Returning 10 result(s) out of 65,478 in 1.214 second(s)

  • 36.41.72.127:2780 (tcp/socks5) - last seen on 2025-04-04 at 06:35:34 UTC

    • IP
      36.41.72.127
      Network
      36.41.64.0/20
      Operating System
      Linux Linux Kernel
      ASN
      AS134768
      Organization
      CHINANET SHAANXI province Cloud Base network
      Protocol
      socks5
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7afb6d54678d64e9d735a47550a1b682
    • \x05\xff
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:35:34.000Z",
         "app" : {
            "length" : 2
         },
         "asn" : "AS134768",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "\\x05\\xff",
         "datamd5" : "7afb6d54678d64e9d735a47550a1b682",
         "datammh3" : -1096387539,
         "geolocus" : {
            "asn" : "AS134768",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "chinatelecom.cn",
               "xa.sn.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-SN",
            "organization" : "CHINANET SHAANXI PROVINCE NETWORK",
            "subnet" : "36.40.0.0/13"
         },
         "ip" : "36.41.72.127",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CHINANET SHAANXI province Cloud Base network",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 2780,
         "protocol" : "socks5",
         "rtt" : 0.241944,
         "seen_date" : "2025-04-04",
         "source" : "datascan",
         "srcip" : "195.184.76.81",
         "srcport" : 43541,
         "subnet" : "36.41.64.0/20",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 34
      }
  • 180.110.200.124:2780 (tcp/socks5) - last seen on 2025-04-04 at 06:35:32 UTC

    • IP
      180.110.200.124
      Network
      180.110.200.0/21
      Operating System
      Linux Linux Kernel
      ASN
      AS134756
      Organization
      CHINANET Nanjing Jishan IDC network
      Protocol
      socks5
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7afb6d54678d64e9d735a47550a1b682
    • \x05\xff
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:35:32.000Z",
         "app" : {
            "length" : 2
         },
         "asn" : "AS134756",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "\\x05\\xff",
         "datamd5" : "7afb6d54678d64e9d735a47550a1b682",
         "datammh3" : -1096387539,
         "geolocus" : {
            "asn" : "AS140292",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-JS",
            "organization" : "Chinanet Jiangsu Province Network",
            "subnet" : "180.96.0.0/11"
         },
         "ip" : "180.110.200.124",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CHINANET Nanjing Jishan IDC network",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 2780,
         "protocol" : "socks5",
         "rtt" : 0.260905,
         "seen_date" : "2025-04-04",
         "source" : "datascan",
         "srcip" : "195.184.76.82",
         "srcport" : 57423,
         "subnet" : "180.110.200.0/21",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 33
      }
  • 211.83.1.255:2780 (tcp/http) - last seen on 2025-04-04 at 06:35:23 UTC

    • IP
      211.83.1.255
      Network
      211.80.0.0/13
      Device

      <enterprise field>: device.class

      URL

      http://211.83.1.255:2780/ 200

      ASN
      AS4538
      Organization
      China Education and Research Network Center
      Protocol
      http
      Source
      datascan
    • Product
      Apache HTTP Server
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d079e95e734773e8d870593d062245f2
      HTTP Header MD5
      97eb73c41d2d1f332d0a4ddd4c85c3de
      HTTP Body MD5
      1e42519865ad25decc89ac6143c0404e
    • HTTP/1.1 200 ok
      Server: Apache
      Content-Length:  222
      Cache-Control: no-cache
      Connection: close
      
      <script>top.self.location.href='http://211.83.41.225/eportal/index.jsp?wlanuserip=<srcip>&wlanacname=NAS&ssid=Ruijie&nasip=10.100.100.114&mac=000000000000&t=wireless-v2-plain&url=http://<ip>:2780/'</script>
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:35:23.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "10.100.100.114",
                  "211.83.41.225"
               ],
               "url" : [
                  "http://211.83.41.225/eportal/index.jsp?wlanuserip="
               ]
            },
            "http" : {
               "bodymd5" : "1e42519865ad25decc89ac6143c0404e",
               "bodymmh3" : 407239437,
               "headermd5" : "97eb73c41d2d1f332d0a4ddd4c85c3de",
               "headermmh3" : -1169498968
            },
            "length" : 311
         },
         "asn" : "AS4538",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 ok\r\nServer: Apache\r\nContent-Length:  222\r\nCache-Control: no-cache\r\nConnection: close\r\n\r\n<script>top.self.location.href='http://211.83.41.225/eportal/index.jsp?wlanuserip=<srcip>&wlanacname=NAS&ssid=Ruijie&nasip=10.100.100.114&mac=000000000000&t=wireless-v2-plain&url=http://<ip>:2780/'</script>\r\n\r\n",
         "datamd5" : "d079e95e734773e8d870593d062245f2",
         "datammh3" : -1841253136,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4538",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cernet.edu.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CERNET-CN",
            "organization" : "China Education and Research Network",
            "subnet" : "211.83.0.0/16"
         },
         "ip" : "211.83.1.255",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Education and Research Network Center",
         "port" : 2780,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "ok",
         "rtt" : 0.261554,
         "seen_date" : "2025-04-04",
         "source" : "datascan",
         "srcip" : "51.81.181.175",
         "srcport" : 36303,
         "status" : 200,
         "subnet" : "211.80.0.0/13",
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 12,
         "url" : "/"
      }
  • 172.236.102.56:2780 (tcp/http/tls) - last seen on 2025-04-04 at 06:35:23 UTC

    • IP
      172.236.102.56
      Network
      172.236.0.0/16
      Domain(s)
      linodeusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux sUse
      URL

      https://172.236.102.56:2780/ 200

      HTTP Title
      DSL Router
      HTTP Description
      Build Your Own Botnet
      Reverse DNS
      172-236-102-56.ip.linodeusercontent.com
      ASN
      AS63949
      Organization
      Akamai Connected Cloud
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux sUse
      HTTP Component(s)
      Atlassian Confluence ViciDial ViciDial Gitlab Gitlab
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      localhost
      Issuer Organization
      BEMMQVPT
      Subject Organization
      BEMMQVPT
      Subject Common Name
      localhost
      SHA256 Fingerprint
      7bd2ba4ee9c31a23dc560e76d33968cf525e442e02974f0c250c71fd30aeb3cb
      Validity Not Before
      2025-04-02T12:10:49Z
      Validity Not After
      2035-04-02T12:10:49Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b3709f21d58c5189cb188e6954d9a277
      HTTP Header MD5
      051673126aba8f7c0d88b1c2404bae22
      HTTP Body MD5
      5eee3cf8cde28eb9da36b0124c289d65
    • HTTP/1.1 200 OK
      Content-Length: 32514
      Content-Type: text/html
      Server: Nexus/3.13.0-01 (OSS)
      Date: Fri, 04 Apr 2025 06:35:23 GMT
      Connection: close
      
      <!DOCTYPE html>
      <html>
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <meta http-equiv="Pragma" content="no-cache" />
      <meta charset="utf-8">
      <meta content="IE=edge" http-equiv="X-UA-Compatible">
      <meta content="object" property="og:type">
      <meta content="GitLab" property="og:site_name">
      <meta content="Help" property="og:title">
      <meta content="GitLab Community Edition" property="og:description">
      <meta content="summary" property="twitter:card">
      <meta content="Help" property="twitter:title">
      <meta content="GitLab Community Edition" property="twitter:description">
      <meta content="GitLab Community Edition" name="description">
      <meta content="#484D57" name="theme-color">
      <meta content="#38353E" name="msapplication-TileColor">
      <meta name="csrf-param" content="authenticity_token" />
      <meta name="csrf-token" content="8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384e2fac23e08==" />
      <title>DSL Router</title>
      </head>
      <body>
      <div style="display: none;">
      <script>SC.util.mergeIntoContext({"focusedControlID":null,"userName":"","userDisplayName":"","isUserAuthenticated":false,"antiForgeryToken":"THtoAUxH4sS9","isUserAdministrator":false,"canManageSharedToolbox":false,"pageBaseFileName":"Guest","notifyActivityFrequencyMilliseconds":600000,"loginAfterInactivityMilliseconds":36000000,"canChangePassword":false,"controlPanelUrl":null,"pageType":"GuestPage","processType":2,"userAgentOverride":null,"sessionTypeInfos":[]});</script>
      <SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last="1">fritzr</User></Users></SessionInfo>
      <Account>
      <Entry0 Active="Yes" username="CMCCAdmin" web_passwd="CmcC4dm1n5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <Entry1 Active="Yes" username="useradmin" web_passwd="Gu4ngx1pd5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <Entry2 Active="Yes" username="CUAdmin"   web_passwd="CUAdmin5591" display_mask="FF FF D7 DD FF 1D FF FF FF" Logged="1" LoginIp="192.168.1.10"/>
      <TelnetEntry Active="Yes" telnet_username="Admin" telnet_passwd="cxx4dm1n5591" telnet_port="23"/>
      <FtpEntry Active="Yes" ftp_right="1" ftp_auth="1" ftp_username="Admin" ftp_passwd="cxx4dm1n5591" ftp_port="21" />
      <SambaEntry Active="Yes" smb_right="1" smb_auth="1" smb_username="Admin" smb_passwd="cxx4dm1n5591" />
      <ConsoleEntry Active="Yes" console_username="Admin" console_passwd="cxx4dm1n5591"/>
      <CTDefParaEntry setDefValueFlag="1" />
      </Account>
      <div>8.5.5 (Build:20200530.307-TEMP)</div>
      <span class="greyNote version"><span class="vWord">Version</span> 2023.11.3 (build 147512)</span>
      <h1>Logged in as <strong>admin</strong></h1><input type="hidden" name="csrfmiddlewaretoken" value="e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y"><textarea id="3revi" name="revi" rows="4" cols="50">server1 Ubuntu 22.04 LTS</textarea>
      <ca status="disabled" href="/+CSCOCA+/login.html" />
      <form action="/login/vpnSdef" enctype="multipart/form-data" method="post" name="login" id="auth_form">
          <div data-user="root" data-module="package-updates"></div>
          <code>The zip file did not contain an entry exportDescriptor.properties</code>
          <span class="form-hidden"><input name="page" value="login" type="hidden"/><input name="formulaire_action" type="hidden" value="login" /><input name="formulaire_action_args" type="hidden" value="dzdNV0MzUGFDV0NHemR6bWorekNEWHY=" /><input name="formulaire_action_sign" type="hidden" value="" /></span>
          <message>Please enter your username and password.</message>
          <input name="formid" type="hidden" value="012afed" />
          <input name="javax.faces.ViewState" type="hidden" value="012afed" />
          <input name="queryString" type="hidden" value="1406192" />
          <div class="versionInfo">The Cacti Group Version 1.2.25</div>
          <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>
          <input type="hidden" name="token" value="0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec">
          <input type='hidden' name='__csrf_magic' value="key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654" />
          <input type="hidden" name="tokenid"  value="1804289383" >
          <input type="hidden" name="name"  value="1804289383" >
          <input type="hidden" name="csrfKey" value="621aec6b886ff81169bed7de5d47b5ed">
          <input type="hidden" name="csrf_token" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" name="ref" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" name="username_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" name="password_fieldname" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="csrf" name="csrf" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="csrf" name="xd_check" value="aHR0cHM6Ly9pcHMuY2x1Yi8=">
      	<input type="hidden" id="give-form-id" name="give-form-id" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" id="give-form-hash" name="give-form-hash" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" id="user_id" name="user_id" value="621aec6b886ff81169bed7de5d47b5ed">
      	<input type="hidden" id="last_commit" name="last_commit" value="721aec6b886ff81169bed7de5d47b5ed">
          <input type="text" name="username" label="Username:" value="admin" />
          <input type="password" name="password" label="Password:" value="123456" />
          <input type="hidden" name="tgroup" value="DefaultADMINGroup" />
          <input type="submit" name="Login" value="Login" />
          <input type="reset" name="Clear" value="Clear" />
          <input type=hidden name="vhost" value="standard">
          <div id="ver_num">v7.0NG.772.3</div><input id="hidden-csrf_code" name="csrf_code" type="hidden"  value="b1c22edd91b7c2a00b21e0531ad46e8d" />
      </form>
      
