcolor: #A0A0A4;\n\ttext-align: left;\n\tfont-size: 12px;\n\twidth: 30px;\n}\n\n.Data {\n\tfont-family: Arial, Helvetica, sans-serif;\n\tcolor: #A0A0A4;\n\ttext-align: left;\n\tfont-size: 12px;\n\twidth: 50px;\n}\n\n\n-->\n</style>\n\n<script type=\"text/javascript\">\nfunction layout_center(layerId)\n{\n\t$(\"#\"+layerId).css({\n\t\t'position'\t: 'absolute',\n\t\t'top'\t\t: (($(document).height() - $(\"#\"+layerId).height()) / 2) + \"px\",\n\t\t'left'\t\t: (($(document).width() - $(\"#\"+layerId).width()) / 2) + \"px\"\n\t});\n}\n\n$(document).ready(function() \n{\n\t$(window).resize(function() \n\t{\n\t\tlayout_center(\"login_box\")\n\t});\n\tlayout_center(\"login_box\");\n});\n\nfunction enter_submit()\n{\n\tif (document.form_id)\n\t{\n\t\tdocument.form_id.action=\"/\";\n\t\tdocument.form_id.submit();\n\t}\n}\n\nfunction forgot_password()\n{\n    var login_id = $(\"#form_id input[name=login_id]\").val();\n    if( login_id == '' ) {\n        alert(\"Enter User ID\");\n    } else {\n        $.ajax({\n            type: \"post\",\n            dataType: \"script\",\n            url: \"/?c=user&m=forgot_password\",\n            data: \"login_id=\" + login_id,\n            success: function(data) {\n            }\n        });\n    }\n}\n</script>\n\n<body class=\"login\" oncontextmenu=\"return false;\">\n\t<table class=\"login\" id=\"login_box\" style=\"width:274px; table-layout:fixed\">\n\t\t<div>\n\t\t    <td>\n\t\t        <img src=\"/img/logo.png\" width=\"179px\" height=\"72px\" align=\"center\" hspace=\"47\">\n\t\t    </td>\n\t\t</div>\n\t\t<div>\n\t\t    <tr>\n\t\t    \t<td width=\"274px\" height=\"31px\" style=\"background:url('/img/login_window_top.png');\">\n\t\t    \t\t<img src=\"/img/login_window_login.png\" alt=\"\" width=\"48px\" height=\"26px\" style=\"float:left;\">\n\t\t    \t</td>\n\t\t    </tr>\n\t\t</div>\n\t\t<div>\n\t    \t<td style=\"background:url('/img/login_window_middle.png');\">\n\t        \t<form id=\"form_id\" method=\"post\" action=\"/\" onsubmit=\"enter_submit();\">\n\t        \t\t<table class=\"login_table\">\n\t        \t\t\t<div height=\"15\">\n\t\t            \t\t<tr height=\"15\"></tr>\t\t            \t\t\n\t\t\t\t\t\t</div>\n\t\t\t\t\t\t\t\t                <div height=\"25\">\n\t\t            \t\t<tr height=\"25\">\n\t\t            \t\t\t<td width=\"25\">&nbsp;</td>\n\t\t            \t\t\t<td class=\"Title\">User ID</td>\n\t\t            \t\t\t<td width=\"5\">&nbsp;</td>\n\t\t            \t\t\t<td class=\"Data\"><input type=\"text\" name=\"login_id\" value=\"\" width=\"20\" /></td>\n\t\t            \t\t</tr>\n\t\t            \t</div>\n\t\t            \t<div height=\"2\">\n\t\t            \t\t<tr height=\"2\"></tr>\n\t\t\t\t\t\t</div>\n\t                    <div height=\"25\">\n\t\t            \t\t<tr height=\"25\">\n\t\t            \t\t\t<td width=\"25\">&nbsp;</td>\n\t\t            \t\t\t<td class=\"Title\">Password</td>\n\t\t            \t\t    <td width=\"5\">&nbsp;</td>\n\t\t            \t\t\t<td class=\"Data\"><input type=\"password\" name=\"login_pw\" value=\"\" SIZE=\"20\" /></td>\n\t\t            \t\t</tr>\n\t\t            \t</div>\n\t                \t<div height=\"10\">\n\t\t            \t\t<tr height=\"10\"></tr>\n\t\t\t\t\t\t</div>\n\t\t\t\t\t</table>\n\t\t\t\t\t<table>\t\t\t\t\t\t\n\t            \t\t<div height=\"33\">\n\t\t            \t\t<tr>\n\t\t                        <td align=\"center\">\n\t\t                        \t<button class=\"btn_login\" type=\"submit\">\n\t\t                        </td>\n\t\t                    </tr>\n\t\t                </div>\n\t                \t<div height=\"10\">\n\t\t            \t\t<tr height=\"10\"></tr>\t\t            \t\t\n\t\t\t\t\t\t</div>\n\n\t        \t\t</table>\n\n                    <a href=\"javascript:forgot_password();\">Forgot your password?</a>\n\t        \t</form>\n\t        </td>\n\t    </div>\n\t    <div>\n\t\t    <tr height=\"7\">\n\t\t    \t<td style=\"background:url('/img/login_window_bottom.png');\"></td>\n\t\t    </tr>\n\t\t</div>\n\t</table>\n</body>\n</div>\n\n</body>\n</html>\n",
         "datamd5" : "17a4aedb75a41fb6915354294224e7d1",
         "datammh3" : -235222834,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "20.217.192.0/19"
         },
         "ip" : "20.217.211.77",
         "ipv6" : "false",
         "latitude" : "32.0803",
         "location" : "32.0803,34.7805",
         "longitude" : "34.7805",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 53354,
         "product" : "lighttpd",
         "productvendor" : "lighttpd",
         "productversion" : "1.4.22",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "20.192.0.0/10",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 34.213.192.50:53354 (tcp/http) - last seen on 2024-11-07 at 03:27:53 UTC

    • IP
      34.213.192.50
      Network
      34.208.0.0/12
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux ubuntu
      URL

      http://34.213.192.50:53354/ 200

      HTTP Title
      DSL Router
      Reverse DNS
      ec2-34-213-192-50.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux ubuntu
      HTTP Component(s)
      PHP PHP 5.5.9
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0b0d0b48f4fbf3cc615731499d1d0159
      HTTP Header MD5
      8123bcb3b084198db0818e0e2d618d10
      HTTP Body MD5
      8d2bfa61490dd130feff1f645a3765c1
    • HTTP/1.1 200 OK
      Connection: close
      Date: Thu, 07 Nov 2024 03:27:53 GMT
      Server: Netscape-Enterprise/3.5.1
      X-Powered-By: PHP/5.5.9-1ubuntu4.21
      Content-Length: 454
      Content-Type: text/html
      Set-Cookie: csrftoken=TSAyZtkhrOFpv4Z2D0PJ3jQ7h3QUwvoV
      
      <html><head><link rel="icon" href="/favicon_53da8af8-ae3f-4051-aaec-79ff20b1d083.ico"><title>DSL Router</title></head><body><p>5lja92lrud19j7i</p><div>dch0b7wgdr9hpjytl3uz9ms07d</div><h1>mix5py8q5kmyw7w088hvx0</h1><h1>w6togzb64hv4prrhh</h1><div>ak4jnktva230</div><div>5dmxdvptyp5j9h4k3zp7m</div><span>zdqxe</span><div>e9n2oo7207wj2tyhbewg1walt7q1e</div><span>olz958o5nhe5</span><h2>6ukggq0m6xb831osyzgr6z</h2><div>3hsxaeoi4htxt154256k</div></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:53.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "8d2bfa61490dd130feff1f645a3765c1",
               "bodymmh3" : 1002884739,
               "component" : [
                  {
                     "product" : "PHP",
                     "productversion" : "5.5.9",
                     "productvendor" : "PHP"
                  }
               ],
               "headermd5" : "8123bcb3b084198db0818e0e2d618d10",
               "headermmh3" : 211332896,
               "title" : "DSL Router"
            },
            "length" : 703
         },
         "asn" : "AS16509",
         "city" : "Boardman",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 03:27:53 GMT\r\nServer: Netscape-Enterprise/3.5.1\r\nX-Powered-By: PHP/5.5.9-1ubuntu4.21\r\nContent-Length: 454\r\nContent-Type: text/html\r\nSet-Cookie: csrftoken=TSAyZtkhrOFpv4Z2D0PJ3jQ7h3QUwvoV\r\n\r\n<html><head><link rel=\"icon\" href=\"/favicon_53da8af8-ae3f-4051-aaec-79ff20b1d083.ico\"><title>DSL Router</title></head><body><p>5lja92lrud19j7i</p><div>dch0b7wgdr9hpjytl3uz9ms07d</div><h1>mix5py8q5kmyw7w088hvx0</h1><h1>w6togzb64hv4prrhh</h1><div>ak4jnktva230</div><div>5dmxdvptyp5j9h4k3zp7m</div><span>zdqxe</span><div>e9n2oo7207wj2tyhbewg1walt7q1e</div><span>olz958o5nhe5</span><h2>6ukggq0m6xb831osyzgr6z</h2><div>3hsxaeoi4htxt154256k</div></body></html>",
         "datamd5" : "0b0d0b48f4fbf3cc615731499d1d0159",
         "datammh3" : -2074551054,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AT-88-Z",
            "organization" : "Amazon Technologies Inc.",
            "subnet" : "34.208.0.0/12"
         },
         "host" : [
            "ec2-34-213-192-50"
         ],
         "hostname" : [
            "ec2-34-213-192-50.us-west-2.compute.amazonaws.com"
         ],
         "ip" : "34.213.192.50",
         "ipv6" : "false",
         "latitude" : "45.8491",
         "location" : "45.8491,-119.7143",
         "longitude" : "-119.7143",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux",
         "osdistribution" : "ubuntu",
         "osvendor" : "Linux",
         "port" : 53354,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "ec2-34-213-192-50.us-west-2.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "us-west-2.compute.amazonaws.com"
         ],
         "subnet" : "34.208.0.0/12",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 47.105.110.42:53354 (tcp/http) - last seen on 2024-11-07 at 03:20:27 UTC

    • IP
      47.105.110.42
      Network
      47.96.0.0/12
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS sUse
      URL

      http://47.105.110.42:53354/ 401

      HTTP Title
      CloudDriveService
      HTTP Keyword(s)
      voip vos3000
      HTTP Copyright
      www.linknat.com, 昆石网络
      ASN
      AS37963
      Organization
      Hangzhou Alibaba Advertising Co.,Ltd.
      Protocol
      http
      Source
      datascan
    • Operating System
      Cisco IOS sUse
      Product
      Cisco WebVPN
      HTTP Component(s)
      Gitlab Gitlab PHP PHP Drupal Drupal 8 SPIP SPIP 4.1.11 Jenkins Jenkins 2.121.3 Metabase Metabase Adobe Coldfusion Microsoft ASP.NET Atlassian Confluence
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ddfdaa0ad1d24744b012a13342a36d83
      HTTP Header MD5
      cde78ba6a4a7c9a6f64944d73d2b7016
      HTTP Body MD5
      622ec573f77af3ac470d03c3628c75a2
    • HTTP/1.1 401 Unauthorized
      Composed-By: SPIP 4.1.11 @ www.spip.net
      Content-Length: 105647
      Content-Type: text/html;charset=utf-8
      Last-Modified: Fri, 29 Jul 2022 16:53:01 GMT
      Loginip: <srcip>
      Pragma: private
      Server: Cross Web Server
      Set-Cookie: SDPSESSIONID=AE7F18F5CE887FC885E5A1AE449D9AC1; Path=/; Secure; HttpOnly; SameSite=None;
      Set-Cookie: webvpnlogin=; path=/; secure;
      Set-Cookie: PHPSESSID=n91i168jps8rd856bcrln2isqe; path=/
      Set-Cookie: CFTOKEN=f337; CFCLIENT_FOO_CORP=preflanguage%3DEN%23; CFID=1F; path=/;HttpOnly;
      Set-Cookie: laravel_session=a0ffeb;
      Set-Cookie: TRACKID=111d130c363c6795f9897e3368d2926e; Path=/; Version=1;
      Set-Cookie: webvpn=A9790AFEACDEFA01FAAEAFEWFF390AE; path=/; secure;
      Set-Cookie: SOLONID=n91i168jps8rd856bcrln2isqe; path=/
      Set-Cookie: metabase.DEVICE=657aec21-0f2d-4aa8-9973-172d408c3ebf;HttpOnly;Path=/;Expires=Mon, 25 Apr 2044 03:55:44 +0200;SameSite=None;Secure
      Set-Cookie: adscsrf=66a8d8fd-ffe2-422b-bf08-37b6297afc4f;path=/;SameSite=None;Secure;priority=high;
      Set-Cookie: SUPPORTCHROMEOS=1; path=/; secure;
      Set-Cookie: sesskey=21263a2bf; path=/;
      Set-Cookie: session=eyJsb2NhbGUiOiJlbiJ9.ZZ4C4A.Yts__-iv6tJYDJFDwkciSG_z7M4; HttpOnly; Path=/;
      Set-Cookie: webvpn_as=; path=/; secure;
      Set-Cookie: DSIVS=; path=/; expires=Thu, 01 Jan 1970 22:00:00 GMT; secure;
      Set-Cookie: fsm_u=admin; Path=/;
      Set-Cookie: token=21263a2bf; path=/;
      Set-Cookie: NSC_AAAC=a29d421feecf680a560a4c47b269b38ea29d421feecf680a560a4c47b269b38ea; path=/;
      Www-Authenticate: Basic realm="TP-LINK Wireless N Router WR841N"
      X-Akaunting: Free Accounting Software
      X-Alternate-Cache-Key: cacheable:ba92b39be043e3c90d2fd075057dd3e5
      X-Cache: MISS from Hello
      X-Cache-Hits: 0
      X-Cache-Lookup: MISS from Hello:8080
      X-Content-Powered-By: K2 v2.8.0 (by JoomlaWor
      X-Content-Type-Options: nosniff
      X-Contextid: YQo=
      X-Drupal-Cache: xHIT
      X-Drupal-Dynamic-Cache: MISS
      X-Frame-Options: SAMEORIGIN
      X-Generator: Drupal 8 (https://www.drupal.org)
      X-Influxdb-Version: v2.7.5
      X-Jenkins: 2.121.3
      X-Jenkins-Session: f72d6619
      X-Nginx-Cache-Status: MISS
      X-Permitted-Cross-Domain-Policies: none
      X-Powered-By: ASP.NET
      X-Root: root
      X-Runtime: 0.00985
      X-T-Location: /iam
      X-Xss-Protection: 1; mode=block
      Date: Thu, 07 Nov 2024 03:20:26 GMT
      Connection: close
      
      <!DOCTYPE html>
      <html>
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <meta http-equiv="Pragma" content="no-cache" />
      <meta charset="utf-8">
      <meta content="IE=edge" http-equiv="X-UA-Compatible">
      <meta content="object" property="og:type">
      <meta content="GitLab" property="og:site_name">
      <meta content="Help" property="og:title">
      <meta content="GitLab Community Edition" property="og:description">
      <meta content="summary" property="twitter:card">
      <meta content="Help" property="twitter:title">
      <meta content="GitLab Community Edition" property="twitter:description">
      <meta content="GitLab Community Edition" name="description">
      <meta content="#474D57" name="theme-color">
      <meta content="#30353E" name="msapplication-TileColor">
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384e2fac23e0a==" />
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
      <meta http-equiv="expires" content="-1"/>
      <meta name="keywords" content="VOS3000, VoIP, VoIP运营支撑系统, 软交换"/>
      <meta name="author" content="www.linknat.com, 昆石网络"/>
      <meta name="copyright" content="www.linknat.com, 昆石网络"/>
      <meta name="generator" content="SPIP 4.1.11" />
      <script src="/jquery.min.js"></script> 
      <title>CloudDriveService</title>
      </head>
      <body>
      <div style="display: none;">
      <script>SC.util.mergeIntoContext({"focusedControlID":null,"userName":"","userDisplayName":"","isUserAuthenticated":false,"antiForgeryToken":"THtoAUxH4sS9","isUserAdministrator":false,"canManageSharedToolbox":false,"pageBaseFileName":"Guest","notifyActivityFrequencyMilliseconds":600000,"loginAfterInactivityMilliseconds":36000000,"canChangePassword":false,"controlPanelUrl":null,"pageType":"GuestPage","processType":2,"userAgentOverride":null,"sessionTypeInfos":[]});</script>
      <SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last="1">fritzr</User></Users></SessionInfo>
      <Account>
      <Entry0 Active="Yes" username="CMCCAdmin" web_passwd="CmcC4dm1n5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <Entry1 Active="Yes" username="useradmin" web_passwd="Gu4ngx1pd5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <Entry2 Active="Yes" username="CUAdmin"   web_passwd="CUAdmin5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <TelnetEntry Active="Yes" telnet_username="Admin" telnet_passwd="cxx4dm1n5591" telnet_port="23"/>
      <FtpEntry Active="Yes" ftp_right="1" ftp_auth="1" ftp_username="Admin" ftp_passwd="cxx4dm1n5591" ftp_port="21" />
      <SambaEntry Active="Yes" smb_right="1" smb_auth="1" smb_username="Admin" smb_passwd="cxx4dm1n5591" />
      <ConsoleEntry Active="Yes" console_username="Admin" console_passwd="cxx4dm1n5591"/>
      <CTDefParaEntry setDefValueFlag="1" />
      </Account>
      <div>8.5.5 (Build:20200530.307-TEMP)</div>
      <span class="greyNote version"><span class="vWord">Version</span> 2023.11.3 (build 147512)</span>
      <h1>Logged in as <strong>admin</strong></h1><input type="hidden" name="csrfmiddlewaretoken" value="e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y"><textarea id="3revi" name="revi" rows="4" cols="50">server1 Ubuntu 22.04 LTS</textarea>
      <ca status="disabled" href="/+CSCOCA+/login.html" />
      <form action="/login/vpnSdef" enctype="multipart/form-data" method="post" name="login">
          <div data-user="root" data-module="package-updates"></div>
          <code>The zip file did not contain an entry exportDescriptor.properties</code>
          <span class="form-hidden"><input name="page" value="login" type="hidden"/><input name="formulaire_action" type="hidden" value="login" /><input name="formulaire_action_args" type="hidden" value="dzdNV0MzUGFDV0NHemR6bWorekNEWHY=" /><input name="formulaire_action_sign" type="hidden" value="" /></span>
          <message>Please enter your username and password.</message>
          <input name="formid" type="hidden" value="012afed" />
          <input name="javax.faces.ViewState" type="hidden" value="012afed" />
          <input name="queryString" type="hidden" value="1406192" />
          <div class="versionInfo">The Cacti Group Version 1.2.25</div>
          <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>
          <input type="hidden" name="token" value="0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec">
          <input type='hidden' name='__csrf_magic' value="key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654" />
          <input type="hidden" name="tokenid"  value="1804289383" >
          <input type="hidden" name="name"  value="1804289383" >
          <input type="hidden" name="csrfKey" value="621aec6b886ff81169bed7de5d47b5ed">
          <input type="hidden" name="csrf_token" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" name="ref" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" name="username_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" name="password_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="csrf" name="csrf" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="csrf" name="xd_check" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="give-form-id" name="give-form-id" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" id="give-form-hash" name="give-form-hash" value="621aec6b886ff81169bed7de5d47b5ed">
          <input type="text" name="username" label="Username:" value="admin" />
          <input type="password" name="password" label="Password:" value="123456" />
          <input type="hidden" name="tgroup" value="DefaultADMINGroup" />
          <input type="submit" name="Login" value="Login" />
          <input type="reset" name="Clear" value="Clear" />
      </form>
      <input type="hidden" value="Maintain/cloud_index.php" id="cloud_addr">
      <li class="lisel" onclick="location.href='index.php'">日志系统</li>
      <li class="linormal" onclick="location.href='Maintain/cloud_index.php'" style="margin-left:1px;">云平台</li>
      <button type="button" data-price-id=True>sb</button>
      <div class="prod_madelName">RT-AC5300</div>
      <div class="p1 title_gap">Sign in with your ASUS router account</div>
      <tr class="h"><th>PHP Group</th></tr>
      <tr><td class="e">upload_tmp_dir</td><td class="v">/etc/httpd/_tmp</td><td class="v">/etc/httpd/_tmp</td></tr>
      <tr><td class="e">$_SERVER['DOCUMENT_ROOT']</td><td class="v">/mnt/HDD2/web/</td></tr>
      <var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>
      <span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>
      <div class="text" id="jive-loginVersion"> Openfire, Version: 3.6.0a</div>
      <a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>
      <div id="mcname">LoadMaster</div>
      <p><br/><span>出厂IP:192.168.1.1</span><br/><span>用户名、密码:admin admin</span></p>
      <td colspan="2">Please enter your Cacti user name and password below:</td>
      <meta id="confluence-context-path" name="confluence-context-path" content="">
      <meta id="confluence-base-url" name="confluence-base-url" content="https://192.168.1.4">
      <meta id="atlassian-token" name="atlassian-token" content="d78e2b977d28428e411e31b958c9c502c2425083">
      <script id="frontend-js-extra">var hashform_vars = {"ajaxurl":"\/wp-admin\/admin-ajax.php","ajax_nounce":"d78e2b97","preview_img":""};</script>
      <div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>
      <B>SonicWall Universal Management Suite v9.3</B>
      <br>OK<br>
      <script type="text/javascript">var csrfMagicToken = "sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646";var csrfMagicName = "__vtrftk";</script>
      <select id="cars" name="name">
      <option value="olvo">olvo</option>
      </select>
      <a href="/VICIdial/phone">MODIFY</a>
      <input type="hidden" name="extension"  value="1804289383" >
      <input type="hidden" name="pass"  value="1804289383" >
      <input type="hidden" name="recording_exten"  value="1804289383" >
      <script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>
      <input type='hidden' name='LDCSA_CSRF' value="sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985" />
      <script type='text/javascript'>
      	var cactiVersion='1.2.27';
      	var cactiServerOS='unix';
      	var cactiAction='';
      	var theme='modern';
      	var refreshIsLogout=true;
      	var refreshPage='/logout.php?action=timeout';
      	var refreshMSeconds=1440000;
      	var urlPath='/';
      	var previousPage='';
      	var sessionMessage=[];
      	var csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';
      </script>
      
