Cyber Defense Search Engine

datascan ctl threatlist sniffer vulnscan riskscan

1
2
3
4
...
next >

IP
223.204.154.38

Network
223.204.0.0/14

Domain(s)
3bb.in.th

Device

<enterprise field>: device.class <enterprise field>: device.productvendor

Operating System
Linux Linux 2

URL

http://223.204.154.38:7580/ 200

HTTP Title
::: Login :::

Reverse DNS
mx-ll-223.204.154-38.dynamic.3bb.in.th

ASN
AS45758

Organization
Triple T Broadband Public Company Limited

Protocol
http

Source
datascan
Operating System
Linux Linux 2

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
498757ed6cd314988f10f57b901a6c7b

HTTP Header MD5
15514d09ab3a6e41ccb6a3bff154ef8a

HTTP Body MD5
c1795339bfc5fbb0f593b34bec5a77c1

HTTP/1.1 200 OK
Date: Thu, 07 Nov 2024 10:32:05 GMT
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Last-Modified: Wed, 26 Apr 2017 07:14:20 GMT
Content-Type: text/html
ETag: 379-15850-1493190860
Content-Length: 15850

<html>
<head>
<link rel="icon" href="/nobody/favicon.ico" type="image/vnd.microsoft.icon" />
<link rel="shortcut icon" href="/nobody/favicon.ico" type="image/vnd.microsoft.icon" />
<link rel="bookmark" href="/nobody/favicon.ico" type="image/vnd.microsoft.icon" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="googlebot" content="nosnippet">
<meta name="robots" content="noarchive">
<title>::: Login :::</title>
<style>
<!--
body {background-image: url(/nobody/jpg/bg.jpg); margin-left: 0px;margin-top: 0px;margin-right: 0px;margin-bottom: 0px;}
td { font-size:14px;color:#FFFFFF;font-weight:bold; font-family:Arial;}
.inputTxt{ width:120px; font-family:Courier New, Arial; border-right: #acacac 1px solid; border-top: #acacac 1px solid; border-left: #acacac 1px solid; border-bottom: #acacac 1px solid; background-color: #ffffff; height:20px;}
.codeBorder{border-right: #696969 2px solid; border-top: #acacac 1px solid; border-left: #acacac 1px solid; border-bottom: #696969 2px solid; background-color: #ffffff;}
.font0{font-size:36px;font-family:Arial; font-style:italic;}
.font1{font-size:24px;font-family:Arial; font-style:italic; color:#EDEDED;}
-->
</style>
<script language="JavaScript">
//Kelvin++ 2014-07-31 check is it opening from EZ server, then auto-login use ez.htm
if(document.URL.indexOf("?a=") > 0){
    var VerifyStr_Base64 = document.URL.split("?")[1].substring(2);
    location.href="/nobody/ez.htm?a="+VerifyStr_Base64+"&rnd=" + Math.random();
}
/* ========== loginQuickDevice.js ========== */
function getCookie(c_name){
    if (document.cookie.length>0){
        c_start=document.cookie.indexOf(c_name + "=");
        if (c_start!=-1){ 
            c_start=c_start + c_name.length+1; 
            c_end=document.cookie.indexOf(";",c_start);
            if (c_end==-1) c_end=document.cookie.length;
            return unescape(document.cookie.substring(c_start,c_end));
        } 
    }
    return "";
}

function setCookie(c_name,value,expiredays){
    var exdate=new Date();
    exdate.setDate(exdate.getDate()+expiredays);
    document.cookie=c_name+ "=" +escape(value)+((expiredays==null) ? "" : ";expires="+exdate.toGMTString());
}

var w = window.screen.availWidth;

if(getCookie("ViewMode")!="Classic"){
    if(w <= 800){//mobile screen width < 800
    	if(w >= 320)
    		location.href="/nobody/mobile320.htm?Login=Quick";
    	else
    		location.href="/nobody/mobile.htm?Login=Quick";
    }
}

//no use
function isMobileBrowser(){
    var u = navigator.userAgent.toLowerCase();
    
    if(u.indexOf("midp") != -1)
    	return true;
    else if(u.indexOf("mobile") != -1)
    	return true;
    else if(u.indexOf("iphone") != -1 || u.indexOf("ipod") != -1)
    	return true;
    else if(u.indexOf("series60") != -1 || u.indexOf("symbian") != -1)
    	return true;
    else if(u.indexOf("blackberry") != -1)
    	return true;
    else if(u.indexOf("android") != -1)
    	return true;
    else if(u.indexOf("windows ce") != -1 || u.indexOf("windows phone") != -1)
    	return true;
    else if(u.indexOf("htc") != -1 || u.indexOf("hd2_") != -1)
    	return true;
    else if(u.indexOf("palm") != -1)
    	return true;
    else
    	return false;
}


/* ========== webtoolkit.base64.js ========== */
var Base64 = {

	// private property
	_keyStr : "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",

	// public method for encoding
	encode : function (input) {
		var output = "";
		var chr1, chr2, chr3, enc1, enc2, enc3, enc4;
		var i = 0;

		input = Base64._utf8_encode(input);

		while (i < input.length) {

			chr1 = input.charCodeAt(i++);
			chr2 = input.charCodeAt(i++);
			chr3 = input.charCodeAt(i++);

			enc1 = chr1 >> 2;
			enc2 = ((chr1 & 3) << 4) | (chr2 >> 4);
			enc3 = ((chr2 & 15) << 2) | (chr3 >> 6);
			enc4 = chr3 & 63;

			if (isNaN(chr2)) {
				enc3 = enc4 = 64;
			} else if (isNaN(chr3)) {
				enc4 = 64;
			}

			output = output +
			this._keyStr.charAt(enc1) + this._keyStr.charAt(enc2) +
			this._keyStr.charAt(enc3) + this._keyStr.charAt(enc4);

		}

		return output;
	},

	// public method for decoding
	decode : function (input) {
		var output = "";
		var chr1, chr2, chr3;
		var enc1, enc2, enc3, enc4;
		var i = 0;

		input = input.replace(/[^A-Za-z0-9\+\/\=]/g, "");

		while (i < input.length) {

			enc1 = this._keyStr.indexOf(input.charAt(i++));
			enc2 = this._keyStr.indexOf(input.charAt(i++));
			enc3 = this._keyStr.indexOf(input.charAt(i++));
			enc4 = this._keyStr.indexOf(input.charAt(i++));

			chr1 = (enc1 << 2) | (enc2 >> 4);
			chr2 = ((enc2 & 15) << 4) | (enc3 >> 2);
			chr3 = ((enc3 & 3) << 6) | enc4;

			output = output + String.fromCharCode(chr1);

			if (enc3 != 64) {
				output = output + String.fromCharCode(chr2);
			}
			if (enc4 != 64) {
				output = output + String.fromCharCode(chr3);
			}

		}

		output = Base64._utf8_decode(output);

		return output;

	},

	// private method for UTF-8 encoding
	_utf8_encode : function (string) {
		string = string.replace(/\r\n/g,"\n");
		var utftext = "";

		for (var n = 0; n < string.length; n++) {

			var c = string.charCodeAt(n);

			if (c < 128) {
				utftext += String.fromCharCode(c);
			}
			else if((c > 127) && (c < 2048)) {
				utftext += String.fromCharCode((c >> 6) | 192);
				utftext += String.fromCharCode((c & 63) | 128);
			}
			else {
				utftext += String.fromCharCode((c >> 12) | 224);
				utftext += String.fromCharCode(((c >> 6) & 63) | 128);
				utftext += String.fromCharCode((c & 63) | 128);
			}

		}

		return utftext;
	},

	// private method for UTF-8 decoding
	_utf8_decode : function (utftext) {
		var string = "";
		var i = 0;
		var c = c1 = c2 = 0;

		while ( i < utftext.length ) {

			c = utftext.charCodeAt(i);

			if (c < 128) {
				string += String.fromCharCode(c);
				i++;
			}
			else if((c > 191) && (c < 224)) {
				c2 = utftext.charCodeAt(i+1);
				string += String.fromCharCode(((c & 31) << 6) | (c2 & 63));
				i += 2;
			}
			else {
				c2 = utftext.charCodeAt(i+1);
				c3 = utftext.charCodeAt(i+2);
				string += String.fromCharCode(((c & 15) << 12) | ((c2 & 63) << 6) | (c3 & 63));
				i += 3;
			}

		}

		return string;
	}

}

/* ========== loginQuick.js ========== */
var ff;
var CheckOnlySupportIE = false;
var DVR_ONLY_SUPPORT_IE = "_042_082_162_046_";
var isIEBrowser = false;

if ((navigator.appName == "Microsoft Internet Explorer") && (navigator.platform != "MacPPC") && (navigator.platform != "Mac68k")) {
  isIEBrowser = true;
}

/* disabled backspace key */
if(typeof window.event != 'undefined'){
    document.onkeydown = function(){if(event.srcElement.tagName.toUpperCase() != 'INPUT'){return (event.keyCode != 8);}}
}else{
    document.onkeypress = function(e){if(e.target.nodeName.toUpperCase() != 'INPUT'){return (e.keyCode != 8);}}
}

function init(){
	ff = document.myForm;
	ff.Username.value = "";
	ff.Password.value = "";
	ff.Username.focus();
	//setTimeout("getCaptchaImg()", 1000);
}

function getCaptchaImg(){
	document.getElementById("Captcha").src = "/cgi-bin/nobody/Captcha.cgi?action=get&image=login_bmp";
}

function goCheck(e){
    if(window.event && e.keyCode ==13) //IE
        check(); 
    else if(e.which == 13) // Netscape/Firefox/Opera
        check();
}

function check(){
    if(!ff){return false;}
    
    document.cookie = "x=1";
    if (document.cookie.indexOf("x=")==-1){
        alert("Browser Cookie not supported.");
        frmReload();
        return false;
    }
    var actionStr = "/cgi-bin/nobody/VerifyCode.cgi"
    actionStr += "?account="+Base64.encode(ff.Username.value+":"+ff.Password.value);
    //actionStr += "&captcha_code="+ff.CaptchaCode.value;
    //actionStr += "&verify_code="+getCookie("captcha");
    actionStr += "&rnd="+Math.random();
	var httpObj = createHttpRequestObj();
	httpObj.onreadystatechange = function(){
    	if (httpObj.readyState == 4 && httpObj.status == 200){
    		var objStr    = new Object();
    		objStr.strSrc = httpObj.responseText;
    		tmpStr = objStr.strSrc.split("\n");
            if (tmpStr[1] == "OK"){
                getUserLevel();
            }else{
                alert(tmpStr[1]);
                frmReload();
            }
        }
    };
	httpObj.open("get", actionStr, true);
	httpObj.send(null);
	return false;
}

function getUserLevel(){
	/*
	var httpObj = createHttpRequestObj();
	requestData = "/cgi-bin/guest/Login.cgi?rnd="+Math.random();
	httpObj.onreadystatechange = function(){
    	if (httpObj.readyState == 4 && httpObj.status == 200){
    		var objStr    = new Object();
    		objStr.strSrc = httpObj.responseText;
    		
    		if (CheckOnlySupportIE && GetCgiParam(objStr, "Product-ID-Minor=") == 1){
    		    var pid = objStr.strGet;
    		    var pidc = "_"+pid+"_";
    		    if(!isIEBrowser && DVR_ONLY_SUPPORT_IE.indexOf(pidc) != -1){
    		        //alert("This machine is not supported, please visit 'www.avtech.com.tw' for more details.");
    		        if(confirm("This machine is not supported.\nDo you want to get more details?")){
    		            location.href = "http://www.eagleeyescctv.com/jump/dvr.htm";
    		        }
    		        return false;
    		    }
    		}
    		
    		if (GetCgiParam(objStr, "User-Level=") == 1){
    			setCookie("LifeTime", "");
    			setCookie("ReloWebTime", 0);
    			if(objStr.strGet == "SUPERVISOR")
                    location.href="/index.htm";
                else
                    location.href="/index.htm";
					//location.href="/default.htm";
            }else{alert('Login Failed.');}
            