      <form id="frmLogin_4" name="frmLogin" method="post" action="/dana-na/auth/url_default/login.cgi">
          <input id="tz_offset_5" type="hidden" name="tz_offset">
          <input id="client_mac" type="hidden" name="clientMAC" value="">
          <input id="username" type="text" name="username"/>
          <input id="password" type="password" name="password"/>
          <input id="realm_16" type="hidden" name="realm" value="Users"/>
          <input id="btnSubmit_6" type="submit" value="Sign In" name="btnSubmit"/>
          <input id="xsauth" type="hidden" name="xsauth" value="4419bb0cd2d21ef7b4bf25c9e5206f89" />
          <input id="DSIDFormDataStr" type="hidden" name="FormDataStr" value="4419bb0cd2d21ef774bf25c9e5206f89" />
          <input id="xsauth_token" type="hidden" name="xsauth_token" value="64fc4e172d32d03e74388dae24f6d961">
          <input id="xsauth_71" type="hidden" name="xsauth_71" value="64fc4e172d32d03e74388dae24f6d961">
          <input id="xsauth_60" type="hidden" name="xsauth_60" value="64fc4e172d32d03e74388dae24f6d961">
          <input id="key" type="hidden" name="key" value="64fc4e1"/>
      </form>
      <span id="DSIDSystemSoftwarePkgVersion" >22.7R2.0</span></a>
      <table id="table_uploadedlogs_4"><tr><td><a href="log_154.txt">downloadLog_154</a></td><td>Log_154</td></tr></table>
      
      <form name="PLogin" method="post" action="/">
          <input type="hidden" value="Maintain/cloud_index.php" id="cloud_addr">
          <input type="hidden" name="extension"  value="1804289383" >
          <input type="hidden" name="pass"  value="1804289383" >
          <input type="hidden" name="recording_exten"  value="1804289383" >
          <input type='hidden' name='LDCSA_CSRF' value="sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985" />
          <input type="hidden" name="admin-nonce" value="4419bb0cd2d21ef7b4cf25c9e5206f89" />
          <input type="hidden" id="hidProductID" value="M8" />
          <input type="hidden" id="hidLicResult" value="您没有购买过BS模块" />
          <input type='hidden' id='post_ID' name='post_ID' value='1804289383' />
          <input type="text" name="ssid" value="7830302b-302b-2b30-2b33-7830302b302b">
          <input type="hidden" name="_csrf" value="12eef1d88692f7673fb80ab6ba8d051fdce64ccb" />
      </form>
      
      <li class="lisel" onclick="location.href='index.php'">日志系统</li>
      <li class="linormal" onclick="location.href='Maintain/cloud_index.php'" style="margin-left:1px;">云平台</li>
      <button type="button" data-price-id=True>sb</button>
      <div class="prod_madelName">RT-AC5300</div>
      <div class="p1 title_gap">Sign in with your ASUS router account</div>
      <tr class="h"><th>PHP Group</th></tr>
      <tr><td class="e">upload_tmp_dir</td><td class="v">/etc/httpd/_tmp</td><td class="v">/etc/httpd/_tmp</td></tr>
      <tr><td class="e">$_SERVER['DOCUMENT_ROOT']</td><td class="v">/mnt/HDD2/web/</td></tr>
      <var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>
      <span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>
      <div class="text" id="jive-loginVersion"> Openfire, Version: 3.6.0a</div>
      <a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>
      <div id="mcname">LoadMaster</div>
      <p><br/><span>出厂IP:192.168.1.1</span><br/><span>用户名、密码:admin admin</span></p>
      <td colspan="2">Please enter your Cacti user name and password below:</td>
      <meta id="confluence-context-path" name="confluence-context-path" content="">
      <meta id="confluence-base-url" name="confluence-base-url" content="https://192.168.1.4">
      <meta id="atlassian-token" name="atlassian-token" content="d78e2b977d28428e411e31b958c9c502c2425083">
      <script id="frontend-js-extra">var hashform_vars = {"ajaxurl":"\/wp-admin\/admin-ajax.php","ajax_nounce":"d78e2b97","preview_img":""};</script>
      <div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>
      <B>SonicWall Universal Management Suite v9.3</B>
      <br>OK<br>
      <script type="text/javascript">var csrfMagicToken = "sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646";var csrfMagicName = "__vtrftk";</script>
      <select id="cars" name="name">
      <option value="olvo">olvo</option>
      </select>
      <a href="/VICIdial/phone">MODIFY</a>
      <script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>
      <h3 class="text-center"> <span class="soplanning_index_title2">Simple Online Planning</span> <small>v1.51.01</small> </h3>
      <span>F3x26Q v1.1 (Sep 15 2023 12:36:09) std</span>
      <script type='text/javascript'>
      	var cactiVersion='1.2.27';
      	var cactiServerOS='unix';
      	var cactiAction='';
      	var theme='modern';
      	var refreshIsLogout=true;
      	var refreshPage='/logout.php?action=timeout';
      	var refreshMSeconds=1440000;
      	var urlPath='/';
      	var previousPage='';
      	var sessionMessage=[];
      	var csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';
          wp.apiFetch.nonceMiddleware = wp.apiFetch.createNonceMiddleware( "aeb6d16741" );
      </script>
      <img class="k-logo k-user-logo" id="welcomeLogo" alt="K1000 Logo" src="/packages/partnerlogos/userportal_logo" data-interface="user" />
      <div><table background="./images/raisecom/back.gif" width="980px;" height="350px;" align="center" cellpadding="0px" cellspacing="0px;"></table></div>
      <p class="success">Activate successfully</p>
      <p class="success">登入成功!载入中...</p>
      <li aurl="/index.php/Addin/pan/doc/root_id/7830302b-302b-2b30-2b33-7830302b302b/clientid/b2.html" onclick="openUrl">
      