      <!--
      <Username Level="40/40" Dispatch="account">admin</Username><User1><Password Level="40/40" Dispatch="account">admin</Password></User1>
      /var/pinglog
      <TITLE>Login</TITLE>
      <a href="jpg.html">LIVE JPEG</a><br>
      <a href="liveie.html">Internet Monitor (Microsoft Internet Explorer 8, 9, 10, 11) </a><br>
      <a href="DVRRemoteAP.exe">Download 32 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>
      <a href="DVRRemoteAP_X64.exe">Download 64 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>
      <a href="DVFPlayer.zip">Download 32/64 bits File Player (Windows 7, Windows 8, Windows 10)</a><br>
      <\?xml version="1.0" encoding="utf-8"?><base64Binary xmlns="http://micros-hosting.com/EGateway/">
      Location: /admin
      <meta name="generator" content="vBulletin 5.5.4" />
      Location: http://<ip>:80/relogin.htm?_t=3541144909
      Location: http://<ip>:80/syscmd.htm" Location: /ui/login
      /cgi-bin/webctrl.cgi?action=index_page
      PDR-M800
      function btnPing()
      <HTML><HEAD><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>.The document has moved<A HREF="http://<ip>:80/relogin.htm?_t=179439949">here</A></BODY></HTML>
      <link type="image/x-icon" rel="shortcut icon" href="/themes/img/icon/cisco_shortcut.png">
      <link type="image/x-icon" rel="shortcut icon" href="/themes/img/icon/cisco_logo.png">
      <td class="Copyright" colspan="2" style="text-align:justify" height="20" valign="bottom">© 2017 Cisco Systems, Inc. All Rights Reserved.
      <br>Cisco, Cisco Systems, and the Cisco Systems logo are registered
      trademarks or trademarks of Cisco Systems, Inc. and/or it's affiliates
      in the United States and certain other countries.
      </td>
      :
      #
      >
      $
      SSH key is good
      is not a valid ref and may not be archived
      pcPassword2
      '&sessionKey=790148060;'
      name="sessionKey" value="790148060"
      Set-Cookie: loginName=admin
      var fgt_lang = /dev/cmdb/sslvpn_websession
      php 8.1.0-dev exit
      springframework
      Tomcat
      DEVICE.ACCOUNT=admin
      AUTHORIZED_GROUP=1
      <uid></uid>
      <name>Admin</name>
      <usrid></usrid>
      <password>admin</password>
      <group></group>
      cpto /tmp/"root"
      Model=AC1450
      Firmware=V1.0.0.36_10.0.17
      "exceptionMessageValue":"javax.servlet.ServletException: No valid forensics analysis solrDocIds parameter found."
      BIG-IP release 15.0.0
      user:root
      12345admin123'
      Failed to process image
      
      Location: http://192.168.0.1:52869/picsdesc.xml
      You don't have permission to access /vpns/ on this server.
      [global]
          workgroup = intranet
          encrypt passwords = Yes
          update encrypted = Yes
      
      funcionando
      system_sofia
      name resolve order
      InfoOS:Linux node01 uid=0(root) gid=0(root) groups=0(root)OSInfo
      <b>File Uploaded !!!</b><br>
      ant=951d11e51392117311602d0c25435d7f
      38ee63071a04dc5e04ed22624c38e648
      6f3249aa304055d63828af3bfab778f6
      <h1> c80fc6428eb4fe4a3b77898ebf9f3945 </h1>
      [local]
       tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZTJmYWMyM2UwYT09
       addr = <ip>
      "Powered by vBulletin Version 5.5.4"
      789551
      Linear eMerge
      SuperSign
      ubiq
      Yacht
      Zeroshell
      FastWeb
      AuthInfo:
      loadingIndicator_bk
      Zyxel
      skyrouter
      WAP54
      org.apache.spark.ui
      
      
      
      ID: "00af", version: "7.7.31.1", AddItem: function (a, item, c) {}
      <insert implant configuration content here>
      Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws://<ip> ws://<ip>:443 wss://<ip> wss://<ip>:8443 http://<ip>/api
      Copyright (c) 2015-2020 by Cisco Systems, Inc.
      All rights reserved.
      SSL VPN Service
      wsConvertPptResponse
      <input id="txtUserName" class="txt-input" type="text" name="userName" value="" />
      <input id="txtPassword" class="txt-input" type="password" name="password" value="" />
      <button id="btnLogin" lc="html" lk="IDCS_LOGIN_NBSP">
      <span lc="html" lk="IDCS_BS_PLUGIN_DOWNLOAD" style="line-height: 30px; vertical-align: top;"></span>
      <script src="../Scripts/login.htm.js?v={JS_CSS_V}" type="text/javascript"></script>
      <LegacyDN>eD2bxe4</LegacyDN>
      <title class="_ctxstxt_NetscalerGateway">
      SAML Assertion verification failed; Please contact your administrator
      v=2b46554c087d2d5516559e9b8bc1875d
      /vpn/images/AccessGateway.ico
      frame-busting
      /vpn/js/logout_view.js?v=
      _ctxstxt_NetscalerAAA
      lib.min20200813.js
      401 Unauthorized Basic realm=
      sName='1';onTest(this);
      var passadm = "admin";
      OPMODE_BRIDGE
      document.all.cmd_result
      <input id="key" type="text" style="width: 200px" value="02108CB9-2200D5A4">
      <input id="date" type="text" style="width: 200px" value="12/25/2023">
      main page cgi-bin/login.cgi
      var sessionKey='030ff030ff88';
      loc += '&sessionKey=19dec20030ff8dcb2';
      }
      
      var code = 'location="' + loc + '"';
      
      Password change successful
      J2100N GPON ONT
      /cgi-bin/webui/admin
      sesskey
      name=admin pass=123 priv=ppp
      service=www.dlinkddns.com
      sysCmdType
      Content-Type: auth/request
      
      
      Content-Type: command/reply
      
      Reply-Text: +OK accepted
      
      
      X-Content-Powered-By: K2 v2.8.0 (by JoomlaWorks)
      007b2000-007c1000 rw-p 00000000 00:00 0
      Size:                 60 kB
      Rss:                  52 kB
      Pss:                  52 kB
      Shared_Clean:          0 kB
      Shared_Dirty:          0 kB
      Private_Clean:         0 kB
      Private_Dirty:        52 kB
      Referenced:           52 kB
      Anonymous:            52 kB
      AnonHugePages:         0 kB
      Swap:                  8 kB
      KernelPageSize:        4 kB
      MMUPageSize:           4 kB
      009b1000-009b8000 rwxp 001b1000 fd:01 3339977                            /var/Sofia
      Size:                 28 kB
      Rss:                   0 kB
      Pss:                   0 kB
      Shared_Clean:   
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:20:27.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "micros-hosting.com",
                  "drupal.org"
               ],
               "file" : [
                  "dvrremoteap_x64.exe",
                  "index.php",
                  "dvrremoteap.exe",
                  "cloud_index.php",
                  "dvfplayer.zip",
                  "admin-ajax.php"
               ],
               "hostname" : [
                  "micros-hosting.com",
                  "www.drupal.org"
               ],
               "ip" : [
                  "192.168.1.1",
                  "192.168.1.10",
                  "192.168.1.4",
                  "192.168.0.1",
                  "1.0.0.36",
                  "7.7.31.1"
               ],
               "url" : [
                  "http://192.168.0.1:52869/picsdesc.xml",
                  "http://micros-hosting.com/EGateway/",
                  "https://192.168.1.4",
                  "https://www.drupal.org"
               ]
            },
            "http" : {
               "bodymd5" : "622ec573f77af3ac470d03c3628c75a2",
               "bodymmh3" : -1997956440,
               "component" : [
                  {
                     "productvendor" : "Adobe",
                     "product" : "Coldfusion"
                  },
                  {
                     "product" : "Gitlab",
                     "productvendor" : "Gitlab"
                  },
                  {
                     "product" : "ASP.NET",
                     "productvendor" : "Microsoft"
                  },
                  {
                     "productversion" : "4.1.11",
                     "productvendor" : "SPIP",
                     "product" : "SPIP"
                  },
                  {
                     "productversion" : "8",
                     "productvendor" : "Drupal",
                     "product" : "Drupal"
                  },
                  {
                     "product" : "Metabase",
                     "productvendor" : "Metabase"
                  },
                  {
                     "productversion" : "2.121.3",
                     "productvendor" : "Jenkins",
                     "product" : "Jenkins"
                  },
                  {
                     "productvendor" : "Atlassian",
                     "product" : "Confluence"
                  },
                  {
                     "productvendor" : "PHP",
                     "product" : "PHP"
                  }
               ],
               "copyright" : "www.linknat.com, \u6606\u77f3\u7f51\u7edc",
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Fri, 29 Jul 2022 16:53:01 GMT"
                  }
               ],
               "headermd5" : "cde78ba6a4a7c9a6f64944d73d2b7016",
               "headermmh3" : -1396289481,
               "keywords" : [
                  "voip",
                  "vos3000"
               ],
               "realm" : "TP-LINK Wireless N Router WR841N",
               "title" : "CloudDriveService"
            },
            "length" : 16298
         },
         "asn" : "AS37963",
         "city" : "Qingdao",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 401 Unauthorized\r\nComposed-By: SPIP 4.1.11 @ www.spip.net\r\nContent-Length: 105647\r\nContent-Type: text/html;charset=utf-8\r\nLast-Modified: Fri, 29 Jul 2022 16:53:01 GMT\r\nLoginip: <srcip>\r\nPragma: private\r\nServer: Cross Web Server\r\nSet-Cookie: SDPSESSIONID=AE7F18F5CE887FC885E5A1AE449D9AC1; Path=/; Secure; HttpOnly; SameSite=None;\r\nSet-Cookie: webvpnlogin=; path=/; secure;\r\nSet-Cookie: PHPSESSID=n91i168jps8rd856bcrln2isqe; path=/\r\nSet-Cookie: CFTOKEN=f337; CFCLIENT_FOO_CORP=preflanguage%3DEN%23; CFID=1F; path=/;HttpOnly;\r\nSet-Cookie: laravel_session=a0ffeb;\r\nSet-Cookie: TRACKID=111d130c363c6795f9897e3368d2926e; Path=/; Version=1;\r\nSet-Cookie: webvpn=A9790AFEACDEFA01FAAEAFEWFF390AE; path=/; secure;\r\nSet-Cookie: SOLONID=n91i168jps8rd856bcrln2isqe; path=/\r\nSet-Cookie: metabase.DEVICE=657aec21-0f2d-4aa8-9973-172d408c3ebf;HttpOnly;Path=/;Expires=Mon, 25 Apr 2044 03:55:44 +0200;SameSite=None;Secure\r\nSet-Cookie: adscsrf=66a8d8fd-ffe2-422b-bf08-37b6297afc4f;path=/;SameSite=None;Secure;priority=high;\r\nSet-Cookie: SUPPORTCHROMEOS=1; path=/; secure;\r\nSet-Cookie: sesskey=21263a2bf; path=/;\r\nSet-Cookie: session=eyJsb2NhbGUiOiJlbiJ9.ZZ4C4A.Yts__-iv6tJYDJFDwkciSG_z7M4; HttpOnly; Path=/;\r\nSet-Cookie: webvpn_as=; path=/; secure;\r\nSet-Cookie: DSIVS=; path=/; expires=Thu, 01 Jan 1970 22:00:00 GMT; secure;\r\nSet-Cookie: fsm_u=admin; Path=/;\r\nSet-Cookie: token=21263a2bf; path=/;\r\nSet-Cookie: NSC_AAAC=a29d421feecf680a560a4c47b269b38ea29d421feecf680a560a4c47b269b38ea; path=/;\r\nWww-Authenticate: Basic realm=\"TP-LINK Wireless N Router WR841N\"\r\nX-Akaunting: Free Accounting Software\r\nX-Alternate-Cache-Key: cacheable:ba92b39be043e3c90d2fd075057dd3e5\r\nX-Cache: MISS from Hello\r\nX-Cache-Hits: 0\r\nX-Cache-Lookup: MISS from Hello:8080\r\nX-Content-Powered-By: K2 v2.8.0 (by JoomlaWor\r\nX-Content-Type-Options: nosniff\r\nX-Contextid: YQo=\r\nX-Drupal-Cache: xHIT\r\nX-Drupal-Dynamic-Cache: MISS\r\nX-Frame-Options: SAMEORIGIN\r\nX-Generator: Drupal 8 (https://www.drupal.org)\r\nX-Influxdb-Version: v2.7.5\r\nX-Jenkins: 2.121.3\r\nX-Jenkins-Session: f72d6619\r\nX-Nginx-Cache-Status: MISS\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Powered-By: ASP.NET\r\nX-Root: root\r\nX-Runtime: 0.00985\r\nX-T-Location: /iam\r\nX-Xss-Protection: 1; mode=block\r\nDate: Thu, 07 Nov 2024 03:20:26 GMT\r\nConnection: close\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<meta http-equiv=\"Pragma\" content=\"no-cache\" />\n<meta charset=\"utf-8\">\n<meta content=\"IE=edge\" http-equiv=\"X-UA-Compatible\">\n<meta content=\"object\" property=\"og:type\">\n<meta content=\"GitLab\" property=\"og:site_name\">\n<meta content=\"Help\" property=\"og:title\">\n<meta content=\"GitLab Community Edition\" property=\"og:description\">\n<meta content=\"summary\" property=\"twitter:card\">\n<meta content=\"Help\" property=\"twitter:title\">\n<meta content=\"GitLab Community Edition\" property=\"twitter:description\">\n<meta content=\"GitLab Community Edition\" name=\"description\">\n<meta content=\"#474D57\" name=\"theme-color\">\n<meta content=\"#30353E\" name=\"msapplication-TileColor\">\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384e2fac23e0a==\" />\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>\n<meta http-equiv=\"expires\" content=\"-1\"/>\n<meta name=\"keywords\" content=\"VOS3000, VoIP, VoIP\u8fd0\u8425\u652f\u6491\u7cfb\u7edf, \u8f6f\u4ea4\u6362\"/>\n<meta name=\"author\" content=\"www.linknat.com, \u6606\u77f3\u7f51\u7edc\"/>\n<meta name=\"copyright\" content=\"www.linknat.com, \u6606\u77f3\u7f51\u7edc\"/>\n<meta name=\"generator\" content=\"SPIP 4.1.11\" />\n<script src=\"/jquery.min.js\"></script> \n<title>CloudDriveService</title>\n</head>\n<body>\n<div style=\"display: none;\">\n<script>SC.util.mergeIntoContext({\"focusedControlID\":null,\"userName\":\"\",\"userDisplayName\":\"\",\"isUserAuthenticated\":false,\"antiForgeryToken\":\"THtoAUxH4sS9\",\"isUserAdministrator\":false,\"canManageSharedToolbox\":false,\"pageBaseFileName\":\"Guest\",\"notifyActivityFrequencyMilliseconds\":600000,\"loginAfterInactivityMilliseconds\":36000000,\"canChangePassword\":false,\"controlPanelUrl\":null,\"pageType\":\"GuestPage\",\"processType\":2,\"userAgentOverride\":null,\"sessionTypeInfos\":[]});</script>\n<SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last=\"1\">fritzr</User></Users></SessionInfo>\n<Account>\n<Entry0 Active=\"Yes\" username=\"CMCCAdmin\" web_passwd=\"CmcC4dm1n5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry1 Active=\"Yes\" username=\"useradmin\" web_passwd=\"Gu4ngx1pd5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry2 Active=\"Yes\" username=\"CUAdmin\"   web_passwd=\"CUAdmin5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<TelnetEntry Active=\"Yes\" telnet_username=\"Admin\" telnet_passwd=\"cxx4dm1n5591\" telnet_port=\"23\"/>\n<FtpEntry Active=\"Yes\" ftp_right=\"1\" ftp_auth=\"1\" ftp_username=\"Admin\" ftp_passwd=\"cxx4dm1n5591\" ftp_port=\"21\" />\n<SambaEntry Active=\"Yes\" smb_right=\"1\" smb_auth=\"1\" smb_username=\"Admin\" smb_passwd=\"cxx4dm1n5591\" />\n<ConsoleEntry Active=\"Yes\" console_username=\"Admin\" console_passwd=\"cxx4dm1n5591\"/>\n<CTDefParaEntry setDefValueFlag=\"1\" />\n</Account>\n<div>8.5.5 (Build:20200530.307-TEMP)</div>\n<span class=\"greyNote version\"><span class=\"vWord\">Version</span> 2023.11.3 (build 147512)</span>\n<h1>Logged in as <strong>admin</strong></h1><input type=\"hidden\" name=\"csrfmiddlewaretoken\" value=\"e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y\"><textarea id=\"3revi\" name=\"revi\" rows=\"4\" cols=\"50\">server1 Ubuntu 22.04 LTS</textarea>\n<ca status=\"disabled\" href=\"/+CSCOCA+/login.html\" />\n<form action=\"/login/vpnSdef\" enctype=\"multipart/form-data\" method=\"post\" name=\"login\">\n    <div data-user=\"root\" data-module=\"package-updates\"></div>\n    <code>The zip file did not contain an entry exportDescriptor.properties</code>\n    <span class=\"form-hidden\"><input name=\"page\" value=\"login\" type=\"hidden\"/><input name=\"formulaire_action\" type=\"hidden\" value=\"login\" /><input name=\"formulaire_action_args\" type=\"hidden\" value=\"dzdNV0MzUGFDV0NHemR6bWorekNEWHY=\" /><input name=\"formulaire_action_sign\" type=\"hidden\" value=\"\" /></span>\n    <message>Please enter your username and password.</message>\n    <input name=\"formid\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"javax.faces.ViewState\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"queryString\" type=\"hidden\" value=\"1406192\" />\n    <div class=\"versionInfo\">The Cacti Group Version 1.2.25</div>\n    <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>\n    <input type=\"hidden\" name=\"token\" value=\"0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec\">\n    <input type='hidden' name='__csrf_magic' value=\"key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654\" />\n    <input type=\"hidden\" name=\"tokenid\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"name\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"csrfKey\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"hidden\" name=\"csrf_token\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" name=\"ref\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"username_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"password_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"csrf\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"xd_check\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"give-form-id\" name=\"give-form-id\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" id=\"give-form-hash\" name=\"give-form-hash\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"text\" name=\"username\" label=\"Username:\" value=\"admin\" />\n    <input type=\"password\" name=\"password\" label=\"Password:\" value=\"123456\" />\n    <input type=\"hidden\" name=\"tgroup\" value=\"DefaultADMINGroup\" />\n    <input type=\"submit\" name=\"Login\" value=\"Login\" />\n    <input type=\"reset\" name=\"Clear\" value=\"Clear\" />\n</form>\n<input type=\"hidden\" value=\"Maintain/cloud_index.php\" id=\"cloud_addr\">\n<li class=\"lisel\" onclick=\"location.href='index.php'\">\u65e5\u5fd7\u7cfb\u7edf</li>\n<li class=\"linormal\" onclick=\"location.href='Maintain/cloud_index.php'\" style=\"margin-left:1px;\">\u4e91\u5e73\u53f0</li>\n<button type=\"button\" data-price-id=True>sb</button>\n<div class=\"prod_madelName\">RT-AC5300</div>\n<div class=\"p1 title_gap\">Sign in with your ASUS router account</div>\n<tr class=\"h\"><th>PHP Group</th></tr>\n<tr><td class=\"e\">upload_tmp_dir</td><td class=\"v\">/etc/httpd/_tmp</td><td class=\"v\">/etc/httpd/_tmp</td></tr>\n<tr><td class=\"e\">$_SERVER['DOCUMENT_ROOT']</td><td class=\"v\">/mnt/HDD2/web/</td></tr>\n<var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>\n<span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>\n<div class=\"text\" id=\"jive-loginVersion\"> Openfire, Version: 3.6.0a</div>\n<a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>\n<div id=\"mcname\">LoadMaster</div>\n<p><br/><span>\u51fa\u5382IP\uff1a192.168.1.1</span><br/><span>\u7528\u6237\u540d\u3001\u5bc6\u7801\uff1aadmin admin</span></p>\n<td colspan=\"2\">Please enter your Cacti user name and password below:</td>\n<meta id=\"confluence-context-path\" name=\"confluence-context-path\" content=\"\">\n<meta id=\"confluence-base-url\" name=\"confluence-base-url\" content=\"https://192.168.1.4\">\n<meta id=\"atlassian-token\" name=\"atlassian-token\" content=\"d78e2b977d28428e411e31b958c9c502c2425083\">\n<script id=\"frontend-js-extra\">var hashform_vars = {\"ajaxurl\":\"\\/wp-admin\\/admin-ajax.php\",\"ajax_nounce\":\"d78e2b97\",\"preview_img\":\"\"};</script>\n<div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>\n<B>SonicWall Universal Management Suite v9.3</B>\n<br>OK<br>\n<script type=\"text/javascript\">var csrfMagicToken = \"sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646\";var csrfMagicName = \"__vtrftk\";</script>\n<select id=\"cars\" name=\"name\">\n<option value=\"olvo\">olvo</option>\n</select>\n<a href=\"/VICIdial/phone\">MODIFY</a>\n<input type=\"hidden\" name=\"extension\"  value=\"1804289383\" >\n<input type=\"hidden\" name=\"pass\"  value=\"1804289383\" >\n<input type=\"hidden\" name=\"recording_exten\"  value=\"1804289383\" >\n<script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>\n<input type='hidden' name='LDCSA_CSRF' value=\"sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985\" />\n<script type='text/javascript'>\n\tvar cactiVersion='1.2.27';\n\tvar cactiServerOS='unix';\n\tvar cactiAction='';\n\tvar theme='modern';\n\tvar refreshIsLogout=true;\n\tvar refreshPage='/logout.php?action=timeout';\n\tvar refreshMSeconds=1440000;\n\tvar urlPath='/';\n\tvar previousPage='';\n\tvar sessionMessage=[];\n\tvar csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';\n</script>\n\n<!--\n<Username Level=\"40/40\" Dispatch=\"account\">admin</Username><User1><Password Level=\"40/40\" Dispatch=\"account\">admin</Password></User1>\n/var/pinglog\n<TITLE>Login</TITLE>\n<a href=\"jpg.html\">LIVE JPEG</a><br>\n<a href=\"liveie.html\">Internet Monitor (Microsoft Internet Explorer 8, 9, 10, 11) </a><br>\n<a href=\"DVRRemoteAP.exe\">Download 32 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>\n<a href=\"DVRRemoteAP_X64.exe\">Download 64 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>\n<a href=\"DVFPlayer.zip\">Download 32/64 bits File Player (Windows 7, Windows 8, Windows 10)</a><br>\n<\\?xml version=\"1.0\" encoding=\"utf-8\"?><base64Binary xmlns=\"http://micros-hosting.com/EGateway/\">\nLocation: /admin\n<meta name=\"generator\" content=\"vBulletin 5.5.4\" />\nLocation: http://<ip>:80/relogin.htm?_t=3541144909\nLocation: http://<ip>:80/syscmd.htm\" Location: /ui/login\n/cgi-bin/webctrl.cgi?action=index_page\nPDR-M800\nfunction btnPing()\n<HTML><HEAD><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>.The document has moved<A HREF=\"http://<ip>:80/relogin.htm?_t=179439949\">here</A></BODY></HTML>\n<link type=\"image/x-icon\" rel=\"shortcut icon\" href=\"/themes/img/icon/cisco_shortcut.png\">\n<link type=\"image/x-icon\" rel=\"shortcut icon\" href=\"/themes/img/icon/cisco_logo.png\">\n<td class=\"Copyright\" colspan=\"2\" style=\"text-align:justify\" height=\"20\" valign=\"bottom\">\u00a9 2017 Cisco Systems, Inc. All Rights Reserved.\n<br>Cisco, Cisco Systems, and the Cisco Systems logo are registered\ntrademarks or trademarks of Cisco Systems, Inc. and/or it's affiliates\nin the United States and certain other countries.\n</td>\n:\n#\n>\n$\nSSH key is good\nis not a valid ref and may not be archived\npcPassword2\n'&sessionKey=790148060;'\nname=\"sessionKey\" value=\"790148060\"\nSet-Cookie: loginName=admin\nvar fgt_lang = /dev/cmdb/sslvpn_websession\nphp 8.1.0-dev exit\nspringframework\nTomcat\nDEVICE.ACCOUNT=admin\nAUTHORIZED_GROUP=1\n<uid></uid>\n<name>Admin</name>\n<usrid></usrid>\n<password>admin</password>\n<group></group>\ncpto /tmp/\"root\"\nModel=AC1450\r\nFirmware=V1.0.0.36_10.0.17\r\n\"exceptionMessageValue\":\"javax.servlet.ServletException: No valid forensics analysis solrDocIds parameter found.\"\nBIG-IP release 15.0.0\nuser:root\n12345admin123'\nFailed to process image\n\nLocation: http://192.168.0.1:52869/picsdesc.xml\nYou don't have permission to access /vpns/ on this server.\n[global]\n    workgroup = intranet\n    encrypt passwords = Yes\n    update encrypted = Yes\n\nfuncionando\nsystem_sofia\nname resolve order\nInfoOS:Linux node01 uid=0(root) gid=0(root) groups=0(root)OSInfo\n<b>File Uploaded !!!</b><br>\nant=951d11e51392117311602d0c25435d7f\n38ee63071a04dc5e04ed22624c38e648\n6f3249aa304055d63828af3bfab778f6\n<h1> c80fc6428eb4fe4a3b77898ebf9f3945 </h1>\n[local]\n tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZTJmYWMyM2UwYT09\n addr = <ip>\n\"Powered by vBulletin Version 5.5.4\"\n789551\nLinear eMerge\nSuperSign\nubiq\nYacht\nZeroshell\nFastWeb\nAuthInfo:\nloadingIndicator_bk\nZyxel\nskyrouter\nWAP54\norg.apache.spark.ui\n\n\n\nID: \"00af\", version: \"7.7.31.1\", AddItem: function (a, item, c) {}\n<insert implant configuration content here>\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws://<ip> ws://<ip>:443 wss://<ip> wss://<ip>:8443 http://<ip>/api\nCopyright (c) 2015-2020 by Cisco Systems, Inc.\nAll rights reserved.\nSSL VPN Service\nwsConvertPptResponse\n<input id=\"txtUserName\" class=\"txt-input\" type=\"text\" name=\"userName\" value=\"\" />\n<input id=\"txtPassword\" class=\"txt-input\" type=\"password\" name=\"password\" value=\"\" />\n<button id=\"btnLogin\" lc=\"html\" lk=\"IDCS_LOGIN_NBSP\">\n<span lc=\"html\" lk=\"IDCS_BS_PLUGIN_DOWNLOAD\" style=\"line-height: 30px; vertical-align: top;\"></span>\n<script src=\"../Scripts/login.htm.js?v={JS_CSS_V}\" type=\"text/javascript\"></script>\n<LegacyDN>eD2bxe4</LegacyDN>\n<title class=\"_ctxstxt_NetscalerGateway\">\nSAML Assertion verification failed; Please contact your administrator\nv=2b46554c087d2d5516559e9b8bc1875d\n/vpn/images/AccessGateway.ico\nframe-busting\n/vpn/js/logout_view.js?v=\n_ctxstxt_NetscalerAAA\nlib.min20200813.js\n401 Unauthorized Basic realm=\nsName='1';onTest(this);\nvar passadm = \"admin\";\nOPMODE_BRIDGE\ndocument.all.cmd_result\n<input id=\"key\" type=\"text\" style=\"width: 200px\" value=\"02108CB9-2200D5A4\">\n<input id=\"date\" type=\"text\" style=\"width: 200px\" value=\"12/25/2023\">\nmain page cgi-bin/login.cgi\nvar sessionKey='030ff030ff88';\nloc += '&sessionKey=19dec20030ff8dcb2';\n}\n\nvar code = 'location=\"' + loc + '\"';\n\nPassword change successful\nJ2100N GPON ONT\n/cgi-bin/webui/admin\nsesskey\nname=admin pass=123 priv=ppp\nservice=www.dlinkddns.com\nsysCmdType\nContent-Type: auth/request\n\n\nContent-Type: command/reply\n\nReply-Text: +OK accepted\n\n\nX-Content-Powered-By: K2 v2.8.0 (by JoomlaWorks)\n007b2000-007c1000 rw-p 00000000 00:00 0\nSize:                 60 kB\nRss:                  52 kB\nPss:                  52 kB\nShared_Clean:          0 kB\nShared_Dirty:          0 kB\nPrivate_Clean:         0 kB\nPrivate_Dirty:        52 kB\nReferenced:           52 kB\nAnonymous:            52 kB\nAnonHugePages:         0 kB\nSwap:                  8 kB\nKernelPageSize:        4 kB\nMMUPageSize:           4 kB\n009b1000-009b8000 rwxp 001b1000 fd:01 3339977                            /var/Sofia\nSize:                 28 kB\nRss:                   0 kB\nPss:                   0 kB\nShared_Clean:   ",
         "datamd5" : "ddfdaa0ad1d24744b012a13342a36d83",
         "datammh3" : 305749579,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS37963",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "alibaba-inc.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "ALISOFT",
            "organization" : "Hangzhou Alibaba Advertising Co.,Ltd.",
            "subnet" : "47.104.0.0/13"
         },
         "ip" : "47.105.110.42",
         "ipv6" : "false",
         "latitude" : "36.0610",
         "location" : "36.0610,120.3814",
         "longitude" : "120.3814",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Hangzhou Alibaba Advertising Co.,Ltd.",
         "os" : "IOS",
         "osdistribution" : "sUse",
         "osvendor" : "Cisco",
         "port" : 53354,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Unauthorized",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 401,
         "subnet" : "47.96.0.0/12",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 201.34.228.212:53354 (tcp/http) - last seen on 2024-11-07 at 02:45:27 UTC