    	}
    };
	httpObj.open("get", requestData, true);
	httpObj.send(null);
	*/
	setCookie("brokenhdd", "");
	setCookie("LifeTime", "");
	setCookie("ReloWebTime", 0);
	location.href="/index.htm";
}

function frmReload(){
    ff.Username.value="";
    ff.Password.value="";
    //ff.CaptchaCode.value="";
    location.reload();
}

function createHttpRequestObj(){
	var XMLhttpObject = null;
	try {XMLhttpObject = new XMLHttpRequest();}
	catch(e){
		try {XMLhttpObject = new ActiveXObject("Msxml2.XMLHTTP");}
		catch(e){
			try {XMLhttpObject = new ActiveXObject("Microsoft.XMLHTTP");}
			catch(e) {return null;}
		}
	}
	return XMLhttpObject;
}

function GetCgiParam(objStr, strSearch){
	var curr_pos;var result;
	objStr.strSearch=strSearch;
	objStr.curr_pos=0;
	do{
		result = 1;
		curr_pos = objStr.strSrc.indexOf(objStr.strSearch, objStr.curr_pos);
		if (curr_pos < 0){
			result = 0;
			break;
		}
		objStr.curr_pos = curr_pos + objStr.strSearch.length;
		curr_pos = objStr.strSrc.indexOf('\n', objStr.curr_pos);
		if (curr_pos < 0){
			if (objStr.curr_pos < objStr.strSrc.length){
				objStr.strGet 	= objStr.strSrc.substring(objStr.curr_pos, objStr.strSrc.length);
				objStr.curr_pos = curr_pos;	
				break;
			}
			result = 0;
			break;
		}
		objStr.strGet 	= objStr.strSrc.substring(objStr.curr_pos, curr_pos);
		objStr.curr_pos = curr_pos;
	} while(0);
	return result;
}

function goMobile(){
    setCookie("ViewMode", "Mobile");
	var w = window.screen.availWidth;
	if(w >= 320)
		location.href="/nobody/mobile320.htm?Login=Quick";
	else
		location.href="/nobody/mobile.htm?Login=Quick";
}

</script>
</head>
<body onload="init()">
<form name="myForm" method="POST" target="_top" onSubmit="return check();">
<table width="778" border="0" align="center" cellpadding="0" cellspacing="0">
    <tr><td width="778" height="197" valign="middle" >
        <table width="201" border="0" cellspacing="0" cellpadding="0">
            <tr><td width="201" height="25">&nbsp;</td></tr>
        </table>
        <table width="467" height="88" border="0" align="center" cellpadding="0" cellspacing="0">
            <tr><td width="493" height="53" class="font0">&nbsp;&nbsp;&nbsp;Any time &amp; Any where</td></tr>
            <tr><td class="font1">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;IP Surveillance for Your Life</td></tr>
        </table></td></tr>
    <tr><td height="114" valign="middle">
        <table width="778" border="0" align="center" cellpadding="0" cellspacing="0">
            <tr><td width="221" height="247" valign="top"></td>
        <td valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td height="94" valign="top"><table width="341" border="0" cellspacing="0" cellpadding="0">
              <tr>
                <td width="21"><img src="/nobody/jpg/lcorner.jpg" width="21" height="33" alt=""></td>
                <td width="306" align="center" background="/nobody/jpg/banner.jpg"> Customer Login </td>
                <td width="14"><img src="/nobody/jpg/rcor.jpg" width="18" height="33"></td>
              </tr>
            </table>
                    <table width="341" border="0" align="left" cellpadding="0" cellspacing="0">
                      <tr>
                        <td width="8%"><img src="/nobody/jpg/mem.jpg" width="83" height="168"></td>
                        <td width="87%" background="/nobody/jpg/bg09.gif">
                            <!-- input box -->
                            <table width="233" height="80" border="0" cellpadding="0" cellspacing="0">
                            <tr>
                              <td width="96" height="41" align="right">Username :&nbsp;</td>
                              <td width="124"><input name="Username" maxlength="31" type="text" class="inputTxt" size="17" onkeydown="goCheck(event);"></td>
                            </tr>
                            <tr>
                              <td width="96" height="37" align="right">Password :&nbsp;</td>
                              <td><input name="Password" maxlength="31" type="password" class="inputTxt" size="17" onkeydown="goCheck(event);"></td>
                            </tr>
                            </table></td>

                        <td width="5%"><img src="/nobody/jpg/line11.jpg" width="18" height="168"></td>
                      </tr>
                  </table></td>
          </tr>
          <tr>
            <td valign="top"><table width="341" border="0" align="center" cellpadding="0" cellspacing="0">
              <tr>
                <td width="17" valign="top" background="/nobody/jpg/bg14.jpg"><img src="/nobody/jpg/cor.jpg" width="17" height="46"></td>
                <td width="305" background="/nobody/jpg/bg14.jpg">
                    <!-- button -->
                    <table width="100%" border="0" cellspacing="0" cellpadding="0">
                    <tr><td align="center"><img src="/nobody/jpg/login.gif" style="cursor:pointer" width="103" height="29" border="0" onClick="check();"></td></tr>
                    </table></td>
                <td width="18" valign="top"><img src="/nobody/jpg/cor18.jpg" width="18" height="46"></td>
              </tr>
            </table></td>
          </tr>
        </table></td>
        <td width="218" valign="top"><table width="100%" border="0" cellspacing="0" cellpadding="0">
          <tr>
            <td></td>
          </tr>
          