      <div>
      <h1> 3c86107551eb47824bd16c0171dd309d </h1>
      <h1> tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZTJmYWMyM2UwOD09 </h1>
      </div>
      <!--
      WWW-Authenticate: Basic realm="MSNswitch"
      WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="N2UyNjgxMjA6NjQ1MWZiOTA6IDJlNjI5NDA=", qop="auth", algorithm="MD5"
      WWW-Authenticate: Digest realm="IgdAuthentication", domain="/", nonce="N2UyNjgxMjA6NjQ1MWZiOTA6IDJlNjI5NDA=", qop="auth", algorithm=MD5
      WWW-Authenticate: Basic realm="Video Server"
      WWW-Authenticate: Basic realm="RT-N2UyNjgx"
      WWW-Authenticate: Digest realm="GoAhead", domain=":81",qop="auth", nonce="405448722b302b85aa6ef2b444ea6b5c", opaque="5ccc069c403ebaf9f0171e9517f40e41",algorithm="MD5", stale="FALSE"
      WWW-Authenticate: Basic realm="MOBOTIX Camera User"
      WWW-Authenticate: Basic realm="Four-Faith"
      WWW-Authenticate: Digest realm="realm@easycwmp",qop="auth",nonce="e22f76001fa38ce36f9b69bdbd73fbfb0001c399",opaque="328458fab28345ae87ab3210a8513b14eff452a2"
      WWW-Authenticate: Basic realm="[RTX1210]"
      WWW-Authenticate: Basic realm="Nagios Core"
      WWW-Authenticate: Basic realm="Server Status"
      WWW-Authenticate: Basic realm="TP-LINK Wireless N Router WR841N"
      WWW-Authenticate: Basic realm="NETGEAR DGN1000"
      WWW-Authenticate: Basic aHR0cHdhdGNoOmY=
      WWW-Authenticate: Basic realm="TP-LINK Wireless N Router IPC223(P)-6"
      WWW-Authenticate: Basic realm="Panasonic network device"
      WWW-Authenticate: Basic realm="TP-LINK AC1200 Wireless Dual Band Gigabit Router Archer C5"
      WWW-Authenticate: Basic realm="karaf"
      WWW-Authenticate: Basic realm="Tomcat Manager Application"
      WWW-Authenticate: Basic realm="HomeHub"
      WWW-Authenticate: Basic realm="netcam"
      WWW-Authenticate: Basic realm="Broadband Router"
      WWW-Authenticate: Basic realm="DVR"
      WWW-Authenticate: Basic realm="iPEX Internet Cafe"
      WWW-Authenticate: Basic realm=""
      WWW-Authenticate: Basic realm="System"
      WWW-Authenticate: Digest realm="Control", domain="PDVR M800", nonce="34712299626f372c5ea0729ded8e8f37", algorithm=MD5, qop="auth"
      WWW-Authenticate: Basic realm="TP-LINK Wireless N Router WR840N"
      WWW-Authenticate: Basic realm="WT-ABCyNjgx"
      Selenium is made possible through the efforts of our open source community, contributions from these
      /CDGServer3/index.jsp
      <script type="module" src="/@vite/client"></script>
      <tomcat-users>
      <img src="/web/images/admin.png" width="40" height="40">
      <img src="/web/images/guest.png" width="40" height="40">
      BetterAuthError
      BETTER_AUTH_URL
      PUBLIC_BETTER_AUTH_URL
      NUXT_PUBLIC_BETTER_AUTH_URL
      NEXT_PUBLIC_BETTER_AUTH_URL
      better-auth-client
      Kibana UI
      Welcome to Elastic
      <title>BigAnt Admin </title>
      user/add【新增人员】
      https://polyfill.io/
      So-I-AM ";
      /index.php/admin/index sa=uploadConfirm sa=index
      NameError
      hello testers
      posted data was written to placeholder file
      {\"sm_nonce\":\"62e7518a4e4284979\"}
      csaPostStatus=0
      3V@1
      202cb962ac59075b964b07152d234b70
      Location: /vimarbyweb/index.php
      <img alt='logo' src="custom/logos/ecsimaging-default-login.png" style="height:70px; margin-top:2%;">
      "DetectedxuanfengOS: %OS% linux-gnu"
      {"os":"windows","logo":"","appid":"skylar6","has_prd_cert":1,"console_version":"V6.0"}
      RDWeb
      RESULT=0
      This a vulnerability!
      pixmaps/debian-logo.png
      SuccessfulUpload
      Payload Executed
      /OAapp/WebObjects/OAapp.woa
      System.ArgumentException
      Hello World!
      MiCollab End User Portal
      ARN02304U8
      Correctly updated the setup options
      67fc175780739f1ba31445a21deb2eec
      HACKED
      1.13.0
      ShareCenter
      url: "/cgi-bin/login_mgr.cgi",
      data:"cmd=cgi_get_ssl_info",
      application/json
      Expires: 0
      /js/lib/
      Zero Touch Provisioning
      Linux PA-VM 4.18.0-240.1.1.20.pan.x86_64 #1 SMP Wed Jul 31 20:37:12 PDT 2024 x86_64 x86_64 x86_64 GNU/Linu
      redirect_to
      VMG3312-T20A
      <frame name="menu" src="/ABBMain/Menu" scrolling="auto">
      <frame name="main" src="/ABBMain/StartPage" scrolling="auto">
      Successfully saved
      url: '/reqproc/proc_get'
      ShareCenter
      2024/11/09 12:52_vuln_weaver_com.weaver.formmodel.apps.ktree.servlet.KtreeUploadAction
      vuln_yongyou_lsvl
      hello tongdaoa
      vulntest
      SRun Billing System
      校园网自助服务系统
      SECExplorer666
      root:wW0sffoqsk.EM:19426:0:99999:7:::
      "link":"file:
      Dolibarr 16.0.1
      dd556350275e2ee0a2e877cea9c8a74a
      /wp-content/plugins/time-clock/
      /wp-content/plugins/time-clock-pro/
      <li class="print-only">Printed by Atlassian Confluence 8.5.5</li>
      uid=0(admin) gid=0(admin)
      var Name="admin";
      var loginNum="1";//恢复出厂设置后loginNum==0
      var Manufacturer="D-Link";
      var ModelName="DSL-2888A";
      var HardwareVersion="T1";
      var SoftwareVersio="EG_1.00b4";
      Update Success!
      12321
      you are logged
      X-SYNO-TOKEN: MIGfMA0GCSq
      {"productversion":"6.1.1","buildnumber":"42962","smallfixnumber":"6","upnpmodelname":"DS3615xs","fullversion":"6.1.1"}
      测试报告
      /wap/first/zsff/iconfont/iconfont.css
      <meta name="description" content="Build Your Own Botnet" />
      CRMEB
      <META HTTP-EQUIV=REFRESH CONTENT="1; URL=/vicidial/welcome.php">
      /cgi-bin/webctrl.cgi?action=index_page
      <META content="MSHTML 6.00.2900.5583" name=GENERATOR>
      device.png
      Traccar GPS Tracking System
      <script id="wpr-addons-js-js-extra">
      var WprConfig
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:35:23.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "polyfill.io"
               ],
               "file" : [
                  "admin-ajax.php",
                  "cloud_index.php",
                  "login_mgr.cgi",
                  "log_154.txt",
                  "login.cgi",
                  "index.php",
                  "welcome.php"
               ],
               "hostname" : [
                  "polyfill.io"
               ],
               "ip" : [
                  "240.1.1.20",
                  "192.168.1.4",
                  "192.168.1.1",
                  "192.168.1.10"
               ],
               "url" : [
                  "https://192.168.1.4",
                  "https://polyfill.io/"
               ]
            },
            "http" : {
               "bodymd5" : "5eee3cf8cde28eb9da36b0124c289d65",
               "bodymmh3" : -698724255,
               "component" : [
                  {
                     "product" : "Confluence",
                     "productvendor" : "Atlassian"
                  },
                  {
                     "productvendor" : "ViciDial",
                     "product" : "ViciDial"
                  },
                  {
                     "product" : "Gitlab",
                     "productvendor" : "Gitlab"
                  }
               ],
               "description" : "Build Your Own Botnet",
               "headermd5" : "051673126aba8f7c0d88b1c2404bae22",
               "headermmh3" : 1888365508,
               "realm" : "MSNswitch",
               "title" : "DSL Router"
            },
            "length" : 16384
         },
         "asn" : "AS63949",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Chicago",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nContent-Length: 32514\r\nContent-Type: text/html\r\nServer: Nexus/3.13.0-01 (OSS)\r\nDate: Fri, 04 Apr 2025 06:35:23 GMT\r\nConnection: close\r\n\r\n<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<meta http-equiv=\"Pragma\" content=\"no-cache\" />\n<meta charset=\"utf-8\">\n<meta content=\"IE=edge\" http-equiv=\"X-UA-Compatible\">\n<meta content=\"object\" property=\"og:type\">\n<meta content=\"GitLab\" property=\"og:site_name\">\n<meta content=\"Help\" property=\"og:title\">\n<meta content=\"GitLab Community Edition\" property=\"og:description\">\n<meta content=\"summary\" property=\"twitter:card\">\n<meta content=\"Help\" property=\"twitter:title\">\n<meta content=\"GitLab Community Edition\" property=\"twitter:description\">\n<meta content=\"GitLab Community Edition\" name=\"description\">\n<meta content=\"#484D57\" name=\"theme-color\">\n<meta content=\"#38353E\" name=\"msapplication-TileColor\">\n<meta name=\"csrf-param\" content=\"authenticity_token\" />\n<meta name=\"csrf-token\" content=\"8dcb74a64dc984fb9abe3e7c201f810d9ec90ed8e0cb6ed03ba384e2fac23e08==\" />\n<title>DSL Router</title>\n</head>\n<body>\n<div style=\"display: none;\">\n<script>SC.util.mergeIntoContext({\"focusedControlID\":null,\"userName\":\"\",\"userDisplayName\":\"\",\"isUserAuthenticated\":false,\"antiForgeryToken\":\"THtoAUxH4sS9\",\"isUserAdministrator\":false,\"canManageSharedToolbox\":false,\"pageBaseFileName\":\"Guest\",\"notifyActivityFrequencyMilliseconds\":600000,\"loginAfterInactivityMilliseconds\":36000000,\"canChangePassword\":false,\"controlPanelUrl\":null,\"pageType\":\"GuestPage\",\"processType\":2,\"userAgentOverride\":null,\"sessionTypeInfos\":[]});</script>\n<SessionInfo><SID>a29d421feecf680a</SID><Challenge>680a</Challenge><BlockTime>0</BlockTime><Rights></Rights><Users><User last=\"1\">fritzr</User></Users></SessionInfo>\n<Account>\n<Entry0 Active=\"Yes\" username=\"CMCCAdmin\" web_passwd=\"CmcC4dm1n5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry1 Active=\"Yes\" username=\"useradmin\" web_passwd=\"Gu4ngx1pd5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<Entry2 Active=\"Yes\" username=\"CUAdmin\"   web_passwd=\"CUAdmin5591\" display_mask=\"FF FF D7 DD FF 1D FF FF FF\" Logged=\"1\" LoginIp=\"192.168.1.10\"/>\n<TelnetEntry Active=\"Yes\" telnet_username=\"Admin\" telnet_passwd=\"cxx4dm1n5591\" telnet_port=\"23\"/>\n<FtpEntry Active=\"Yes\" ftp_right=\"1\" ftp_auth=\"1\" ftp_username=\"Admin\" ftp_passwd=\"cxx4dm1n5591\" ftp_port=\"21\" />\n<SambaEntry Active=\"Yes\" smb_right=\"1\" smb_auth=\"1\" smb_username=\"Admin\" smb_passwd=\"cxx4dm1n5591\" />\n<ConsoleEntry Active=\"Yes\" console_username=\"Admin\" console_passwd=\"cxx4dm1n5591\"/>\n<CTDefParaEntry setDefValueFlag=\"1\" />\n</Account>\n<div>8.5.5 (Build:20200530.307-TEMP)</div>\n<span class=\"greyNote version\"><span class=\"vWord\">Version</span> 2023.11.3 (build 147512)</span>\n<h1>Logged in as <strong>admin</strong></h1><input type=\"hidden\" name=\"csrfmiddlewaretoken\" value=\"e9tIOET3iTncMVL4E0ESylCCQupBWlfL9NobFzaQDir2ktC0Wgy5pafsCrkonl5y\"><textarea id=\"3revi\" name=\"revi\" rows=\"4\" cols=\"50\">server1 Ubuntu 22.04 LTS</textarea>\n<ca status=\"disabled\" href=\"/+CSCOCA+/login.html\" />\n<form action=\"/login/vpnSdef\" enctype=\"multipart/form-data\" method=\"post\" name=\"login\" id=\"auth_form\">\n    <div data-user=\"root\" data-module=\"package-updates\"></div>\n    <code>The zip file did not contain an entry exportDescriptor.properties</code>\n    <span class=\"form-hidden\"><input name=\"page\" value=\"login\" type=\"hidden\"/><input name=\"formulaire_action\" type=\"hidden\" value=\"login\" /><input name=\"formulaire_action_args\" type=\"hidden\" value=\"dzdNV0MzUGFDV0NHemR6bWorekNEWHY=\" /><input name=\"formulaire_action_sign\" type=\"hidden\" value=\"\" /></span>\n    <message>Please enter your username and password.</message>\n    <input name=\"formid\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"javax.faces.ViewState\" type=\"hidden\" value=\"012afed\" />\n    <input name=\"queryString\" type=\"hidden\" value=\"1406192\" />\n    <div class=\"versionInfo\">The Cacti Group Version 1.2.25</div>\n    <strong>IPFire 2.19 (2017v) - Core Update 110 introduces significant changes</strong>\n    <input type=\"hidden\" name=\"token\" value=\"0feacf5a1cafc9fcea1ce1255e65fd9a7c11ae3f9235eb6038a2c9fe702ec7ec\">\n    <input type='hidden' name='__csrf_magic' value=\"key:12eef1d88692f7673fb80ab6ba8d051fdce64ccb,1710777654\" />\n    <input type=\"hidden\" name=\"tokenid\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"name\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"csrfKey\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"hidden\" name=\"csrf_token\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" name=\"ref\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"username_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" name=\"password_fieldname\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"csrf\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"csrf\" name=\"xd_check\" value=\"aHR0cHM6Ly9pcHMuY2x1Yi8=\">\n\t<input type=\"hidden\" id=\"give-form-id\" name=\"give-form-id\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" id=\"give-form-hash\" name=\"give-form-hash\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" id=\"user_id\" name=\"user_id\" value=\"621aec6b886ff81169bed7de5d47b5ed\">\n\t<input type=\"hidden\" id=\"last_commit\" name=\"last_commit\" value=\"721aec6b886ff81169bed7de5d47b5ed\">\n    <input type=\"text\" name=\"username\" label=\"Username:\" value=\"admin\" />\n    <input type=\"password\" name=\"password\" label=\"Password:\" value=\"123456\" />\n    <input type=\"hidden\" name=\"tgroup\" value=\"DefaultADMINGroup\" />\n    <input type=\"submit\" name=\"Login\" value=\"Login\" />\n    <input type=\"reset\" name=\"Clear\" value=\"Clear\" />\n    <input type=hidden name=\"vhost\" value=\"standard\">\n    <div id=\"ver_num\">v7.0NG.772.3</div><input id=\"hidden-csrf_code\" name=\"csrf_code\" type=\"hidden\"  value=\"b1c22edd91b7c2a00b21e0531ad46e8d\" />\n</form>\n\n<form id=\"frmLogin_4\" name=\"frmLogin\" method=\"post\" action=\"/dana-na/auth/url_default/login.cgi\">\n    <input id=\"tz_offset_5\" type=\"hidden\" name=\"tz_offset\">\n    <input id=\"client_mac\" type=\"hidden\" name=\"clientMAC\" value=\"\">\n    <input id=\"username\" type=\"text\" name=\"username\"/>\n    <input id=\"password\" type=\"password\" name=\"password\"/>\n    <input id=\"realm_16\" type=\"hidden\" name=\"realm\" value=\"Users\"/>\n    <input id=\"btnSubmit_6\" type=\"submit\" value=\"Sign In\" name=\"btnSubmit\"/>\n    <input id=\"xsauth\" type=\"hidden\" name=\"xsauth\" value=\"4419bb0cd2d21ef7b4bf25c9e5206f89\" />\n    <input id=\"DSIDFormDataStr\" type=\"hidden\" name=\"FormDataStr\" value=\"4419bb0cd2d21ef774bf25c9e5206f89\" />\n    <input id=\"xsauth_token\" type=\"hidden\" name=\"xsauth_token\" value=\"64fc4e172d32d03e74388dae24f6d961\">\n    <input id=\"xsauth_71\" type=\"hidden\" name=\"xsauth_71\" value=\"64fc4e172d32d03e74388dae24f6d961\">\n    <input id=\"xsauth_60\" type=\"hidden\" name=\"xsauth_60\" value=\"64fc4e172d32d03e74388dae24f6d961\">\n    <input id=\"key\" type=\"hidden\" name=\"key\" value=\"64fc4e1\"/>\n</form>\n<span id=\"DSIDSystemSoftwarePkgVersion\" >22.7R2.0</span></a>\n<table id=\"table_uploadedlogs_4\"><tr><td><a href=\"log_154.txt\">downloadLog_154</a></td><td>Log_154</td></tr></table>\n\n<form name=\"PLogin\" method=\"post\" action=\"/\">\n    <input type=\"hidden\" value=\"Maintain/cloud_index.php\" id=\"cloud_addr\">\n    <input type=\"hidden\" name=\"extension\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"pass\"  value=\"1804289383\" >\n    <input type=\"hidden\" name=\"recording_exten\"  value=\"1804289383\" >\n    <input type='hidden' name='LDCSA_CSRF' value=\"sid:7830302ba478216ecf2cf24b53afe6f385998104,1726156985\" />\n    <input type=\"hidden\" name=\"admin-nonce\" value=\"4419bb0cd2d21ef7b4cf25c9e5206f89\" />\n    <input type=\"hidden\" id=\"hidProductID\" value=\"M8\" />\n    <input type=\"hidden\" id=\"hidLicResult\" value=\"\u60a8\u6ca1\u6709\u8d2d\u4e70\u8fc7BS\u6a21\u5757\" />\n    <input type='hidden' id='post_ID' name='post_ID' value='1804289383' />\n    <input type=\"text\" name=\"ssid\" value=\"7830302b-302b-2b30-2b33-7830302b302b\">\n    <input type=\"hidden\" name=\"_csrf\" value=\"12eef1d88692f7673fb80ab6ba8d051fdce64ccb\" />\n</form>\n\n<li class=\"lisel\" onclick=\"location.href='index.php'\">\u65e5\u5fd7\u7cfb\u7edf</li>\n<li class=\"linormal\" onclick=\"location.href='Maintain/cloud_index.php'\" style=\"margin-left:1px;\">\u4e91\u5e73\u53f0</li>\n<button type=\"button\" data-price-id=True>sb</button>\n<div class=\"prod_madelName\">RT-AC5300</div>\n<div class=\"p1 title_gap\">Sign in with your ASUS router account</div>\n<tr class=\"h\"><th>PHP Group</th></tr>\n<tr><td class=\"e\">upload_tmp_dir</td><td class=\"v\">/etc/httpd/_tmp</td><td class=\"v\">/etc/httpd/_tmp</td></tr>\n<tr><td class=\"e\">$_SERVER['DOCUMENT_ROOT']</td><td class=\"v\">/mnt/HDD2/web/</td></tr>\n<var name='uuid'><string>7db3eea5-9996-4032-a9cc-3afd06bd11fe</string></var>\n<span >Powered by <a href='#'>Gibbon</a> v23.0.01</span>\n<div class=\"text\" id=\"jive-loginVersion\"> Openfire, Version: 3.6.0a</div>\n<a href='#' title='Community Forum Software by Invision Power Services'>IP.Board</a>\n<div id=\"mcname\">LoadMaster</div>\n<p><br/><span>\u51fa\u5382IP\uff1a192.168.1.1</span><br/><span>\u7528\u6237\u540d\u3001\u5bc6\u7801\uff1aadmin admin</span></p>\n<td colspan=\"2\">Please enter your Cacti user name and password below:</td>\n<meta id=\"confluence-context-path\" name=\"confluence-context-path\" content=\"\">\n<meta id=\"confluence-base-url\" name=\"confluence-base-url\" content=\"https://192.168.1.4\">\n<meta id=\"atlassian-token\" name=\"atlassian-token\" content=\"d78e2b977d28428e411e31b958c9c502c2425083\">\n<script id=\"frontend-js-extra\">var hashform_vars = {\"ajaxurl\":\"\\/wp-admin\\/admin-ajax.php\",\"ajax_nounce\":\"d78e2b97\",\"preview_img\":\"\"};</script>\n<div class='content-messages errorMessage'><p>java.lang.Exception: y9pcHMuY</p></div>\n<B>SonicWall Universal Management Suite v9.3</B>\n<br>OK<br>\n<script type=\"text/javascript\">var csrfMagicToken = \"sid:ed04c4a1c86fe99a92cbe3441e2b1e2989d5deec,1725277646\";var csrfMagicName = \"__vtrftk\";</script>\n<select id=\"cars\" name=\"name\">\n<option value=\"olvo\">olvo</option>\n</select>\n<a href=\"/VICIdial/phone\">MODIFY</a>\n<script var session_name = '621aec6b886ff81'; var session_id = '1804289383';</script>\n<h3 class=\"text-center\"> <span class=\"soplanning_index_title2\">Simple Online Planning</span> <small>v1.51.01</small> </h3>\n<span>F3x26Q v1.1 (Sep 15 2023 12:36:09) std</span>\n<script type='text/javascript'>\n\tvar cactiVersion='1.2.27';\n\tvar cactiServerOS='unix';\n\tvar cactiAction='';\n\tvar theme='modern';\n\tvar refreshIsLogout=true;\n\tvar refreshPage='/logout.php?action=timeout';\n\tvar refreshMSeconds=1440000;\n\tvar urlPath='/';\n\tvar previousPage='';\n\tvar sessionMessage=[];\n\tvar csrfMagicToken='sid:4024e82870233374a2255351fb45057c8f7f9aa6,1728459021;ip:bee133099404bd4ddc2dd5f43c6b86dc3618b300,1728459021';\n    wp.apiFetch.nonceMiddleware = wp.apiFetch.createNonceMiddleware( \"aeb6d16741\" );\n</script>\n<img class=\"k-logo k-user-logo\" id=\"welcomeLogo\" alt=\"K1000 Logo\" src=\"/packages/partnerlogos/userportal_logo\" data-interface=\"user\" />\n<div><table background=\"./images/raisecom/back.gif\" width=\"980px;\" height=\"350px;\" align=\"center\" cellpadding=\"0px\" cellspacing=\"0px;\"></table></div>\n<p class=\"success\">Activate successfully</p>\n<p class=\"success\">\u767b\u5165\u6210\u529f!\u8f7d\u5165\u4e2d...</p>\n<li aurl=\"/index.php/Addin/pan/doc/root_id/7830302b-302b-2b30-2b33-7830302b302b/clientid/b2.html\" onclick=\"openUrl\">\n\n<div>\n<h1> 3c86107551eb47824bd16c0171dd309d </h1>\n<h1> tid = OGRjYjc0YTY0ZGM5ODRmYjlhYmUzZTdjMjAxZjgxMGQ5ZWM5MGVkOGUwY2I2ZWQwM2JhMzg0ZTJmYWMyM2UwOD09 </h1>\n</div>\n<!--\nWWW-Authenticate: Basic realm=\"MSNswitch\"\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"N2UyNjgxMjA6NjQ1MWZiOTA6IDJlNjI5NDA=\", qop=\"auth\", algorithm=\"MD5\"\nWWW-Authenticate: Digest realm=\"IgdAuthentication\", domain=\"/\", nonce=\"N2UyNjgxMjA6NjQ1MWZiOTA6IDJlNjI5NDA=\", qop=\"auth\", algorithm=MD5\nWWW-Authenticate: Basic realm=\"Video Server\"\nWWW-Authenticate: Basic realm=\"RT-N2UyNjgx\"\nWWW-Authenticate: Digest realm=\"GoAhead\", domain=\":81\",qop=\"auth\", nonce=\"405448722b302b85aa6ef2b444ea6b5c\", opaque=\"5ccc069c403ebaf9f0171e9517f40e41\",algorithm=\"MD5\", stale=\"FALSE\"\nWWW-Authenticate: Basic realm=\"MOBOTIX Camera User\"\nWWW-Authenticate: Basic realm=\"Four-Faith\"\nWWW-Authenticate: Digest realm=\"realm@easycwmp\",qop=\"auth\",nonce=\"e22f76001fa38ce36f9b69bdbd73fbfb0001c399\",opaque=\"328458fab28345ae87ab3210a8513b14eff452a2\"\nWWW-Authenticate: Basic realm=\"[RTX1210]\"\nWWW-Authenticate: Basic realm=\"Nagios Core\"\nWWW-Authenticate: Basic realm=\"Server Status\"\nWWW-Authenticate: Basic realm=\"TP-LINK Wireless N Router WR841N\"\nWWW-Authenticate: Basic realm=\"NETGEAR DGN1000\"\nWWW-Authenticate: Basic aHR0cHdhdGNoOmY=\nWWW-Authenticate: Basic realm=\"TP-LINK Wireless N Router IPC223(P)-6\"\nWWW-Authenticate: Basic realm=\"Panasonic network device\"\nWWW-Authenticate: Basic realm=\"TP-LINK AC1200 Wireless Dual Band Gigabit Router Archer C5\"\nWWW-Authenticate: Basic realm=\"karaf\"\nWWW-Authenticate: Basic realm=\"Tomcat Manager Application\"\nWWW-Authenticate: Basic realm=\"HomeHub\"\nWWW-Authenticate: Basic realm=\"netcam\"\nWWW-Authenticate: Basic realm=\"Broadband Router\"\nWWW-Authenticate: Basic realm=\"DVR\"\nWWW-Authenticate: Basic realm=\"iPEX Internet Cafe\"\nWWW-Authenticate: Basic realm=\"\"\nWWW-Authenticate: Basic realm=\"System\"\nWWW-Authenticate: Digest realm=\"Control\", domain=\"PDVR M800\", nonce=\"34712299626f372c5ea0729ded8e8f37\", algorithm=MD5, qop=\"auth\"\nWWW-Authenticate: Basic realm=\"TP-LINK Wireless N Router WR840N\"\nWWW-Authenticate: Basic realm=\"WT-ABCyNjgx\"\nSelenium is made possible through the efforts of our open source community, contributions from these\n/CDGServer3/index.jsp\n<script type=\"module\" src=\"/@vite/client\"></script>\n<tomcat-users>\n<img src=\"/web/images/admin.png\" width=\"40\" height=\"40\">\n<img src=\"/web/images/guest.png\" width=\"40\" height=\"40\"> \nBetterAuthError\nBETTER_AUTH_URL\nPUBLIC_BETTER_AUTH_URL\nNUXT_PUBLIC_BETTER_AUTH_URL\nNEXT_PUBLIC_BETTER_AUTH_URL\nbetter-auth-client\nKibana UI\nWelcome to Elastic\n<title>BigAnt Admin </title>\nuser/add\u3010\u65b0\u589e\u4eba\u5458\u3011\nhttps://polyfill.io/\nSo-I-AM \";\n/index.php/admin/index sa=uploadConfirm sa=index\nNameError\nhello testers\nposted data was written to placeholder file\n{\\\"sm_nonce\\\":\\\"62e7518a4e4284979\\\"}\ncsaPostStatus=0\n3V@1\n202cb962ac59075b964b07152d234b70\nLocation: /vimarbyweb/index.php\n<img alt='logo' src=\"custom/logos/ecsimaging-default-login.png\" style=\"height:70px; margin-top:2%;\">\n\"DetectedxuanfengOS: %OS% linux-gnu\"\n{\"os\":\"windows\",\"logo\":\"\",\"appid\":\"skylar6\",\"has_prd_cert\":1,\"console_version\":\"V6.0\"}\nRDWeb\nRESULT=0\nThis a vulnerability!\npixmaps/debian-logo.png\nSuccessfulUpload\nPayload Executed\n/OAapp/WebObjects/OAapp.woa\nSystem.ArgumentException\nHello World!\nMiCollab End User Portal\nARN02304U8\nCorrectly updated the setup options\n67fc175780739f1ba31445a21deb2eec\nHACKED\n1.13.0\nShareCenter\nurl: \"/cgi-bin/login_mgr.cgi\",\ndata:\"cmd=cgi_get_ssl_info\",\napplication/json\nExpires: 0\n/js/lib/\nZero Touch Provisioning\nLinux PA-VM 4.18.0-240.1.1.20.pan.x86_64 #1 SMP Wed Jul 31 20:37:12 PDT 2024 x86_64 x86_64 x86_64 GNU/Linu\nredirect_to\nVMG3312-T20A\n<frame name=\"menu\" src=\"/ABBMain/Menu\" scrolling=\"auto\">\n<frame name=\"main\" src=\"/ABBMain/StartPage\" scrolling=\"auto\">\nSuccessfully saved\nurl: '/reqproc/proc_get'\nShareCenter\n2024/11/09 12:52_vuln_weaver_com.weaver.formmodel.apps.ktree.servlet.KtreeUploadAction\nvuln_yongyou_lsvl\nhello tongdaoa\nvulntest\nSRun Billing System\n\u6821\u56ed\u7f51\u81ea\u52a9\u670d\u52a1\u7cfb\u7edf\nSECExplorer666\nroot:wW0sffoqsk.EM:19426:0:99999:7:::\n\"link\":\"file:\nDolibarr 16.0.1\ndd556350275e2ee0a2e877cea9c8a74a\n/wp-content/plugins/time-clock/\n/wp-content/plugins/time-clock-pro/\n<li class=\"print-only\">Printed by Atlassian Confluence 8.5.5</li>\nuid=0(admin) gid=0(admin)\nvar Name=\"admin\";\nvar loginNum=\"1\";//\u6062\u590d\u51fa\u5382\u8bbe\u7f6e\u540eloginNum==0\nvar Manufacturer=\"D-Link\";\nvar ModelName=\"DSL-2888A\";\nvar HardwareVersion=\"T1\";\nvar SoftwareVersio=\"EG_1.00b4\";\nUpdate Success!\n12321\nyou are logged\nX-SYNO-TOKEN: MIGfMA0GCSq\n{\"productversion\":\"6.1.1\",\"buildnumber\":\"42962\",\"smallfixnumber\":\"6\",\"upnpmodelname\":\"DS3615xs\",\"fullversion\":\"6.1.1\"}\n\u6d4b\u8bd5\u62a5\u544a\n/wap/first/zsff/iconfont/iconfont.css\n<meta name=\"description\" content=\"Build Your Own Botnet\" />\nCRMEB\n<META HTTP-EQUIV=REFRESH CONTENT=\"1; URL=/vicidial/welcome.php\">\n/cgi-bin/webctrl.cgi?action=index_page\n<META content=\"MSHTML 6.00.2900.5583\" name=GENERATOR>\ndevice.png\nTraccar GPS Tracking System\n<script id=\"wpr-addons-js-js-extra\">\nvar WprConfig",
         "datamd5" : "b3709f21d58c5189cb188e6954d9a277",
         "datammh3" : 1770034419,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "linodeusercontent.com"
         ],
         "extkeyusage" : [
            "clientAuth",
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "4f47bb0184cc00b7229690998cf4ccbc",
            "sha1" : "920b6fcae31363bf9eb0af72b5a6c22c7637b4b5",
            "sha256" : "7bd2ba4ee9c31a23dc560e76d33968cf525e442e02974f0c250c71fd30aeb3cb"
         },
         "geolocus" : {
            "asn" : "AS63949",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "akamai.com",
               "linode.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "LINODE",
            "organization" : "Linode",
            "subnet" : "172.232.0.0/13"
         },
         "host" : [
            "172-236-102-56"
         ],
         "hostname" : [
            "172-236-102-56.ip.linodeusercontent.com"
         ],
         "ip" : "172.236.102.56",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "localhost",
            "country" : "BY",
            "organization" : "BEMMQVPT",
            "organizationalunit" : "SNZTCPI"
         },
         "keyusage" : [
            "digitalSignature",
            "keyCertSign"
         ],
         "latitude" : "41.8835",
         "location" : "41.8835,-87.6305",
         "longitude" : "-87.6305",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Akamai Connected Cloud",
         "os" : "Linux",
         "osdistribution" : "sUse",
         "osvendor" : "Linux",
         "port" : 2780,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 4096
         },
         "reason" : "OK",
         "reverse" : [
            "172-236-102-56.ip.linodeusercontent.com"
         ],
         "rtt" : 0.246971,
         "seen_date" : "2025-04-04",
         "serial" : "73:c7:98:1b:3f:18:51:5a",
         "signature" : {
            "algorithm" : "sha512WithRSAEncryption"
         },
         "source" : "datascan",
         "srcip" : "51.81.144.47",
         "srcport" : 40277,
         "status" : 200,
         "subdomains" : [
            "ip.linodeusercontent.com"
         ],
         "subject" : {
            "commonname" : "localhost",
            "country" : "BY",
            "organization" : "BEMMQVPT",
            "organizationalunit" : "SNZTCPI"
         },
         "subnet" : "172.236.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "ttl" : 47,
         "url" : "/",
         "validity" : {
            "notafter" : "2035-04-02T12:10:49Z",
            "notbefore" : "2025-04-02T12:10:49Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
  • 113.250.188.149:2780 (tcp/socks5) - last seen on 2025-04-04 at 06:35:15 UTC