    • IP
      201.34.228.212
      Network
      201.34.0.0/15
      Domain(s)
      net.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Debian
      URL

      http://201.34.228.212:53354/ 200

      HTTP Title
      Login
      Reverse DNS
      201-34-228-212.user3p.v-tal.net.br
      ASN
      AS8167
      Organization
      V tal
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Debian
      Product
      Apache HTTP Server 2.4.62
      HTTP Component(s)
      PHP PHP
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      44b29659c675728c880bd33e4bd4597d
      HTTP Header MD5
      49f8bf01733339a6dbe84675622e83ac
      HTTP Body MD5
      d9dd91c39b67844c76345c68d9d846a6
    • HTTP/1.1 200 OK
      Date: Thu, 07 Nov 2024 02:45:26 GMT
      Server: Apache/2.4.62 (Debian)
      Set-Cookie: PHPSESSID=rbq32thrhhmhf6mkd1b5kpj026; path=/
      Expires: Thu, 19 Nov 1981 08:52:00 GMT
      Cache-Control: no-store, no-cache, must-revalidate
      Pragma: no-cache
      Vary: Accept-Encoding
      Content-Length: 5070
      Connection: close
      Content-Type: text/html; charset=UTF-8
      
      
      
      
      <!DOCTYPE html>
      <html lang="pt-br">
      <head>
          <meta charset="UTF-8">
          <meta http-equiv="X-UA-Compatible" content="IE=edge">
          <meta name="viewport" content="width=device-width, initial-scale=1.0">
          <title>Login</title>
          <style>
              body, html {
                  height: 100%;
                  margin: 0;
                  font-family: Arial, sans-serif;
                  background-size: cover;
                  background-position: center;
                  transition: background-image 1s ease-in-out;
              }
      
              .container {
                  position: relative;
                  display: flex;
                  justify-content: center;
                  align-items: center;
                  height: 100%;
              }
      
              .login-box {
                  width: 300px;
                  padding: 20px;
                  border: 1px solid #ccc;
                  border-radius: 15px;
                  background-color: #f9f9f9;
                  animation: slideUp 0.5s ease;
                  position: absolute;
              }
      
              @keyframes slideUp {
                  0% {
                      opacity: 0;
                      transform: translateY(100%);
                  }
                  100% {
                      opacity: 1;
                      transform: translateY(0);
                  }
              }
      
              h1 {
                  text-align: center;
              }
      
              form {
                  text-align: center;
              }
      
              input[type="text"],
              input[type="password"] {
                  width: 60%;
                  padding: 7px;
                  margin-top: 2px;
                  margin-bottom: 3px;
                  box-sizing: border-box;
              }
              
              .button-container {
                  text-align: center;
              }
      
              button {
                  padding: 10px 20px;
                  background-color: #007bff;
                  color: white;
                  border: none;
                  border-radius: 18px;
                  cursor: pointer;
              }
      
              /* Estilos do  botão */
              .move-left {
                  margin-right: 10px;
              }
      
              .move-right {
                  margin-left: 10px;
              }
      
              .move-up {
                  margin-bottom: 10px;
              }
      
              .move-down {
                  margin-top: 10px;
              }
      
              img {
                  position: absolute;
                  top: -22%;
                  left: 48%;
                  transform: translate(-50%, -50%);
              }
          </style>
      </head>
      <body>
          <div class="container">
              <div class="login-box">
                  <img src="Arquivos/Imagens/Favico/Pato andando.gif" alt="Imagem Animada">
                  <h1>Acesse sua conta</h1>
                  <form action="" method="POST">
                      <p>
                          <label>Usuário</label>
                          <input type="text" name="usuario">
                      </p>
                      <p>
                          <label>Senha</label>
                          <input type="password" name="senha">
                      </p>
                      <p>
                          <button type="submit">Entrar</button>
                      </p>
                  </form>
              </div>
          </div>
      
          <script>
              document.addEventListener('DOMContentLoaded', function() {
                  // Foca no campo de usuário ao carregar a página
                  document.querySelector('input[name="usuario"]').focus();
                  
                  // Alteração de fundo aleatório
                  var images = [
                      'url("Arquivos/Fundo/fundo1.jpg")',
                      'url("Arquivos/Fundo/fundo2.jpeg")',
                      'url("Arquivos/Fundo/fundo3.jpeg")',
                      'url("Arquivos/Fundo/fundo4.jpeg")',
                      'url("Arquivos/Fundo/fundo5.jpeg")',
                      'url("Arquivos/Fundo/fundo6.jpg")',
                      'url("Arquivos/Fundo/fundo7.jpg")',
                      'url("Arquivos/Fundo/fundo8.jpeg")',
                      'url("Arquivos/Fundo/fundo9.jpeg")',
                      'url("Arquivos/Fundo/fundo10.jpg")',
                      'url("Arquivos/Fundo/fundo11.jpg")',
                      'url("Arquivos/Fundo/fundo13.jpg")',
                      'url("Arquivos/Fundo/fundo14.jpg")',
                      'url("Arquivos/Fundo/fundo15.jpg")',
                      'url("Arquivos/Fundo/fundo16.jpg")',
                      'url("Arquivos/Fundo/fundo17.jpg")',
                      'url("Arquivos/Fundo/fundo18.jpg")',
                      'url("Arquivos/Fundo/fundo19.jpg")',
                      'url("Arquivos/Fundo/fundo20.jpg")',
                      'url("Arquivos/Fundo/fundo21.jpg")',
                      'url("Arquivos/Fundo/fundo22.jpg")',
                      'url("Arquivos/Fundo/fundo23.jpg")',
                  ];
      
                  function changeBackground() {
                      var index = Math.floor(Math.random() * images.length);
                      document.body.style.backgroundImage = images[index];
                  }
      
                  changeBackground(); // Altera as imagens do fundo aleatoriamente ao carregar a pagina meu amiguinho HEHEH 
      
                  setInterval(changeBackground, 60000); // Troca a imagem a cada 1 minuto ( Acho que 1 minuto fica bom, mas se clicar na foto ela muda também. HEHEH )
      