        </table></td>
      </tr>
    </table>
    <table width="778" border="0" align="center" cellpadding="0" cellspacing="0">
      <tr>
        <td width="213"></td>
        <td width="339" height="132" align="center">View: <a href="#" style='color:#00ffff' onclick="goMobile()">Mobile</a> | PC</td>
        <td width="226"></td>
      </tr>
    </table></td>
  </tr>
</table>
</form>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:32:05.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "eagleeyescctv.com"
         ],
         "file" : [
            "verifycode.cgi"
         ],
         "hostname" : [
            "www.eagleeyescctv.com"
         ],
         "url" : [
            "http://www.eagleeyescctv.com/jump/dvr.htm"
         ]
      },
      "favicon" : {
         "url" : "/nobody/favicon.ico"
      },
      "http" : {
         "bodymd5" : "c1795339bfc5fbb0f593b34bec5a77c1",
         "bodymmh3" : -878287826,
         "header" : [
            {
               "name" : "Last-Modified",
               "value" : "Wed, 26 Apr 2017 07:14:20 GMT"
            },
            {
               "name" : "ETag",
               "value" : "379-15850-1493190860"
            }
         ],
         "headermd5" : "15514d09ab3a6e41ccb6a3bff154ef8a",
         "headermmh3" : -463662719,
         "title" : "::: Login :::"
      },
      "length" : 16086
   },
   "asn" : "AS45758",
   "city" : "Samut Sakhon",
   "country" : "TH",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 07 Nov 2024 10:32:05 GMT\r\nServer: Linux/2.x UPnP/1.0 Avtech/1.0\r\nConnection: close\r\nLast-Modified: Wed, 26 Apr 2017 07:14:20 GMT\r\nContent-Type: text/html\r\nETag: 379-15850-1493190860\r\nContent-Length: 15850\r\n\r\n<html>\r\n<head>\r\n<link rel=\"icon\" href=\"/nobody/favicon.ico\" type=\"image/vnd.microsoft.icon\" />\r\n<link rel=\"shortcut icon\" href=\"/nobody/favicon.ico\" type=\"image/vnd.microsoft.icon\" />\r\n<link rel=\"bookmark\" href=\"/nobody/favicon.ico\" type=\"image/vnd.microsoft.icon\" />\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n<meta name=\"googlebot\" content=\"nosnippet\">\r\n<meta name=\"robots\" content=\"noarchive\">\r\n<title>::: Login :::</title>\r\n<style>\r\n<!--\r\nbody {background-image: url(/nobody/jpg/bg.jpg); margin-left: 0px;margin-top: 0px;margin-right: 0px;margin-bottom: 0px;}\r\ntd { font-size:14px;color:#FFFFFF;font-weight:bold; font-family:Arial;}\r\n.inputTxt{ width:120px; font-family:Courier New, Arial; border-right: #acacac 1px solid; border-top: #acacac 1px solid; border-left: #acacac 1px solid; border-bottom: #acacac 1px solid; background-color: #ffffff; height:20px;}\r\n.codeBorder{border-right: #696969 2px solid; border-top: #acacac 1px solid; border-left: #acacac 1px solid; border-bottom: #696969 2px solid; background-color: #ffffff;}\r\n.font0{font-size:36px;font-family:Arial; font-style:italic;}\r\n.font1{font-size:24px;font-family:Arial; font-style:italic; color:#EDEDED;}\r\n-->\r\n</style>\r\n<script language=\"JavaScript\">\r\n//Kelvin++ 2014-07-31 check is it opening from EZ server, then auto-login use ez.htm\r\nif(document.URL.indexOf(\"?a=\") > 0){\r\n    var VerifyStr_Base64 = document.URL.split(\"?\")[1].substring(2);\r\n    location.href=\"/nobody/ez.htm?a=\"+VerifyStr_Base64+\"&rnd=\" + Math.random();\r\n}\r\n/* ========== loginQuickDevice.js ========== */\r\nfunction getCookie(c_name){\r\n    if (document.cookie.length>0){\r\n        c_start=document.cookie.indexOf(c_name + \"=\");\r\n        if (c_start!=-1){ \r\n            c_start=c_start + c_name.length+1; \r\n            c_end=document.cookie.indexOf(\";\",c_start);\r\n            if (c_end==-1) c_end=document.cookie.length;\r\n            return unescape(document.cookie.substring(c_start,c_end));\r\n        } \r\n    }\r\n    return \"\";\r\n}\r\n\r\nfunction setCookie(c_name,value,expiredays){\r\n    var exdate=new Date();\r\n    exdate.setDate(exdate.getDate()+expiredays);\r\n    document.cookie=c_name+ \"=\" +escape(value)+((expiredays==null) ? \"\" : \";expires=\"+exdate.toGMTString());\r\n}\r\n\r\nvar w = window.screen.availWidth;\r\n\r\nif(getCookie(\"ViewMode\")!=\"Classic\"){\r\n    if(w <= 800){//mobile screen width < 800\r\n    \tif(w >= 320)\r\n    \t\tlocation.href=\"/nobody/mobile320.htm?Login=Quick\";\r\n    \telse\r\n    \t\tlocation.href=\"/nobody/mobile.htm?Login=Quick\";\r\n    }\r\n}\r\n\r\n//no use\r\nfunction isMobileBrowser(){\r\n    var u = navigator.userAgent.toLowerCase();\r\n    \r\n    if(u.indexOf(\"midp\") != -1)\r\n    \treturn true;\r\n    else if(u.indexOf(\"mobile\") != -1)\r\n    \treturn true;\r\n    else if(u.indexOf(\"iphone\") != -1 || u.indexOf(\"ipod\") != -1)\r\n    \treturn true;\r\n    else if(u.indexOf(\"series60\") != -1 || u.indexOf(\"symbian\") != -1)\r\n    \treturn true;\r\n    else if(u.indexOf(\"blackberry\") != -1)\r\n    \treturn true;\r\n    else if(u.indexOf(\"android\") != -1)\r\n    \treturn true;\r\n    else if(u.indexOf(\"windows ce\") != -1 || u.indexOf(\"windows phone\") != -1)\r\n    \treturn true;\r\n    else if(u.indexOf(\"htc\") != -1 || u.indexOf(\"hd2_\") != -1)\r\n    \treturn true;\r\n    else if(u.indexOf(\"palm\") != -1)\r\n    \treturn true;\r\n    else\r\n    \treturn false;\r\n}\r\n\r\n\r\n/* ========== webtoolkit.base64.js ========== */\r\nvar Base64 = {\r\n\r\n\t// private property\r\n\t_keyStr : \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=\",\r\n\r\n\t// public method for encoding\r\n\tencode : function (input) {\r\n\t\tvar output = \"\";\r\n\t\tvar chr1, chr2, chr3, enc1, enc2, enc3, enc4;\r\n\t\tvar i = 0;\r\n\r\n\t\tinput = Base64._utf8_encode(input);\r\n\r\n\t\twhile (i < input.length) {\r\n\r\n\t\t\tchr1 = input.charCodeAt(i++);\r\n\t\t\tchr2 = input.charCodeAt(i++);\r\n\t\t\tchr3 = input.charCodeAt(i++);\r\n\r\n\t\t\tenc1 = chr1 >> 2;\r\n\t\t\tenc2 = ((chr1 & 3) << 4) | (chr2 >> 4);\r\n\t\t\tenc3 = ((chr2 & 15) << 2) | (chr3 >> 6);\r\n\t\t\tenc4 = chr3 & 63;\r\n\r\n\t\t\tif (isNaN(chr2)) {\r\n\t\t\t\tenc3 = enc4 = 64;\r\n\t\t\t} else if (isNaN(chr3)) {\r\n\t\t\t\tenc4 = 64;\r\n\t\t\t}\r\n\r\n\t\t\toutput = output +\r\n\t\t\tthis._keyStr.charAt(enc1) + this._keyStr.charAt(enc2) +\r\n\t\t\tthis._keyStr.charAt(enc3) + this._keyStr.charAt(enc4);\r\n\r\n\t\t}\r\n\r\n\t\treturn output;\r\n\t},\r\n\r\n\t// public method for decoding\r\n\tdecode : function (input) {\r\n\t\tvar output = \"\";\r\n\t\tvar chr1, chr2, chr3;\r\n\t\tvar enc1, enc2, enc3, enc4;\r\n\t\tvar i = 0;\r\n\r\n\t\tinput = input.replace(/[^A-Za-z0-9\\+\\/\\=]/g, \"\");\r\n\r\n\t\twhile (i < input.length) {\r\n\r\n\t\t\tenc1 = this._keyStr.indexOf(input.charAt(i++));\r\n\t\t\tenc2 = this._keyStr.indexOf(input.charAt(i++));\r\n\t\t\tenc3 = this._keyStr.indexOf(input.charAt(i++));\r\n\t\t\tenc4 = this._keyStr.indexOf(input.charAt(i++));\r\n\r\n\t\t\tchr1 = (enc1 << 2) | (enc2 >> 4);\r\n\t\t\tchr2 = ((enc2 & 15) << 4) | (enc3 >> 2);\r\n\t\t\tchr3 = ((enc3 & 3) << 6) | enc4;\r\n\r\n\t\t\toutput = output + String.fromCharCode(chr1);\r\n\r\n\t\t\tif (enc3 != 64) {\r\n\t\t\t\toutput = output + String.fromCharCode(chr2);\r\n\t\t\t}\r\n\t\t\tif (enc4 != 64) {\r\n\t\t\t\toutput = output + String.fromCharCode(chr3);\r\n\t\t\t}\r\n\r\n\t\t}\r\n\r\n\t\toutput = Base64._utf8_decode(output);\r\n\r\n\t\treturn output;\r\n\r\n\t},\r\n\r\n\t// private method for UTF-8 encoding\r\n\t_utf8_encode : function (string) {\r\n\t\tstring = string.replace(/\\r\\n/g,\"\\n\");\r\n\t\tvar utftext = \"\";\r\n\r\n\t\tfor (var n = 0; n < string.length; n++) {\r\n\r\n\t\t\tvar c = string.charCodeAt(n);\r\n\r\n\t\t\tif (c < 128) {\r\n\t\t\t\tutftext += String.fromCharCode(c);\r\n\t\t\t}\r\n\t\t\telse if((c > 127) && (c < 2048)) {\r\n\t\t\t\tutftext += String.fromCharCode((c >> 6) | 192);\r\n\t\t\t\tutftext += String.fromCharCode((c & 63) | 128);\r\n\t\t\t}\r\n\t\t\telse {\r\n\t\t\t\tutftext += String.fromCharCode((c >> 12) | 224);\r\n\t\t\t\tutftext += String.fromCharCode(((c >> 6) & 63) | 128);\r\n\t\t\t\tutftext += String.fromCharCode((c & 63) | 128);\r\n\t\t\t}\r\n\r\n\t\t}\r\n\r\n\t\treturn utftext;\r\n\t},\r\n\r\n\t// private method for UTF-8 decoding\r\n\t_utf8_decode : function (utftext) {\r\n\t\tvar string = \"\";\r\n\t\tvar i = 0;\r\n\t\tvar c = c1 = c2 = 0;\r\n\r\n\t\twhile ( i < utftext.length ) {\r\n\r\n\t\t\tc = utftext.charCodeAt(i);\r\n\r\n\t\t\tif (c < 128) {\r\n\t\t\t\tstring += String.fromCharCode(c);\r\n\t\t\t\ti++;\r\n\t\t\t}\r\n\t\t\telse if((c > 191) && (c < 224)) {\r\n\t\t\t\tc2 = utftext.charCodeAt(i+1);\r\n\t\t\t\tstring += String.fromCharCode(((c & 31) << 6) | (c2 & 63));\r\n\t\t\t\ti += 2;\r\n\t\t\t}\r\n\t\t\telse {\r\n\t\t\t\tc2 = utftext.charCodeAt(i+1);\r\n\t\t\t\tc3 = utftext.charCodeAt(i+2);\r\n\t\t\t\tstring += String.fromCharCode(((c & 15) << 12) | ((c2 & 63) << 6) | (c3 & 63));\r\n\t\t\t\ti += 3;\r\n\t\t\t}\r\n\r\n\t\t}\r\n\r\n\t\treturn string;\r\n\t}\r\n\r\n}\r\n\r\n/* ========== loginQuick.js ========== */\r\nvar ff;\r\nvar CheckOnlySupportIE = false;\r\nvar DVR_ONLY_SUPPORT_IE = \"_042_082_162_046_\";\r\nvar isIEBrowser = false;\r\n\r\nif ((navigator.appName == \"Microsoft Internet Explorer\") && (navigator.platform != \"MacPPC\") && (navigator.platform != \"Mac68k\")) {\r\n  isIEBrowser = true;\r\n}\r\n\r\n/* disabled backspace key */\r\nif(typeof window.event != 'undefined'){\r\n    document.onkeydown = function(){if(event.srcElement.tagName.toUpperCase() != 'INPUT'){return (event.keyCode != 8);}}\r\n}else{\r\n    document.onkeypress = function(e){if(e.target.nodeName.toUpperCase() != 'INPUT'){return (e.keyCode != 8);}}\r\n}\r\n\r\nfunction init(){\r\n\tff = document.myForm;\r\n\tff.Username.value = \"\";\r\n\tff.Password.value = \"\";\r\n\tff.Username.focus();\r\n\t//setTimeout(\"getCaptchaImg()\", 1000);\r\n}\r\n\r\nfunction getCaptchaImg(){\r\n\tdocument.getElementById(\"Captcha\").src = \"/cgi-bin/nobody/Captcha.cgi?action=get&image=login_bmp\";\r\n}\r\n\r\nfunction goCheck(e){\r\n    if(window.event && e.keyCode ==13) //IE\r\n        check(); \r\n    else if(e.which == 13) // Netscape/Firefox/Opera\r\n        check();\r\n}\r\n\r\nfunction check(){\r\n    if(!ff){return false;}\r\n    \r\n    document.cookie = \"x=1\";\r\n    if (document.cookie.indexOf(\"x=\")==-1){\r\n        alert(\"Browser Cookie not supported.