    • IP
      113.250.188.149
      Network
      113.250.176.0/20
      Operating System
      Linux Linux Kernel
      ASN
      AS134420
      Organization
      Chongqing Telecom
      Protocol
      socks5
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7afb6d54678d64e9d735a47550a1b682
    • \x05\xff
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:35:15.000Z",
         "app" : {
            "length" : 2
         },
         "asn" : "AS134420",
         "city" : "Shanghai",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "\\x05\\xff",
         "datamd5" : "7afb6d54678d64e9d735a47550a1b682",
         "datammh3" : -1096387539,
         "geolocus" : {
            "asn" : "AS141739",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-CQ",
            "organization" : "CHINANET Chongqing Province Network",
            "subnet" : "113.248.0.0/14"
         },
         "ip" : "113.250.188.149",
         "ipv6" : "false",
         "latitude" : "31.2222",
         "location" : "31.2222,121.4581",
         "longitude" : "121.4581",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chongqing Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 2780,
         "protocol" : "socks5",
         "rtt" : 0.530147,
         "seen_date" : "2025-04-04",
         "source" : "datascan",
         "srcip" : "51.81.181.174",
         "srcport" : 35047,
         "subnet" : "113.250.176.0/20",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 34
      }
  • 124.255.245.152:2780 (tcp/http) - last seen on 2025-04-04 at 06:35:02 UTC