                  document.body.addEventListener('click', changeBackground); // Troca a imagem ao clicar em qualquer lugar da página
              });
          </script>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:45:27.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d9dd91c39b67844c76345c68d9d846a6",
               "bodymmh3" : 713141403,
               "component" : [
                  {
                     "product" : "PHP",
                     "productvendor" : "PHP"
                  }
               ],
               "headermd5" : "49f8bf01733339a6dbe84675622e83ac",
               "headermmh3" : -128033467,
               "title" : "Login"
            },
            "length" : 5430
         },
         "asn" : "AS8167",
         "city" : "Palmas",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 07 Nov 2024 02:45:26 GMT\r\nServer: Apache/2.4.62 (Debian)\r\nSet-Cookie: PHPSESSID=rbq32thrhhmhf6mkd1b5kpj026; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Length: 5070\r\nConnection: close\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n\n\n\n<!DOCTYPE html>\n<html lang=\"pt-br\">\n<head>\n    <meta charset=\"UTF-8\">\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n    <title>Login</title>\n    <style>\n        body, html {\n            height: 100%;\n            margin: 0;\n            font-family: Arial, sans-serif;\n            background-size: cover;\n            background-position: center;\n            transition: background-image 1s ease-in-out;\n        }\n\n        .container {\n            position: relative;\n            display: flex;\n            justify-content: center;\n            align-items: center;\n            height: 100%;\n        }\n\n        .login-box {\n            width: 300px;\n            padding: 20px;\n            border: 1px solid #ccc;\n            border-radius: 15px;\n            background-color: #f9f9f9;\n            animation: slideUp 0.5s ease;\n            position: absolute;\n        }\n\n        @keyframes slideUp {\n            0% {\n                opacity: 0;\n                transform: translateY(100%);\n            }\n            100% {\n                opacity: 1;\n                transform: translateY(0);\n            }\n        }\n\n        h1 {\n            text-align: center;\n        }\n\n        form {\n            text-align: center;\n        }\n\n        input[type=\"text\"],\n        input[type=\"password\"] {\n            width: 60%;\n            padding: 7px;\n            margin-top: 2px;\n            margin-bottom: 3px;\n            box-sizing: border-box;\n        }\n        \n        .button-container {\n            text-align: center;\n        }\n\n        button {\n            padding: 10px 20px;\n            background-color: #007bff;\n            color: white;\n            border: none;\n            border-radius: 18px;\n            cursor: pointer;\n        }\n\n        /* Estilos do  bot\u00e3o */\n        .move-left {\n            margin-right: 10px;\n        }\n\n        .move-right {\n            margin-left: 10px;\n        }\n\n        .move-up {\n            margin-bottom: 10px;\n        }\n\n        .move-down {\n            margin-top: 10px;\n        }\n\n        img {\n            position: absolute;\n            top: -22%;\n            left: 48%;\n            transform: translate(-50%, -50%);\n        }\n    </style>\n</head>\n<body>\n    <div class=\"container\">\n        <div class=\"login-box\">\n            <img src=\"Arquivos/Imagens/Favico/Pato andando.gif\" alt=\"Imagem Animada\">\n            <h1>Acesse sua conta</h1>\n            <form action=\"\" method=\"POST\">\n                <p>\n                    <label>Usu\u00e1rio</label>\n                    <input type=\"text\" name=\"usuario\">\n                </p>\n                <p>\n                    <label>Senha</label>\n                    <input type=\"password\" name=\"senha\">\n                </p>\n                <p>\n                    <button type=\"submit\">Entrar</button>\n                </p>\n            </form>\n        </div>\n    </div>\n\n    <script>\n        document.addEventListener('DOMContentLoaded', function() {\n            // Foca no campo de usu\u00e1rio ao carregar a p\u00e1gina\n            document.querySelector('input[name=\"usuario\"]').focus();\n            \n            // Altera\u00e7\u00e3o de fundo aleat\u00f3rio\n            var images = [\n                'url(\"Arquivos/Fundo/fundo1.jpg\")',\n                'url(\"Arquivos/Fundo/fundo2.jpeg\")',\n                'url(\"Arquivos/Fundo/fundo3.jpeg\")',\n                'url(\"Arquivos/Fundo/fundo4.jpeg\")',\n                'url(\"Arquivos/Fundo/fundo5.jpeg\")',\n                'url(\"Arquivos/Fundo/fundo6.jpg\")',\n                'url(\"Arquivos/Fundo/fundo7.jpg\")',\n                'url(\"Arquivos/Fundo/fundo8.jpeg\")',\n                'url(\"Arquivos/Fundo/fundo9.jpeg\")',\n                'url(\"Arquivos/Fundo/fundo10.jpg\")',\n                'url(\"Arquivos/Fundo/fundo11.jpg\")',\n                'url(\"Arquivos/Fundo/fundo13.jpg\")',\n                'url(\"Arquivos/Fundo/fundo14.jpg\")',\n                'url(\"Arquivos/Fundo/fundo15.jpg\")',\n                'url(\"Arquivos/Fundo/fundo16.jpg\")',\n                'url(\"Arquivos/Fundo/fundo17.jpg\")',\n                'url(\"Arquivos/Fundo/fundo18.jpg\")',\n                'url(\"Arquivos/Fundo/fundo19.jpg\")',\n                'url(\"Arquivos/Fundo/fundo20.jpg\")',\n                'url(\"Arquivos/Fundo/fundo21.jpg\")',\n                'url(\"Arquivos/Fundo/fundo22.jpg\")',\n                'url(\"Arquivos/Fundo/fundo23.jpg\")',\n            ];\n\n            function changeBackground() {\n                var index = Math.floor(Math.random() * images.length);\n                document.body.style.backgroundImage = images[index];\n            }\n\n            changeBackground(); // Altera as imagens do fundo aleatoriamente ao carregar a pagina meu amiguinho HEHEH \n\n            setInterval(changeBackground, 60000); // Troca a imagem a cada 1 minuto ( Acho que 1 minuto fica bom, mas se clicar na foto ela muda tamb\u00e9m. HEHEH )\n\n            document.body.addEventListener('click', changeBackground); // Troca a imagem ao clicar em qualquer lugar da p\u00e1gina\n        });\n    </script>\n</body>\n</html>\n",
         "datamd5" : "44b29659c675728c880bd33e4bd4597d",
         "datammh3" : 1404155411,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "net.br"
         ],
         "geolocus" : {
            "asn" : "AS8167",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "vtal.com"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.041.460/0001-93",
            "organization" : "V tal",
            "subnet" : "201.34.0.0/15"
         },
         "host" : [
            "201-34-228-212"
         ],
         "hostname" : [
            "201-34-228-212.user3p.v-tal.net.br"
         ],
         "ip" : "201.34.228.212",
         "ipv6" : "false",
         "latitude" : "-10.1683",
         "location" : "-10.1683,-48.3263",
         "longitude" : "-48.3263",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "V tal",
         "os" : "Linux",
         "osdistribution" : "Debian",
         "osvendor" : "Linux",
         "port" : 53354,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "productversion" : "2.4.62",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "201-34-228-212.user3p.v-tal.net.br"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "user3p.v-tal.net.br",
            "v-tal.net.br"
         ],
         "subnet" : "201.34.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 8.208.89.32:53354 (tcp/http) - last seen on 2024-11-07 at 02:16:51 UTC

    • IP
      8.208.89.32
      Network
      8.208.0.0/17
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS sUse
      URL

      http://8.208.89.32:53354/ 401

      HTTP Title
      Newsletter - Daily deals and offers
      HTTP Keyword(s)
      voip vos3000
      HTTP Copyright
      www.linknat.com, 昆石网络
      ASN
      AS45102
      Organization
      Alibaba US Technology Co., Ltd.
      Protocol
      http
      Source
      datascan
    • Operating System
      Cisco IOS sUse
      Product
      Cisco WebVPN
      HTTP Component(s)
      Jenkins Jenkins 2.121.3 SPIP SPIP 4.1.11 Roundcube Webmail Oracle Java MobileIron Core Gitlab Gitlab Drupal Drupal 8 PHP PHP 5.6.40 Atlassian Confluence
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6614f280fb381144ced083974f320368
      HTTP Header MD5
      38c49bbcc845080178b7c529aa1b2881
      HTTP Body MD5
      0b6a5a6f9eb992cd08e7f4db28885c74
      Favicon MD5
      2981503b195488ac17d05dcf18615cd1
      Favicon MMH3
      -1439222863
    • HTTP/1.1 401 Unauthorized
      Composed-By: SPIP 4.1.11 @ www.spip.net
      Content-Length: 105732
      Content-Type: text/html;charset=utf-8
      Last-Modified: Fri, 29 Jul 2022 16:53:01 GMT
      Loginip: <srcip>
      Pragma: private
      Proxy-Authenticate: Basic realm="Tinyproxy"
      Server: Asterisk/13.13.1
      Set-Cookie: akaunting_session=7b22; Path=/;
      Set-Cookie: id=A67B8F9C;
      Set-Cookie: acSamlv2Error=; path=/; secure;
      Set-Cookie: PHPSESSID=n91i168jps8rd856bcrln2isqe; path=/
      Set-Cookie: __s_sessionid__=hh5rq45u9srt079v063jkb8c13; path=/
      Set-Cookie: grafana_session_expiry=1990089920; Path=/; Max-Age=2592000; SameSite=Lax
      Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=cpanel.custompoodles.com; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
      Set-Cookie: fsm_u=admin; Path=/;
      Set-Cookie: fsm_login=37dfe4372f3867d7c134d618cbef137b; Path=/;
      Set-Cookie: grafana_session=f7fbcb089c6994b7bc45775fdae1a13c; Path=/; Max-Age=2592000; HttpOnly; Secure; SameSite=Lax
      Set-Cookie: UICSESSION=qqhhk66ogtvugchmqfov0j4l96; path=/;
      Set-Cookie: jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c; path=/
      Set-Cookie: csrftoken=Pt1Guz0uK8QPbP3EV8zBKcxaRaxgrZUPbjZeCK50MLR00VR7THTsnwRPH0otS1lS; Path=/; SameSite=Lax;HttpOnly;Secure;SameSite=Strict; Strict-Transport-Security: max-age=63072000; includeSubDomains
      Set-Cookie: JSESSIONID=818E3539F13611E2EA4D5BFB48AE058C.jvml; Path=/mifs; OFBiz.Visitor=10004; Secure; HttpOnly;SameSite=lax;
      Set-Cookie: session820/qualitor820=2ek44merar6fo67l01hdr09u0l; path=/; HttpOnly; SameSite=Lax
      Set-Cookie: webvpn_as=; path=/; secure;
      Set-Cookie: SID=hBc7TxF76ERhvIw0jQQ4LZ7Z1jQUV0tQ; path=/;
      Set-Cookie: webvpn=A9790AFEACDEFA01FAAEAFEWFF390AE; path=/; secure;
      Via: 1.1 51766bfb56389c696c1525db90e16f23.cloudfront.net (CloudFront)
      Www-Authenticate: Basic realm="RT-N2UyNjgx"
      X-Amz-Cf-Id: CtsEH7KQ5yf2LQM4TNLiEjUavO2mWjwAez9sPj8Ws5MUdPUz2A==
      X-Backside-Transport: FAIL FAIL
      X-Cache: MISS from Hello
      X-Cache-Lookup: MISS from Hello:8080
      X-Citrix-Application: Receiver for Web
      X-Content-Powered-By: K2 v2.8.0 (by JoomlaWor
      X-Content-Type-Options: nosniff
      X-Contextid: YQo=
      X-Drupal-Cache: xHIT
      X-Drupal-Dynamic-Cache: MISS
      X-Frame-Options: SAMEORIGIN
      X-Generator: Drupal 8 (https://www.drupal.org)
      X-Jenkins: 2.121.3
      X-Jenkins-Session: f72d6619
      X-Litespeed-Cache: hit
      X-Powered-By: PHP/5.6.40
      X-Proxy-Cache: MISS
      X-Shardid: 80
      X-Sorting-Hat-Podid: 80
      X-Varnish-Cache: Miss
      X-Xss-Protection: 1; mode=block
      Date: Thu, 07 Nov 2024 00:50:47 GMT
      Connection: close
      
      <!DOCTYPE html>
      <html>
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <meta http-equiv="Pragma" content="no-cache" />
      <meta charset="utf-8">
      <meta content="IE=edge" http-equiv="X-UA-Compatible">
      <meta content="object" property="og:type">
      <meta content="GitLab" property="og:site_name">
      <meta content="Help" property="og:title">
      <meta content="GitLab Community Edition" property="og:description">
      <meta content="summary" property="twitter:card">
      <meta content="Help" property="twitter:title">
      <meta content="GitLab Community Edition" property="twitter:description">
      <meta content="GitLab Community Edition" name="description">
      <meta content="#474D57" name="theme-color">
      <meta content="#30353E" name="msapplication-TileColor">
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384e2fac23e0e==" />
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
      <meta http-equiv="expires" content="-1"/>
      <meta name="keywords" content="VOS3000, VoIP, VoIP运营支撑系统, 软交换"/>
      <meta name="author" content="www.linknat.com, 昆石网络"/>
      <meta name="copyright" content="www.linknat.com, 昆石网络"/>
      <meta name="generator" content="SPIP 4.1.11" />
      <script src="/jquery.min.js"></script> 
      <title>Newsletter - Daily deals and offers</title>
      </head>
      <body>
      <div style="display: none;">
      <script>SC.util.mergeIntoContext({"focusedControlID":null,"userName":"","userDisplayName":"","isUserAuthenticated":false,"antiForgeryToken":"THtoAUxH4sS9","isUserAdministrator":false,"canManageSharedToolbox":false,"pageBaseFileName":"Guest","notifyActivityFrequencyMilliseconds":600000,"loginAfterInactivityMilliseconds":36000000,"canChangePassword":false,"controlPanelUrl":null,"pageType":"GuestPage","processType":2,"userAgentOverride":null,"sessionTypeInfos":[]});</script>
      <SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last="1">fritzr</User></Users></SessionInfo>
      <Account>
      <Entry0 Active="Yes" username="CMCCAdmin" web_passwd="CmcC4dm1n5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <Entry1 Active="Yes" username="useradmin" web_passwd="Gu4ngx1pd5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <Entry2 Active="Yes" username="CUAdmin"   web_passwd="CUAdmin5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <TelnetEntry Active="Yes" telnet_username="Admin" telnet_passwd="cxx4dm1n5591" telnet_port="23"/>
      <FtpEntry Active="Yes" ftp_right="1" ftp_auth="1" ftp_username="Admin" ftp_passwd="cxx4dm1n5591" ftp_port="21" />
      <SambaEntry Active="Yes" smb_right="1" smb_auth="1" smb_username="Admin" smb_passwd="cxx4dm1n5591" />
      <ConsoleEntry Active="Yes" console_username="Admin" console_passwd="cxx4dm1n5591"/>
      <CTDefParaEntry setDefValueFlag="1" />
      </Account>
      <div>8.5.5 (Build:20200530.307-TEMP)</div>
      <span class="greyNote version"><span class="vWord">Version</span> 2023.11.3 (build 147512)</span>
      <h1>Logged in as <strong>admin</strong></h1><input type="hidden" name="csrfmiddlewaretoken" value="e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y"><textarea id="3revi" name="revi" rows="4" cols="50">server1 Ubuntu 22.04 LTS</textarea>
      <ca status="disabled" href="/+CSCOCA+/login.html" />
      <form action="/login/vpnSdef" enctype="multipart/form-data" method="post" name="login">
          <div data-user="root" data-module="package-updates"></div>
          <code>The zip file did not contain an entry exportDescriptor.properties</code>
          <span class="form-hidden"><input name="page" value="login" type="hidden"/><input name="formulaire_action" type="hidden" value="login" /><input name="formulaire_action_args" type="hidden" value="dzdNV0MzUGFDV0NHemR6bWorekNEWHY=" /><input name="formulaire_action_sign" type="hidden" value="" /></span>
          <message>Please enter your username and password.</message>
          <input name="formid" type="hidden" value="012afed" />
          <input name="javax.faces.ViewState" type="hidden" value="012afed" />
          <input name="queryString" type="hidden" value="1406192" />
          <div class="versionInfo">The Cacti Group Version 1.2.25</div>
          <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>
          <input type="hidden" name="token" value="0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec">
          <input type='hidden' name='__csrf_magic' value="key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654" />
          <input type="hidden" name="tokenid"  value="1804289383" >
          <input type="hidden" name="name"  value="1804289383" >
          <input type="hidden" name="csrfKey" value="621aec6b886ff81169bed7de5d47b5ed">
          <input type="hidden" name="csrf_token" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" name="ref" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" name="username_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" name="password_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="csrf" name="csrf" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="csrf" name="xd_check" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="give-form-id" name="give-form-id" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" id="give-form-hash" name="give-form-hash" value="621aec6b886ff81169bed7de5d47b5ed">
          <input type="text" name="username" label="Username:" value="admin" />
          <input type="password" name="password" label="Password:" value="123456" />
          <input type="hidden" name="tgroup" value="DefaultADMINGroup" />
          <input type="submit" name="Login" value="Login" />
          <input type="reset" name="Clear" value="Clear" />
      </form>
      <input type="hidden" value="Maintain/cloud_index.php" id="cloud_addr">
      <li class="lisel" onclick="location.href='index.php'">日志系统</li>
      <li class="linormal" onclick="location.href='Maintain/cloud_index.php'" style="margin-left:1px;">云平台</li>
      <button type="button" data-price-id=True>sb</button>
      <div class="prod_madelName">RT-AC5300</div>
      <div class="p1 title_gap">Sign in with your ASUS router account</div>
      <tr class="h"><th>PHP Group</th></tr>
      <tr><td class="e">upload_tmp_dir</td><td class="v">/etc/httpd/_tmp</td><td class="v">/etc/httpd/_tmp</td></tr>
      <tr><td class="e">$_SERVER['DOCUMENT_ROOT']</td><td class="v">/mnt/HDD2/web/</td></tr>
      <var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>
      <span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>
      <div class="text" id="jive-loginVersion"> Openfire, Version: 3.6.0a</div>
      <a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>
      <div id="mcname">LoadMaster</div>
      <p><br/><span>出厂IP:192.168.1.1</span><br/><span>用户名、密码:admin admin</span></p>
      <td colspan="2">Please enter your Cacti user name and password below:</td>
      <meta id="confluence-context-path" name="confluence-context-path" content="">
      <meta id="confluence-base-url" name="confluence-base-url" content="https://192.168.1.4">
      <meta id="atlassian-token" name="atlassian-token" content="d78e2b977d28428e411e31b958c9c502c2425083">
      <script id="frontend-js-extra">var hashform_vars = {"ajaxurl":"\/wp-admin\/admin-ajax.php","ajax_nounce":"d78e2b97","preview_img":""};</script>
      <div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>
      <B>SonicWall Universal Management Suite v9.3</B>
      <br>OK<br>
      <script type="text/javascript">var csrfMagicToken = "sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646";var csrfMagicName = "__vtrftk";</script>
      <select id="cars" name="name">
      <option value="olvo">olvo</option>
      </select>
      <a href="/VICIdial/phone">MODIFY</a>
      <input type="hidden" name="extension"  value="1804289383" >
      <input type="hidden" name="pass"  value="1804289383" >
      <input type="hidden" name="recording_exten"  value="1804289383" >
      <script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>
      <input type='hidden' name='LDCSA_CSRF' value="sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985" />
      <script type='text/javascript'>
      	var cactiVersion='1.2.27';
      	var cactiServerOS='unix';
      	var cactiAction='';
      	var theme='modern';
      	var refreshIsLogout=true;
      	var refreshPage='/logout.php?action=timeout';
      	var refreshMSeconds=1440000;
      	var urlPath='/';
      	var previousPage='';
      	var sessionMessage=[];
      	var csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';
      </script>
      
      <!--
      <Username Level="40/40" Dispatch="account">admin</Username><User1><Password Level="40/40" Dispatch="account">admin</Password></User1>
      /var/pinglog
      <TITLE>Login</TITLE>
      <a href="jpg.html">LIVE JPEG</a><br>
      <a href="liveie.html">Internet Monitor (Microsoft Internet Explorer 8, 9, 10, 11) </a><br>
      <a href="DVRRemoteAP.exe">Download 32 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>
      <a href="DVRRemoteAP_X64.exe">Download 64 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>
      <a href="DVFPlayer.zip">Download 32/64 bits File Player (Windows 7, Windows 8, Windows 10)</a><br>
      <\?xml version="1.0" encoding="utf-8"?><base64Binary xmlns="http://micros-hosting.com/EGateway/">
      Location: /admin
      <meta name="generator" content="vBulletin 5.5.4" />
      Location: http://<ip>:80/relogin.htm?_t=3541144909
      Location: http://<ip>:80/syscmd.htm" Location: /ui/login
      /cgi-bin/webctrl.cgi?action=index_page
      PDR-M800
      function btnPing()
      <HTML><HEAD><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>.The document has moved<A HREF="http://<ip>:80/relogin.htm?_t=179439949">here</A></BODY></HTML>
      <link type="image/x-icon" rel="shortcut icon" href="/themes/img/icon/cisco_shortcut.png">
      <link type="image/x-icon" rel="shortcut icon" href="/themes/img/icon/cisco_logo.png">
      <td class="Copyright" colspan="2" style="text-align:justify" height="20" valign="bottom">© 2017 Cisco Systems, Inc. All Rights Reserved.
      <br>Cisco, Cisco Systems, and the Cisco Systems logo are registered
      trademarks or trademarks of Cisco Systems, Inc. and/or it's affiliates
      in the United States and certain other countries.
      </td>
      :
      #
      >
      $
      SSH key is good
      is not a valid ref and may not be archived
      pcPassword2
      '&sessionKey=790148060;'
      name="sessionKey" value="790148060"
      Set-Cookie: loginName=admin
      var fgt_lang = /dev/cmdb/sslvpn_websession
      php 8.1.0-dev exit
      springframework
      Tomcat
      DEVICE.ACCOUNT=admin
      AUTHORIZED_GROUP=1
      <uid></uid>
      <name>Admin</name>
      <usrid></usrid>
      <password>admin</password>
      <group></group>
      cpto /tmp/"root"
      Model=AC1450
      Firmware=V1.0.0.36_10.0.17
      "exceptionMessageValue":"javax.servlet.ServletException: No valid forensics analysis solrDocIds parameter found."
      BIG-IP release 15.0.0
      user:root
      12345admin123'
      Failed to process image
      
      Location: http://192.168.0.1:52869/picsdesc.xml
      You don't have permission to access /vpns/ on this server.
      [global]
          workgroup = intranet
          encrypt passwords = Yes
          update encrypted = Yes
      
      funcionando
      system_sofia
      name resolve order
      InfoOS:Linux node01 uid=0(root) gid=0(root) groups=0(root)OSInfo
      <b>File Uploaded !!!</b><br>
      ant=951d11e51392117311602d0c25435d7f
      38ee63071a04dc5e04ed22624c38e648
      6f3249aa304055d63828af3bfab778f6
      <h1> c80fc6428eb4fe4a3b77898ebf9f3945 </h1>
      [local]
       tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZTJmYWMyM2UwZT09
       addr = <ip>
      "Powered by vBulletin Version 5.5.4"
      789551
      Linear eMerge
      SuperSign
      ubiq
      Yacht
      Zeroshell
      FastWeb
      AuthInfo:
      loadingIndicator_bk
      Zyxel
      skyrouter
      WAP54
      org.apache.spark.ui
      