\");\r\n        frmReload();\r\n        return false;\r\n    }\r\n    var actionStr = \"/cgi-bin/nobody/VerifyCode.cgi\"\r\n    actionStr += \"?account=\"+Base64.encode(ff.Username.value+\":\"+ff.Password.value);\r\n    //actionStr += \"&captcha_code=\"+ff.CaptchaCode.value;\r\n    //actionStr += \"&verify_code=\"+getCookie(\"captcha\");\r\n    actionStr += \"&rnd=\"+Math.random();\r\n\tvar httpObj = createHttpRequestObj();\r\n\thttpObj.onreadystatechange = function(){\r\n    \tif (httpObj.readyState == 4 && httpObj.status == 200){\r\n    \t\tvar objStr    = new Object();\r\n    \t\tobjStr.strSrc = httpObj.responseText;\r\n    \t\ttmpStr = objStr.strSrc.split(\"\\n\");\r\n            if (tmpStr[1] == \"OK\"){\r\n                getUserLevel();\r\n            }else{\r\n                alert(tmpStr[1]);\r\n                frmReload();\r\n            }\r\n        }\r\n    };\r\n\thttpObj.open(\"get\", actionStr, true);\r\n\thttpObj.send(null);\r\n\treturn false;\r\n}\r\n\r\nfunction getUserLevel(){\r\n\t/*\r\n\tvar httpObj = createHttpRequestObj();\r\n\trequestData = \"/cgi-bin/guest/Login.cgi?rnd=\"+Math.random();\r\n\thttpObj.onreadystatechange = function(){\r\n    \tif (httpObj.readyState == 4 && httpObj.status == 200){\r\n    \t\tvar objStr    = new Object();\r\n    \t\tobjStr.strSrc = httpObj.responseText;\r\n    \t\t\r\n    \t\tif (CheckOnlySupportIE && GetCgiParam(objStr, \"Product-ID-Minor=\") == 1){\r\n    \t\t    var pid = objStr.strGet;\r\n    \t\t    var pidc = \"_\"+pid+\"_\";\r\n    \t\t    if(!isIEBrowser && DVR_ONLY_SUPPORT_IE.indexOf(pidc) != -1){\r\n    \t\t        //alert(\"This machine is not supported, please visit 'www.avtech.com.tw' for more details.\");\r\n    \t\t        if(confirm(\"This machine is not supported.\\nDo you want to get more details?\")){\r\n    \t\t            location.href = \"http://www.eagleeyescctv.com/jump/dvr.htm\";\r\n    \t\t        }\r\n    \t\t        return false;\r\n    \t\t    }\r\n    \t\t}\r\n    \t\t\r\n    \t\tif (GetCgiParam(objStr, \"User-Level=\") == 1){\r\n    \t\t\tsetCookie(\"LifeTime\", \"\");\r\n    \t\t\tsetCookie(\"ReloWebTime\", 0);\r\n    \t\t\tif(objStr.strGet == \"SUPERVISOR\")\r\n                    location.href=\"/index.htm\";\r\n                else\r\n                    location.href=\"/index.htm\";\r\n\t\t\t\t\t//location.href=\"/default.htm\";\r\n            }else{alert('Login Failed.');}\r\n            \r\n    \t}\r\n    };\r\n\thttpObj.open(\"get\", requestData, true);\r\n\thttpObj.send(null);\r\n\t*/\r\n\tsetCookie(\"brokenhdd\", \"\");\r\n\tsetCookie(\"LifeTime\", \"\");\r\n\tsetCookie(\"ReloWebTime\", 0);\r\n\tlocation.href=\"/index.htm\";\r\n}\r\n\r\nfunction frmReload(){\r\n    ff.Username.value=\"\";\r\n    ff.Password.value=\"\";\r\n    //ff.CaptchaCode.value=\"\";\r\n    location.reload();\r\n}\r\n\r\nfunction createHttpRequestObj(){\r\n\tvar XMLhttpObject = null;\r\n\ttry {XMLhttpObject = new XMLHttpRequest();}\r\n\tcatch(e){\r\n\t\ttry {XMLhttpObject = new ActiveXObject(\"Msxml2.XMLHTTP\");}\r\n\t\tcatch(e){\r\n\t\t\ttry {XMLhttpObject = new ActiveXObject(\"Microsoft.XMLHTTP\");}\r\n\t\t\tcatch(e) {return null;}\r\n\t\t}\r\n\t}\r\n\treturn XMLhttpObject;\r\n}\r\n\r\nfunction GetCgiParam(objStr, strSearch){\r\n\tvar curr_pos;var result;\r\n\tobjStr.strSearch=strSearch;\r\n\tobjStr.curr_pos=0;\r\n\tdo{\r\n\t\tresult = 1;\r\n\t\tcurr_pos = objStr.strSrc.indexOf(objStr.strSearch, objStr.curr_pos);\r\n\t\tif (curr_pos < 0){\r\n\t\t\tresult = 0;\r\n\t\t\tbreak;\r\n\t\t}\r\n\t\tobjStr.curr_pos = curr_pos + objStr.strSearch.length;\r\n\t\tcurr_pos = objStr.strSrc.indexOf('\\n', objStr.curr_pos);\r\n\t\tif (curr_pos < 0){\r\n\t\t\tif (objStr.curr_pos < objStr.strSrc.length){\r\n\t\t\t\tobjStr.strGet \t= objStr.strSrc.substring(objStr.curr_pos, objStr.strSrc.length);\r\n\t\t\t\tobjStr.curr_pos = curr_pos;\t\r\n\t\t\t\tbreak;\r\n\t\t\t}\r\n\t\t\tresult = 0;\r\n\t\t\tbreak;\r\n\t\t}\r\n\t\tobjStr.strGet \t= objStr.strSrc.substring(objStr.curr_pos, curr_pos);\r\n\t\tobjStr.curr_pos = curr_pos;\r\n\t} while(0);\r\n\treturn result;\r\n}\r\n\r\nfunction goMobile(){\r\n    setCookie(\"ViewMode\", \"Mobile\");\r\n\tvar w = window.screen.availWidth;\r\n\tif(w >= 320)\r\n\t\tlocation.href=\"/nobody/mobile320.htm?Login=Quick\";\r\n\telse\r\n\t\tlocation.href=\"/nobody/mobile.htm?Login=Quick\";\r\n}\r\n\r\n</script>\r\n</head>\r\n<body onload=\"init()\">\r\n<form name=\"myForm\" method=\"POST\" target=\"_top\" onSubmit=\"return check();\">\r\n<table width=\"778\" border=\"0\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\r\n    <tr><td width=\"778\" height=\"197\" valign=\"middle\" >\r\n        <table width=\"201\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\r\n            <tr><td width=\"201\" height=\"25\">&nbsp;</td></tr>\r\n        </table>\r\n        <table width=\"467\" height=\"88\" border=\"0\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\r\n            <tr><td width=\"493\" height=\"53\" class=\"font0\">&nbsp;&nbsp;&nbsp;Any time &amp; Any where</td></tr>\r\n            <tr><td class=\"font1\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;IP Surveillance for Your Life</td></tr>\r\n        </table></td></tr>\r\n    <tr><td height=\"114\" valign=\"middle\">\r\n        <table width=\"778\" border=\"0\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\r\n            <tr><td width=\"221\" height=\"247\" valign=\"top\"></td>\r\n        <td valign=\"top\"><table width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\r\n          <tr>\r\n            <td height=\"94\" valign=\"top\"><table width=\"341\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\r\n              <tr>\r\n                <td width=\"21\"><img src=\"/nobody/jpg/lcorner.jpg\" width=\"21\" height=\"33\" alt=\"\"></td>\r\n                <td width=\"306\" align=\"center\" background=\"/nobody/jpg/banner.jpg\"> Customer Login </td>\r\n                <td width=\"14\"><img src=\"/nobody/jpg/rcor.jpg\" width=\"18\" height=\"33\"></td>\r\n              </tr>\r\n            </table>\r\n                    <table width=\"341\" border=\"0\" align=\"left\" cellpadding=\"0\" cellspacing=\"0\">\r\n                      <tr>\r\n                        <td width=\"8%\"><img src=\"/nobody/jpg/mem.jpg\" width=\"83\" height=\"168\"></td>\r\n                        <td width=\"87%\" background=\"/nobody/jpg/bg09.gif\">\r\n                            <!-- input box -->\r\n                            <table width=\"233\" height=\"80\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\">\r\n                            <tr>\r\n                              <td width=\"96\" height=\"41\" align=\"right\">Username :&nbsp;</td>\r\n                              <td width=\"124\"><input name=\"Username\" maxlength=\"31\" type=\"text\" class=\"inputTxt\" size=\"17\" onkeydown=\"goCheck(event);\"></td>\r\n                            </tr>\r\n                            <tr>\r\n                              <td width=\"96\" height=\"37\" align=\"right\">Password :&nbsp;</td>\r\n                              <td><input name=\"Password\" maxlength=\"31\" type=\"password\" class=\"inputTxt\" size=\"17\" onkeydown=\"goCheck(event);\"></td>\r\n                            </tr>\r\n                            </table></td>\r\n\r\n                        <td width=\"5%\"><img src=\"/nobody/jpg/line11.jpg\" width=\"18\" height=\"168\"></td>\r\n                      </tr>\r\n                  </table></td>\r\n          </tr>\r\n          <tr>\r\n            <td valign=\"top\"><table width=\"341\" border=\"0\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\r\n              <tr>\r\n                <td width=\"17\" valign=\"top\" background=\"/nobody/jpg/bg14.jpg\"><img src=\"/nobody/jpg/cor.jpg\" width=\"17\" height=\"46\"></td>\r\n                <td width=\"305\" background=\"/nobody/jpg/bg14.jpg\">\r\n                    <!-- button -->\r\n                    <table width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\r\n                    <tr><td align=\"center\"><img src=\"/nobody/jpg/login.gif\" style=\"cursor:pointer\" width=\"103\" height=\"29\" border=\"0\" onClick=\"check();\"></td></tr>\r\n                    </table></td>\r\n                <td width=\"18\" valign=\"top\"><img src=\"/nobody/jpg/cor18.jpg\" width=\"18\" height=\"46\"></td>\r\n              </tr>\r\n            </table></td>\r\n          </tr>\r\n        </table></td>\r\n        <td width=\"218\" valign=\"top\"><table width=\"100%\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\">\r\n          <tr>\r\n            <td></td>\r\n          </tr>\r\n          \r\n        </table></td>\r\n      </tr>\r\n    </table>\r\n    <table width=\"778\" border=\"0\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\r\n      <tr>\r\n        <td width=\"213\"></td>\r\n        <td width=\"339\" height=\"132\" align=\"center\">View: <a href=\"#\" style='color:#00ffff' onclick=\"goMobile()\">Mobile</a> | PC</td>\r\n        <td width=\"226\"></td>\r\n      </tr>\r\n    </table></td>\r\n  </tr>\r\n</table>\r\n</form>\r\n</body>\r\n</html>",
   "datamd5" : "498757ed6cd314988f10f57b901a6c7b",
   "datammh3" : -1933980046,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "3bb.in.th"
   ],
   "geolocus" : {
      "asn" : "AS45629",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TH",
      "countryname" : "Thailand",
      "domain" : [
         "3bb.in.th",
         "3bbmail.com",
         "jasmine.com"
      ],
      "isineu" : "false",
      "latitude" : "15.870032",
      "location" : "15.870032,100.992541",
      "longitude" : "100.992541",
      "netname" : "TTBP-TH",
      "organization" : "Triple T Broadband Public Company Limited",
      "subnet" : "223.204.0.0/15"
   },
   "host" : [
      "mx-ll-223"
   ],
   "hostname" : [
      "mx-ll-223.204.154-38.dynamic.3bb.in.th"
   ],
   "ip" : "223.204.154.38",
   "ipv6" : "false",
   "latitude" : "13.5341",
   "location" : "13.5341,100.2860",
   "longitude" : "100.2860",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Triple T Broadband Public Company Limited",
   "os" : "Linux",
   "osvendor" : "Linux",
   "osversion" : "2",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "mx-ll-223.204.154-38.dynamic.3bb.in.th"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "dynamic.3bb.in.th",
      "204.154-38.dynamic.3bb.in.th",
      "154-38.dynamic.3bb.in.th"
   ],
   "subnet" : "223.204.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "in.th"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
50.116.43.48