    • IP
      124.255.245.152
      Network
      124.255.224.0/19
      Domain(s)
      mvno.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://124.255.245.152:2780/ 200

      Reverse DNS
      152.245.255.124.ap.mvno.net
      ASN
      AS4686
      Organization
      BEKKOAME INTERNET INC.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Apache HTTP Server 2.4.54
      HTTP Component(s)
      OpenSSL OpenSSL 1.1.1q
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      60a336c79bad19122195bda01a5d5002
      HTTP Header MD5
      5e0f9b52fcfbddca72311e34182f6680
      HTTP Body MD5
      b410b779d648df561a9afd841e903d54
    • HTTP/1.1 200 OK
      Date: Fri, 04 Apr 2025 06:35:04 GMT
      Server: Apache/2.4.54 (Unix) OpenSSL/1.1.1q
      X-Content-Type-Options: nosniff
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      Upgrade: h2
      Connection: Upgrade, close
      Last-Modified: Tue, 05 Apr 2011 23:00:00 GMT
      Accept-Ranges: bytes
      Content-Length: 91
      Vary: Accept-Encoding
      Cache-Control: max-age=0, no-cache, no-store, must-revalidate
      Pragma: no-cache
      Content-Type: text/html
      
      <html><head><meta http-equiv="refresh" content="0; URL=/camera/index.html" /></head></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:35:02.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b410b779d648df561a9afd841e903d54",
               "bodymmh3" : 753957053,
               "component" : [
                  {
                     "product" : "OpenSSL",
                     "productvendor" : "OpenSSL",
                     "productversion" : "1.1.1q"
                  }
               ],
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Tue, 05 Apr 2011 23:00:00 GMT"
                  }
               ],
               "headermd5" : "5e0f9b52fcfbddca72311e34182f6680",
               "headermmh3" : -1607097992
            },
            "length" : 545
         },
         "asn" : "AS4686",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Fri, 04 Apr 2025 06:35:04 GMT\r\nServer: Apache/2.4.54 (Unix) OpenSSL/1.1.1q\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nUpgrade: h2\r\nConnection: Upgrade, close\r\nLast-Modified: Tue, 05 Apr 2011 23:00:00 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 91\r\nVary: Accept-Encoding\r\nCache-Control: max-age=0, no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nContent-Type: text/html\r\n\r\n<html><head><meta http-equiv=\"refresh\" content=\"0; URL=/camera/index.html\" /></head></html>",
         "datamd5" : "60a336c79bad19122195bda01a5d5002",
         "datammh3" : 590163751,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "mvno.net"
         ],
         "geolocus" : {
            "asn" : "AS4686",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "freebit.net",
               "mvno.net",
               "nic.ad.jp"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "FBDC",
            "organization" : "FreeBit Co., Ltd.",
            "subnet" : "124.255.224.0/19"
         },
         "host" : [
            152
         ],
         "hostname" : [
            "152.245.255.124.ap.mvno.net"
         ],
         "ip" : "124.255.245.152",
         "ipv6" : "false",
         "latitude" : "35.6900",
         "location" : "35.6900,139.6900",
         "longitude" : "139.6900",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "BEKKOAME INTERNET INC.",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 2780,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "productversion" : "2.4.54",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "152.245.255.124.ap.mvno.net"
         ],
         "rtt" : 0.200281,
         "seen_date" : "2025-04-04",
         "source" : "datascan",
         "srcip" : "195.184.76.80",
         "srcport" : 44769,
         "status" : 200,
         "subdomains" : [
            "124.ap.mvno.net",
            "245.255.124.ap.mvno.net",
            "255.124.ap.mvno.net",
            "ap.mvno.net"
         ],
         "subnet" : "124.255.224.0/19",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 41,
         "url" : "/"
      }
  • 171.111.199.20:2780 (tcp/socks5) - last seen on 2025-04-04 at 06:35:02 UTC

    • IP
      171.111.199.20
      Network
      171.111.192.0/21
      Operating System
      Linux Linux Kernel
      ASN
      AS138169
      Organization
      China Telecom
      Protocol
      socks5
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7afb6d54678d64e9d735a47550a1b682
    • \x05\xff
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:35:02.000Z",
         "app" : {
            "length" : 2
         },
         "asn" : "AS138169",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "\\x05\\xff",
         "datamd5" : "7afb6d54678d64e9d735a47550a1b682",
         "datammh3" : -1096387539,
         "geolocus" : {
            "asn" : "AS137693",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "189.cn",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-GX",
            "organization" : "CHINANET GUANGXI PROVINCE NETWORK",
            "subnet" : "171.104.0.0/13"
         },
         "ip" : "171.111.199.20",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 2780,
         "protocol" : "socks5",
         "rtt" : 0.380803,
         "seen_date" : "2025-04-04",
         "source" : "datascan",
         "srcip" : "15.204.37.27",
         "srcport" : 33951,
         "subnet" : "171.111.192.0/21",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 33
      }
  • 129.122.16.164:2780 (tcp/http/tls) - last seen on 2025-04-04 at 06:34:34 UTC

    • IP
      129.122.16.164
      Network
      129.122.0.0/18
      Domain(s)
      knust.edu.gh
      Device