      
      
      ID: "00af", version: "7.7.31.1", AddItem: function (a, item, c) {}
      <insert implant configuration content here>
      Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws://<ip> ws://<ip>:443 wss://<ip> wss://<ip>:8443 http://<ip>/api
      Copyright (c) 2015-2020 by Cisco Systems, Inc.
      All rights reserved.
      SSL VPN Service
      wsConvertPptResponse
      <input id="txtUserName" class="txt-input" type="text" name="userName" value="" />
      <input id="txtPassword" class="txt-input" type="password" name="password" value="" />
      <button id="btnLogin" lc="html" lk="IDCS_LOGIN_NBSP">
      <span lc="html" lk="IDCS_BS_PLUGIN_DOWNLOAD" style="line-height: 30px; vertical-align: top;"></span>
      <script src="../Scripts/login.htm.js?v={JS_CSS_V}" type="text/javascript"></script>
      <LegacyDN>eD2bxe4</LegacyDN>
      <title class="_ctxstxt_NetscalerGateway">
      SAML Assertion verification failed; Please contact your administrator
      v=2b46554c087d2d5516559e9b8bc1875d
      /vpn/images/AccessGateway.ico
      frame-busting
      /vpn/js/logout_view.js?v=
      _ctxstxt_NetscalerAAA
      lib.min20200813.js
      401 Unauthorized Basic realm=
      sName='1';onTest(this);
      var passadm = "admin";
      OPMODE_BRIDGE
      document.all.cmd_result
      <input id="key" type="text" style="width: 200px" value="02108CB9-2200D5A4">
      <input id="date" type="text" style="width: 200px" value="12/25/2023">
      main page cgi-bin/login.cgi
      var sessionKey='030ff030ff88';
      loc += '&sessionKey=19dec20030ff8dcb2';
      }
      
      var code = 'location="' + loc + '"';
      
      Password change successful
      J2100N GPON ONT
      /cgi-bin/webui/admin
      sesskey
      name=admin pass=123 priv=ppp
      service=www.dlinkddns.com
      sysCmdType
      Content-Type: auth/request
      
      
      Content-Type: command/reply
      
      Reply-Text: +OK accepted
      
      
      X-Content-Powered-By: K2 v2.8.0 (by JoomlaWorks)
      007b2000-007c1000 rw-p 00000000 00:00 0
      Size:                 60 kB
      Rss:                  52 kB
      Pss:                  52 kB
      Shared_Clean:          0 kB
      Shared_Dirty:          0 kB
      Private_Clean:         0 kB
      Private_Dirty:        52 kB
      Refe
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:16:51.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "drupal.org",
                  "micros-hosting.com"
               ],
               "file" : [
                  "dvrremoteap_x64.exe",
                  "dvfplayer.zip",
                  "admin-ajax.php",
                  "index.php",
                  "dvrremoteap.exe",
                  "cloud_index.php"
               ],
               "hostname" : [
                  "micros-hosting.com",
                  "www.drupal.org"
               ],
               "ip" : [
                  "192.168.1.1",
                  "192.168.0.1",
                  "192.168.1.4",
                  "1.0.0.36",
                  "7.7.31.1",
                  "192.168.1.10"
               ],
               "url" : [
                  "http://192.168.0.1:52869/picsdesc.xml",
                  "http://micros-hosting.com/EGateway/",
                  "https://192.168.1.4",
                  "https://www.drupal.org"
               ]
            },
            "favicon" : {
               "image" : "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",
               "imagemd5" : "2981503b195488ac17d05dcf18615cd1",
               "imagemmh3" : -1439222863,
               "length" : 1150,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "0b6a5a6f9eb992cd08e7f4db28885c74",
               "bodymmh3" : -231135512,
               "component" : [
                  {
                     "productvendor" : "Roundcube",
                     "product" : "Webmail"
                  },
                  {
                     "productvendor" : "Gitlab",
                     "product" : "Gitlab"
                  },
                  {
                     "productvendor" : "Drupal",
                     "productversion" : "8",
                     "product" : "Drupal"
                  },
                  {
                     "productversion" : "4.1.11",
                     "productvendor" : "SPIP",
                     "product" : "SPIP"
                  },
                  {
                     "product" : "Core",
                     "productvendor" : "MobileIron"
                  },
                  {
                     "productvendor" : "Jenkins",
                     "productversion" : "2.121.3",
                     "product" : "Jenkins"
                  },
                  {
                     "product" : "Confluence",
                     "productvendor" : "Atlassian"
                  },
                  {
                     "productvendor" : "Oracle",
                     "product" : "Java"
                  },
                  {
                     "product" : "PHP",
                     "productversion" : "5.6.40",
                     "productvendor" : "PHP"
                  }
               ],
               "copyright" : "www.linknat.com, \u6606\u77f3\u7f51\u7edc",
               "header" : [
                  {
                     "value" : "Fri, 29 Jul 2022 16:53:01 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "38c49bbcc845080178b7c529aa1b2881",
               "headermmh3" : 298970101,
               "keywords" : [
                  "voip",
                  "vos3000"
               ],
               "realm" : "Tinyproxy",
               "title" : "Newsletter - Daily deals and offers"
            },
            "length" : 16316
         },
         "asn" : "AS45102",
         "city" : "London",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 401 Unauthorized\r\nComposed-By: SPIP 4.1.11 @ www.spip.net\r\nContent-Length: 105732\r\nContent-Type: text/html;charset=utf-8\r\nLast-Modified: Fri, 29 Jul 2022 16:53:01 GMT\r\nLoginip: <srcip>\r\nPragma: private\r\nProxy-Authenticate: Basic realm=\"Tinyproxy\"\r\nServer: Asterisk/13.13.1\r\nSet-Cookie: akaunting_session=7b22; Path=/;\r\nSet-Cookie: id=A67B8F9C;\r\nSet-Cookie: acSamlv2Error=; path=/; secure;\r\nSet-Cookie: PHPSESSID=n91i168jps8rd856bcrln2isqe; path=/\r\nSet-Cookie: __s_sessionid__=hh5rq45u9srt079v063jkb8c13; path=/\r\nSet-Cookie: grafana_session_expiry=1990089920; Path=/; Max-Age=2592000; SameSite=Lax\r\nSet-Cookie: roundcube_sessauth=expired; HttpOnly; domain=cpanel.custompoodles.com; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095\r\nSet-Cookie: fsm_u=admin; Path=/;\r\nSet-Cookie: fsm_login=37dfe4372f3867d7c134d618cbef137b; Path=/;\r\nSet-Cookie: grafana_session=f7fbcb089c6994b7bc45775fdae1a13c; Path=/; Max-Age=2592000; HttpOnly; Secure; SameSite=Lax\r\nSet-Cookie: UICSESSION=qqhhk66ogtvugchmqfov0j4l96; path=/;\r\nSet-Cookie: jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c; path=/\r\nSet-Cookie: csrftoken=Pt1Guz0uK8QPbP3EV8zBKcxaRaxgrZUPbjZeCK50MLR00VR7THTsnwRPH0otS1lS; Path=/; SameSite=Lax;HttpOnly;Secure;SameSite=Strict; Strict-Transport-Security: max-age=63072000; includeSubDomains\r\nSet-Cookie: JSESSIONID=818E3539F13611E2EA4D5BFB48AE058C.jvml; Path=/mifs; OFBiz.Visitor=10004; Secure; HttpOnly;SameSite=lax;\r\nSet-Cookie: session820/qualitor820=2ek44merar6fo67l01hdr09u0l; path=/; HttpOnly; SameSite=Lax\r\nSet-Cookie: webvpn_as=; path=/; secure;\r\nSet-Cookie: SID=hBc7TxF76ERhvIw0jQQ4LZ7Z1jQUV0tQ; path=/;\r\nSet-Cookie: webvpn=A9790AFEACDEFA01FAAEAFEWFF390AE; path=/; secure;\r\nVia: 1.1 51766bfb56389c696c1525db90e16f23.cloudfront.net (CloudFront)\r\nWww-Authenticate: Basic realm=\"RT-N2UyNjgx\"\r\nX-Amz-Cf-Id: CtsEH7KQ5yf2LQM4TNLiEjUavO2mWjwAez9sPj8Ws5MUdPUz2A==\r\nX-Backside-Transport: FAIL FAIL\r\nX-Cache: MISS from Hello\r\nX-Cache-Lookup: MISS from Hello:8080\r\nX-Citrix-Application: Receiver for Web\r\nX-Content-Powered-By: K2 v2.8.0 (by JoomlaWor\r\nX-Content-Type-Options: nosniff\r\nX-Contextid: YQo=\r\nX-Drupal-Cache: xHIT\r\nX-Drupal-Dynamic-Cache: MISS\r\nX-Frame-Options: SAMEORIGIN\r\nX-Generator: Drupal 8 (https://www.drupal.org)\r\nX-Jenkins: 2.121.3\r\nX-Jenkins-Session: f72d6619\r\nX-Litespeed-Cache: hit\r\nX-Powered-By: PHP/5.6.40\r\nX-Proxy-Cache: MISS\r\nX-Shardid: 80\r\nX-Sorting-Hat-Podid: 80\r\nX-Varnish-Cache: Miss\r\nX-Xss-Protection: 1; mode=block\r\nDate: Thu, 07 Nov 2024 00:50:47 GMT\r\nConnection: close\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<meta http-equiv=\"Pragma\" content=\"no-cache\" />\n<meta charset=\"utf-8\">\n<meta content=\"IE=edge\" http-equiv=\"X-UA-Compatible\">\n<meta content=\"object\" property=\"og:type\">\n<meta content=\"GitLab\" property=\"og:site_name\">\n<meta content=\"Help\" property=\"og:title\">\n<meta content=\"GitLab Community Edition\" property=\"og:description\">\n<meta content=\"summary\" property=\"twitter:card\">\n<meta content=\"Help\" property=\"twitter:title\">\n<meta content=\"GitLab Community Edition\" property=\"twitter:description\">\n<meta content=\"GitLab Community Edition\" name=\"description\">\n<meta content=\"#474D57\" name=\"theme-color\">\n<meta content=\"#30353E\" name=\"msapplication-TileColor\">\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384e2fac23e0e==\" />\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>\n<meta http-equiv=\"expires\" content=\"-1\"/>\n<meta name=\"keywords\" content=\"VOS3000, VoIP, VoIP\u8fd0\u8425\u652f\u6491\u7cfb\u7edf, \u8f6f\u4ea4\u6362\"/>\n<meta name=\"author\" content=\"www.linknat.com, \u6606\u77f3\u7f51\u7edc\"/>\n<meta name=\"copyright\" content=\"www.linknat.com, \u6606\u77f3\u7f51\u7edc\"/>\n<meta name=\"generator\" content=\"SPIP 4.1.11\" />\n<script src=\"/jquery.min.js\"></script> \n<title>Newsletter - Daily deals and offers</title>\n</head>\n<body>\n<div style=\"display: none;\">\n<script>SC.util.mergeIntoContext({\"focusedControlID\":null,\"userName\":\"\",\"userDisplayName\":\"\",\"isUserAuthenticated\":false,\"antiForgeryToken\":\"THtoAUxH4sS9\",\"isUserAdministrator\":false,\"canManageSharedToolbox\":false,\"pageBaseFileName\":\"Guest\",\"notifyActivityFrequencyMilliseconds\":600000,\"loginAfterInactivityMilliseconds\":36000000,\"canChangePassword\":false,\"controlPanelUrl\":null,\"pageType\":\"GuestPage\",\"processType\":2,\"userAgentOverride\":null,\"sessionTypeInfos\":[]});</script>\n<SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last=\"1\">fritzr</User></Users></SessionInfo>\n<Account>\n<Entry0 Active=\"Yes\" username=\"CMCCAdmin\" web_passwd=\"CmcC4dm1n5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry1 Active=\"Yes\" username=\"useradmin\" web_passwd=\"Gu4ngx1pd5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry2 Active=\"Yes\" username=\"CUAdmin\"   web_passwd=\"CUAdmin5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<TelnetEntry Active=\"Yes\" telnet_username=\"Admin\" telnet_passwd=\"cxx4dm1n5591\" telnet_port=\"23\"/>\n<FtpEntry Active=\"Yes\" ftp_right=\"1\" ftp_auth=\"1\" ftp_username=\"Admin\" ftp_passwd=\"cxx4dm1n5591\" ftp_port=\"21\" />\n<SambaEntry Active=\"Yes\" smb_right=\"1\" smb_auth=\"1\" smb_username=\"Admin\" smb_passwd=\"cxx4dm1n5591\" />\n<ConsoleEntry Active=\"Yes\" console_username=\"Admin\" console_passwd=\"cxx4dm1n5591\"/>\n<CTDefParaEntry setDefValueFlag=\"1\" />\n</Account>\n<div>8.5.5 (Build:20200530.307-TEMP)</div>\n<span class=\"greyNote version\"><span class=\"vWord\">Version</span> 2023.11.3 (build 147512)</span>\n<h1>Logged in as <strong>admin</strong></h1><input type=\"hidden\" name=\"csrfmiddlewaretoken\" value=\"e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y\"><textarea id=\"3revi\" name=\"revi\" rows=\"4\" cols=\"50\">server1 Ubuntu 22.04 LTS</textarea>\n<ca status=\"disabled\" href=\"/+CSCOCA+/login.html\" />\n<form action=\"/login/vpnSdef\" enctype=\"multipart/form-data\" method=\"post\" name=\"login\">\n    <div data-user=\"root\" data-module=\"package-updates\"></div>\n    <code>The zip file did not contain an entry exportDescriptor.properties</code>\n    <span class=\"form-hidden\"><input name=\"page\" value=\"login\" type=\"hidden\"/><input name=\"formulaire_action\" type=\"hidden\" value=\"login\" /><input name=\"formulaire_action_args\" type=\"hidden\" value=\"dzdNV0MzUGFDV0NHemR6bWorekNEWHY=\" /><input name=\"formulaire_action_sign\" type=\"hidden\" value=\"\" /></span>\n    <message>Please enter your username and password.</message>\n    <input name=\"formid\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"javax.faces.ViewState\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"queryString\" type=\"hidden\" value=\"1406192\" />\n    <div class=\"versionInfo\">The Cacti Group Version 1.2.25</div>\n    <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>\n    <input type=\"hidden\" name=\"token\" value=\"0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec\">\n    <input type='hidden' name='__csrf_magic' value=\"key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654\" />\n    <input type=\"hidden\" name=\"tokenid\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"name\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"csrfKey\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"hidden\" name=\"csrf_token\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" name=\"ref\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"username_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"password_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"csrf\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"xd_check\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"give-form-id\" name=\"give-form-id\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" id=\"give-form-hash\" name=\"give-form-hash\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"text\" name=\"username\" label=\"Username:\" value=\"admin\" />\n    <input type=\"password\" name=\"password\" label=\"Password:\" value=\"123456\" />\n    <input type=\"hidden\" name=\"tgroup\" value=\"DefaultADMINGroup\" />\n    <input type=\"submit\" name=\"Login\" value=\"Login\" />\n    <input type=\"reset\" name=\"Clear\" value=\"Clear\" />\n</form>\n<input type=\"hidden\" value=\"Maintain/cloud_index.php\" id=\"cloud_addr\">\n<li class=\"lisel\" onclick=\"location.href='index.php'\">\u65e5\u5fd7\u7cfb\u7edf</li>\n<li class=\"linormal\" onclick=\"location.href='Maintain/cloud_index.php'\" style=\"margin-left:1px;\">\u4e91\u5e73\u53f0</li>\n<button type=\"button\" data-price-id=True>sb</button>\n<div class=\"prod_madelName\">RT-AC5300</div>\n<div class=\"p1 title_gap\">Sign in with your ASUS router account</div>\n<tr class=\"h\"><th>PHP Group</th></tr>\n<tr><td class=\"e\">upload_tmp_dir</td><td class=\"v\">/etc/httpd/_tmp</td><td class=\"v\">/etc/httpd/_tmp</td></tr>\n<tr><td class=\"e\">$_SERVER['DOCUMENT_ROOT']</td><td class=\"v\">/mnt/HDD2/web/</td></tr>\n<var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>\n<span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>\n<div class=\"text\" id=\"jive-loginVersion\"> Openfire, Version: 3.6.0a</div>\n<a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>\n<div id=\"mcname\">LoadMaster</div>\n<p><br/><span>\u51fa\u5382IP\uff1a192.168.1.1</span><br/><span>\u7528\u6237\u540d\u3001\u5bc6\u7801\uff1aadmin admin</span></p>\n<td colspan=\"2\">Please enter your Cacti user name and password below:</td>\n<meta id=\"confluence-context-path\" name=\"confluence-context-path\" content=\"\">\n<meta id=\"confluence-base-url\" name=\"confluence-base-url\" content=\"https://192.168.1.4\">\n<meta id=\"atlassian-token\" name=\"atlassian-token\" content=\"d78e2b977d28428e411e31b958c9c502c2425083\">\n<script id=\"frontend-js-extra\">var hashform_vars = {\"ajaxurl\":\"\\/wp-admin\\/admin-ajax.php\",\"ajax_nounce\":\"d78e2b97\",\"preview_img\":\"\"};</script>\n<div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>\n<B>SonicWall Universal Management Suite v9.3</B>\n<br>OK<br>\n<script type=\"text/javascript\">var csrfMagicToken = \"sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646\";var csrfMagicName = \"__vtrftk\";</script>\n<select id=\"cars\" name=\"name\">\n<option value=\"olvo\">olvo</option>\n</select>\n<a href=\"/VICIdial/phone\">MODIFY</a>\n<input type=\"hidden\" name=\"extension\"  value=\"1804289383\" >\n<input type=\"hidden\" name=\"pass\"  value=\"1804289383\" >\n<input type=\"hidden\" name=\"recording_exten\"  value=\"1804289383\" >\n<script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>\n<input type='hidden' name='LDCSA_CSRF' value=\"sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985\" />\n<script type='text/javascript'>\n\tvar cactiVersion='1.2.27';\n\tvar cactiServerOS='unix';\n\tvar cactiAction='';\n\tvar theme='modern';\n\tvar refreshIsLogout=true;\n\tvar refreshPage='/logout.php?action=timeout';\n\tvar refreshMSeconds=1440000;\n\tvar urlPath='/';\n\tvar previousPage='';\n\tvar sessionMessage=[];\n\tvar csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';\n</script>\n\n<!--\n<Username Level=\"40/40\" Dispatch=\"account\">admin</Username><User1><Password Level=\"40/40\" Dispatch=\"account\">admin</Password></User1>\n/var/pinglog\n<TITLE>Login</TITLE>\n<a href=\"jpg.html\">LIVE JPEG</a><br>\n<a href=\"liveie.html\">Internet Monitor (Microsoft Internet Explorer 8, 9, 10, 11) </a><br>\n<a href=\"DVRRemoteAP.exe\">Download 32 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>\n<a href=\"DVRRemoteAP_X64.exe\">Download 64 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>\n<a href=\"DVFPlayer.zip\">Download 32/64 bits File Player (Windows 7, Windows 8, Windows 10)</a><br>\n<\\?xml version=\"1.0\" encoding=\"utf-8\"?><base64Binary xmlns=\"http://micros-hosting.com/EGateway/\">\nLocation: /admin\n<meta name=\"generator\" content=\"vBulletin 5.5.4\" />\nLocation: http://<ip>:80/relogin.htm?_t=3541144909\nLocation: http://<ip>:80/syscmd.htm\" Location: /ui/login\n/cgi-bin/webctrl.cgi?action=index_page\nPDR-M800\nfunction btnPing()\n<HTML><HEAD><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>.The document has moved<A HREF=\"http://<ip>:80/relogin.htm?_t=179439949\">here</A></BODY></HTML>\n<link type=\"image/x-icon\" rel=\"shortcut icon\" href=\"/themes/img/icon/cisco_shortcut.png\">\n<link type=\"image/x-icon\" rel=\"shortcut icon\" href=\"/themes/img/icon/cisco_logo.png\">\n<td class=\"Copyright\" colspan=\"2\" style=\"text-align:justify\" height=\"20\" valign=\"bottom\">\u00a9 2017 Cisco Systems, Inc. All Rights Reserved.\n<br>Cisco, Cisco Systems, and the Cisco Systems logo are registered\ntrademarks or trademarks of Cisco Systems, Inc. and/or it's affiliates\nin the United States and certain other countries.\n</td>\n:\n#\n>\n$\nSSH key is good\nis not a valid ref and may not be archived\npcPassword2\n'&sessionKey=790148060;'\nname=\"sessionKey\" value=\"790148060\"\nSet-Cookie: loginName=admin\nvar fgt_lang = /dev/cmdb/sslvpn_websession\nphp 8.1.0-dev exit\nspringframework\nTomcat\nDEVICE.ACCOUNT=admin\nAUTHORIZED_GROUP=1\n<uid></uid>\n<name>Admin</name>\n<usrid></usrid>\n<password>admin</password>\n<group></group>\ncpto /tmp/\"root\"\nModel=AC1450\r\nFirmware=V1.0.0.36_10.0.17\r\n\"exceptionMessageValue\":\"javax.servlet.ServletException: No valid forensics analysis solrDocIds parameter found.\"\nBIG-IP release 15.0.0\nuser:root\n12345admin123'\nFailed to process image\n\nLocation: http://192.168.0.1:52869/picsdesc.xml\nYou don't have permission to access /vpns/ on this server.\n[global]\n    workgroup = intranet\n    encrypt passwords = Yes\n    update encrypted = Yes\n\nfuncionando\nsystem_sofia\nname resolve order\nInfoOS:Linux node01 uid=0(root) gid=0(root) groups=0(root)OSInfo\n<b>File Uploaded !!!</b><br>\nant=951d11e51392117311602d0c25435d7f\n38ee63071a04dc5e04ed22624c38e648\n6f3249aa304055d63828af3bfab778f6\n<h1> c80fc6428eb4fe4a3b77898ebf9f3945 </h1>\n[local]\n tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZTJmYWMyM2UwZT09\n addr = <ip>\n\"Powered by vBulletin Version 5.5.4\"\n789551\nLinear eMerge\nSuperSign\nubiq\nYacht\nZeroshell\nFastWeb\nAuthInfo:\nloadingIndicator_bk\nZyxel\nskyrouter\nWAP54\norg.apache.spark.ui\n\n\n\nID: \"00af\", version: \"7.7.31.1\", AddItem: function (a, item, c) {}\n<insert implant configuration content here>\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws://<ip> ws://<ip>:443 wss://<ip> wss://<ip>:8443 http://<ip>/api\nCopyright (c) 2015-2020 by Cisco Systems, Inc.\nAll rights reserved.\nSSL VPN Service\nwsConvertPptResponse\n<input id=\"txtUserName\" class=\"txt-input\" type=\"text\" name=\"userName\" value=\"\" />\n<input id=\"txtPassword\" class=\"txt-input\" type=\"password\" name=\"password\" value=\"\" />\n<button id=\"btnLogin\" lc=\"html\" lk=\"IDCS_LOGIN_NBSP\">\n<span lc=\"html\" lk=\"IDCS_BS_PLUGIN_DOWNLOAD\" style=\"line-height: 30px; vertical-align: top;\"></span>\n<script src=\"../Scripts/login.htm.js?v={JS_CSS_V}\" type=\"text/javascript\"></script>\n<LegacyDN>eD2bxe4</LegacyDN>\n<title class=\"_ctxstxt_NetscalerGateway\">\nSAML Assertion verification failed; Please contact your administrator\nv=2b46554c087d2d5516559e9b8bc1875d\n/vpn/images/AccessGateway.ico\nframe-busting\n/vpn/js/logout_view.js?v=\n_ctxstxt_NetscalerAAA\nlib.min20200813.js\n401 Unauthorized Basic realm=\nsName='1';onTest(this);\nvar passadm = \"admin\";\nOPMODE_BRIDGE\ndocument.all.cmd_result\n<input id=\"key\" type=\"text\" style=\"width: 200px\" value=\"02108CB9-2200D5A4\">\n<input id=\"date\" type=\"text\" style=\"width: 200px\" value=\"12/25/2023\">\nmain page cgi-bin/login.cgi\nvar sessionKey='030ff030ff88';\nloc += '&sessionKey=19dec20030ff8dcb2';\n}\n\nvar code = 'location=\"' + loc + '\"';\n\nPassword change successful\nJ2100N GPON ONT\n/cgi-bin/webui/admin\nsesskey\nname=admin pass=123 priv=ppp\nservice=www.dlinkddns.com\nsysCmdType\nContent-Type: auth/request\n\n\nContent-Type: command/reply\n\nReply-Text: +OK accepted\n\n\nX-Content-Powered-By: K2 v2.8.0 (by JoomlaWorks)\n007b2000-007c1000 rw-p 00000000 00:00 0\nSize:                 60 kB\nRss:                  52 kB\nPss:                  52 kB\nShared_Clean:          0 kB\nShared_Dirty:          0 kB\nPrivate_Clean:         0 kB\nPrivate_Dirty:        52 kB\nRefe",
         "datamd5" : "6614f280fb381144ced083974f320368",
         "datammh3" : 459999518,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS45102",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "GB",
            "countryname" : "United Kingdom",
            "domain" : [
               "alibaba-inc.com"
            ],
            "isineu" : "false",
            "latitude" : "55.378051",
            "location" : "55.378051,-3.435973",
            "longitude" : "-3.435973",
            "netname" : "ALICLOUD-GB",
            "organization" : "Alibaba.com Singapore E-Commerce Private Limited",
            "subnet" : "8.208.0.0/17"
         },
         "ip" : "8.208.89.32",
         "ipv6" : "false",
         "latitude" : "51.5074",
         "location" : "51.5074,-0.1196",
         "longitude" : "-0.1196",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Alibaba US Technology Co., Ltd.",
         "os" : "IOS",
         "osdistribution" : "sUse",
         "osvendor" : "Cisco",
         "port" : 53354,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Unauthorized",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 401,
         "subnet" : "8.208.0.0/17",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 36.69.139.156:53354 (tcp/http) - last seen on 2024-11-07 at 02:00:50 UTC