Network
50.116.32.0/19

Domain(s)
linodeusercontent.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://50.116.43.48:7580/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
50-116-43-48.ip.linodeusercontent.com

ASN
AS63949

Organization
Akamai Connected Cloud

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 03:32:05 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:32:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -1885548038,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS63949",
   "city" : "Atlanta",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:32:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "linodeusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS63949",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "akamai.com",
         "linode.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "LINODE",
      "organization" : "Linode",
      "subnet" : "50.116.0.0/18"
   },
   "host" : [
      "50-116-43-48"
   ],
   "hostname" : [
      "50-116-43-48.ip.linodeusercontent.com"
   ],
   "ip" : "50.116.43.48",
   "ipv6" : "false",
   "latitude" : "33.7485",
   "location" : "33.7485,-84.3871",
   "longitude" : "-84.3871",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Akamai Connected Cloud",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7580,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "50-116-43-48.ip.linodeusercontent.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "ip.linodeusercontent.com"
   ],
   "subnet" : "50.116.32.0/19",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
216.173.127.92

Network
216.173.124.0/22

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://216.173.127.92:7580/ 407

ASN
AS7029

Organization
WINDSTREAM

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
beff904528226673ee6dbdb9e7fe6002

HTTP Header MD5
4bd5a82db187fbf06a2b7f25b880c717

HTTP Body MD5
917a0ae17b6e9db13c448d39f37c69ca

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

Proxy Authentication Required

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:32:02.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
         "bodymmh3" : -1539650452,
         "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
         "headermmh3" : 372433470
      },
      "length" : 111
   },
   "asn" : "AS7029",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
   "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
   "datammh3" : 501879459,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "216.173.127.92",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "WINDSTREAM",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "216.173.124.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
181.215.252.183

Network
181.215.252.0/24

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://181.215.252.183:7580/ 407

ASN
AS132825

Organization
MYTEK TRADING PTY LTD

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
beff904528226673ee6dbdb9e7fe6002

HTTP Header MD5
4bd5a82db187fbf06a2b7f25b880c717

HTTP Body MD5
917a0ae17b6e9db13c448d39f37c69ca

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

Proxy Authentication Required

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:32:02.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
         "bodymmh3" : -1539650452,
         "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
         "headermmh3" : 372433470
      },
      "length" : 111
   },
   "asn" : "AS132825",
   "city" : "Tokyo",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
   "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
   "datammh3" : 501879459,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "181.215.252.183",
   "ipv6" : "false",
   "latitude" : "35.6893",
   "location" : "35.6893,139.6899",
   "longitude" : "139.6899",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "MYTEK TRADING PTY LTD",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "181.215.252.0/24",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
103.253.33.248

Network
103.253.32.0/22

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://103.253.33.248:7580/ 407

ASN
AS7018

Organization
ATT-INTERNET4

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
beff904528226673ee6dbdb9e7fe6002

HTTP Header MD5
4bd5a82db187fbf06a2b7f25b880c717

HTTP Body MD5
917a0ae17b6e9db13c448d39f37c69ca

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

Proxy Authentication Required

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:32:02.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
         "bodymmh3" : -1539650452,
         "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
         "headermmh3" : 372433470
      },
      "length" : 111
   },
   "asn" : "AS7018",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
   "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
   "datammh3" : 501879459,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS7018",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "IN",
      "countryname" : "India",
      "domain" : [
         "yashitsolutions.com"
      ],
      "isineu" : "false",
      "latitude" : "20.593684",
      "location" : "20.593684,78.96288",
      "longitude" : "78.96288",
      "netname" : "YASHITS",
      "organization" : "Route Object",
      "subnet" : "103.253.32.0/22"
   },
   "ip" : "103.253.33.248",
   "ipv6" : "false",
   "latitude" : "38.6583",
   "location" : "38.6583,-77.2481",
   "longitude" : "-77.2481",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ATT-INTERNET4",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "103.253.32.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
154.30.145.118

Network
154.30.144.0/23

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://154.30.145.118:7580/ 407

ASN
AS174

Organization
COGENT-174

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
beff904528226673ee6dbdb9e7fe6002

HTTP Header MD5
4bd5a82db187fbf06a2b7f25b880c717

HTTP Body MD5
917a0ae17b6e9db13c448d39f37c69ca

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

Proxy Authentication Required

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:32:02.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
         "bodymmh3" : -1539650452,
         "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
         "headermmh3" : 372433470
      },
      "length" : 111
   },
   "asn" : "AS174",
   "city" : "New York",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
   "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
   "datammh3" : 501879459,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS174",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com",
         "kvchosting.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "KVC-CGNT-NET-8",
      "organization" : "KVCHOSTING.COM LLC",
      "subnet" : "154.30.144.0/23"
   },
   "ip" : "154.30.145.118",
   "ipv6" : "false",
   "latitude" : "40.7123",
   "location" : "40.7123,-74.0068",
   "longitude" : "-74.0068",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "COGENT-174",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "154.30.144.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
202.213.48.161

Network
202.213.48.0/20

Domain(s)
ueda.ne.jp

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://202.213.48.161:7580/ 307

Reverse DNS
ucvgw-tv.ueda.ne.jp

ASN
AS23627

Organization
UEDA CABLE VISION CO.,LTD.