      <enterprise field>: device.class

      URL

      https://ocl.knust.edu.gh:2780/ 302

      ASN
      AS327947
      Organization
      KNUST
      Protocol
      http
      Source
      datascan::redirect::1
    • Issuer Common Name
      DigiCert Global G2 TLS RSA SHA256 2020 CA1
      Issuer Organization
      DigiCert Inc
      Subject Organization
      Kwame Nkrumah University of Science and Technology
      Subject Common Name
      *.knust.edu.gh
      Subject Alt Name
      *.knust.edu.gh knust.edu.gh
      SHA256 Fingerprint
      3f402cc46ef8ce29238fef0ab792be02b838a5ea5b86214bc05ea6719cf37fce
      Validity Not Before
      2025-01-28T00:00:00Z
      Validity Not After
      2026-02-28T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      412071349ef19b4a574806a56a66a676
      HTTP Header MD5
      e05add51f136b4499c5ee8ae5ebdecde
      HTTP Body MD5
      c58bc4882e616e3009167bb1170de81b
    • HTTP/1.1 302 Moved temporarily
      Date: Fri, 04 Apr 2025 06:34:33 GMT
      Server: EZproxy
      Expires: Mon, 02 Aug 1999 00:00:00 GMT
      Last-Modified: Fri, 04 Apr 2025 06:34:33 GMT
      Cache-Control: no-store, no-cache, must-revalidate
      Cache-Control: post-check=0, pre-check=0
      Pragma: no-cache
      Location: https://ocl.knust.edu.gh/login?qurl=https://ascpjournal.biomedcentral.com%2f
      Connection: close
      
      To access this site, go <a href="https://ocl.knust.edu.gh/login?qurl=https://ascpjournal.biomedcentral.com%2f">here</a>
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:34:34.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "knust.edu.gh"
               ],
               "hostname" : [
                  "ocl.knust.edu.gh"
               ],
               "url" : [
                  "https://ocl.knust.edu.gh/login?qurl=https://ascpjournal.biomedcentral.com%2f"
               ]
            },
            "http" : {
               "bodymd5" : "c58bc4882e616e3009167bb1170de81b",
               "bodymmh3" : -428009935,
               "header" : [
                  {
                     "value" : "Fri, 04 Apr 2025 06:34:33 GMT",
                     "name" : "Last-Modified"
                  }
               ],
               "headermd5" : "e05add51f136b4499c5ee8ae5ebdecde",
               "headermmh3" : 1871149420
            },
            "length" : 513
         },
         "asn" : "AS327947",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Kotei",
         "country" : "GH",
         "data" : "HTTP/1.1 302 Moved temporarily\r\nDate: Fri, 04 Apr 2025 06:34:33 GMT\r\nServer: EZproxy\r\nExpires: Mon, 02 Aug 1999 00:00:00 GMT\r\nLast-Modified: Fri, 04 Apr 2025 06:34:33 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nCache-Control: post-check=0, pre-check=0\r\nPragma: no-cache\r\nLocation: https://ocl.knust.edu.gh/login?qurl=https://ascpjournal.biomedcentral.com%2f\r\nConnection: close\r\n\r\nTo access this site, go <a href=\"https://ocl.knust.edu.gh/login?qurl=https://ascpjournal.biomedcentral.com%2f\">here</a>\n",
         "datamd5" : "412071349ef19b4a574806a56a66a676",
         "datammh3" : 1994167274,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "knust.edu.gh"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "0b4a99bd0d7a1d772f55768cf03d1457",
            "sha1" : "1236644f81915f5e5fc7d320e19867a3409eba99",
            "sha256" : "3f402cc46ef8ce29238fef0ab792be02b838a5ea5b86214bc05ea6719cf37fce"
         },
         "forward" : "ocl.knust.edu.gh",
         "geolocus" : {
            "asn" : "AS327947",
            "continent" : "AF",
            "continentname" : "Africa",
            "country" : "GH",
            "countryname" : "Ghana",
            "isineu" : "false",
            "latitude" : "7.946527",
            "location" : "7.946527,-1.023194",
            "longitude" : "-1.023194",
            "netname" : "Kwame-Nkrumah-University",
            "organization" : "Kwame Nkrumah University of Science and Technology",
            "subnet" : "129.122.0.0/18"
         },
         "hostname" : [
            "knust.edu.gh",
            "ocl.knust.edu.gh"
         ],
         "ip" : "129.122.16.164",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "DigiCert Global G2 TLS RSA SHA256 2020 CA1",
            "country" : "US",
            "organization" : "DigiCert Inc"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "6.6030",
         "location" : "6.6030,-1.6601",
         "longitude" : "-1.6601",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "KNUST",
         "port" : 2780,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Moved temporarily",
         "rtt" : 0.185218,
         "seen_date" : "2025-04-04",
         "serial" : "05:62:f0:ec:37:0b:c9:49:88:f7:88:a2:fe:7d:da:bb",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::1",
         "srcip" : "195.184.76.78",
         "srcport" : 37019,
         "status" : 302,
         "subject" : {
            "altname" : [
               "*.knust.edu.gh",
               "knust.edu.gh"
            ],
            "city" : "Kumasi",
            "commonname" : "*.knust.edu.gh",
            "country" : "GH",
            "organization" : "Kwame Nkrumah University of Science and Technology"
         },
         "subnet" : "129.122.0.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "edu.gh"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "ttl" : 34,
         "url" : "/",
         "validity" : {
            "notafter" : "2026-02-28T23:59:59Z",
            "notbefore" : "2025-01-28T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
  • 54.213.50.152:2780 (tcp/http/tls) - last seen on 2025-04-04 at 06:34:18 UTC

    • IP
      54.213.50.152
      Network
      54.212.0.0/14
      Domain(s)
      amazonaws.com future-gas.ca
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Linux Linux Kernel
      URL

      https://54.213.50.152:2780/ 200

      HTTP Title
      AiCloud
      Reverse DNS
      ec2-54-213-50-152.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GeoTrust RSA CA 2018
      Issuer Organization
      DigiCert Inc
      Subject Common Name
      preprod.sslvpn.court-north.ca
      SHA256 Fingerprint
      64a0a32b4fe7b3d7936eb76809f07bec325a4e057f01d2f23ca85afd66119910
      Validity Not Before
      2024-04-04T06:29:46Z
      Validity Not After
      2026-04-04T06:29:46Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      eec2f4120ab9a23d5cfaf3bfdc2425a1
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      5ca568bf96622aad854cce25a37f12ad
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 200 OK
      Connection: close
      Date: Thu, 03 Apr 2025 23:39:36 GMT
      Server: nginx
      Content-Length: 16915
      Content-Type: text/html
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml">
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
      <meta http-equiv="Cache-control" content="no-cache">
      <meta name="viewport" content="width=device-width, minimum-scale=1.0, maximum-scale=1, user-scalable=no" />
      <meta name="apple-mobile-web-app-capable" content="yes">
      <meta name="apple-mobile-web-app-status-bar-style" content="black">
      <meta http-equiv="X-UA-Compatible" content="IE=edge">
      <meta http-equiv="X-Frame-Options" content="SAMEORIGIN">
      <title>AiCloud</title>
      <style>
      html{
      margin:0 0;
      padding:0px;
      font-family:"Segoe UI",Arial;
      }
      body{
      display: block;
      overflow: hidden;
      }
      
      input,#ok {
      background:transparent url("/smb/css/style-theme.png") no-repeat top left;
      }
      
      #login_logo{
      width:300px;
      height:76px;
      background:transparent url("/smb/css/logo.jpg") no-repeat top left;
      position: absolute;
      top: 60px;
      }
      
      #ok{
      background-position: -200px -390px;
      width:40px;
      height:40px;
      float:right;
      }
      #title1{
      color:#fff;
      font-size:30px
      }
      #title2{
      color:#fff;
      font-size:20px
      }
      input {
      font-size: 14px;
      text-shadow: 0px 1px 0px white;
      outline: none;
      background-position: 0 -540px;
      -webkit-border-radius: 0;
      -moz-border-radius: 0;
      border-radius: 0;
      border: 0;
      -webkit-box-shadow: 0 0 0;
      -moz-box-shadow: 0 0 0;
      box-shadow: 0 0 0;
      padding-left:3px;
      }
      div.cap_num{
      width:40px;
      height:40px;
      float:right;
      }
      .unselectable {
      -moz-user-select: -moz-none;
      -khtml-user-select: none;
      -webkit-user-select: none;
      -o-user-select: none;
      user-select: none;
      }
      .table_x{
      position: relative;
      padding: 20px 40px 0 40px;
      font-size: 20px;
      display:none;
      }
      .table_x input{
      width:220px;
      height:36px;
      font-size: 20px;
      }
      .table_x .table_label_x{
      color:#ffffff;
      }
      </style>
      <script type="text/javascript" src="/smb/js/tools.js"></script>
      <script type='text/javascript' src='/smb/js/davclient_tools.js'></script>
      <script type="text/javascript">
      var this_url;
      var m = new lang();
      var g_storage = new myStorage();
      var g_captcha = -1;
      
      function makeid(){
          var text = "";
          var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
      
          for( var i=0; i < 20; i++ )
              text += possible.charAt(Math.floor(Math.random() * possible.length));
      
          return text;
      }
      
      $("document").ready(function() {
              //- create access token
              var asus_token = ( g_storage.gett('asus_token') == undefined ) ? '' : g_storage.gett('asus_token');
              if(asus_token==""){
                      asus_token = makeid();
                      g_storage.sett('asus_token', asus_token);
              }
      
              var loc_lan = String(window.navigator.userLanguage || window.navigator.language).toLowerCase();
              var lan = ( g_storage.get('lan') == undefined ) ? loc_lan : g_storage.get('lan');
              m.setLanguage(lan);
      
              $('label#username').text(m.getString('title_username2'));
              $('label#password').text(m.getString('title_password2'));
              // $('label#captcha').text(m.getString('title_captcha'));
      
              this_url = $("input.urlInfo").attr("value");
      
              if(this_url!="/"){
                      $("div#title1").text(m.getString('title_login'));
                      $("div#title2").text(this_url);
              }
      
              var browserVer = navigator.userAgent.toLowerCase();
              if( isIE() &&
                      getInternetExplorerVersion() <= 7 ){
      
                      $("table#table_login").remove();
      
                      var append_html = '<table border="0" cellpadding="0" cellspacing="3" style="position: relative;left:40px;padding-top:20px"><tbody><tr><td width="240px">';
                      append_html += '<font color="white" size="4">';
                      append_html += '<label>';
                      append_html += m.getString('msg_browsersupport');
                      append_html += '</label>';
                      append_html += '</font>';
                      append_html += '</td>';
                      append_html += '</tr>';
                      append_html += '</tbody>';
                      append_html += '</table>';
                      $(append_html).appendTo($("#main"));
      
                      return;
              }
      
              // $(".captcha").css("display","none");
              // generateCaptcha();
      
              adjustUI();
      
              $(window).resize(adjustUI);
      
              $("table#table_login").css("display", "block");
      
              $("input#username").focus();
      });
      
      function sanitize(input) {
          //- Use replacement methods to remove or encode potentially malicious characters
          return input
              .replace(/&/g, "&amp;")
              .replace(/</g, "&lt;")
              .replace(/>/g, "&gt;")
              .replace(/"/g, "&quot;")
              .replace(/'/g, "&#x27;")
              .replace(/\//g, "&#x2F;");
      }
      
      function generateCaptcha(){
      
              if(this_url!="/")
                      return;
      
              $.ajax({
                      url: 'GetCaptchaImage',
                      data: '',
                      type: 'GET',
                      dataType: 'xml',
                      timeout: 20000,
                      error: function(){
                              //alert('Error loading XML document');
                      },
                      success: function(xml){
      
                              var data = parseXml(xml);
                              var captcha_enable = sanitize($(data).find('enable').text());
                              if(captcha_enable==1){
                                      var image_data1 = sanitize($(data).find('img1').text());
                                      var image_data1 = sanitize($(data).find('img1').text());
                                      var image_data2 = sanitize($(data).find('img2').text());
                                      var image_data3 = sanitize($(data).find('img3').text());
                                      var image_data4 = sanitize($(data).find('img4').text());
                                      g_captcha = sanitize($(data).find('code').text());
      