    • IP
      36.69.139.156
      Network
      36.69.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://36.69.139.156:53354/ 307

      ASN
      AS7713
      Organization
      PT Telekomunikasi Indonesia
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Apache HTTP Server 2.4.54
      HTTP Component(s)
      PHP PHP 7.2.9
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      642160c6e6ae4d6572bb092fb6f300cf
      HTTP Header MD5
      d8175334194fe62f0c7db76849612831
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 307 Temporary Redirect
      Date: Thu, 07 Nov 2024 02:00:50 GMT
      Server: Apache/2.4.54 (Win32) PHP/7.2.9
      X-Powered-By: PHP/7.2.9
      Set-Cookie: ci_session=sterm6pu68tgaigm9decndmml4tkg28g; expires=Thu, 07-Nov-2024 04:00:50 GMT; Max-Age=7200; path=/; HttpOnly
      Expires: Thu, 19 Nov 1981 08:52:00 GMT
      Cache-Control: no-store, no-cache, must-revalidate
      Pragma: no-cache
      Location: http://<ip>:53354/login
      Content-Length: 0
      Connection: close
      Content-Type: text/html; charset=UTF-8
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:00:50.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1636538602,
               "component" : [
                  {
                     "product" : "PHP",
                     "productversion" : "7.2.9",
                     "productvendor" : "PHP"
                  }
               ],
               "headermd5" : "d8175334194fe62f0c7db76849612831",
               "headermmh3" : 1533982903
            },
            "length" : 489
         },
         "asn" : "AS7713",
         "city" : "Bandung",
         "country" : "ID",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 307 Temporary Redirect\r\nDate: Thu, 07 Nov 2024 02:00:50 GMT\r\nServer: Apache/2.4.54 (Win32) PHP/7.2.9\r\nX-Powered-By: PHP/7.2.9\r\nSet-Cookie: ci_session=sterm6pu68tgaigm9decndmml4tkg28g; expires=Thu, 07-Nov-2024 04:00:50 GMT; Max-Age=7200; path=/; HttpOnly\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nLocation: http://<ip>:53354/login\r\nContent-Length: 0\r\nConnection: close\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n",
         "datamd5" : "642160c6e6ae4d6572bb092fb6f300cf",
         "datammh3" : -575217175,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17974",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "ID",
            "countryname" : "Indonesia",
            "domain" : [
               "telkom.co.id",
               "telkom.net.id"
            ],
            "isineu" : "false",
            "latitude" : "-0.789275",
            "location" : "-0.789275,113.921327",
            "longitude" : "113.921327",
            "netname" : "TLKM_BB_SERVICE_36_69_DIVRE1-2",
            "organization" : "PT. Telekomunikasi Indonesia",
            "subnet" : "36.69.128.0/20"
         },
         "ip" : "36.69.139.156",
         "ipv6" : "false",
         "latitude" : "-6.9217",
         "location" : "-6.9217,107.6071",
         "longitude" : "107.6071",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "PT Telekomunikasi Indonesia",
         "os" : "Windows",
         "osbits" : 32,
         "osvendor" : "Microsoft",
         "port" : 53354,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "productversion" : "2.4.54",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Temporary Redirect",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 307,
         "subnet" : "36.69.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 112.197.1.48:53354 (tcp/http) - last seen on 2024-11-07 at 01:35:21 UTC

    • IP
      112.197.1.48
      Network
      112.197.0.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Debian
      URL

      http://112.197.1.48:53354/ 200

      HTTP Title
      Giam sat
      ASN
      AS45543
      Organization
      SaiGon Tourist cable Televition Company
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Debian
      Product
      Apache HTTP Server 2.2.22
      HTTP Component(s)
      PHP PHP 5.4.45
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8fe8f07d7f0029cbf82156cf418b0d77
      HTTP Header MD5
      6e0ca5df00f967d606f790ddc8ebefb0
      HTTP Body MD5
      925ac0f86779b58030f658b862f9c5a5
    • HTTP/1.1 200 OK
      Date: Thu, 07 Nov 2024 01:35:21 GMT
      Server: Apache/2.2.22 (Debian)
      X-Powered-By: PHP/5.4.45-0+deb7u14
      Vary: Accept-Encoding
      Connection: close
      Transfer-Encoding: chunked
      Content-Type: text/html
      
      452
      <html>
      <head>
      <title>Giam sat</title>
      <meta content="text/html;charset=utf-8" http-equiv="Content-Type">
      <style>
      body
      {
      	background-image:url('images_gs/1images.jpeg');
      }
      
      </style>
      </head>
      <body>
      
      <div style="background:blue">
      </div>
      <table border="0" align="center" width="80%" height="100%" cellpadding="0" cellspacing="0">
      <tr>
       <td colspan = "4"> 
       <center>
      
      </center>
      </td>
      </tr>
      <tr>
      <td align="center"><a  href="http://giamsat.sctv.net.vn/cacti" title = "View Cacti"><img  src="images_gs/Cacti.png" ></a></td>
      <td align="center"><a  href="http://giamsat.sctv.net.vn/realtime" title = "View Realtime"><img  src="images_gs/Realtime.png"></a></td>
      <!-- This is a comment 
      <td align="center"><a  href="http://giamsat.sctv.net.vn/cable" title = "View Cable Modem"><img  src="images_gs/Coship.png"></a></td>
      -->
      <td align="center"><a  href="http://tac.sctv.com.vn" title = "TAC-Techincal Assistance Center"><img  src="images_gs/tac.png" ></a></td>
      <td align="center"><a  href="http://speedtest.sctv.com.vn" title = "Speedtest"><img  src="images_gs/speedtest.png" ></a></td>
      </tr>
      </table>
      
      </body>
      </html>
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T01:35:21.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "sctv.net.vn",
                  "sctv.com.vn"
               ],
               "hostname" : [
                  "giamsat.sctv.net.vn",
                  "speedtest.sctv.com.vn",
                  "tac.sctv.com.vn"
               ],
               "url" : [
                  "http://giamsat.sctv.net.vn/cable",
                  "http://giamsat.sctv.net.vn/cacti",
                  "http://giamsat.sctv.net.vn/realtime",
                  "http://speedtest.sctv.com.vn",
                  "http://tac.sctv.com.vn"
               ]
            },
            "http" : {
               "bodymd5" : "925ac0f86779b58030f658b862f9c5a5",
               "bodymmh3" : -1466576868,
               "component" : [
                  {
                     "productversion" : "5.4.45",
                     "productvendor" : "PHP",
                     "product" : "PHP"
                  }
               ],
               "headermd5" : "6e0ca5df00f967d606f790ddc8ebefb0",
               "headermmh3" : 2112072042,
               "title" : "Giam sat"
            },
            "length" : 1337
         },
         "asn" : "AS45543",
         "city" : "Ho Chi Minh City",
         "country" : "VN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 07 Nov 2024 01:35:21 GMT\r\nServer: Apache/2.2.22 (Debian)\r\nX-Powered-By: PHP/5.4.45-0+deb7u14\r\nVary: Accept-Encoding\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html\r\n\r\n452\r\n<html>\n<head>\n<title>Giam sat</title>\n<meta content=\"text/html;charset=utf-8\" http-equiv=\"Content-Type\">\n<style>\nbody\n{\n\tbackground-image:url('images_gs/1images.jpeg');\n}\n\n</style>\n</head>\n<body>\n\n<div style=\"background:blue\">\n</div>\n<table border=\"0\" align=\"center\" width=\"80%\" height=\"100%\" cellpadding=\"0\" cellspacing=\"0\">\n<tr>\n <td colspan = \"4\"> \n <center>\n\n</center>\n</td>\n</tr>\n<tr>\n<td align=\"center\"><a  href=\"http://giamsat.sctv.net.vn/cacti\" title = \"View Cacti\"><img  src=\"images_gs/Cacti.png\" ></a></td>\n<td align=\"center\"><a  href=\"http://giamsat.sctv.net.vn/realtime\" title = \"View Realtime\"><img  src=\"images_gs/Realtime.png\"></a></td>\n<!-- This is a comment \n<td align=\"center\"><a  href=\"http://giamsat.sctv.net.vn/cable\" title = \"View Cable Modem\"><img  src=\"images_gs/Coship.png\"></a></td>\n-->\n<td align=\"center\"><a  href=\"http://tac.sctv.com.vn\" title = \"TAC-Techincal Assistance Center\"><img  src=\"images_gs/tac.png\" ></a></td>\n<td align=\"center\"><a  href=\"http://speedtest.sctv.com.vn\" title = \"Speedtest\"><img  src=\"images_gs/speedtest.png\" ></a></td>\n</tr>\n</table>\n\n</body>\n</html>\r\n0\r\n\r\n",
         "datamd5" : "8fe8f07d7f0029cbf82156cf418b0d77",
         "datammh3" : 1603904895,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS45543",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "VN",
            "countryname" : "Vietnam",
            "domain" : [
               "sctv.com.vn",
               "vnnic.vn"
            ],
            "isineu" : "false",
            "latitude" : "14.058324",
            "location" : "14.058324,108.277199",
            "longitude" : "108.277199",
            "netname" : "SCTV-VN",
            "organization" : "SCTV-VN",
            "subnet" : "112.197.0.0/22"
         },
         "ip" : "112.197.1.48",
         "ipv6" : "false",
         "latitude" : "10.8220",
         "location" : "10.8220,106.6257",
         "longitude" : "106.6257",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SaiGon Tourist cable Televition Company",
         "os" : "Linux",
         "osdistribution" : "Debian",
         "osvendor" : "Linux",
         "port" : 53354,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "productversion" : "2.2.22",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "112.197.0.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 8.208.89.32:53354 (tcp/http) - last seen on 2024-11-07 at 00:50:47 UTC

    • IP
      8.208.89.32
      Network
      8.208.0.0/17
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS sUse
      URL

      http://8.208.89.32:53354/ 401

      HTTP Title
      Newsletter - Daily deals and offers
      HTTP Keyword(s)
      voip vos3000
      HTTP Copyright
      www.linknat.com, 昆石网络
      ASN
      AS45102
      Organization
      Alibaba US Technology Co., Ltd.
      Protocol
      http
      Source
      datascan
    • Operating System
      Cisco IOS sUse
      Product
      Cisco WebVPN
      HTTP Component(s)
      Gitlab Gitlab Drupal Drupal 8 SPIP SPIP 4.1.11 Jenkins Jenkins 2.121.3 Roundcube Webmail Oracle Java MobileIron Core PHP PHP 5.6.40 Atlassian Confluence
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6614f280fb381144ced083974f320368
      HTTP Header MD5
      38c49bbcc845080178b7c529aa1b2881
      HTTP Body MD5
      97fe295beaaab7e08da7d4a3da4a66ce
    • HTTP/1.1 401 Unauthorized
      Composed-By: SPIP 4.1.11 @ www.spip.net
      Content-Length: 105732
      Content-Type: text/html;charset=utf-8
      Last-Modified: Fri, 29 Jul 2022 16:53:01 GMT
      Loginip: <srcip>
      Pragma: private
      Proxy-Authenticate: Basic realm="Tinyproxy"
      Server: Asterisk/13.13.1
      Set-Cookie: akaunting_session=7b22; Path=/;
      Set-Cookie: id=A67B8F9C;
      Set-Cookie: acSamlv2Error=; path=/; secure;
      Set-Cookie: PHPSESSID=n91i168jps8rd856bcrln2isqe; path=/
      Set-Cookie: __s_sessionid__=hh5rq45u9srt079v063jkb8c13; path=/
      Set-Cookie: grafana_session_expiry=1990089920; Path=/; Max-Age=2592000; SameSite=Lax
      Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=cpanel.custompoodles.com; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
      Set-Cookie: fsm_u=admin; Path=/;
      Set-Cookie: fsm_login=37dfe4372f3867d7c134d618cbef137b; Path=/;
      Set-Cookie: grafana_session=f7fbcb089c6994b7bc45775fdae1a13c; Path=/; Max-Age=2592000; HttpOnly; Secure; SameSite=Lax
      Set-Cookie: UICSESSION=qqhhk66ogtvugchmqfov0j4l96; path=/;
      Set-Cookie: jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c; path=/
      Set-Cookie: csrftoken=Pt1Guz0uK8QPbP3EV8zBKcxaRaxgrZUPbjZeCK50MLR00VR7THTsnwRPH0otS1lS; Path=/; SameSite=Lax;HttpOnly;Secure;SameSite=Strict; Strict-Transport-Security: max-age=63072000; includeSubDomains
      Set-Cookie: JSESSIONID=818E3539F13611E2EA4D5BFB48AE058C.jvml; Path=/mifs; OFBiz.Visitor=10004; Secure; HttpOnly;SameSite=lax;
      Set-Cookie: session820/qualitor820=2ek44merar6fo67l01hdr09u0l; path=/; HttpOnly; SameSite=Lax
      Set-Cookie: webvpn_as=; path=/; secure;
      Set-Cookie: SID=hBc7TxF76ERhvIw0jQQ4LZ7Z1jQUV0tQ; path=/;
      Set-Cookie: webvpn=A9790AFEACDEFA01FAAEAFEWFF390AE; path=/; secure;
      Via: 1.1 51766bfb56389c696c1525db90e16f23.cloudfront.net (CloudFront)
      Www-Authenticate: Basic realm="RT-N2UyNjgx"
      X-Amz-Cf-Id: CtsEH7KQ5yf2LQM4TNLiEjUavO2mWjwAez9sPj8Ws5MUdPUz2A==
      X-Backside-Transport: FAIL FAIL
      X-Cache: MISS from Hello
      X-Cache-Lookup: MISS from Hello:8080
      X-Citrix-Application: Receiver for Web
      X-Content-Powered-By: K2 v2.8.0 (by JoomlaWor
      X-Content-Type-Options: nosniff
      X-Contextid: YQo=
      X-Drupal-Cache: xHIT
      X-Drupal-Dynamic-Cache: MISS
      X-Frame-Options: SAMEORIGIN
      X-Generator: Drupal 8 (https://www.drupal.org)
      X-Jenkins: 2.121.3
      X-Jenkins-Session: f72d6619
      X-Litespeed-Cache: hit
      X-Powered-By: PHP/5.6.40
      X-Proxy-Cache: MISS
      X-Shardid: 80
      X-Sorting-Hat-Podid: 80
      X-Varnish-Cache: Miss
      X-Xss-Protection: 1; mode=block
      Date: Thu, 07 Nov 2024 00:50:47 GMT
      Connection: close
      