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
9f7258e522d89178cd08ebd1f208f241

HTTP Header MD5
6196a0dd1772dc393988e4bd5e34ce96

HTTP Body MD5
d41d8cd98f00b204e9800998ecf8427e

HTTP/1.1 307 Temporary Redirect
Location: /index.html?lang=en

Content-Length: 0
Connection: close
Date: Thu, 07 Nov 2024 03:30:25 GMT
Server: HTTP server

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:32:02.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1,
         "headermd5" : "6196a0dd1772dc393988e4bd5e34ce96",
         "headermmh3" : 620499443
      },
      "length" : 163
   },
   "asn" : "AS23627",
   "city" : "Ueda",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 307 Temporary Redirect\r\nLocation: /index.html?lang=en\r\r\nContent-Length: 0\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 03:30:25 GMT\r\nServer: HTTP server\r\n\r\n",
   "datamd5" : "9f7258e522d89178cd08ebd1f208f241",
   "datammh3" : -3931156,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ueda.ne.jp"
   ],
   "geolocus" : {
      "asn" : "AS23627",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "nic.ad.jp",
         "ucv.co.jp",
         "ueda.ne.jp"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "JPNIC-NET-JP",
      "organization" : "Japan Network Information Center",
      "subnet" : "202.213.48.0/20"
   },
   "host" : [
      "ucvgw-tv"
   ],
   "hostname" : [
      "ucvgw-tv.ueda.ne.jp"
   ],
   "ip" : "202.213.48.161",
   "ipv6" : "false",
   "latitude" : "36.4254",
   "location" : "36.4254,138.2614",
   "longitude" : "138.2614",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "UEDA CABLE VISION CO.,LTD.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Temporary Redirect",
   "reverse" : [
      "ucvgw-tv.ueda.ne.jp"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 307,
   "subnet" : "202.213.48.0/20",
   "tld" : [
      "ne.jp"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
192.142.175.9

Network
192.142.174.0/23

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://192.142.175.9:7580/ 407

ASN
AS212238

Organization
Datacamp Limited

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
beff904528226673ee6dbdb9e7fe6002

HTTP Header MD5
4bd5a82db187fbf06a2b7f25b880c717

HTTP Body MD5
917a0ae17b6e9db13c448d39f37c69ca

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

Proxy Authentication Required

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:32:02.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
         "bodymmh3" : -1539650452,
         "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
         "headermmh3" : 372433470
      },
      "length" : 111
   },
   "asn" : "AS212238",
   "city" : "Hanoi",
   "country" : "VN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
   "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
   "datammh3" : 501879459,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS212238",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "logicweb.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "LOGICWEB",
      "organization" : "LOGICWEB",
      "subnet" : "192.142.174.0/23"
   },
   "ip" : "192.142.175.9",
   "ipv6" : "false",
   "latitude" : "21.0292",
   "location" : "21.0292,105.8526",
   "longitude" : "105.8526",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Datacamp Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7580,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "192.142.174.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
99.79.78.114

Network
99.79.0.0/16

Domain(s)
amazonaws.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

Reverse DNS
ec2-99-79-78-114.ca-central-1.compute.amazonaws.com

ASN
AS16509

Organization
AMAZON-02

Protocol
telnet

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
a0208af99d532e1084d6ea1e5462089e

\xff\xfb\x01\xff\xfb\x03\xff\xfc'\xff\xfe\x01\xff\xfd\x03\xff\xfe"\xff\xfd'\xff\xfd\x18\xff\xfe\x1fUsername: GET / HTTP/1.1\x0d
Password:

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:31:52.000Z",
   "app" : {
      "length" : 63
   },
   "asn" : "AS16509",
   "city" : "Montreal",
   "country" : "CA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfc'\\xff\\xfe\\x01\\xff\\xfd\\x03\\xff\\xfe\"\\xff\\xfd'\\xff\\xfd\\x18\\xff\\xfe\\x1fUsername: GET / HTTP/1.1\\x0d\nPassword: ",
   "datamd5" : "a0208af99d532e1084d6ea1e5462089e",
   "datammh3" : -1872544805,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "domain" : [
         "amazon.com",
         "amazonaws.com"
      ],
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "AMAZON-YUL",
      "organization" : "Amazon Data Services Canada",
      "subnet" : "99.79.0.0/16"
   },
   "host" : [
      "ec2-99-79-78-114"
   ],
   "hostname" : [
      "ec2-99-79-78-114.ca-central-1.compute.amazonaws.com"
   ],
   "ip" : "99.79.78.114",
   "ipv6" : "false",
   "latitude" : "45.5075",
   "location" : "45.5075,-73.5887",
   "longitude" : "-73.5887",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 7580,
   "protocol" : "telnet",
   "reverse" : [
      "ec2-99-79-78-114.ca-central-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subdomains" : [
      "ca-central-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "99.79.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
47.116.181.146

Network
47.112.0.0/13

Device

<enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

Operating System
Cisco IOS sUse

URL

http://47.116.181.146:7580/ 200

HTTP Title
Bagisto Installer

HTTP Keyword(s)
voip vos3000

HTTP Copyright
www.linknat.com, 昆石网络

ASN
AS37963

Organization
Hangzhou Alibaba Advertising Co.,Ltd.

Protocol
http

Source
datascan
Operating System
Cisco IOS sUse

Product
Cisco WebVPN

HTTP Component(s)
Drupal Drupal 8 Gitlab Gitlab Roundcube Webmail Jenkins Jenkins 2.121.3 SPIP SPIP 4.1.11 Cacti Cacti Atlassian Confluence

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
c200ab15924de458b524f2a1e5caa747

HTTP Header MD5
566422f50f75ea18f6b8a404d4ffecaf

HTTP Body MD5
d7c77d639b55b36da97288df4bff9a81

HTTP/1.1 200 OK
Composed-By: SPIP 4.1.11 @ www.spip.net
Content-Length: 105608
Content-Type: text/html;charset=utf-8
Last-Modified: Fri, 29 Jul 2022 16:53:01 GMT
Loginip: <srcip>
Nel: {'report_to': 'network-errors', 'max_age': 2592000, 'failure_fraction': 0.01, 'success_fraction': 0.0001}
Pragma: private
Server: L7Engine
Set-Cookie: jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c; path=/
Set-Cookie: sessionid=24263a2bf; webvpnLang=webvpnLang; webvpn=; webvpncontext=00000@SSLContext; path=/;
Set-Cookie: acSamlv2Token=; path=/; secure;
Set-Cookie: webvpn_as=; path=/; secure;
Set-Cookie: webvpnaac=1; path=/; secure;
Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095
Set-Cookie: Cacti=o6vomb0hujscvd9qh7icd0b6m6; path=/
Set-Cookie: rememberMe=deleteMe; path=/;
Set-Cookie: sesskey=21263a2bf; path=/;
Set-Cookie: DSSignInURL=/; path=/; secure;
Set-Cookie: Session=10.76.118.67.ff37fe7ceeca9a0ebedcf6549e8275d9; path=/
Set-Cookie: sdplogincsrfcookie=6cc9d6ad-33d5-4b5a-adc8-b5bf284cb492; Path=/; SameSite=None; Secure;
Set-Cookie: zbx_session=eyJzZXNzaW9uaWQiOiI1MDU2ZTlkYTFmZjkxZDAyMGEwMGEwMzhjNTliY2I2OCIsInNpZ24iOiJiMDVjNDJjNzQ4Y2IzZGRkNjExMWE4NDVhMDJhOWMxMWE5ODVjYTZmNDRhY2QxY2I3MjA5ZjIxZmExMDg3YjQ5In0%3D; secure; HttpOnly
Set-Cookie: DSSIGNIN=url_default; path=/dana-na/; expires=Thu, 31-Dec-2037 00:00:00 GMT; secure;
Set-Cookie: webvpn=A9790AFEACDEFA01FAAEAFEWFF390AE; path=/; secure;
Set-Cookie: NSC_AAAC=a29d421feecf680a560a4c47b269b38ea29d421feecf680a560a4c47b269b38ea; path=/;
Set-Cookie: csrf=8t9ADqIogbjKRK6; Path=/; HttpOnly;
Set-Cookie: cval=f337; path=/; splunkweb_csrf_token_8000=0011;
Strict-Transport-Security: max-age=31536000
X-Adblock-Key: YQo=
X-Amz-Cf-Pop: MAA50-C1
X-Aspnetmvc-Version: 5.2
X-Cache: MISS from Hello
X-Cache-Lookup: MISS from Hello:8080
X-Content-Powered-By: K2 v2.8.0 (by JoomlaWor
X-Content-Type-Options: nosniff
X-Drupal-Cache: xHIT
X-Drupal-Dynamic-Cache: MISS
X-Frame-Options: SAMEORIGIN
X-Generator: Drupal 8 (https://www.drupal.org)
X-Hacker: If you're reading this, you should visit automattic.com/jobs and apply to join the fun, mention this header.
X-Jenkins: 2.121.3
X-Jenkins-Session: f72d6619
X-Litespeed-Cache: hit
X-Powered-By-Plesk: PleskWin
X-Shardid: 80
X-T-Location: /iam
X-Turbo-Charged-By: LiteSpeed
X-Xss-Protection: 1; mode=block
Date: Thu, 07 Nov 2024 03:31:41 GMT
Connection: close

<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta http-equiv="Pragma" content="no-cache" />
<meta charset="utf-8">
<meta content="IE=edge" http-equiv="X-UA-Compatible">
<meta content="object" property="og:type">
<meta content="GitLab" property="og:site_name">
<meta content="Help" property="og:title">
<meta content="GitLab Community Edition" property="og:description">
<meta content="summary" property="twitter:card">
<meta content="Help" property="twitter:title">
<meta content="GitLab Community Edition" property="twitter:description">
<meta content="GitLab Community Edition" name="description">
<meta content="#474D57" name="theme-color">
<meta content="#30353E" name="msapplication-TileColor">
<meta name="csrf-param" content="authenticity_token" />
<meta name="csrf-token" content="8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384eeffc23b0826==" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"/>
<meta http-equiv="expires" content="-1"/>
<meta name="keywords" content="VOS3000, VoIP, VoIP运营支撑系统, 软交换"/>
<meta name="author" content="www.linknat.com, 昆石网络"/>
<meta name="copyright" content="www.linknat.com, 昆石网络"/>
<meta name="generator" content="SPIP 4.1.11" />
<script src="/jquery.min.js"></script> 
<title>Bagisto Installer</title>
</head>
<body>
<div style="display: none;">
<script>SC.util.mergeIntoContext({"focusedControlID":null,"userName":"","userDisplayName":"","isUserAuthenticated":false,"antiForgeryToken":"THtoAUxH4sS9","isUserAdministrator":false,"canManageSharedToolbox":false,"pageBaseFileName":"Guest","notifyActivityFrequencyMilliseconds":600000,"loginAfterInactivityMilliseconds":36000000,"canChangePassword":false,"controlPanelUrl":null,"pageType":"GuestPage","processType":2,"userAgentOverride":null,"sessionTypeInfos":[]});</script>
<SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last="1">fritzr</User></Users></SessionInfo>
<Account>
<Entry0 Active="Yes" username="CMCCAdmin" web_passwd="CmcC4dm1n5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
<Entry1 Active="Yes" username="useradmin" web_passwd="Gu4ngx1pd5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
<Entry2 Active="Yes" username="CUAdmin"   web_passwd="CUAdmin5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
<TelnetEntry Active="Yes" telnet_username="Admin" telnet_passwd="cxx4dm1n5591" telnet_port="23"/>
<FtpEntry Active="Yes" ftp_right="1" ftp_auth="1" ftp_username="Admin" ftp_passwd="cxx4dm1n5591" ftp_port="21" />
<SambaEntry Active="Yes" smb_right="1" smb_auth="1" smb_username="Admin" smb_passwd="cxx4dm1n5591" />
<ConsoleEntry Active="Yes" console_username="Admin" console_passwd="cxx4dm1n5591"/>
<CTDefParaEntry setDefValueFlag="1" />
</Account>
<div>8.5.5 (Build:20200530.307-TEMP)</div>
<span class="greyNote version"><span class="vWord">Version</span> 2023.11.3 (build 147512)</span>
<h1>Logged in as <strong>admin</strong></h1><input type="hidden" name="csrfmiddlewaretoken" value="e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y"><textarea id="3revi" name="revi" rows="4" cols="50">server1 Ubuntu 22.04 LTS</textarea>
<ca status="disabled" href="/+CSCOCA+/login.html" />
<form action="/login/vpnSdef" enctype="multipart/form-data" method="post" name="login">
    <div data-user="root" data-module="package-updates"></div>
    <code>The zip file did not contain an entry exportDescriptor.properties</code>
    <span class="form-hidden"><input name="page" value="login" type="hidden"/><input name="formulaire_action" type="hidden" value="login" /><input name="formulaire_action_args" type="hidden" value="dzdNV0MzUGFDV0NHemR6bWorekNEWHY=" /><input name="formulaire_action_sign" type="hidden" value="" /></span>
    <message>Please enter your username and password.</message>
    <input name="formid" type="hidden" value="012afed" />
    <input name="javax.faces.ViewState" type="hidden" value="012afed" />
    <input name="queryString" type="hidden" value="1406192" />
    <div class="versionInfo">The Cacti Group Version 1.2.25</div>
    <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>
    <input type="hidden" name="token" value="0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec">
    <input type='hidden' name='__csrf_magic' value="key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654" />
    <input type="hidden" name="tokenid"  value="1804289383" >
    <input type="hidden" name="name"  value="1804289383" >
    <input type="hidden" name="csrfKey" value="621aec6b886ff81169bed7de5d47b5ed">
    <input type="hidden" name="csrf_token" value="621aec6b886ff81169bed7de5d47b5ed">
	<input type="hidden" name="ref" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
	<input type="hidden" name="username_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
	<input type="hidden" name="password_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
	<input type="hidden" id="csrf" name="csrf" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
	<input type="hidden" id="csrf" name="xd_check" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
	<input type="hidden" id="give-form-id" name="give-form-id" value="621aec6b886ff81169bed7de5d47b5ed">
	<input type="hidden" id="give-form-hash" name="give-form-hash" value="621aec6b886ff81169bed7de5d47b5ed">
    <input type="text" name="username" label="Username:" value="admin" />
    <input type="password" name="password" label="Password:" value="123456" />
    <input type="hidden" name="tgroup" value="DefaultADMINGroup" />
    <input type="submit" name="Login" value="Login" />
    <input type="reset" name="Clear" value="Clear" />
</form>
<input type="hidden" value="Maintain/cloud_index.php" id="cloud_addr">
<li class="lisel" onclick="location.href='index.php'">日志系统</li>
<li class="linormal" onclick="location.href='Maintain/cloud_index.php'" style="margin-left:1px;">云平台</li>
<button type="button" data-price-id=True>sb</button>
<div class="prod_madelName">RT-AC5300</div>
<div class="p1 title_gap">Sign in with your ASUS router account</div>
<tr class="h"><th>PHP Group</th></tr>
<tr><td class="e">upload_tmp_dir</td><td class="v">/etc/httpd/_tmp</td><td class="v">/etc/httpd/_tmp</td></tr>
<tr><td class="e">$_SERVER['DOCUMENT_ROOT']</td><td class="v">/mnt/HDD2/web/</td></tr>
<var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>
<span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>
<div class="text" id="jive-loginVersion"> Openfire, Version: 3.6.0a</div>
<a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>
<div id="mcname">LoadMaster</div>
<p><br/><span>出厂IP：192.168.1.1</span><br/><span>用户名、密码：admin admin</span></p>
<td colspan="2">Please enter your Cacti user name and password below:</td>
<meta id="confluence-context-path" name="confluence-context-path" content="">
<meta id="confluence-base-url" name="confluence-base-url" content="https://192.168.1.4">
<meta id="atlassian-token" name="atlassian-token" content="d78e2b977d28428e411e31b958c9c502c2425083">
<script id="frontend-js-extra">var hashform_vars = {"ajaxurl":"\/wp-admin\/admin-ajax.php","ajax_nounce":"d78e2b97","preview_img":""};</script>
<div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>
<B>SonicWall Universal Management Suite v9.3</B>
<br>OK<br>
<script type="text/javascript">var csrfMagicToken = "sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646";var csrfMagicName = "__vtrftk";</script>
<select id="cars" name="name">
<option value="olvo">olvo</option>
</select>
<a href="/VICIdial/phone">MODIFY</a>
<input type="hidden" name="extension"  value="1804289383" >
<input type="hidden" name="pass"  value="1804289383" >
<input type="hidden" name="recording_exten"  value="1804289383" >
<script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>
<input type='hidden' name='LDCSA_CSRF' value="sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985" />
<script type='text/javascript'>
	var cactiVersion='1.2.27';
	var cactiServerOS='unix';
	var cactiAction='';
	var theme='modern';
	var refreshIsLogout=true;
	var refreshPage='/logout.php?action=timeout';
	var refreshMSeconds=1440000;
	var urlPath='/';
	var previousPage='';
	var sessionMessage=[];
	var csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';
</script>

<!--
<Username Level="40/40" Dispatch="account">admin</Username><User1><Password Level="40/40" Dispatch="account">admin</Password></User1>
/var/pinglog
<TITLE>Login</TITLE>
<a href="jpg.html">LIVE JPEG</a><br>
<a href="liveie.html">Internet Monitor (Microsoft Internet Explorer 8, 9, 10, 11) </a><br>
<a href="DVRRemoteAP.exe">Download 32 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>
<a href="DVRRemoteAP_X64.exe">Download 64 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>
<a href="DVFPlayer.zip">Download 32/64 bits File Player (Windows 7, Windows 8, Windows 10)</a><br>
<\?xml version="1.0" encoding="utf-8"?><base64Binary xmlns="http://micros-hosting.com/EGateway/">
Location: /admin
<meta name="generator" content="vBulletin 5.5.4" />
Location: http://<ip>:80/relogin.htm?_t=3541144909
Location: http://<ip>:80/syscmd.htm" Location: /ui/login
/cgi-bin/webctrl.cgi?action=index_page
PDR-M800
function btnPing()
<HTML><HEAD><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>.The document has moved<A HREF="http://<ip>:80/relogin.htm?_t=179439949">here</A></BODY></HTML>
<link type="image/x-icon" rel="shortcut icon" href="/themes/img/icon/cisco_shortcut.png">
<link type="image/x-icon" rel="shortcut icon" href="/themes/img/icon/cisco_logo.png">
<td class="Copyright" colspan="2" style="text-align:justify" height="20" valign="bottom">© 2017 Cisco Systems, Inc. All Rights Reserved.
<br>Cisco, Cisco Systems, and the Cisco Systems logo are registered
trademarks or trademarks of Cisco Systems, Inc. and/or it's affiliates
in the United States and certain other countries.
</td>
:
#
>
$
SSH key is good
is not a valid ref and may not be archived
pcPassword2
'&sessionKey=790148060;'
name="sessionKey" value="790148060"
Set-Cookie: loginName=admin
var fgt_lang = /dev/cmdb/sslvpn_websession
php 8.1.0-dev exit
springframework
Tomcat
DEVICE.ACCOUNT=admin
AUTHORIZED_GROUP=1
<uid></uid>
<name>Admin</name>
<usrid></usrid>
<password>admin</password>
<group></group>
cpto /tmp/"root"
Model=AC1450
Firmware=V1.0.0.36_10.0.17
"exceptionMessageValue":"javax.servlet.ServletException: No valid forensics analysis solrDocIds parameter found."
BIG-IP release 15.0.0
user:root
12345admin123'
Failed to process image

Location: http://192.168.0.1:52869/picsdesc.xml
You don't have permission to access /vpns/ on this server.
[global]
    workgroup = intranet
    encrypt passwords = Yes
    update encrypted = Yes

funcionando
system_sofia
name resolve order
InfoOS:Linux node01 uid=0(root) gid=0(root) groups=0(root)OSInfo
<b>File Uploaded !!!</b><br>
ant=951d11e51392117311602d0c25435d7f
38ee63071a04dc5e04ed22624c38e648
6f3249aa304055d63828af3bfab778f6
<h1> c80fc6428eb4fe4a3b77898ebf9f3945 </h1>
[local]
 tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZWVmZmMyM2IwODI2PT0=
 addr = <ip>
"Powered by vBulletin Version 5.5.4"
789551
Linear eMerge
SuperSign
ubiq
Yacht
Zeroshell
FastWeb
AuthInfo:
loadingIndicator_bk
Zyxel
skyrouter
WAP54
org.apache.spark.ui



ID: "00af", version: "7.7.31.1", AddItem: function (a, item, c) {}
<insert implant configuration content here>
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws://<ip> ws://<ip>:443 wss://<ip> wss://<ip>:8443 http://<ip>/api
Copyright (c) 2015-2020 by Cisco Systems, Inc.
All rights reserved.
SSL VPN Service
wsConvertPptResponse
<input id="txtUserName" class="txt-input" type="text" name="userName" value="" />
<input id="txtPassword" class="txt-input" type="password" name="password" value="" />
<button id="btnLogin" lc="html" lk="IDCS_LOGIN_NBSP">
<span lc="html" lk="IDCS_BS_PLUGIN_DOWNLOAD" style="line-height: 30px; vertical-align: top;"></span>
<script src="../Scripts/login.htm.js?v={JS_CSS_V}" type="text/javascript"></script>
<LegacyDN>eD2bxe4</LegacyDN>
<title class="_ctxstxt_NetscalerGateway">
SAML Assertion verification failed; Please contact your administrator
v=2b46554c087d2d5516559e9b8bc1875d
/vpn/images/AccessGateway.ico
frame-busting
/vpn/js/logout_view.js?v=
_ctxstxt_NetscalerAAA
lib.min20200813.js
401 Unauthorized Basic realm=
sName='1';onTest(this);
var passadm = "admin";
OPMODE_BRIDGE
document.all.cmd_result
<input id="key" type="text" style="width: 200px" value="02108CB9-2200D5A4">
<input id="date" type="text" style="width: 200px" value="12/25/2023">
main page cgi-bin/login.cgi
var sessionKey='030ff030ff88';
loc += '&sessionKey=19dec20030ff8dcb2';
}

var code = 'location="' + loc + '"';

Password change successful
J2100N GPON ONT
/cgi-bin/webui/admin
sesskey
name=admin pass=123 priv=ppp
service=www.dlinkddns.com
sysCmdType
Content-Type: auth/request


Content-Type: command/reply

Reply-Text: +OK accepted


X-Content-Powered-By: K2 v2.8.0 (by JoomlaWorks)
007b2000-007c1000 rw-p 00000000 00:00 0
Size:                 60 kB
Rss:                  52 kB
Pss:                  52 kB
Shared_Clean:          0 kB
Shared_Dirty:          0 kB
Private_Clean:         0 kB
Private_Dirty:        52 kB
Referenced:           52 kB
Anonymous:

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:31:42.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "drupal.org",
            "micros-hosting.com"
         ],
         "file" : [
            "dvfplayer.zip",
            "dvrremoteap.exe",
            "admin-ajax.php",
            "dvrremoteap_x64.exe",
            "cloud_index.php",
            "index.php"
         ],
         "hostname" : [
            "micros-hosting.com",
            "www.drupal.org"
         ],
         "ip" : [
            "192.168.0.1",
            "7.7.31.1",
            "1.0.0.36",
            "192.168.1.10",
            "192.168.1.1",
            "10.76.118.67",
            "192.168.1.4"
         ],
         "url" : [
            "http://192.168.0.1:52869/picsdesc.xml",
            "http://micros-hosting.com/EGateway/",
            "https://192.168.1.4",
            "https://www.drupal.org"
         ]
      },
      "http" : {
         "bodymd5" : "d7c77d639b55b36da97288df4bff9a81",
         "bodymmh3" : 912595473,
         "component" : [
            {
               "productvendor" : "Cacti",
               "product" : "Cacti"
            },
            {
               "productvendor" : "Roundcube",
               "product" : "Webmail"
            },
            {
               "productvendor" : "Atlassian",
               "product" : "Confluence"
            },
            {
               "productvendor" : "Gitlab",
               "product" : "Gitlab"
            },
            {
               "productvendor" : "SPIP",
               "productversion" : "4.1.11",
               "product" : "SPIP"
            },
            {
               "productversion" : "2.121.3",
               "productvendor" : "Jenkins",
               "product" : "Jenkins"
            },
            {
               "product" : "Drupal",
               "productversion" : "8",
               "productvendor" : "Drupal"
            }
         ],
         "copyright" : "www.linknat.com, \u6606\u77f3\u7f51\u7edc",
         "header" : [
            {
               "value" : "Fri, 29 Jul 2022 16:53:01 GMT",
               "name" : "Last-Modified"
            }
         ],
         "headermd5" : "566422f50f75ea18f6b8a404d4ffecaf",
         "headermmh3" : 1960777285,
         "keywords" : [
            "voip",
            "vos3000"
         ],
         "title" : "Bagisto Installer"
      },
      "length" : 16288
   },
   "asn" : "AS37963",
   "city" : "Shanghai",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nComposed-By: SPIP 4.1.11 @ www.spip.net\r\nContent-Length: 105608\r\nContent-Type: text/html;charset=utf-8\r\nLast-Modified: Fri, 29 Jul 2022 16:53:01 GMT\r\nLoginip: <srcip>\r\nNel: {'report_to': 'network-errors', 'max_age': 2592000, 'failure_fraction': 0.01, 'success_fraction': 0.0001}\r\nPragma: private\r\nServer: L7Engine\r\nSet-Cookie: jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c; path=/\r\nSet-Cookie: sessionid=24263a2bf; webvpnLang=webvpnLang; webvpn=; webvpncontext=00000@SSLContext; path=/;\r\nSet-Cookie: acSamlv2Token=; path=/; secure;\r\nSet-Cookie: webvpn_as=; path=/; secure;\r\nSet-Cookie: webvpnaac=1; path=/; secure;\r\nSet-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2095\r\nSet-Cookie: Cacti=o6vomb0hujscvd9qh7icd0b6m6; path=/\r\nSet-Cookie: rememberMe=deleteMe; path=/;\r\nSet-Cookie: sesskey=21263a2bf; path=/;\r\nSet-Cookie: DSSignInURL=/; path=/; secure;\r\nSet-Cookie: Session=10.76.118.67.ff37fe7ceeca9a0ebedcf6549e8275d9; path=/\r\nSet-Cookie: sdplogincsrfcookie=6cc9d6ad-33d5-4b5a-adc8-b5bf284cb492; Path=/; SameSite=None; Secure;\r\nSet-Cookie: zbx_session=eyJzZXNzaW9uaWQiOiI1MDU2ZTlkYTFmZjkxZDAyMGEwMGEwMzhjNTliY2I2OCIsInNpZ24iOiJiMDVjNDJjNzQ4Y2IzZGRkNjExMWE4NDVhMDJhOWMxMWE5ODVjYTZmNDRhY2QxY2I3MjA5ZjIxZmExMDg3YjQ5In0%3D; secure; HttpOnly\r\nSet-Cookie: DSSIGNIN=url_default; path=/dana-na/; expires=Thu, 31-Dec-2037 00:00:00 GMT; secure;\r\nSet-Cookie: webvpn=A9790AFEACDEFA01FAAEAFEWFF390AE; path=/; secure;\r\nSet-Cookie: NSC_AAAC=a29d421feecf680a560a4c47b269b38ea29d421feecf680a560a4c47b269b38ea; path=/;\r\nSet-Cookie: csrf=8t9ADqIogbjKRK6; Path=/; HttpOnly;\r\nSet-Cookie: cval=f337; path=/; splunkweb_csrf_token_8000=0011;\r\nStrict-Transport-Security: max-age=31536000\r\nX-Adblock-Key: YQo=\r\nX-Amz-Cf-Pop: MAA50-C1\r\nX-Aspnetmvc-Version: 5.2\r\nX-Cache: MISS from Hello\r\nX-Cache-Lookup: MISS from Hello:8080\r\nX-Content-Powered-By: K2 v2.8.0 (by JoomlaWor\r\nX-Content-Type-Options: nosniff\r\nX-Drupal-Cache: xHIT\r\nX-Drupal-Dynamic-Cache: MISS\r\nX-Frame-Options: SAMEORIGIN\r\nX-Generator: Drupal 8 (https://www.drupal.org)\r\nX-Hacker: If you're reading this, you should visit automattic.com/jobs and apply to join the fun, mention this header.\r\nX-Jenkins: 2.121.3\r\nX-Jenkins-Session: f72d6619\r\nX-Litespeed-Cache: hit\r\nX-Powered-By-Plesk: PleskWin\r\nX-Shardid: 80\r\nX-T-Location: /iam\r\nX-Turbo-Charged-By: LiteSpeed\r\nX-Xss-Protection: 1; mode=block\r\nDate: Thu, 07 Nov 2024 03:31:41 GMT\r\nConnection: close\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<meta http-equiv=\"Pragma\" content=\"no-cache\" />\n<meta charset=\"utf-8\">\n<meta content=\"IE=edge\" http-equiv=\"X-UA-Compatible\">\n<meta content=\"object\" property=\"og:type\">\n<meta content=\"GitLab\" property=\"og:site_name\">\n<meta content=\"Help\" property=\"og:title\">\n<meta content=\"GitLab Community Edition\" property=\"og:description\">\n<meta content=\"summary\" property=\"twitter:card\">\n<meta content=\"Help\" property=\"twitter:title\">\n<meta content=\"GitLab Community Edition\" property=\"twitter:description\">\n<meta content=\"GitLab Community Edition\" name=\"description\">\n<meta content=\"#474D57\" name=\"theme-color\">\n<meta content=\"#30353E\" name=\"msapplication-TileColor\">\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384eeffc23b0826==\" />\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\"/>\n<meta http-equiv=\"expires\" content=\"-1\"/>\n<meta name=\"keywords\" content=\"VOS3000, VoIP, VoIP\u8fd0\u8425\u652f\u6491\u7cfb\u7edf, \u8f6f\u4ea4\u6362\"/>\n<meta name=\"author\" content=\"www.linknat.com, \u6606\u77f3\u7f51\u7edc\"/>\n<meta name=\"copyright\" content=\"www.linknat.com, \u6606\u77f3\u7f51\u7edc\"/>\n<meta name=\"generator\" content=\"SPIP 4.1.11\" />\n<script src=\"/jquery.min.js\"></script> \n<title>Bagisto Installer</title>\n</head>\n<body>\n<div style=\"display: none;\">\n<script>SC.util.mergeIntoContext({\"focusedControlID\":null,\"userName\":\"\",\"userDisplayName\":\"\",\"isUserAuthenticated\":false,\"antiForgeryToken\":\"THtoAUxH4sS9\",\"isUserAdministrator\":false,\"canManageSharedToolbox\":false,\"pageBaseFileName\":\"Guest\",\"notifyActivityFrequencyMilliseconds\":600000,\"loginAfterInactivityMilliseconds\":36000000,\"canChangePassword\":false,\"controlPanelUrl\":null,\"pageType\":\"GuestPage\",\"processType\":2,\"userAgentOverride\":null,\"sessionTypeInfos\":[]});</script>\n<SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last=\"1\">fritzr</User></Users></SessionInfo>\n<Account>\n<Entry0 Active=\"Yes\" username=\"CMCCAdmin\" web_passwd=\"CmcC4dm1n5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry1 Active=\"Yes\" username=\"useradmin\" web_passwd=\"Gu4ngx1pd5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry2 Active=\"Yes\" username=\"CUAdmin\"   web_passwd=\"CUAdmin5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<TelnetEntry Active=\"Yes\" telnet_username=\"Admin\" telnet_passwd=\"cxx4dm1n5591\" telnet_port=\"23\"/>\n<FtpEntry Active=\"Yes\" ftp_right=\"1\" ftp_auth=\"1\" ftp_username=\"Admin\" ftp_passwd=\"cxx4dm1n5591\" ftp_port=\"21\" />\n<SambaEntry Active=\"Yes\" smb_right=\"1\" smb_auth=\"1\" smb_username=\"Admin\" smb_passwd=\"cxx4dm1n5591\" />\n<ConsoleEntry Active=\"Yes\" console_username=\"Admin\" console_passwd=\"cxx4dm1n5591\"/>\n<CTDefParaEntry setDefValueFlag=\"1\" />\n</Account>\n<div>8.5.5 (Build:20200530.307-TEMP)</div>\n<span class=\"greyNote version\"><span class=\"vWord\">Version</span> 2023.11.3 (build 147512)</span>\n<h1>Logged in as <strong>admin</strong></h1><input type=\"hidden\" name=\"csrfmiddlewaretoken\" value=\"e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y\"><textarea id=\"3revi\" name=\"revi\" rows=\"4\" cols=\"50\">server1 Ubuntu 22.04 LTS</textarea>\n<ca status=\"disabled\" href=\"/+CSCOCA+/login.html\" />\n<form action=\"/login/vpnSdef\" enctype=\"multipart/form-data\" method=\"post\" name=\"login\">\n    <div data-user=\"root\" data-module=\"package-updates\"></div>\n    <code>The zip file did not contain an entry exportDescriptor.properties</code>\n    <span class=\"form-hidden\"><input name=\"page\" value=\"login\" type=\"hidden\"/><input name=\"formulaire_action\" type=\"hidden\" value=\"login\" /><input name=\"formulaire_action_args\" type=\"hidden\" value=\"dzdNV0MzUGFDV0NHemR6bWorekNEWHY=\" /><input name=\"formulaire_action_sign\" type=\"hidden\" value=\"\" /></span>\n    <message>Please enter your username and password.</message>\n    <input name=\"formid\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"javax.faces.ViewState\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"queryString\" type=\"hidden\" value=\"1406192\" />\n    <div class=\"versionInfo\">The Cacti Group Version 1.2.25</div>\n    <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>\n    <input type=\"hidden\" name=\"token\" value=\"0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec\">\n    <input type='hidden' name='__csrf_magic' value=\"key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654\" />\n    <input type=\"hidden\" name=\"tokenid\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"name\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"csrfKey\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"hidden\" name=\"csrf_token\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" name=\"ref\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"username_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"password_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"csrf\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"xd_check\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"give-form-id\" name=\"give-form-id\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" id=\"give-form-hash\" name=\"give-form-hash\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"text\" name=\"username\" label=\"Username:\" value=\"admin\" />\n    <input type=\"password\" name=\"password\" label=\"Password:\" value=\"123456\" />\n    <input type=\"hidden\" name=\"tgroup\" value=\"DefaultADMINGroup\" />\n    <input type=\"submit\" name=\"Login\" value=\"Login\" />\n    <input type=\"reset\" name=\"Clear\" value=\"Clear\" />\n</form>\n<input type=\"hidden\" value=\"Maintain/cloud_index.php\" id=\"cloud_addr\">\n<li class=\"lisel\" onclick=\"location.href='index.php'\">\u65e5\u5fd7\u7cfb\u7edf</li>\n<li class=\"linormal\" onclick=\"location.href='Maintain/cloud_index.php'\" style=\"margin-left:1px;\">\u4e91\u5e73\u53f0</li>\n<button type=\"button\" data-price-id=True>sb</button>\n<div class=\"prod_madelName\">RT-AC5300</div>\n<div class=\"p1 title_gap\">Sign in with your ASUS router account</div>\n<tr class=\"h\"><th>PHP Group</th></tr>\n<tr><td class=\"e\">upload_tmp_dir</td><td class=\"v\">/etc/httpd/_tmp</td><td class=\"v\">/etc/httpd/_tmp</td></tr>\n<tr><td class=\"e\">$_SERVER['DOCUMENT_ROOT']</td><td class=\"v\">/mnt/HDD2/web/</td></tr>\n<var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>\n<span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>\n<div class=\"text\" id=\"jive-loginVersion\"> Openfire, Version: 3.6.0a</div>\n<a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>\n<div id=\"mcname\">LoadMaster</div>\n<p><br/><span>\u51fa\u5382IP\uff1a192.168.1.1</span><br/><span>\u7528\u6237\u540d\u3001\u5bc6\u7801\uff1aadmin admin</span></p>\n<td colspan=\"2\">Please enter your Cacti user name and password below:</td>\n<meta id=\"confluence-context-path\" name=\"confluence-context-path\" content=\"\">\n<meta id=\"confluence-base-url\" name=\"confluence-base-url\" content=\"https://192.168.1.4\">\n<meta id=\"atlassian-token\" name=\"atlassian-token\" content=\"d78e2b977d28428e411e31b958c9c502c2425083\">\n<script id=\"frontend-js-extra\">var hashform_vars = {\"ajaxurl\":\"\\/wp-admin\\/admin-ajax.php\",\"ajax_nounce\":\"d78e2b97\",\"preview_img\":\"\"};</script>\n<div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>\n<B>SonicWall Universal Management Suite v9.3</B>\n<br>OK<br>\n<script type=\"text/javascript\">var csrfMagicToken = \"sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646\";var csrfMagicName = \"__vtrftk\";</script>\n<select id=\"cars\" name=\"name\">\n<option value=\"olvo\">olvo</option>\n</select>\n<a href=\"/VICIdial/phone\">MODIFY</a>\n<input type=\"hidden\" name=\"extension\"  value=\"1804289383\" >\n<input type=\"hidden\" name=\"pass\"  value=\"1804289383\" >\n<input type=\"hidden\" name=\"recording_exten\"  value=\"1804289383\" >\n<script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>\n<input type='hidden' name='LDCSA_CSRF' value=\"sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985\" />\n<script type='text/javascript'>\n\tvar cactiVersion='1.2.27';\n\tvar cactiServerOS='unix';\n\tvar cactiAction='';\n\tvar theme='modern';\n\tvar refreshIsLogout=true;\n\tvar refreshPage='/logout.php?action=timeout';\n\tvar refreshMSeconds=1440000;\n\tvar urlPath='/';\n\tvar previousPage='';\n\tvar sessionMessage=[];\n\tvar csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';\n</script>\n\n<!--\n<Username Level=\"40/40\" Dispatch=\"account\">admin</Username><User1><Password Level=\"40/40\" Dispatch=\"account\">admin</Password></User1>\n/var/pinglog\n<TITLE>Login</TITLE>\n<a href=\"jpg.html\">LIVE JPEG</a><br>\n<a href=\"liveie.html\">Internet Monitor (Microsoft Internet Explorer 8, 9, 10, 11) </a><br>\n<a href=\"DVRRemoteAP.exe\">Download 32 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>\n<a href=\"DVRRemoteAP_X64.exe\">Download 64 bits DVR Client (Windows 7, Windows 8, Windows 10)</a><br>\n<a href=\"DVFPlayer.zip\">Download 32/64 bits File Player (Windows 7, Windows 8, Windows 10)</a><br>\n<\\?xml version=\"1.0\" encoding=\"utf-8\"?><base64Binary xmlns=\"http://micros-hosting.com/EGateway/\">\nLocation: /admin\n<meta name=\"generator\" content=\"vBulletin 5.5.4\" />\nLocation: http://<ip>:80/relogin.htm?_t=3541144909\nLocation: http://<ip>:80/syscmd.htm\" Location: /ui/login\n/cgi-bin/webctrl.cgi?action=index_page\nPDR-M800\nfunction btnPing()\n<HTML><HEAD><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>.The document has moved<A HREF=\"http://<ip>:80/relogin.htm?_t=179439949\">here</A></BODY></HTML>\n<link type=\"image/x-icon\" rel=\"shortcut icon\" href=\"/themes/img/icon/cisco_shortcut.png\">\n<link type=\"image/x-icon\" rel=\"shortcut icon\" href=\"/themes/img/icon/cisco_logo.png\">\n<td class=\"Copyright\" colspan=\"2\" style=\"text-align:justify\" height=\"20\" valign=\"bottom\">\u00a9 2017 Cisco Systems, Inc. All Rights Reserved.\n<br>Cisco, Cisco Systems, and the Cisco Systems logo are registered\ntrademarks or trademarks of Cisco Systems, Inc. and/or it's affiliates\nin the United States and certain other countries.\n</td>\n:\n#\n>\n$\nSSH key is good\nis not a valid ref and may not be archived\npcPassword2\n'&sessionKey=790148060;'\nname=\"sessionKey\" value=\"790148060\"\nSet-Cookie: loginName=admin\nvar fgt_lang = /dev/cmdb/sslvpn_websession\nphp 8.1.0-dev exit\nspringframework\nTomcat\nDEVICE.ACCOUNT=admin\nAUTHORIZED_GROUP=1\n<uid></uid>\n<name>Admin</name>\n<usrid></usrid>\n<password>admin</password>\n<group></group>\ncpto /tmp/\"root\"\nModel=AC1450\r\nFirmware=V1.0.0.36_10.0.17\r\n\"exceptionMessageValue\":\"javax.servlet.ServletException: No valid forensics analysis solrDocIds parameter found.\"\nBIG-IP release 15.0.0\nuser:root\n12345admin123'\nFailed to process image\n\nLocation: http://192.168.0.1:52869/picsdesc.xml\nYou don't have permission to access /vpns/ on this server.\n[global]\n    workgroup = intranet\n    encrypt passwords = Yes\n    update encrypted = Yes\n\nfuncionando\nsystem_sofia\nname resolve order\nInfoOS:Linux node01 uid=0(root) gid=0(root) groups=0(root)OSInfo\n<b>File Uploaded !!!</b><br>\nant=951d11e51392117311602d0c25435d7f\n38ee63071a04dc5e04ed22624c38e648\n6f3249aa304055d63828af3bfab778f6\n<h1> c80fc6428eb4fe4a3b77898ebf9f3945 </h1>\n[local]\n tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZWVmZmMyM2IwODI2PT0=\n addr = <ip>\n\"Powered by vBulletin Version 5.5.4\"\n789551\nLinear eMerge\nSuperSign\nubiq\nYacht\nZeroshell\nFastWeb\nAuthInfo:\nloadingIndicator_bk\nZyxel\nskyrouter\nWAP54\norg.apache.spark.ui\n\n\n\nID: \"00af\", version: \"7.7.31.1\", AddItem: function (a, item, c) {}\n<insert implant configuration content here>\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; connect-src 'self' ws://<ip> ws://<ip>:443 wss://<ip> wss://<ip>:8443 http://<ip>/api\nCopyright (c) 2015-2020 by Cisco Systems, Inc.\nAll rights reserved.\nSSL VPN Service\nwsConvertPptResponse\n<input id=\"txtUserName\" class=\"txt-input\" type=\"text\" name=\"userName\" value=\"\" />\n<input id=\"txtPassword\" class=\"txt-input\" type=\"password\" name=\"password\" value=\"\" />\n<button id=\"btnLogin\" lc=\"html\" lk=\"IDCS_LOGIN_NBSP\">\n<span lc=\"html\" lk=\"IDCS_BS_PLUGIN_DOWNLOAD\" style=\"line-height: 30px; vertical-align: top;\"></span>\n<script src=\"../Scripts/login.htm.js?v={JS_CSS_V}\" type=\"text/javascript\"></script>\n<LegacyDN>eD2bxe4</LegacyDN>\n<title class=\"_ctxstxt_NetscalerGateway\">\nSAML Assertion verification failed; Please contact your administrator\nv=2b46554c087d2d5516559e9b8bc1875d\n/vpn/images/AccessGateway.ico\nframe-busting\n/vpn/js/logout_view.js?v=\n_ctxstxt_NetscalerAAA\nlib.min20200813.js\n401 Unauthorized Basic realm=\nsName='1';onTest(this);\nvar passadm = \"admin\";\nOPMODE_BRIDGE\ndocument.all.cmd_result\n<input id=\"key\" type=\"text\" style=\"width: 200px\" value=\"02108CB9-2200D5A4\">\n<input id=\"date\" type=\"text\" style=\"width: 200px\" value=\"12/25/2023\">\nmain page cgi-bin/login.cgi\nvar sessionKey='030ff030ff88';\nloc += '&sessionKey=19dec20030ff8dcb2';\n}\n\nvar code = 'location=\"' + loc + '\"';\n\nPassword change successful\nJ2100N GPON ONT\n/cgi-bin/webui/admin\nsesskey\nname=admin pass=123 priv=ppp\nservice=www.dlinkddns.com\nsysCmdType\nContent-Type: auth/request\n\n\nContent-Type: command/reply\n\nReply-Text: +OK accepted\n\n\nX-Content-Powered-By: K2 v2.8.0 (by JoomlaWorks)\n007b2000-007c1000 rw-p 00000000 00:00 0\nSize:                 60 kB\nRss:                  52 kB\nPss:                  52 kB\nShared_Clean:          0 kB\nShared_Dirty:          0 kB\nPrivate_Clean:         0 kB\nPrivate_Dirty:        52 kB\nReferenced:           52 kB\nAnonymous:       ",
   "datamd5" : "c200ab15924de458b524f2a1e5caa747",
   "datammh3" : -850169610,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "geolocus" : {
      "asn" : "AS37963",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "alibaba-inc.com",
         "cnnic.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "ALISOFT",
      "organization" : "Alibaba (US) Technology Co., Ltd.",
      "subnet" : "47.116.0.0/14"
   },
   "ip" : "47.116.181.146",
   "ipv6" : "false",
   "latitude" : "31.2222",
   "location" : "31.2222,121.4581",
   "longitude" : "121.4581",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Hangzhou Alibaba Advertising Co.,Ltd.",
   "os" : "IOS",
   "osdistribution" : "sUse",
   "osvendor" : "Cisco",
   "port" : 7580,
   "product" : "WebVPN",
   "productvendor" : "Cisco",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "47.112.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 84,021 in 0.053 second(s)

223.204.154.38:7580 (tcp/http) - last seen on 2024-11-07 at 03:32:05 UTC

50.116.43.48:7580 (tcp/http) - last seen on 2024-11-07 at 03:32:05 UTC

216.173.127.92:7580 (tcp/http) - last seen on 2024-11-07 at 03:32:02 UTC

181.215.252.183:7580 (tcp/http) - last seen on 2024-11-07 at 03:32:02 UTC

103.253.33.248:7580 (tcp/http) - last seen on 2024-11-07 at 03:32:02 UTC

154.30.145.118:7580 (tcp/http) - last seen on 2024-11-07 at 03:32:02 UTC

202.213.48.161:7580 (tcp/http) - last seen on 2024-11-07 at 03:32:02 UTC

192.142.175.9:7580 (tcp/http) - last seen on 2024-11-07 at 03:32:02 UTC

99.79.78.114:7580 (tcp/telnet) - last seen on 2024-11-07 at 03:31:52 UTC

47.116.181.146:7580 (tcp/http) - last seen on 2024-11-07 at 03:31:42 UTC