                                      var captcha_pattern = "";
                                      $("#captcha_pattern").empty();
      
                                      captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data4 + ")'></div>";
                                      captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data3 + ")'></div>";
                                      captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data2 + ")'></div>";
                                      captcha_pattern += "<div class='cap_num' style='background-image: url(" + image_data1 + ")'></div>";
      
                                      $(captcha_pattern).appendTo("#captcha_pattern");
      
                                      $(".captcha").css("display","block");
      
                                      $("#main").css("height",420);
                              }
      
                      }
              });
      }
      
      function adjustUI(){
              var logo_left = ($(document).width() - $("div#login_logo").width())/2;
              $("div#login_logo").css("left", logo_left);
      }
      
      function doOK(e) {
              var captcha = "";//$('input#captcha').val();
              var user = "";
              var pass = "";
              var auth = "";
      
              if(g_captcha!=-1&&captcha!=g_captcha){
                      alert(m.getString('msg_error_captcha'));
              }
              else{
                      user = $('input#username').val();
                      pass = $('input#password').val();
                      auth = "Basic " + Base64.encode(user + ":" + pass);
              }
      
              var client = new davlib.DavClient();
              client.initialize();
      
              g_storage.set('openurl', this_url);
      
              /*
              //var enc = "crypt:6166393232616536393164633730316238643463326264313735363031393961:3d593c297c1c6539356237383035663530353462633939646666313138643561";
              var enc = "";
              g_storage.set('openurl', this_url);
      
              client.OAUTH(this_url, auth, enc, function(error, statusstring, content){
      
                      if(error==401){
      
                              $('input#password').attr("value","");
      
                              var the_left = parseInt($('div#login_logo').css("left"));
      
                              for(var i=0; i<6; i++){
      
                                      var x = i%2;
                                      var new_left = 0;
                                      if(x==0)
                                              new_left = the_left + i*5;
                                      else if(x==1)
                                              new_left = the_left - i*5;
      
                                      $('div#login_logo').animate({
                                      left: new_left
                                      }, 100, function(){
                                              if(i=5)
                                                      adjustUI();
                                      });
                              }
      
                      }
                      else{
                              $.cookie("TestAuth", content);
      
                              setTimeout(function(){
                                      window.location.reload(true);
                              }, 100);
      
                      }
              });
              */
      
              client.PROPFIND(this_url, auth, function(error, statusstring, content){
                      if(error==401){
                              $('input#password').attr("value","");
      
                              var the_left = parseInt($('div#login_logo').css("left"));
      
                              for(var i=0; i<6; i++){
      
                                      var x = i%2;
                                      var new_left = 0;
                                      if(x==0)
                                              new_left = the_left + i*5;
                                      else if(x==1)
                                              new_left = the_left - i*5;
      
                                      $('div#login_logo').animate({
                                      left: new_left
                                      }, 100, function(){
                                              if(i=5)
                                                      adjustUI();
                                      });
                              }
      
                      }
                      else{
                              setTimeout(function(){
                                      window.location.reload(true);
                              }, 100);
                      }
              });
      }
      
      function onKeyHandler(e){
              if(e.keyCode==13)
                      doOK(e);
      }
      
      </script>
      </head>
      <body style='padding-top:20px;margin:0;background-color:#313131'>
      
      <table id="logo" width="100%" border="0" valign="middle" align="center" cellpadding="0" cellspacing="0">
              <tbody><tr height="128px">
                      <tr><td valign="middle" align="center"><div id="login_logo"></div></td></tr>
              </tr></tbody>
      </table>
      
      <table width="100%" border="0" valign="middle" align="center" cellpadding="0" cellspacing="0">
              <tbody>
                      <tr>
                      <td valign="middle" align="center">
                              <div style="width:300px;height:88px;background-color:#595F62;padding-top:10px">
                                      <div id="title1">Welcome.</div>
                                      <div id="title2">Who’s coming home?</div>
                              </div>
                      </td>
                      </tr>
                      <tr height="7px"></tr>
              </tbody>
      </table>
      
      <table width="100%" height="100%">
              <tbody><tr>
                      <td valign="middle" align="center">
      
                              <table valign="middle" align="center" border="0" cellpadding="0" cellspacing="0">
                                      <tbody><tr>
                                              <td align="left" background="" height="106" alt="">
                                                      <div id="main" style="width:300px;height:385px;background-color:#595F62">
                                                              <table id="table_login" class="table_x" border="0" cellpadding="0" cellspacing="3">
                                                                      <tbody>
                                                                              <tr>
                                                                                      <td>
                                                                                              <label class="table_label_x" id="username">Username :</label>
                                                                                      </td>
                                                                              </tr>
                                                                              <tr height="5px"></tr>
                                                                              <tr>
                                                                              <td>
                                                                                      <input id="username" name="username" type="text" maxlength="32" autocapitalize="off">
                                                                              </td>
                                                                      </tr>
                                                                      <tr style="height:10px"></tr>
                                              <tr>
                                              <td>
                                                      <label class="table_label_x" id="password">Password :</label>
                                              </td>
                                              </tr>
                                                                      <tr height="5px"></tr>
                                                                      <tr>
                                                                      <td>
                                                                              <input id="password" name="password" type="password" maxlength="32" onkeydown="return onKeyHandler(event)">
                                                                      </td>
                                                                      </tr>
                                                                              <tr style="height:10px"></tr>
                                                                              <!--
                                                                      <tr class="captcha" style="display:none">
                                                                                      <td>
                                                                                              <font color="white" size="4">
                                                                                                      <label id="captcha">Random no. :</label>
                                                                                              </font>
                                                                                      </td>
                                                                              </tr>
                                                                              <tr class="captcha" height="5px" style="display:none"></tr>
                                                                              <tr class="captcha" style="display:none">
                                                                              <td>
                                                                                      <input id="captcha" name="captcha" type="text" autocapitalize="off" maxlength="4" style="font-size:20px;width:220px;height:36px" onkeydown="return onKeyHandler(event)">
                                                                              </td>
                                                                      </tr>
                                                                      <tr class="captcha" height="5px" style="display:none"></tr>
                                                                       <tr class="captcha" style="display:none">
                                                                              <td>
                                                                                      <div id="captcha_pattern" class="unselectable" name="captcha_pattern" style="width:220px;height:40px;float:left" onclick="generateCaptcha()"></div>
                                                                              </td>
                                                                      </tr>
                                                                              <tr style="height:10px"></tr>
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:34:18.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
               ]
            },
            "favicon" : {
               "image" : "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",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "5ca568bf96622aad854cce25a37f12ad",
               "bodymmh3" : 2122725594,
               "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
               "headermmh3" : -826958478,
               "title" : "AiCloud"
            },
            "length" : 16384
         },
         "asn" : "AS16509",
         "city" : "Boardman",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 03 Apr 2025 23:39:36 GMT\r\nServer: nginx\r\nContent-Length: 16915\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta http-equiv=\"Cache-control\" content=\"no-cache\">\n<meta name=\"viewport\" content=\"width=device-width, minimum-scale=1.0, maximum-scale=1, user-scalable=no\" />\n<meta name=\"apple-mobile-web-app-capable\" content=\"yes\">\n<meta name=\"apple-mobile-web-app-status-bar-style\" content=\"black\">\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n<meta http-equiv=\"X-Frame-Options\" content=\"SAMEORIGIN\">\n<title>AiCloud</title>\n<style>\nhtml{\nmargin:0 0;\npadding:0px;\nfont-family:\"Segoe UI\",Arial;\n}\nbody{\ndisplay: block;\noverflow: hidden;\n}\n\ninput,#ok {\nbackground:transparent url(\"/smb/css/style-theme.png\") no-repeat top left;\n}\n\n#login_logo{\nwidth:300px;\nheight:76px;\nbackground:transparent url(\"/smb/css/logo.jpg\") no-repeat top left;\nposition: absolute;\ntop: 60px;\n}\n\n#ok{\nbackground-position: -200px -390px;\nwidth:40px;\nheight:40px;\nfloat:right;\n}\n#title1{\ncolor:#fff;\nfont-size:30px\n}\n#title2{\ncolor:#fff;\nfont-size:20px\n}\ninput {\nfont-size: 14px;\ntext-shadow: 0px 1px 0px white;\noutline: none;\nbackground-position: 0 -540px;\n-webkit-border-radius: 0;\n-moz-border-radius: 0;\nborder-radius: 0;\nborder: 0;\n-webkit-box-shadow: 0 0 0;\n-moz-box-shadow: 0 0 0;\nbox-shadow: 0 0 0;\npadding-left:3px;\n}\ndiv.cap_num{\nwidth:40px;\nheight:40px;\nfloat:right;\n}\n.unselectable {\n-moz-user-select: -moz-none;\n-khtml-user-select: none;\n-webkit-user-select: none;\n-o-user-select: none;\nuser-select: none;\n}\n.table_x{\nposition: relative;\npadding: 20px 40px 0 40px;\nfont-size: 20px;\ndisplay:none;\n}\n.table_x input{\nwidth:220px;\nheight:36px;\nfont-size: 20px;\n}\n.table_x .table_label_x{\ncolor:#ffffff;\n}\n</style>\n<script type=\"text/javascript\" src=\"/smb/js/tools.js\"></script>\n<script type='text/javascript' src='/smb/js/davclient_tools.js'></script>\n<script type=\"text/javascript\">\nvar this_url;\nvar m = new lang();\nvar g_storage = new myStorage();\nvar g_captcha = -1;\n\nfunction makeid(){\n    var text = \"\";\n    var possible = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\";\n\n    for( var i=0; i < 20; i++ )\n        text += possible.charAt(Math.floor(Math.random() * possible.length));\n\n    return text;\n}\n\n$(\"document\").ready(function() {\n        //- create access token\n        var asus_token = ( g_storage.gett('asus_token') == undefined ) ? '' : g_storage.gett('asus_token');\n        if(asus_token==\"\"){\n                asus_token = makeid();\n                g_storage.sett('asus_token', asus_token);\n        }\n\n        var loc_lan = String(window.navigator.userLanguage || window.navigator.language).toLowerCase();\n        var lan = ( g_storage.get('lan') == undefined ) ? loc_lan : g_storage.get('lan');\n        m.setLanguage(lan);\n\n        $('label#username').text(m.getString('title_username2'));\n        $('label#password').text(m.getString('title_password2'));\n        // $('label#captcha').text(m.getString('title_captcha'));\n\n        this_url = $(\"input.urlInfo\").attr(\"value\");\n\n        if(this_url!=\"/\"){\n                $(\"div#title1\").text(m.getString('title_login'));\n                $(\"div#title2\").text(this_url);\n        }\n\n        var browserVer = navigator.userAgent.toLowerCase();\n        if( isIE() &&\n                getInternetExplorerVersion() <= 7 ){\n\n                $(\"table#table_login\").remove();\n\n                var append_html = '<table border=\"0\" cellpadding=\"0\" cellspacing=\"3\" style=\"position: relative;left:40px;padding-top:20px\"><tbody><tr><td width=\"240px\">';\n                append_html += '<font color=\"white\" size=\"4\">';\n                append_html += '<label>';\n                append_html += m.getString('msg_browsersupport');\n                append_html += '</label>';\n                append_html += '</font>';\n                append_html += '</td>';\n                append_html += '</tr>';\n                append_html += '</tbody>';\n                append_html += '</table>';\n                $(append_html).appendTo($(\"#main\"));\n\n                return;\n        }\n\n        // $(\".captcha\").css(\"display\",\"none\");\n        // generateCaptcha();\n\n        adjustUI();\n\n        $(window).resize(adjustUI);\n\n        $(\"table#table_login\").css(\"display\", \"block\");\n\n        $(\"input#username\").focus();\n});\n\nfunction sanitize(input) {\n    //- Use replacement methods to remove or encode potentially malicious characters\n    return input\n        .replace(/&/g, \"&amp;\")\n        .replace(/</g, \"&lt;\")\n        .replace(/>/g, \"&gt;\")\n        .replace(/\"/g, \"&quot;\")\n        .replace(/'/g, \"&#x27;\")\n        .replace(/\\//g, \"&#x2F;\");\n}\n\nfunction generateCaptcha(){\n\n        if(this_url!=\"/\")\n                return;\n\n        $.ajax({\n                url: 'GetCaptchaImage',\n                data: '',\n                type: 'GET',\n                dataType: 'xml',\n                timeout: 20000,\n                error: function(){\n                        //alert('Error loading XML document');\n                },\n                success: function(xml){\n\n                        var data = parseXml(xml);\n                        var captcha_enable = sanitize($(data).find('enable').text());\n                        if(captcha_enable==1){\n                                var image_data1 = sanitize($(data).find('img1').text());\n                                var image_data1 = sanitize($(data).find('img1').text());\n                                var image_data2 = sanitize($(data).find('img2').text());\n                                var image_data3 = sanitize($(data).find('img3').text());\n                                var image_data4 = sanitize($(data).find('img4').text());\n                                g_captcha = sanitize($(data).find('code').text());\n\n                                var captcha_pattern = \"\";\n                                $(\"#captcha_pattern\").empty();\n\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data4 + \")'></div>\";\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data3 + \")'></div>\";\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data2 + \")'></div>\";\n                                captcha_pattern += \"<div class='cap_num' style='background-image: url(\" + image_data1 + \")'></div>\";\n\n                                $(captcha_pattern).appendTo(\"#captcha_pattern\");\n\n                                $(\".captcha\").css(\"display\",\"block\");\n\n                                $(\"#main\").css(\"height\",420);\n                        }\n\n                }\n        });\n}\n\nfunction adjustUI(){\n        var logo_left = ($(document).width() - $(\"div#login_logo\").width())/2;\n        $(\"div#login_logo\").css(\"left\", logo_left);\n}\n\nfunction doOK(e) {\n        var captcha = \"\";//$('input#captcha').val();\n        var user = \"\";\n        var pass = \"\";\n        var auth = \"\";\n\n        if(g_captcha!=-1&&captcha!=g_captcha){\n                alert(m.getString('msg_error_captcha'));\n        }\n        else{\n                user = $('input#username').val();\n                pass = $('input#password').val();\n                auth = \"Basic \" + Base64.encode(user + \":\" + pass);\n        }\n\n        var client = new davlib.DavClient();\n        client.initialize();\n\n        g_storage.set('openurl', this_url);\n\n        /*\n        //var enc = \"crypt:6166393232616536393164633730316238643463326264313735363031393961:3d593c297c1c6539356237383035663530353462633939646666313138643561\";\n        var enc = \"\";\n        g_storage.set('openurl', this_url);\n\n        client.OAUTH(this_url, auth, enc, function(error, statusstring, content){\n\n                if(error==401){\n\n                        $('input#password').attr(\"value\",\"\");\n\n                        var the_left = parseInt($('div#login_logo').css(\"left\"));\n\n                        for(var i=0; i<6; i++){\n\n                                var x = i%2;\n                                var new_left = 0;\n                                if(x==0)\n                                        new_left = the_left + i*5;\n                                else if(x==1)\n                                        new_left = the_left - i*5;\n\n                                $('div#login_logo').animate({\n                                left: new_left\n                                }, 100, function(){\n                                        if(i=5)\n                                                adjustUI();\n                                });\n                        }\n\n                }\n                else{\n                        $.cookie(\"TestAuth\", content);\n\n                        setTimeout(function(){\n                                window.location.reload(true);\n                        }, 100);\n\n                }\n        });\n        */\n\n        client.PROPFIND(this_url, auth, function(error, statusstring, content){\n                if(error==401){\n                        $('input#password').attr(\"value\",\"\");\n\n                        var the_left = parseInt($('div#login_logo').css(\"left\"));\n\n                        for(var i=0; i<6; i++){\n\n                                var x = i%2;\n                                var new_left = 0;\n                                if(x==0)\n                                        new_left = the_left + i*5;\n                                else if(x==1)\n                                        new_left = the_left - i*5;\n\n                                $('div#login_logo').animate({\n                                left: new_left\n                                }, 100, function(){\n                                        if(i=5)\n                                                adjustUI();\n                                });\n                        }\n\n                }\n                else{\n                        setTimeout(function(){\n                                window.location.reload(true);\n                        }, 100);\n                }\n        });\n}\n\nfunction onKeyHandler(e){\n        if(e.keyCode==13)\n                doOK(e);\n}\n\n</script>\n</head>\n<body style='padding-top:20px;margin:0;background-color:#313131'>\n\n<table id=\"logo\" width=\"100%\" border=\"0\" valign=\"middle\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\n        <tbody><tr height=\"128px\">\n                <tr><td valign=\"middle\" align=\"center\"><div id=\"login_logo\"></div></td></tr>\n        </tr></tbody>\n</table>\n\n<table width=\"100%\" border=\"0\" valign=\"middle\" align=\"center\" cellpadding=\"0\" cellspacing=\"0\">\n        <tbody>\n                <tr>\n                <td valign=\"middle\" align=\"center\">\n                        <div style=\"width:300px;height:88px;background-color:#595F62;padding-top:10px\">\n                                <div id=\"title1\">Welcome.</div>\n                                <div id=\"title2\">Who\u2019s coming home?</div>\n                        </div>\n                </td>\n                </tr>\n                <tr height=\"7px\"></tr>\n        </tbody>\n</table>\n\n<table width=\"100%\" height=\"100%\">\n        <tbody><tr>\n                <td valign=\"middle\" align=\"center\">\n\n                        <table valign=\"middle\" align=\"center\" border=\"0\" cellpadding=\"0\" cellspacing=\"0\">\n                                <tbody><tr>\n                                        <td align=\"left\" background=\"\" height=\"106\" alt=\"\">\n                                                <div id=\"main\" style=\"width:300px;height:385px;background-color:#595F62\">\n                                                        <table id=\"table_login\" class=\"table_x\" border=\"0\" cellpadding=\"0\" cellspacing=\"3\">\n                                                                <tbody>\n                                                                        <tr>\n                                                                                <td>\n                                                                                        <label class=\"table_label_x\" id=\"username\">Username :</label>\n                                                                                </td>\n                                                                        </tr>\n                                                                        <tr height=\"5px\"></tr>\n                                                                        <tr>\n                                                                        <td>\n                                                                                <input id=\"username\" name=\"username\" type=\"text\" maxlength=\"32\" autocapitalize=\"off\">\n                                                                        </td>\n                                                                </tr>\n                                                                <tr style=\"height:10px\"></tr>\n                                        <tr>\n                                        <td>\n                                                <label class=\"table_label_x\" id=\"password\">Password :</label>\n                                        </td>\n                                        </tr>\n                                                                <tr height=\"5px\"></tr>\n                                                                <tr>\n                                                                <td>\n                                                                        <input id=\"password\" name=\"password\" type=\"password\" maxlength=\"32\" onkeydown=\"return onKeyHandler(event)\">\n                                                                </td>\n                                                                </tr>\n                                                                        <tr style=\"height:10px\"></tr>\n                                                                        <!--\n                                                                <tr class=\"captcha\" style=\"display:none\">\n                                                                                <td>\n                                                                                        <font color=\"white\" size=\"4\">\n                                                                                                <label id=\"captcha\">Random no. :</label>\n                                                                                        </font>\n                                                                                </td>\n                                                                        </tr>\n                                                                        <tr class=\"captcha\" height=\"5px\" style=\"display:none\"></tr>\n                                                                        <tr class=\"captcha\" style=\"display:none\">\n                                                                        <td>\n                                                                                <input id=\"captcha\" name=\"captcha\" type=\"text\" autocapitalize=\"off\" maxlength=\"4\" style=\"font-size:20px;width:220px;height:36px\" onkeydown=\"return onKeyHandler(event)\">\n                                                                        </td>\n                                                                </tr>\n                                                                <tr class=\"captcha\" height=\"5px\" style=\"display:none\"></tr>\n                                                                 <tr class=\"captcha\" style=\"display:none\">\n                                                                        <td>\n                                                                                <div id=\"captcha_pattern\" class=\"unselectable\" name=\"captcha_pattern\" style=\"width:220px;height:40px;float:left\" onclick=\"generateCaptcha()\"></div>\n                                                                        </td>\n                                                                </tr>\n                                                                        <tr style=\"height:10px\"></tr>\n                                                          ",
         "datamd5" : "eec2f4120ab9a23d5cfaf3bfdc2425a1",
         "datammh3" : -58520762,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "amazonaws.com",
            "future-gas.ca"
         ],
         "fingerprint" : {
            "md5" : "e22d9d75fd654cfa70953234d1263876",
            "sha1" : "dc85f8fcc970973b66c9c3815b29fa08e2806db3",
            "sha256" : "64a0a32b4fe7b3d7936eb76809f07bec325a4e057f01d2f23ca85afd66119910"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZO-ZPDX5",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "54.212.0.0/15"
         },
         "host" : [
            "ec2-54-213-50-152",
            "rtu"
         ],
         "hostname" : [
            "ec2-54-213-50-152.us-west-2.compute.amazonaws.com",
            "rtu.future-gas.ca"
         ],
         "ip" : "54.213.50.152",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GeoTrust RSA CA 2018",
            "country" : "US",
            "organization" : "DigiCert Inc",
            "organizationalunit" : "www.digicert.com"
         },
         "latitude" : "45.8401",
         "location" : "45.8401,-119.7050",
         "longitude" : "-119.7050",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 2780,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "ec2-54-213-50-152.us-west-2.compute.amazonaws.com"
         ],
         "rtt" : 0.089639,
         "seen_date" : "2025-04-04",
         "serial" : "1c:03:25:3e:a0:8b:cb:d5:22:8e:8b:75:ea:2e:30:d4:b9:6d:d7:4a",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "srcip" : "195.184.76.74",
         "srcport" : 37445,
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "us-west-2.compute.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "preprod.sslvpn.court-north.ca"
         },
         "subnet" : "54.212.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "ca",
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "ttl" : 243,
         "url" : "/",
         "validity" : {
            "notafter" : "2026-04-04T06:29:46Z",
            "notbefore" : "2024-04-04T06:29:46Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
  • 59.54.54.9:2780 (tcp/socks5) - last seen on 2025-04-04 at 06:34:02 UTC

    • IP
      59.54.54.9
      Network
      59.54.54.0/24
      Operating System
      Linux Linux Kernel
      ASN
      AS139201
      Organization
      Jiangxi Jiujiang IDC
      Protocol
      socks5
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7afb6d54678d64e9d735a47550a1b682
    • \x05\xff
    • {
         "@category" : "datascan",
         "@timestamp" : "2025-04-04T06:34:02.000Z",
         "app" : {
            "length" : 2
         },
         "asn" : "AS139201",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "\\x05\\xff",
         "datamd5" : "7afb6d54678d64e9d735a47550a1b682",
         "datammh3" : -1096387539,
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "chinatelecom.cn",
               "qq.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-JX",
            "organization" : "CHINANET Jiangxi province network",
            "subnet" : "59.52.0.0/14"
         },
         "ip" : "59.54.54.9",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Jiangxi Jiujiang IDC",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 2780,
         "protocol" : "socks5",
         "rtt" : 0.769284,
         "seen_date" : "2025-04-04",
         "source" : "datascan",
         "srcip" : "91.196.152.165",
         "srcport" : 58053,
         "subnet" : "59.54.54.0/24",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "ttl" : 44
      }