      <!DOCTYPE html>
      <html>
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <meta http-equiv="Pragma" content="no-cache" />
      <meta charset="utf-8">
      <meta content="IE=edge" http-equiv="X-UA-Compatible">
      <meta content="object" property="og:type">
      <meta content="GitLab" property="og:site_name">
      <meta content="Help" property="og:title">
      <meta content="GitLab Community Edition" property="og:description">
      <meta content="summary" property="twitter:card">
      <meta content="Help" property="twitter:title">
      <meta content="GitLab Community Edition" property="twitter:description">
      <meta content="GitLab Community Edition" name="description">
      <meta content="#474D57" name="theme-color">
      <meta content="#30353E" name="msapplication-TileColor">
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384e2fac23e0e==" />
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
      <meta http-equiv="expires" content="-1"/>
      <meta name="keywords" content="VOS3000, VoIP, VoIP运营支撑系统, 软交换"/>
      <meta name="author" content="www.linknat.com, 昆石网络"/>
      <meta name="copyright" content="www.linknat.com, 昆石网络"/>
      <meta name="generator" content="SPIP 4.1.11" />
      <script src="/jquery.min.js"></script> 
      <title>Newsletter - Daily deals and offers</title>
      </head>
      <body>
      <div style="display: none;">
      <script>SC.util.mergeIntoContext({"focusedControlID":null,"userName":"","userDisplayName":"","isUserAuthenticated":false,"antiForgeryToken":"THtoAUxH4sS9","isUserAdministrator":false,"canManageSharedToolbox":false,"pageBaseFileName":"Guest","notifyActivityFrequencyMilliseconds":600000,"loginAfterInactivityMilliseconds":36000000,"canChangePassword":false,"controlPanelUrl":null,"pageType":"GuestPage","processType":2,"userAgentOverride":null,"sessionTypeInfos":[]});</script>
      <SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last="1">fritzr</User></Users></SessionInfo>
      <Account>
      <Entry0 Active="Yes" username="CMCCAdmin" web_passwd="CmcC4dm1n5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <Entry1 Active="Yes" username="useradmin" web_passwd="Gu4ngx1pd5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <Entry2 Active="Yes" username="CUAdmin"   web_passwd="CUAdmin5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <TelnetEntry Active="Yes" telnet_username="Admin" telnet_passwd="cxx4dm1n5591" telnet_port="23"/>
      <FtpEntry Active="Yes" ftp_right="1" ftp_auth="1" ftp_username="Admin" ftp_passwd="cxx4dm1n5591" ftp_port="21" />
      <SambaEntry Active="Yes" smb_right="1" smb_auth="1" smb_username="Admin" smb_passwd="cxx4dm1n5591" />
      <ConsoleEntry Active="Yes" console_username="Admin" console_passwd="cxx4dm1n5591"/>
      <CTDefParaEntry setDefValueFlag="1" />
      </Account>
      <div>8.5.5 (Build:20200530.307-TEMP)</div>
      <span class="greyNote version"><span class="vWord">Version</span> 2023.11.3 (build 147512)</span>
      <h1>Logged in as <strong>admin</strong></h1><input type="hidden" name="csrfmiddlewaretoken" value="e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y"><textarea id="3revi" name="revi" rows="4" cols="50">server1 Ubuntu 22.04 LTS</textarea>
      <ca status="disabled" href="/+CSCOCA+/login.html" />
      <form action="/login/vpnSdef" enctype="multipart/form-data" method="post" name="login">
          <div data-user="root" data-module="package-updates"></div>
          <code>The zip file did not contain an entry exportDescriptor.properties</code>
          <span class="form-hidden"><input name="page" value="login" type="hidden"/><input name="formulaire_action" type="hidden" value="login" /><input name="formulaire_action_args" type="hidden" value="dzdNV0MzUGFDV0NHemR6bWorekNEWHY=" /><input name="formulaire_action_sign" type="hidden" value="" /></span>
          <message>Please enter your username and password.</message>
          <input name="formid" type="hidden" value="012afed" />
          <input name="javax.faces.ViewState" type="hidden" value="012afed" />
          <input name="queryString" type="hidden" value="1406192" />
          <div class="versionInfo">The Cacti Group Version 1.2.25</div>
          <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>
          <input type="hidden" name="token" value="0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec">
          <input type='hidden' name='__csrf_magic' value="key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654" />
          <input type="hidden" name="tokenid"  value="1804289383" >
          <input type="hidden" name="name"  value="1804289383" >
          <input type="hidden" name="csrfKey" value="621aec6b886ff81169bed7de5d47b5ed">
          <input type="hidden" name="csrf_token" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" name="ref" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" name="username_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" name="password_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="csrf" name="csrf" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="csrf" name="xd_check" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="give-form-id" name="give-form-id" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" id="give-form-hash" name="give-form-hash" value="621aec6b886ff81169bed7de5d47b5ed">
          <input type="text" name="username" label="Username:" value="admin" />
          <input type="password" name="password" label="Password:" value="123456" />
          <input type="hidden" name="tgroup" value="DefaultADMINGroup" />
          <input type="submit" name="Login" value="Login" />
          <input type="reset" name="Clear" value="Clear" />
      </form>
      <input type="hidden" value="Maintain/cloud_index.php" id="cloud_addr">
      <li class="lisel" onclick="location.href='index.php'">日志系统</li>
      <li class="linormal" onclick="location.href='Maintain/cloud_index.php'" style="margin-left:1px;">云平台</li>
      <button type="button" data-price-id=True>sb</button>
      <div class="prod_madelName">RT-AC5300</div>
      <div class="p1 title_gap">Sign in with your ASUS router account</div>
      <tr class="h"><th>PHP Group</th></tr>
      <tr><td class="e">upload_tmp_dir</td><td class="v">/etc/httpd/_tmp</td><td class="v">/etc/httpd/_tmp</td></tr>
      <tr><td class="e">$_SERVER['DOCUMENT_ROOT']</td><td class="v">/mnt/HDD2/web/</td></tr>
      <var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>
      <span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>
      <div class="text" id="jive-loginVersion"> Openfire, Version: 3.6.0a</div>
      <a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>
      <div id="mcname">LoadMaster</div>
      <p><br/><span>出厂IP:192.168.1.1</span><br/><span>用户名、密码:admin admin</span></p>
      <td colspan="2">Please enter your Cacti user name and password below:</td>
      <meta id="confluence-context-path" name="confluence-context-path" content="">
      <meta id="confluence-base-url" name="confluence-base-url" content="https://192.168.1.4">
      <meta id="atlassian-token" name="atlassian-token" content="d78e2b977d28428e411e31b958c9c502c2425083">
      <script id="frontend-js-extra">var hashform_vars = {"ajaxurl":"\/wp-admin\/admin-ajax.php","ajax_nounce":"d78e2b97","preview_img":""};</script>
      <div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>
      <B>SonicWall Universal Management Suite v9.3</B>
      <br>OK<br>
      <script type="text/javascript">var csrfMagicToken = "sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646";var csrfMagicName = "__vtrftk";</script>
      <select id="cars" name="name">
      <option value="olvo">olvo</option>
      </select>
      <a href="/VICIdial/phone">MODIFY</a>
      <input type="hidden" name="extension"  value="1804289383" >
      <input type="hidden" name="pass"  value="1804289383" >
      <input type="hidden" name="recording_exten"  value="1804289383" >
      <script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>
      <input type='hidden' name='LDCSA_CSRF' value="sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985" />
      <script type='text/javascript'>
      	var cactiVersion='1.2.27';
      	var cactiServerOS='unix';
      	var cactiAction='';
      	var theme='modern';
      	var refreshIsLogout=true;
      	var refreshPage='/logout.php?action=timeout';
      	var refreshMSeconds=1440000;
      	var urlPath='/';
      	var previousPage='';
      	var sessionMessage=[];
      	var csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';
      </script>
      
      <!--
      <Username Level="40/40" Dispatch="account">admin</Username><User1><Password Level="40/40" Dispatch="account">admin</Password></User1>
      /var/pinglog
      <TITLE>Login</TITLE>
      <a href="jpg.html">LIVE JPEG</a><br>
      <a href="liveie.html">Internet Monitor (Microsoft Internet Explorer 8, 9, 10, 11) </a><br>
      <a href="DVRRemoteAP.exe">Download 32 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>
      <a href="DVRRemoteAP_X64.exe">Download 64 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>
      <a href="DVFPlayer.zip">Download 32/64 bits File Player (Windows 7, Windows 8, Windows 10)</a><br>
      <\?xml version="1.0" encoding="utf-8"?><base64Binary xmlns="http://micros-hosting.com/EGateway/">
      Location: /admin
      <meta name="generator" content="vBulletin 5.5.4" />
      Location: http://<ip>:80/relogin.htm?_t=3541144909
      Location: http://<ip>:80/syscmd.htm" Location: /ui/login
      /cgi-bin/webctrl.cgi?action=index_page
      PDR-M800
      function btnPing()
      <HTML><HEAD><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>.The document has moved<A HREF="http://<ip>:80/relogin.htm?_t=179439949">here</A></BODY></HTML>
      <link type="image/x-icon" rel="shortcut icon" href="/themes/img/icon/cisco_shortcut.png">
      <link type="image/x-icon" rel="shortcut icon" href="/themes/img/icon/cisco_logo.png">
      <td class="Copyright" colspan="2" style="text-align:justify" height="20" valign="bottom">© 2017 Cisco Systems, Inc. All Rights Reserved.
      <br>Cisco, Cisco Systems, and the Cisco Systems logo are registered
      trademarks or trademarks of Cisco Systems, Inc. and/or it's affiliates
      in the United States and certain other countries.
      </td>
      :
      #
      >
      $
      SSH key is good
      is not a valid ref and may not be archived
      pcPassword2
      '&sessionKey=790148060;'
      name="sessionKey" value="790148060"
      Set-Cookie: loginName=admin
      var fgt_lang = /dev/cmdb/sslvpn_websession
      php 8.1.0-dev exit
      springframework
      Tomcat
      DEVICE.ACCOUNT=admin
      AUTHORIZED_GROUP=1
      <uid></uid>
      <name>Admin</name>
      <usrid></usrid>
      <password>admin</password>
      <group></group>
      cpto /tmp/"root"
      Model=AC1450
      Firmware=V1.0.0.36_10.0.17
      "exceptionMessageValue":"javax.servlet.ServletException: No valid forensics analysis solrDocIds parameter found."
      BIG-IP release 15.0.0
      user:root
      12345admin123'
      Failed to process image
      
      Location: http://192.168.0.1:52869/picsdesc.xml
      You don't have permission to access /vpns/ on this server.
      [global]
          workgroup = intranet
          encrypt passwords = Yes
          update encrypted = Yes
      
      funcionando
      system_sofia
      name resolve order
      InfoOS:Linux node01 uid=0(root) gid=0(root) groups=0(root)OSInfo
      <b>File Uploaded !!!</b><br>
      ant=951d11e51392117311602d0c25435d7f
      38ee63071a04dc5e04ed22624c38e648
      6f3249aa304055d63828af3bfab778f6
      <h1> c80fc6428eb4fe4a3b77898ebf9f3945 </h1>
      [local]
       tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZTJmYWMyM2UwZT09
       addr = <ip>
      "Powered by vBulletin Version 5.5.4"
      789551
      Linear eMerge
      SuperSign
      ubiq
      Yacht
      Zeroshell
      FastWeb
      AuthInfo:
      loadingIndicator_bk
      Zyxel
      skyrouter
      WAP54
      org.apache.spark.ui
      
      
      
      ID: "00af", version: "7.7.31.1", AddItem: function (a, item, c) {}
      <insert implant configuration content here>
      Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws://<ip> ws://<ip>:443 wss://<ip> wss://<ip>:8443 http://<ip>/api
      Copyright (c) 2015-2020 by Cisco Systems, Inc.
      All rights reserved.
      SSL VPN Service
      wsConvertPptResponse
      <input id="txtUserName" class="txt-input" type="text" name="userName" value="" />
      <input id="txtPassword" class="txt-input" type="password" name="password" value="" />
      <button id="btnLogin" lc="html" lk="IDCS_LOGIN_NBSP">
      <span lc="html" lk="IDCS_BS_PLUGIN_DOWNLOAD" style="line-height: 30px; vertical-align: top;"></span>
      <script src="../Scripts/login.htm.js?v={JS_CSS_V}" type="text/javascript"></script>
      <LegacyDN>eD2bxe4</LegacyDN>
      <title class="_ctxstxt_NetscalerGateway">
      SAML Assertion verification failed; Please contact your administrator
      v=2b46554c087d2d5516559e9b8bc1875d
      /vpn/images/AccessGateway.ico
      frame-busting
      /vpn/js/logout_view.js?v=
      _ctxstxt_NetscalerAAA
      lib.min20200813.js
      401 Unauthorized Basic realm=
      sName='1';onTest(this);
      var passadm = "admin";
      OPMODE_BRIDGE
      document.all.cmd_result
      <input id="key" type="text" style="width: 200px" value="02108CB9-2200D5A4">
      <input id="date" type="text" style="width: 200px" value="12/25/2023">
      main page cgi-bin/login.cgi
      var sessionKey='030ff030ff88';
      loc += '&sessionKey=19dec20030ff8dcb2';
      }
      
      var code = 'location="' + loc + '"';
      
      Password change successful
      J2100N GPON ONT
      /cgi-bin/webui/admin
      sesskey
      name=admin pass=123 priv=ppp
      service=www.dlinkddns.com
      sysCmdType
      Content-Type: auth/request
      
      
      Content-Type: command/reply
      
      Reply-Text: +OK accepted
      
      
      X-Content-Powered-By: K2 v2.8.0 (by JoomlaWorks)
      007b2000-007c1000 rw-p 00000000 00:00 0
      Size:                 60 kB
      Rss:                  52 kB
      Pss:                  52 kB
      Shared_Clean:          0 kB
      Shared_Dirty:          0 kB
      Private_Clean:         0 kB
      Private_Dirty:        52 kB
      Refe
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T00:50:47.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "drupal.org",
                  "micros-hosting.com"
               ],
               "file" : [
                  "dvrremoteap.exe",
                  "dvrremoteap_x64.exe",
                  "index.php",
                  "dvfplayer.zip",
                  "admin-ajax.php",
                  "cloud_index.php"
               ],
               "hostname" : [
                  "micros-hosting.com",
                  "www.drupal.org"
               ],
               "ip" : [
                  "7.7.31.1",
                  "192.168.1.10",
                  "192.168.0.1",
                  "192.168.1.4",
                  "192.168.1.1",
                  "1.0.0.36"
               ],
               "url" : [
                  "http://192.168.0.1:52869/picsdesc.xml",
                  "http://micros-hosting.com/EGateway/",
                  "https://192.168.1.4",
                  "https://www.drupal.org"
               ]
            },
            "http" : {
               "bodymd5" : "97fe295beaaab7e08da7d4a3da4a66ce",
               "bodymmh3" : -231135512,
               "component" : [
                  {
                     "product" : "Drupal",
                     "productvendor" : "Drupal",
                     "productversion" : "8"
                  },
                  {
                     "product" : "Java",
                     "productvendor" : "Oracle"
                  },
                  {
                     "productvendor" : "MobileIron",
                     "product" : "Core"
                  },
                  {
                     "product" : "Jenkins",
                     "productvendor" : "Jenkins",
                     "productversion" : "2.121.3"
                  },
                  {
                     "productvendor" : "Gitlab",
                     "product" : "Gitlab"
                  },
                  {
                     "product" : "Confluence",
                     "productvendor" : "Atlassian"
                  },
                  {
                     "product" : "Webmail",
                     "productvendor" : "Roundcube"
                  },
                  {
                     "productversion" : "5.6.40",
                     "productvendor" : "PHP",
                     "product" : "PHP"
                  },
                  {
                     "productversion" : "4.1.11",
                     "productvendor" : "SPIP",
                     "product" : "SPIP"
                  }
               ],
               "copyright" : "www.linknat.com, \u6606\u77f3\u7f51\u7edc",
               "header" : [
                  {
                     "value" : "Fri, 29 Jul 2022 16:53:01 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "38c49bbcc845080178b7c529aa1b2881",
               "headermmh3" : 298970101,
               "keywords" : [
                  "voip",
                  "vos3000"
               ],
               "realm" : "Tinyproxy",
               "title" : "Newsletter - Daily deals and offers"
            },
            "length" : 16316
         },
         "asn" : "AS45102",
         "city" : "London",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 401 Unauthorized\r\nComposed-By: SPIP 4.1.11 @ www.spip.net\r\nContent-Length: 105732\r\nContent-Type: text/html;charset=utf-8\r\nLast-Modified: Fri, 29 Jul 2022 16:53:01 GMT\r\nLoginip: <srcip>\r\nPragma: private\r\nProxy-Authenticate: Basic realm=\"Tinyproxy\"\r\nServer: Asterisk/13.13.1\r\nSet-Cookie: akaunting_session=7b22; Path=/;\r\nSet-Cookie: id=A67B8F9C;\r\nSet-Cookie: acSamlv2Error=; path=/; secure;\r\nSet-Cookie: PHPSESSID=n91i168jps8rd856bcrln2isqe; path=/\r\nSet-Cookie: __s_sessionid__=hh5rq45u9srt079v063jkb8c13; path=/\r\nSet-Cookie: grafana_session_expiry=1990089920; Path=/; Max-Age=2592000; SameSite=Lax\r\nSet-Cookie: roundcube_sessauth=expired; HttpOnly; domain=cpanel.custompoodles.com; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095\r\nSet-Cookie: fsm_u=admin; Path=/;\r\nSet-Cookie: fsm_login=37dfe4372f3867d7c134d618cbef137b; Path=/;\r\nSet-Cookie: grafana_session=f7fbcb089c6994b7bc45775fdae1a13c; Path=/; Max-Age=2592000; HttpOnly; Secure; SameSite=Lax\r\nSet-Cookie: UICSESSION=qqhhk66ogtvugchmqfov0j4l96; path=/;\r\nSet-Cookie: jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c; path=/\r\nSet-Cookie: csrftoken=Pt1Guz0uK8QPbP3EV8zBKcxaRaxgrZUPbjZeCK50MLR00VR7THTsnwRPH0otS1lS; Path=/; SameSite=Lax;HttpOnly;Secure;SameSite=Strict; Strict-Transport-Security: max-age=63072000; includeSubDomains\r\nSet-Cookie: JSESSIONID=818E3539F13611E2EA4D5BFB48AE058C.jvml; Path=/mifs; OFBiz.Visitor=10004; Secure; HttpOnly;SameSite=lax;\r\nSet-Cookie: session820/qualitor820=2ek44merar6fo67l01hdr09u0l; path=/; HttpOnly; SameSite=Lax\r\nSet-Cookie: webvpn_as=; path=/; secure;\r\nSet-Cookie: SID=hBc7TxF76ERhvIw0jQQ4LZ7Z1jQUV0tQ; path=/;\r\nSet-Cookie: webvpn=A9790AFEACDEFA01FAAEAFEWFF390AE; path=/; secure;\r\nVia: 1.1 51766bfb56389c696c1525db90e16f23.cloudfront.net (CloudFront)\r\nWww-Authenticate: Basic realm=\"RT-N2UyNjgx\"\r\nX-Amz-Cf-Id: CtsEH7KQ5yf2LQM4TNLiEjUavO2mWjwAez9sPj8Ws5MUdPUz2A==\r\nX-Backside-Transport: FAIL FAIL\r\nX-Cache: MISS from Hello\r\nX-Cache-Lookup: MISS from Hello:8080\r\nX-Citrix-Application: Receiver for Web\r\nX-Content-Powered-By: K2 v2.8.0 (by JoomlaWor\r\nX-Content-Type-Options: nosniff\r\nX-Contextid: YQo=\r\nX-Drupal-Cache: xHIT\r\nX-Drupal-Dynamic-Cache: MISS\r\nX-Frame-Options: SAMEORIGIN\r\nX-Generator: Drupal 8 (https://www.drupal.org)\r\nX-Jenkins: 2.121.3\r\nX-Jenkins-Session: f72d6619\r\nX-Litespeed-Cache: hit\r\nX-Powered-By: PHP/5.6.40\r\nX-Proxy-Cache: MISS\r\nX-Shardid: 80\r\nX-Sorting-Hat-Podid: 80\r\nX-Varnish-Cache: Miss\r\nX-Xss-Protection: 1; mode=block\r\nDate: Thu, 07 Nov 2024 00:50:47 GMT\r\nConnection: close\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<meta http-equiv=\"Pragma\" content=\"no-cache\" />\n<meta charset=\"utf-8\">\n<meta content=\"IE=edge\" http-equiv=\"X-UA-Compatible\">\n<meta content=\"object\" property=\"og:type\">\n<meta content=\"GitLab\" property=\"og:site_name\">\n<meta content=\"Help\" property=\"og:title\">\n<meta content=\"GitLab Community Edition\" property=\"og:description\">\n<meta content=\"summary\" property=\"twitter:card\">\n<meta content=\"Help\" property=\"twitter:title\">\n<meta content=\"GitLab Community Edition\" property=\"twitter:description\">\n<meta content=\"GitLab Community Edition\" name=\"description\">\n<meta content=\"#474D57\" name=\"theme-color\">\n<meta content=\"#30353E\" name=\"msapplication-TileColor\">\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384e2fac23e0e==\" />\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>\n<meta http-equiv=\"expires\" content=\"-1\"/>\n<meta name=\"keywords\" content=\"VOS3000, VoIP, VoIP\u8fd0\u8425\u652f\u6491\u7cfb\u7edf, \u8f6f\u4ea4\u6362\"/>\n<meta name=\"author\" content=\"www.linknat.com, \u6606\u77f3\u7f51\u7edc\"/>\n<meta name=\"copyright\" content=\"www.linknat.com, \u6606\u77f3\u7f51\u7edc\"/>\n<meta name=\"generator\" content=\"SPIP 4.1.11\" />\n<script src=\"/jquery.min.js\"></script> \n<title>Newsletter - Daily deals and offers</title>\n</head>\n<body>\n<div style=\"display: none;\">\n<script>SC.util.mergeIntoContext({\"focusedControlID\":null,\"userName\":\"\",\"userDisplayName\":\"\",\"isUserAuthenticated\":false,\"antiForgeryToken\":\"THtoAUxH4sS9\",\"isUserAdministrator\":false,\"canManageSharedToolbox\":false,\"pageBaseFileName\":\"Guest\",\"notifyActivityFrequencyMilliseconds\":600000,\"loginAfterInactivityMilliseconds\":36000000,\"canChangePassword\":false,\"controlPanelUrl\":null,\"pageType\":\"GuestPage\",\"processType\":2,\"userAgentOverride\":null,\"sessionTypeInfos\":[]});</script>\n<SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last=\"1\">fritzr</User></Users></SessionInfo>\n<Account>\n<Entry0 Active=\"Yes\" username=\"CMCCAdmin\" web_passwd=\"CmcC4dm1n5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry1 Active=\"Yes\" username=\"useradmin\" web_passwd=\"Gu4ngx1pd5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry2 Active=\"Yes\" username=\"CUAdmin\"   web_passwd=\"CUAdmin5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<TelnetEntry Active=\"Yes\" telnet_username=\"Admin\" telnet_passwd=\"cxx4dm1n5591\" telnet_port=\"23\"/>\n<FtpEntry Active=\"Yes\" ftp_right=\"1\" ftp_auth=\"1\" ftp_username=\"Admin\" ftp_passwd=\"cxx4dm1n5591\" ftp_port=\"21\" />\n<SambaEntry Active=\"Yes\" smb_right=\"1\" smb_auth=\"1\" smb_username=\"Admin\" smb_passwd=\"cxx4dm1n5591\" />\n<ConsoleEntry Active=\"Yes\" console_username=\"Admin\" console_passwd=\"cxx4dm1n5591\"/>\n<CTDefParaEntry setDefValueFlag=\"1\" />\n</Account>\n<div>8.5.5 (Build:20200530.307-TEMP)</div>\n<span class=\"greyNote version\"><span class=\"vWord\">Version</span> 2023.11.3 (build 147512)</span>\n<h1>Logged in as <strong>admin</strong></h1><input type=\"hidden\" name=\"csrfmiddlewaretoken\" value=\"e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y\"><textarea id=\"3revi\" name=\"revi\" rows=\"4\" cols=\"50\">server1 Ubuntu 22.04 LTS</textarea>\n<ca status=\"disabled\" href=\"/+CSCOCA+/login.html\" />\n<form action=\"/login/vpnSdef\" enctype=\"multipart/form-data\" method=\"post\" name=\"login\">\n    <div data-user=\"root\" data-module=\"package-updates\"></div>\n    <code>The zip file did not contain an entry exportDescriptor.properties</code>\n    <span class=\"form-hidden\"><input name=\"page\" value=\"login\" type=\"hidden\"/><input name=\"formulaire_action\" type=\"hidden\" value=\"login\" /><input name=\"formulaire_action_args\" type=\"hidden\" value=\"dzdNV0MzUGFDV0NHemR6bWorekNEWHY=\" /><input name=\"formulaire_action_sign\" type=\"hidden\" value=\"\" /></span>\n    <message>Please enter your username and password.</message>\n    <input name=\"formid\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"javax.faces.ViewState\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"queryString\" type=\"hidden\" value=\"1406192\" />\n    <div class=\"versionInfo\">The Cacti Group Version 1.2.25</div>\n    <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>\n    <input type=\"hidden\" name=\"token\" value=\"0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec\">\n    <input type='hidden' name='__csrf_magic' value=\"key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654\" />\n    <input type=\"hidden\" name=\"tokenid\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"name\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"csrfKey\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"hidden\" name=\"csrf_token\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" name=\"ref\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"username_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"password_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"csrf\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"xd_check\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"give-form-id\" name=\"give-form-id\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" id=\"give-form-hash\" name=\"give-form-hash\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"text\" name=\"username\" label=\"Username:\" value=\"admin\" />\n    <input type=\"password\" name=\"password\" label=\"Password:\" value=\"123456\" />\n    <input type=\"hidden\" name=\"tgroup\" value=\"DefaultADMINGroup\" />\n    <input type=\"submit\" name=\"Login\" value=\"Login\" />\n    <input type=\"reset\" name=\"Clear\" value=\"Clear\" />\n</form>\n<input type=\"hidden\" value=\"Maintain/cloud_index.php\" id=\"cloud_addr\">\n<li class=\"lisel\" onclick=\"location.href='index.php'\">\u65e5\u5fd7\u7cfb\u7edf</li>\n<li class=\"linormal\" onclick=\"location.href='Maintain/cloud_index.php'\" style=\"margin-left:1px;\">\u4e91\u5e73\u53f0</li>\n<button type=\"button\" data-price-id=True>sb</button>\n<div class=\"prod_madelName\">RT-AC5300</div>\n<div class=\"p1 title_gap\">Sign in with your ASUS router account</div>\n<tr class=\"h\"><th>PHP Group</th></tr>\n<tr><td class=\"e\">upload_tmp_dir</td><td class=\"v\">/etc/httpd/_tmp</td><td class=\"v\">/etc/httpd/_tmp</td></tr>\n<tr><td class=\"e\">$_SERVER['DOCUMENT_ROOT']</td><td class=\"v\">/mnt/HDD2/web/</td></tr>\n<var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>\n<span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>\n<div class=\"text\" id=\"jive-loginVersion\"> Openfire, Version: 3.6.0a</div>\n<a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>\n<div id=\"mcname\">LoadMaster</div>\n<p><br/><span>\u51fa\u5382IP\uff1a192.168.1.1</span><br/><span>\u7528\u6237\u540d\u3001\u5bc6\u7801\uff1aadmin admin</span></p>\n<td colspan=\"2\">Please enter your Cacti user name and password below:</td>\n<meta id=\"confluence-context-path\" name=\"confluence-context-path\" content=\"\">\n<meta id=\"confluence-base-url\" name=\"confluence-base-url\" content=\"https://192.168.1.4\">\n<meta id=\"atlassian-token\" name=\"atlassian-token\" content=\"d78e2b977d28428e411e31b958c9c502c2425083\">\n<script id=\"frontend-js-extra\">var hashform_vars = {\"ajaxurl\":\"\\/wp-admin\\/admin-ajax.php\",\"ajax_nounce\":\"d78e2b97\",\"preview_img\":\"\"};</script>\n<div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>\n<B>SonicWall Universal Management Suite v9.3</B>\n<br>OK<br>\n<script type=\"text/javascript\">var csrfMagicToken = \"sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646\";var csrfMagicName = \"__vtrftk\";</script>\n<select id=\"cars\" name=\"name\">\n<option value=\"olvo\">olvo</option>\n</select>\n<a href=\"/VICIdial/phone\">MODIFY</a>\n<input type=\"hidden\" name=\"extension\"  value=\"1804289383\" >\n<input type=\"hidden\" name=\"pass\"  value=\"1804289383\" >\n<input type=\"hidden\" name=\"recording_exten\"  value=\"1804289383\" >\n<script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>\n<input type='hidden' name='LDCSA_CSRF' value=\"sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985\" />\n<script type='text/javascript'>\n\tvar cactiVersion='1.2.27';\n\tvar cactiServerOS='unix';\n\tvar cactiAction='';\n\tvar theme='modern';\n\tvar refreshIsLogout=true;\n\tvar refreshPage='/logout.php?action=timeout';\n\tvar refreshMSeconds=1440000;\n\tvar urlPath='/';\n\tvar previousPage='';\n\tvar sessionMessage=[];\n\tvar csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';\n</script>\n\n<!--\n<Username Level=\"40/40\" Dispatch=\"account\">admin</Username><User1><Password Level=\"40/40\" Dispatch=\"account\">admin</Password></User1>\n/var/pinglog\n<TITLE>Login</TITLE>\n<a href=\"jpg.html\">LIVE JPEG</a><br>\n<a href=\"liveie.html\">Internet Monitor (Microsoft Internet Explorer 8, 9, 10, 11) </a><br>\n<a href=\"DVRRemoteAP.exe\">Download 32 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>\n<a href=\"DVRRemoteAP_X64.exe\">Download 64 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>\n<a href=\"DVFPlayer.zip\">Download 32/64 bits File Player (Windows 7, Windows 8, Windows 10)</a><br>\n<\\?xml version=\"1.0\" encoding=\"utf-8\"?><base64Binary xmlns=\"http://micros-hosting.com/EGateway/\">\nLocation: /admin\n<meta name=\"generator\" content=\"vBulletin 5.5.4\" />\nLocation: http://<ip>:80/relogin.htm?_t=3541144909\nLocation: http://<ip>:80/syscmd.htm\" Location: /ui/login\n/cgi-bin/webctrl.cgi?action=index_page\nPDR-M800\nfunction btnPing()\n<HTML><HEAD><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>.The document has moved<A HREF=\"http://<ip>:80/relogin.htm?_t=179439949\">here</A></BODY></HTML>\n<link type=\"image/x-icon\" rel=\"shortcut icon\" href=\"/themes/img/icon/cisco_shortcut.png\">\n<link type=\"image/x-icon\" rel=\"shortcut icon\" href=\"/themes/img/icon/cisco_logo.png\">\n<td class=\"Copyright\" colspan=\"2\" style=\"text-align:justify\" height=\"20\" valign=\"bottom\">\u00a9 2017 Cisco Systems, Inc. All Rights Reserved.\n<br>Cisco, Cisco Systems, and the Cisco Systems logo are registered\ntrademarks or trademarks of Cisco Systems, Inc. and/or it's affiliates\nin the United States and certain other countries.\n</td>\n:\n#\n>\n$\nSSH key is good\nis not a valid ref and may not be archived\npcPassword2\n'&sessionKey=790148060;'\nname=\"sessionKey\" value=\"790148060\"\nSet-Cookie: loginName=admin\nvar fgt_lang = /dev/cmdb/sslvpn_websession\nphp 8.1.0-dev exit\nspringframework\nTomcat\nDEVICE.ACCOUNT=admin\nAUTHORIZED_GROUP=1\n<uid></uid>\n<name>Admin</name>\n<usrid></usrid>\n<password>admin</password>\n<group></group>\ncpto /tmp/\"root\"\nModel=AC1450\r\nFirmware=V1.0.0.36_10.0.17\r\n\"exceptionMessageValue\":\"javax.servlet.ServletException: No valid forensics analysis solrDocIds parameter found.\"\nBIG-IP release 15.0.0\nuser:root\n12345admin123'\nFailed to process image\n\nLocation: http://192.168.0.1:52869/picsdesc.xml\nYou don't have permission to access /vpns/ on this server.\n[global]\n    workgroup = intranet\n    encrypt passwords = Yes\n    update encrypted = Yes\n\nfuncionando\nsystem_sofia\nname resolve order\nInfoOS:Linux node01 uid=0(root) gid=0(root) groups=0(root)OSInfo\n<b>File Uploaded !!!</b><br>\nant=951d11e51392117311602d0c25435d7f\n38ee63071a04dc5e04ed22624c38e648\n6f3249aa304055d63828af3bfab778f6\n<h1> c80fc6428eb4fe4a3b77898ebf9f3945 </h1>\n[local]\n tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZTJmYWMyM2UwZT09\n addr = <ip>\n\"Powered by vBulletin Version 5.5.4\"\n789551\nLinear eMerge\nSuperSign\nubiq\nYacht\nZeroshell\nFastWeb\nAuthInfo:\nloadingIndicator_bk\nZyxel\nskyrouter\nWAP54\norg.apache.spark.ui\n\n\n\nID: \"00af\", version: \"7.7.31.1\", AddItem: function (a, item, c) {}\n<insert implant configuration content here>\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws://<ip> ws://<ip>:443 wss://<ip> wss://<ip>:8443 http://<ip>/api\nCopyright (c) 2015-2020 by Cisco Systems, Inc.\nAll rights reserved.\nSSL VPN Service\nwsConvertPptResponse\n<input id=\"txtUserName\" class=\"txt-input\" type=\"text\" name=\"userName\" value=\"\" />\n<input id=\"txtPassword\" class=\"txt-input\" type=\"password\" name=\"password\" value=\"\" />\n<button id=\"btnLogin\" lc=\"html\" lk=\"IDCS_LOGIN_NBSP\">\n<span lc=\"html\" lk=\"IDCS_BS_PLUGIN_DOWNLOAD\" style=\"line-height: 30px; vertical-align: top;\"></span>\n<script src=\"../Scripts/login.htm.js?v={JS_CSS_V}\" type=\"text/javascript\"></script>\n<LegacyDN>eD2bxe4</LegacyDN>\n<title class=\"_ctxstxt_NetscalerGateway\">\nSAML Assertion verification failed; Please contact your administrator\nv=2b46554c087d2d5516559e9b8bc1875d\n/vpn/images/AccessGateway.ico\nframe-busting\n/vpn/js/logout_view.js?v=\n_ctxstxt_NetscalerAAA\nlib.min20200813.js\n401 Unauthorized Basic realm=\nsName='1';onTest(this);\nvar passadm = \"admin\";\nOPMODE_BRIDGE\ndocument.all.cmd_result\n<input id=\"key\" type=\"text\" style=\"width: 200px\" value=\"02108CB9-2200D5A4\">\n<input id=\"date\" type=\"text\" style=\"width: 200px\" value=\"12/25/2023\">\nmain page cgi-bin/login.cgi\nvar sessionKey='030ff030ff88';\nloc += '&sessionKey=19dec20030ff8dcb2';\n}\n\nvar code = 'location=\"' + loc + '\"';\n\nPassword change successful\nJ2100N GPON ONT\n/cgi-bin/webui/admin\nsesskey\nname=admin pass=123 priv=ppp\nservice=www.dlinkddns.com\nsysCmdType\nContent-Type: auth/request\n\n\nContent-Type: command/reply\n\nReply-Text: +OK accepted\n\n\nX-Content-Powered-By: K2 v2.8.0 (by JoomlaWorks)\n007b2000-007c1000 rw-p 00000000 00:00 0\nSize:                 60 kB\nRss:                  52 kB\nPss:                  52 kB\nShared_Clean:          0 kB\nShared_Dirty:          0 kB\nPrivate_Clean:         0 kB\nPrivate_Dirty:        52 kB\nRefe",
         "datamd5" : "6614f280fb381144ced083974f320368",
         "datammh3" : 459999518,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS45102",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "GB",
            "countryname" : "United Kingdom",
            "domain" : [
               "alibaba-inc.com"
            ],
            "isineu" : "false",
            "latitude" : "55.378051",
            "location" : "55.378051,-3.435973",
            "longitude" : "-3.435973",
            "netname" : "ALICLOUD-GB",
            "organization" : "Alibaba.com Singapore E-Commerce Private Limited",
            "subnet" : "8.208.0.0/17"
         },
         "ip" : "8.208.89.32",
         "ipv6" : "false",
         "latitude" : "51.5074",
         "location" : "51.5074,-0.1196",
         "longitude" : "-0.1196",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Alibaba US Technology Co., Ltd.",
         "os" : "IOS",
         "osdistribution" : "sUse",
         "osvendor" : "Cisco",
         "port" : 53354,
         "product" : "WebVPN",
         "productvendor" : "Cisco",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Unauthorized",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 401,
         "subnet" : "8.208.0.0/17",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 81.0.54.123:53354 (tcp/http) - last seen on 2024-11-07 at 00:25:22 UTC

    • IP
      81.0.54.123
      Network
      81.0.0.0/18
      Domain(s)
      ibercom.com
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://81.0.54.123:53354/ 302

      Reverse DNS
      static.123.54.0.81.ibercom.com
      ASN
      AS15704
      Organization
      Xtra Telecom S.A.
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Apache HTTP Server 2.4.33
      HTTP Component(s)
      PHP PHP 5.6.28
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f0d6c3f77d2da4f6c289be9f9339b1ae
      HTTP Header MD5
      fd49dfe65082ab2f603bca13475740de
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 302 Found
      Date: Thu, 07 Nov 2024 00:25:22 GMT
      Server: Apache/2.4.33 (Win32) PHP/5.6.28
      X-Powered-By: PHP/5.6.28
      location: ViewOffice/index.php
      Content-Length: 0
      Connection: close
      Content-Type: text/html; charset=UTF-8
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T00:25:22.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1636538602,
               "component" : [
                  {
                     "product" : "PHP",
                     "productversion" : "5.6.28",
                     "productvendor" : "PHP"
                  }
               ],
               "headermd5" : "fd49dfe65082ab2f603bca13475740de",
               "headermmh3" : 883155256
            },
            "length" : 237
         },
         "asn" : "AS15704",
         "country" : "ES",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nDate: Thu, 07 Nov 2024 00:25:22 GMT\r\nServer: Apache/2.4.33 (Win32) PHP/5.6.28\r\nX-Powered-By: PHP/5.6.28\r\nlocation: ViewOffice/index.php\r\nContent-Length: 0\r\nConnection: close\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n",
         "datamd5" : "f0d6c3f77d2da4f6c289be9f9339b1ae",
         "datammh3" : -177603493,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ibercom.com"
         ],
         "geolocus" : {
            "asn" : "AS15704",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "ES",
            "countryname" : "Spain",
            "domain" : [
               "ibercom.com",
               "masmovil.com"
            ],
            "isineu" : "true",
            "latitude" : "40.463667",
            "location" : "40.463667,-3.74922",
            "longitude" : "-3.74922",
            "netname" : "IBERCOMNET",
            "organization" : "MasMovil Access Network",
            "subnet" : "81.0.32.0/19"
         },
         "host" : [
            "static"
         ],
         "hostname" : [
            "static.123.54.0.81.ibercom.com"
         ],
         "ip" : "81.0.54.123",
         "ipv6" : "false",
         "latitude" : "40.4172",
         "location" : "40.4172,-3.6840",
         "longitude" : "-3.6840",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Xtra Telecom S.A.",
         "os" : "Windows",
         "osbits" : 32,
         "osvendor" : "Microsoft",
         "port" : 53354,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "productversion" : "2.4.33",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Found",
         "reverse" : [
            "static.123.54.0.81.ibercom.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 302,
         "subdomains" : [
            "0.81.ibercom.com",
            "123.54.0.81.ibercom.com",
            "54.0.81.ibercom.com",
            "81.ibercom.com"
         ],
         "subnet" : "81.0.0.0/18",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }