-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathZoomeye
264 lines (252 loc) · 103 KB
/
Zoomeye
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
root@zoomeye:/zoomeye-python# python3 setup.py install
running install
running bdist_egg
running egg_info
writing zoomeye_python.egg-info/PKG-INFO
writing dependency_links to zoomeye_python.egg-info/dependency_links.txt
writing entry points to zoomeye_python.egg-info/entry_points.txt
writing requirements to zoomeye_python.egg-info/requires.txt
writing top-level names to zoomeye_python.egg-info/top_level.txt
reading manifest file 'zoomeye_python.egg-info/SOURCES.txt'
writing manifest file 'zoomeye_python.egg-info/SOURCES.txt'
installing library code to build/bdist.linux-x86_64/egg
running install_lib
running build_py
creating build/bdist.linux-x86_64/egg
creating build/bdist.linux-x86_64/egg/zoomeye
copying build/lib/zoomeye/core.py -> build/bdist.linux-x86_64/egg/zoomeye
copying build/lib/zoomeye/show.py -> build/bdist.linux-x86_64/egg/zoomeye
copying build/lib/zoomeye/data.py -> build/bdist.linux-x86_64/egg/zoomeye
copying build/lib/zoomeye/__init__.py -> build/bdist.linux-x86_64/egg/zoomeye
copying build/lib/zoomeye/config.py -> build/bdist.linux-x86_64/egg/zoomeye
copying build/lib/zoomeye/sdk.py -> build/bdist.linux-x86_64/egg/zoomeye
copying build/lib/zoomeye/cli.py -> build/bdist.linux-x86_64/egg/zoomeye
copying build/lib/zoomeye/file.py -> build/bdist.linux-x86_64/egg/zoomeye
byte-compiling build/bdist.linux-x86_64/egg/zoomeye/core.py to core.cpython-38.pyc
byte-compiling build/bdist.linux-x86_64/egg/zoomeye/show.py to show.cpython-38.pyc
byte-compiling build/bdist.linux-x86_64/egg/zoomeye/data.py to data.cpython-38.pyc
byte-compiling build/bdist.linux-x86_64/egg/zoomeye/__init__.py to __init__.cpython-38.pyc
byte-compiling build/bdist.linux-x86_64/egg/zoomeye/config.py to config.cpython-38.pyc
byte-compiling build/bdist.linux-x86_64/egg/zoomeye/sdk.py to sdk.cpython-38.pyc
byte-compiling build/bdist.linux-x86_64/egg/zoomeye/cli.py to cli.cpython-38.pyc
byte-compiling build/bdist.linux-x86_64/egg/zoomeye/file.py to file.cpython-38.pyc
creating build/bdist.linux-x86_64/egg/EGG-INFO
copying zoomeye_python.egg-info/PKG-INFO -> build/bdist.linux-x86_64/egg/EGG-INFO
copying zoomeye_python.egg-info/SOURCES.txt -> build/bdist.linux-x86_64/egg/EGG-INFO
copying zoomeye_python.egg-info/dependency_links.txt -> build/bdist.linux-x86_64/egg/EGG-INFO
copying zoomeye_python.egg-info/entry_points.txt -> build/bdist.linux-x86_64/egg/EGG-INFO
copying zoomeye_python.egg-info/requires.txt -> build/bdist.linux-x86_64/egg/EGG-INFO
copying zoomeye_python.egg-info/top_level.txt -> build/bdist.linux-x86_64/egg/EGG-INFO
zip_safe flag not set; analyzing archive contents...
zoomeye.__pycache__.cli.cpython-38: module references __file__
creating 'dist/zoomeye_python-0.3-py3.8.egg' and adding 'build/bdist.linux-x86_64/egg' to it
removing 'build/bdist.linux-x86_64/egg' (and everything under it)
Processing zoomeye_python-0.3-py3.8.egg
creating /usr/local/lib/python3.8/dist-packages/zoomeye_python-0.3-py3.8.egg
Extracting zoomeye_python-0.3-py3.8.egg to /usr/local/lib/python3.8/dist-packages
Adding zoomeye-python 0.3 to easy-install.pth file
Installing zoomeye script to /usr/local/bin
Installed /usr/local/lib/python3.8/dist-packages/zoomeye_python-0.3-py3.8.egg
Processing dependencies for zoomeye-python==0.3
Searching for urllib3==1.26.2
Reading https://pypi.org/simple/urllib3/
Downloading https://files.pythonhosted.org/packages/f5/71/45d36a8df68f3ebb098d6861b2c017f3d094538c0fb98fa61d4dc43e69b9/urllib3-1.26.2-py2.py3-none-any.whl#sha256=d8ff90d979214d7b4f8ce956e80f4028fc6860e4431f731ea4a8c08f23f99473
Best match: urllib3 1.26.2
Processing urllib3-1.26.2-py2.py3-none-any.whl
Installing urllib3-1.26.2-py2.py3-none-any.whl to /usr/local/lib/python3.8/dist-packages
Adding urllib3 1.26.2 to easy-install.pth file
Installed /usr/local/lib/python3.8/dist-packages/urllib3-1.26.2-py3.8.egg
Searching for requests==2.25.1
Reading https://pypi.org/simple/requests/
Downloading https://files.pythonhosted.org/packages/29/c1/24814557f1d22c56d50280771a17307e6bf87b70727d975fd6b2ce6b014a/requests-2.25.1-py2.py3-none-any.whl#sha256=c210084e36a42ae6b9219e00e48287def368a26d03a048ddad7bfee44f75871e
Best match: requests 2.25.1
Processing requests-2.25.1-py2.py3-none-any.whl
Installing requests-2.25.1-py2.py3-none-any.whl to /usr/local/lib/python3.8/dist-packages
Adding requests 2.25.1 to easy-install.pth file
Installed /usr/local/lib/python3.8/dist-packages/requests-2.25.1-py3.8.egg
Searching for idna==2.10
Reading https://pypi.org/simple/idna/
Downloading https://files.pythonhosted.org/packages/a2/38/928ddce2273eaa564f6f50de919327bf3a00f091b5baba8dfa9460f3a8a8/idna-2.10-py2.py3-none-any.whl#sha256=b97d804b1e9b523befed77c48dacec60e6dcb0b5391d57af6a65a312a90648c0
root@zoomeye:/zoomeye-python# zoomeye -h
usage: zoomeye [-h] {info,search,init} ...
positional arguments:
{info,search,init}
info Show ZoomEye account info
search Search the ZoomEye database
init Initialize the token for ZoomEye-python
optional arguments:
-h, --help show this help message and exit
root@zoomeye:/zoomeye-python# zoomeye init -h
usage: zoomeye init [-h] [-apikey [api key]] [-username [username]] [-password [password]]
optional arguments:
-h, --help show this help message and exit
-apikey [api key] ZoomEye API Key
-username [username] ZoomEye account username
-password [password] ZoomEye account password
root@zoomeye:/zoomeye-python# zoomeye init -apikey 6******d-7**B-4***6-9**f-a5********4
successfully initialized
Role: developer
Quota: 7836
root@zoomeye:/zoomeye-python# zoomeye search -h
usage: zoomeye search [-h] [-num value] [-facet [field]] [-filter [field=regexp]] [-stat [field]] [-save [field=regexp]] [-count]
dork
positional arguments:
dork The ZoomEye search keyword or ZoomEye exported file
optional arguments:
-h, --help show this help message and exit
-num value The number of search results that should be returned
-facet [field] Perform statistics on ZoomEye database, field: [app,device,service,os,port,country,city]
-filter [field=regexp]
Output more clearer search results by set filter field, field:
[app,version,device,port,city,country,asn,banner,*]
-stat [field] Perform statistics on search results, field: [app,device,service,os,port,country,city]
-save [field=regexp] Save the search results with ZoomEye json format, if you specify the field, it will be saved with JSON
Lines
-count The total number of results in ZoomEye database for a search
root@zoomeye:/zoomeye-python# zoomeye search telnet
ip:port service country app banner
186.237.196.113:8112 http Brazil HTTP/1.0 200 OK\r\nConnection:...
186.232.184.15:8112 http Brazil HTTP/1.0 200 OK\r\nConnection:...
170.0.202.6:2332 telnet Brazil Linux telnetd \xff\xfd\x18\xff\xfd \xff\xfd#...
84.19.26.169:1901 telnet Germany ProFTPD 220 NASFTPD Turbo station 1.3....
59.127.176.194:19 telnet China ProFTPD 220 NASFTPD Turbo station 1.3....
113.174.12.103:23 telnet Viet Nam BusyBox telnetd \xff\xfd\x01\xff\xfd!\xff\xfb\...
189.203.161.7:23 telnet Mexico Huawei Home Gateway telnetd \xff\xfb\x01\xff\xfb\x03\xff\x...
195.5.229.150:23 telnet France OneAccess ONE100A router ... \xff\xfc\x01\xff\xfb\x01\xff\x...
58.96.17.59:23 telnet Australia Cisco IOS telnetd \xff\xfb\x01\xff\xfb\x03\xff\x...
170.150.237.146:8181 http Brazil Apache httpd HTTP/1.1 200 OK\nContent-Leng...
66.223.246.115:9030 telnet United States Cisco router telnetd \xff\xfb\x01\xff\xfb\x03\xff\x...
180.242.144.115:64210 http Indonesia HTTP/1.0 200 OK\r\nConnection:...
43.241.24.161:80 http India Apache httpd HTTP/1.1 200 OK\nConnection: ...
216.152.176.222:9292 telnet United States Pocket CMD telnetd \xff\xfb\x01\xff\xfb\x03\xff\x...
178.60.25.210:80 http Spain MikroTik router config httpd HTTP/1.0 200 OK\r\nConnection:...
116.236.212.242:23 telnet China \xff\xfb\x01\xff\xfb\x03\xff\x...
5.239.46.164:23 telnet Iran \xff\xfd\x03\xff\xfd\x18\xff\x...
129.205.133.225:80 http South Africa MikroTik router config httpd HTTP/1.0 200 OK\r\nConnection:...
113.88.98.166:23 telnet China Huawei telnetd \xff\xfb\x01\xff\xfb\x01\xff\x...
110.172.142.122:80 http India MikroTik router config httpd HTTP/1.0 200 OK\r\nConnection:...
total: 20
root@zoomeye:/zoomeye-python# zoomeye search telnet -count
56919322
root@zoomeye:/zoomeye-python# zoomeye search telnet -facet "country,port,app"
country count
China 19713929
United States 4672678
Brazil 3604676
Republic of Korea 2481624
Argentina 1706074
India 1644853
Russia 1522002
Italy 1299497
Japan 1247040
Mexico 1070160
port count
23 46268474
2600 1507440
2323 1111371
80 797585
2002 505106
9002 473079
8081 428358
23023 277334
2332 240234
992 200018
app count
[unknown] 28323128
BusyBox telnetd 10180912
Linux telnetd 3056202
Cisco IOS telnetd 1507468
Huawei Home Gateway telnetd 1228592
MikroTik router config httpd 1066723
Huawei telnetd 965820
Busybox telnetd 962449
Netgear broadband router or ZyXel VoIP adapter telnetd593670
NASLite-SMB/Sveasoft Alchemy firmware telnetd491950
root@zoomeye:/zoomeye-python# zoomeye search telnet -filter "app=Cis*,port,country"
ip app port country
58.96.17.59 Cisco IOS telnetd 23 Australia
66.223.246.115 Cisco router telnetd 9030 United States
total: 2
root@zoomeye:/zoomeye-python# zoomeye search telnet -save "app=Cis*,port,country"
save file to /zoomeye-python/telnet_2_1610513737.json successful!
root@zoomeye:/zoomeye-python# cat telnet_2_1610513737.json
{'ip': '58.96.17.59', 'app': 'Cisco IOS telnetd', 'port': 23, 'country': 'Australia'}
{'ip': '66.223.246.115', 'app': 'Cisco router telnetd', 'port': 9030, 'country': 'United States'}
root@zoomeye:/zoomeye-python# zoomeye search telnet -save
save file to /zoomeye-python/telnet_20_1610513753.json successful!
root@zoomeye:/zoomeye-python# cat telnet_20_1610513753.json
{"total": 56919322, "matches": [{"protocol": {"application": "http", "probe": "GetRequest", "transport": "tcp"}, "ip": "186.237.196.113", "timestamp": "2021-01-13T12:44:38", "geoinfo": {"city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "BR", "names": {"zh-CN": "\u5df4\u897f", "en": "Brazil"}}, "isp": "", "asn": "262814", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u5df4\u897f", "en": "Brazil"}}, "location": {"lat": "-14.242900", "lon": "-54.387798"}, "organization": null, "aso": null, "continent": {"geoname_id": null, "code": "LA", "names": {"zh-CN": "\u5357\u7f8e\u6d32", "en": "South America"}}, "base_station": "", "idc": "", "PoweredBy": "IPIP", "organization_CN": null}, "portinfo": {"hostname": "", "service": "http", "extrainfo": "", "version": "", "device": "", "os": "", "port": 8112, "title": ["RouterOS router configuration page"], "rdns": "186-237-196-113.static.algartecnologia.com.br.", "app": "", "banner": "HTTP/1.0 200 OK\r\nConnection: close\r\nContent-Length: 7064\r\nContent-Type: text/html\r\nDate: Wed, 13 Jan 2021 04:31:01 GMT\r\nExpires: 0\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<link rel=\"icon\" href=\"/favicon.png\"/>\r\n<title>RouterOS router configuration page</title>\r\n<style type=\"text/css\">\r\nbody {\r\nfont-family: Verdana, Geneva, sans-serif;\r\nfont-size: 11px;\r\n}\r\nimg {border: none}\r\nimg:hover {opacity: 0.8;}\r\nh1 {\r\nfont-size: 1.7em;\r\ndisplay: inline;\r\nmargin-bottom: 10px;\r\n}\r\nfieldset {\r\nmargin-top: 20px;\r\nbackground: #fff;\r\npadding: 20px;\r\nborder: 1px solid #c1c1c1; \r\n}\r\n#container {\r\nwidth: 70%;\r\nmargin: 10% auto;\r\n}\r\n#box {\r\nbackground-color: #fff; \r\n-moz-border-radius: 7px; \r\n-webkit-border-radius: 7px; \r\nborder: 1px solid #c1c1c1; \r\npadding: 30px;\r\nfilter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */\r\nbackground: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */\r\nbackground: -moz-linear-gradient(top, #fff, #f3f3f3); /* for firefox 3.6+ */\r\n}\r\n.floater {float: left; margin-right: 10px;}\r\n.floater label {display: block; text-align: center;}\r\n\r\n#login {\r\n margin: 2em 0 4em 0;\r\n}\r\n#login h2 {\r\n font-weight: normal;\r\n font-size: 14px;\r\n margin: 0 0 0.5em 1em;\r\n}\r\n#login td {\r\n padding: 0 4px 0 0;\r\n}\r\n#login td.label {\r\n text-align: right;\r\n}\r\n#login td.toolbar {\r\n padding: 0 0 0 1em;\r\n vertical-align: top;\r\n}\r\n#login ul.toolbar {\r\n margin: 0;\r\n}\r\n#login input {\r\n margin: 2px;\r\n padding: 2px;\r\n border: 1px solid #888;\r\n box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n}\r\n#error {\r\n display:none;\r\n color:red;\r\n padding: 1em 0 0 0;\r\n}\r\nul.toolbar {\r\n font-size: 11px;\r\n text-align: left;\r\n list-style-type: none;\r\n padding: 0;\r\n margin: 2px 0 4px 2px;\r\n}\r\nul.toolbar li {\r\n float: left;\r\n vertical-align: middle;\r\n}\r\nul.toolbar a {\r\n float: none;\r\n display: block;\r\n margin: 2px 4px 2px 0;\r\n padding: 5px;\r\n\r\n background: #ddd;\r\n border: 1px solid #888;\r\n border-radius: 3px;\r\n -moz-border-radius: 3px;\r\n box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */\r\n\t1px 1px 2px rgba(0,0,0,0.2); /* shadow */\r\n -webkit-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n -moz-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n color: #000;\r\n\r\n text-decoration: none;\r\n text-align: center;\r\n white-space: nowrap;\r\n cursor: inherit;\r\n min-width: 4em;\r\n\r\n -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n}\r\nul.toolbar a:hover {\r\n background: #eee;\r\n}\r\nul.toolbar a:active {\r\n background: #aaa;\r\n box-shadow: 1px 1px 2px #999 inset;\r\n -webkit-box-shadow: 1px 1px 2px #999 inset;\r\n -moz-box-shadow: 1px 1px 2px #999 inset;\r\n}\r\n</style>\r\n<script>\r\nfunction get(id) {\r\n return document.getElementById(id);\r\n}\r\nfunction trim(str) {\r\n return str.replace(/^\\s+|\\s+$/g, '');\r\n}\r\nfunction login(user, pwd, autologin) {\r\n var expires = new Date();\r\n expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));\r\n document.cookie = 'username=' + user +\r\n '; expires=' + expires.toGMTString() + '; path=/';\r\n\r\n window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;\r\n window.location.replace('/webfig/' + window.location.hash);\r\n}\r\nfunction dologin() {\r\n login(get('name').value, get('password').value);\r\n}\r\nfunction loaded() {\r\n var p = window.name.split('=');\r\n if (p[0] == 'error' && p[1]) {\r\n var err = get('error');\r\n err.appendChild(document.createTextNode(p[1]));\r\n err.style.display = 'block';\r\n } else if (p[0] != 'noautologin' || p[1] != 1) {\r\n var user = '';\r\n if (user) {\r\n login(user, '', true);\r\n return;\r\n }\r\n }\r\n window.name = '';\r\n\r\n document.onkeydown = function(e) {\r\n e = e || event;\r\n if (e.keyCode == 13) {\r\n dologin();\r\n return false;\r\n }\r\n return true;\r\n };\r\n\r\n var username = null;\r\n var cookies = document.cookie.split(';');\r\n for (var i in cookies) {\r\n\tvar c = trim(cookies[i]).split('=');\r\n\tif (c[0] == 'username') {\r\n\t username = c[1];\r\n\t break;\r\n\t}\r\n }\r\n \r\n if (username != null) {\r\n\tget('name').value = username;\r\n\tget('password').focus();\r\n } else {\r\n get('name').value = 'admin';\r\n\tget('name').focus();\r\n }\r\n}\r\n</script>\r\n</head>\r\n\r\n<body onload=\"loaded()\">\r\n\r\n<div id=\"container\">\r\n\r\n <div id=\"box\">\r\n <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\r\n\r\n <br style=\"clear: both;\"/>\r\n \r\n\t\t<h1>RouterOS v6.45.6</h1>\r\n \r\n <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>\r\n \r\n <table id=\"login\">\r\n\t<tr><td colspan=\"3\"><h2>WebFig Login:</h2>\r\n <tr><td class=\"label\">Login: <td><input id=\"name\" type=\"text\" tabindex=\"1\">\r\n\t <td class=\"toolbar\" rowspan=\"2\">\r\n <ul class=\"toolbar\">\r\n\t <li><a onclick=\"dologin()\" ondragstart=\"return false;\"><span>Login</span></a></li>\r\n </ul>\r\n <tr><td class=\"label\">Password: <td><input id=\"password\" type=\"password\" tabindex=\"2\">\r\n\t<tr><td colspan=\"3\">\r\n\t <div id=\"error\"></div>\r\n </table>\r\n \r\n <fieldset>\r\n <div class=\"floater\"> \r\n \t<a href=\"http://www.mikrotik.com/download/winbox.exe\"><img src=\"winbox.png\"/></a><br/>\r\n <label>Winbox</label>\r\n </div>\r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"telnet://192.168.49.25\"><img src=\"console.png\"/></a><br/>\r\n <label>Telnet</label>\r\n </div>\r\n\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/graphs\"><img src=\"green.png\"/></a><br/>\r\n <label>Graphs</label>\r\n </div>\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/help/license.html\"><img src=\"license.png\"/></a><br/>\r\n <label>License</label>\r\n </div>\r\n \r\n\t\t\t<div class=\"floater\"> \r\n \t<a href=\"http://wiki.mikrotik.com\"><img src=\"help.png\"/></a><br/>\r\n <label>Help</label>\r\n </div>\r\n\r\n</fieldset>\r\n \r\n <br style=\"clear: both\"/> \r\n <div style=\"float: right\">© mikrotik</div>\r\n\r\n </div>\r\n</div>\r\n\r\n</div>\r\n\r\n</body>\r\n</html>\r\n\n\n\n"}, "rdns_new": "186-237-196-113.static.algartecnologia.com.br", "honeypot": 0}, {"protocol": {"application": "http", "probe": "GetRequest", "transport": "tcp"}, "ip": "186.232.184.15", "timestamp": "2021-01-13T12:44:32", "geoinfo": {"organization_CN": null, "aso": null, "continent": {"geoname_id": null, "code": "LA", "names": {"zh-CN": "\u5357\u7f8e\u6d32", "en": "South America"}}, "city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "BR", "names": {"zh-CN": "\u5df4\u897f", "en": "Brazil"}}, "isp": "", "asn": "53198", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u5df4\u897f", "en": "Brazil"}}, "location": {"lat": "-14.242900", "lon": "-54.387798"}, "PoweredBy": "IPIP", "organization": null, "base_station": "", "idc": ""}, "portinfo": {"hostname": "", "service": "http", "title": ["RouterOS router configuration page"], "extrainfo": "", "version": "", "device": "", "os": "", "port": 8112, "rdns": "186-232-184-15.itaol.com.br.", "app": "", "banner": "HTTP/1.0 200 OK\r\nConnection: close\r\nContent-Length: 7063\r\nContent-Type: text/html\r\nDate: Wed, 13 Jan 2021 04:44:17 GMT\r\nExpires: 0\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<link rel=\"icon\" href=\"/favicon.png\"/>\r\n<title>RouterOS router configuration page</title>\r\n<style type=\"text/css\">\r\nbody {\r\nfont-family: Verdana, Geneva, sans-serif;\r\nfont-size: 11px;\r\n}\r\nimg {border: none}\r\nimg:hover {opacity: 0.8;}\r\nh1 {\r\nfont-size: 1.7em;\r\ndisplay: inline;\r\nmargin-bottom: 10px;\r\n}\r\nfieldset {\r\nmargin-top: 20px;\r\nbackground: #fff;\r\npadding: 20px;\r\nborder: 1px solid #c1c1c1; \r\n}\r\n#container {\r\nwidth: 70%;\r\nmargin: 10% auto;\r\n}\r\n#box {\r\nbackground-color: #fff; \r\n-moz-border-radius: 7px; \r\n-webkit-border-radius: 7px; \r\nborder: 1px solid #c1c1c1; \r\npadding: 30px;\r\nfilter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */\r\nbackground: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */\r\nbackground: -moz-linear-gradient(top, #fff, #f3f3f3); /* for firefox 3.6+ */\r\n}\r\n.floater {float: left; margin-right: 10px;}\r\n.floater label {display: block; text-align: center;}\r\n\r\n#login {\r\n margin: 2em 0 4em 0;\r\n}\r\n#login h2 {\r\n font-weight: normal;\r\n font-size: 14px;\r\n margin: 0 0 0.5em 1em;\r\n}\r\n#login td {\r\n padding: 0 4px 0 0;\r\n}\r\n#login td.label {\r\n text-align: right;\r\n}\r\n#login td.toolbar {\r\n padding: 0 0 0 1em;\r\n vertical-align: top;\r\n}\r\n#login ul.toolbar {\r\n margin: 0;\r\n}\r\n#login input {\r\n margin: 2px;\r\n padding: 2px;\r\n border: 1px solid #888;\r\n box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n}\r\n#error {\r\n display:none;\r\n color:red;\r\n padding: 1em 0 0 0;\r\n}\r\nul.toolbar {\r\n font-size: 11px;\r\n text-align: left;\r\n list-style-type: none;\r\n padding: 0;\r\n margin: 2px 0 4px 2px;\r\n}\r\nul.toolbar li {\r\n float: left;\r\n vertical-align: middle;\r\n}\r\nul.toolbar a {\r\n float: none;\r\n display: block;\r\n margin: 2px 4px 2px 0;\r\n padding: 5px;\r\n\r\n background: #ddd;\r\n border: 1px solid #888;\r\n border-radius: 3px;\r\n -moz-border-radius: 3px;\r\n box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */\r\n\t1px 1px 2px rgba(0,0,0,0.2); /* shadow */\r\n -webkit-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n -moz-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n color: #000;\r\n\r\n text-decoration: none;\r\n text-align: center;\r\n white-space: nowrap;\r\n cursor: inherit;\r\n min-width: 4em;\r\n\r\n -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n}\r\nul.toolbar a:hover {\r\n background: #eee;\r\n}\r\nul.toolbar a:active {\r\n background: #aaa;\r\n box-shadow: 1px 1px 2px #999 inset;\r\n -webkit-box-shadow: 1px 1px 2px #999 inset;\r\n -moz-box-shadow: 1px 1px 2px #999 inset;\r\n}\r\n</style>\r\n<script>\r\nfunction get(id) {\r\n return document.getElementById(id);\r\n}\r\nfunction trim(str) {\r\n return str.replace(/^\\s+|\\s+$/g, '');\r\n}\r\nfunction login(user, pwd, autologin) {\r\n var expires = new Date();\r\n expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));\r\n document.cookie = 'username=' + user +\r\n '; expires=' + expires.toGMTString() + '; path=/';\r\n\r\n window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;\r\n window.location.replace('/webfig/' + window.location.hash);\r\n}\r\nfunction dologin() {\r\n login(get('name').value, get('password').value);\r\n}\r\nfunction loaded() {\r\n var p = window.name.split('=');\r\n if (p[0] == 'error' && p[1]) {\r\n var err = get('error');\r\n err.appendChild(document.createTextNode(p[1]));\r\n err.style.display = 'block';\r\n } else if (p[0] != 'noautologin' || p[1] != 1) {\r\n var user = '';\r\n if (user) {\r\n login(user, '', true);\r\n return;\r\n }\r\n }\r\n window.name = '';\r\n\r\n document.onkeydown = function(e) {\r\n e = e || event;\r\n if (e.keyCode == 13) {\r\n dologin();\r\n return false;\r\n }\r\n return true;\r\n };\r\n\r\n var username = null;\r\n var cookies = document.cookie.split(';');\r\n for (var i in cookies) {\r\n\tvar c = trim(cookies[i]).split('=');\r\n\tif (c[0] == 'username') {\r\n\t username = c[1];\r\n\t break;\r\n\t}\r\n }\r\n \r\n if (username != null) {\r\n\tget('name').value = username;\r\n\tget('password').focus();\r\n } else {\r\n get('name').value = 'admin';\r\n\tget('name').focus();\r\n }\r\n}\r\n</script>\r\n</head>\r\n\r\n<body onload=\"loaded()\">\r\n\r\n<div id=\"container\">\r\n\r\n <div id=\"box\">\r\n <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\r\n\r\n <br style=\"clear: both;\"/>\r\n \r\n\t\t<h1>RouterOS v6.48</h1>\r\n \r\n <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>\r\n \r\n <table id=\"login\">\r\n\t<tr><td colspan=\"3\"><h2>WebFig Login:</h2>\r\n <tr><td class=\"label\">Login: <td><input id=\"name\" type=\"text\" tabindex=\"1\">\r\n\t <td class=\"toolbar\" rowspan=\"2\">\r\n <ul class=\"toolbar\">\r\n\t <li><a onclick=\"dologin()\" ondragstart=\"return false;\"><span>Login</span></a></li>\r\n </ul>\r\n <tr><td class=\"label\">Password: <td><input id=\"password\" type=\"password\" tabindex=\"2\">\r\n\t<tr><td colspan=\"3\">\r\n\t <div id=\"error\"></div>\r\n </table>\r\n \r\n <fieldset>\r\n <div class=\"floater\"> \r\n \t<a href=\"http://www.mikrotik.com/download/winbox.exe\"><img src=\"winbox.png\"/></a><br/>\r\n <label>Winbox</label>\r\n </div>\r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"telnet://186.232.184.15\"><img src=\"console.png\"/></a><br/>\r\n <label>Telnet</label>\r\n </div>\r\n\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/graphs\"><img src=\"green.png\"/></a><br/>\r\n <label>Graphs</label>\r\n </div>\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/help/license.html\"><img src=\"license.png\"/></a><br/>\r\n <label>License</label>\r\n </div>\r\n \r\n\t\t\t<div class=\"floater\"> \r\n \t<a href=\"http://wiki.mikrotik.com\"><img src=\"help.png\"/></a><br/>\r\n <label>Help</label>\r\n </div>\r\n\r\n</fieldset>\r\n \r\n <br style=\"clear: both\"/> \r\n <div style=\"float: right\">© mikrotik</div>\r\n\r\n </div>\r\n</div>\r\n\r\n</div>\r\n\r\n</body>\r\n</html>\r\n\n\n\n"}, "rdns_new": "186-232-184-15.itaol.com.br", "honeypot": 0}, {"protocol": {"application": "http", "probe": "GetRequest", "transport": "tcp"}, "ip": "170.0.202.6", "timestamp": "2021-01-13T12:43:52", "geoinfo": {"organization_CN": null, "aso": null, "continent": {"geoname_id": null, "code": "LA", "names": {"zh-CN": "\u5357\u7f8e\u6d32", "en": "South America"}}, "city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "BR", "names": {"zh-CN": "\u5df4\u897f", "en": "Brazil"}}, "isp": "", "asn": "263427", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u5df4\u897f", "en": "Brazil"}}, "location": {"lat": "-14.242900", "lon": "-54.387798"}, "PoweredBy": "IPIP", "organization": null, "base_station": "", "idc": ""}, "portinfo": {"hostname": "", "service": "telnet", "title": null, "extrainfo": "", "version": "", "device": "", "os": "Linux", "port": 2332, "rdns": "", "app": "Linux telnetd", "banner": "\\xff\\xfd\\x18\\xff\\xfd \\xff\\xfd#\\xff\\xfd'\n\n\n"}, "honeypot": 0}, {"protocol": {"application": "http", "transport": "tcp", "probe": "GetRequest"}, "rdns_new": "s002-r01h03.ec-c.net", "honeypot_lastupdate": "2021-01-10T15:54:43.863407", "ip": "84.19.26.169", "geoinfo": {"continent": {"code": "EU", "names": {"en": "Europe", "zh-CN": "\u6b27\u6d32"}, "geoname_id": null}, "country": {"code": "DE", "names": {"en": "Germany", "zh-CN": "\u5fb7\u56fd"}, "geoname_id": null}, "PoweredBy": "IPIP", "base_station": "", "city": {"names": {"en": "Dusseldorf", "zh-CN": "\u675c\u585e\u5c14\u591a\u592b"}, "geoname_id": null}, "organization_CN": null, "isp": "comtrance.net", "idc": "", "organization": null, "location": {"lon": "6.776040", "lat": "51.215630"}, "aso": null, "asn": "30962", "subdivisions": {"code": null, "names": {"en": "North Rhine-Westphalia", "zh-CN": "\u5317\u83b1\u8335\uff0d\u5a01\u65af\u7279\u6cd5\u4f26\u5dde"}, "geoname_id": null}}, "portinfo": {"hostname": "", "os": "", "port": 1901, "service": "telnet", "title": null, "version": "1.3.5a", "device": "", "extrainfo": "", "rdns": "s002-r01h03.ec-c.net.", "app": "ProFTPD", "banner": "220 NASFTPD Turbo station 1.3.5a Server (ProFTPD)\r\n\n\n\n"}, "timestamp": "2021-01-13T12:43:33", "honeypot": 0}, {"protocol": {"application": "", "transport": "tcp", "probe": "NULL"}, "rdns_new": "59-127-176-194.HINET-IP.hinet.net", "ip": "59.127.176.194", "geoinfo": {"continent": {"code": "AP", "names": {"en": "Asia", "zh-CN": "\u4e9a\u6d32"}, "geoname_id": null}, "country": {"code": "CN", "names": {"en": "China", "zh-CN": "\u4e2d\u56fd"}, "geoname_id": null}, "PoweredBy": "IPIP", "base_station": "", "city": {"names": {"en": "New Taipei City", "zh-CN": "\u65b0\u5317\u5e02"}, "geoname_id": null}, "organization_CN": null, "isp": "cht.com.tw", "idc": "", "organization": null, "location": {"lon": "121.4627868", "lat": "25.0169826"}, "aso": null, "asn": "3462", "subdivisions": {"code": null, "names": {"en": "Taiwan", "zh-CN": "\u53f0\u6e7e"}, "geoname_id": null}}, "portinfo": {"hostname": "", "os": "", "port": 19, "service": "telnet", "title": null, "version": "1.3.5a", "device": "", "extrainfo": "", "rdns": "59-127-176-194.HINET-IP.hinet.net.", "app": "ProFTPD", "banner": "220 NASFTPD Turbo station 1.3.5a Server (ProFTPD)\r\n\n\n\n"}, "timestamp": "2021-01-13T12:42:43", "honeypot": 0}, {"rdns_new": "static.vnpt.vn", "ip": "113.174.12.103", "timestamp": "2021-01-13T12:41:09", "geoinfo": {"organization_CN": null, "aso": null, "continent": {"geoname_id": null, "code": "AP", "names": {"zh-CN": "\u4e9a\u6d32", "en": "Asia"}}, "city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "VN", "names": {"zh-CN": "\u8d8a\u5357", "en": "Viet Nam"}}, "isp": "vnpt.vn", "asn": "45899", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u5e73\u9633\u7701", "en": "Binh Duong"}}, "location": {"lat": "11.196651", "lon": "106.693674"}, "PoweredBy": "IPIP", "organization": null, "base_station": "", "idc": ""}, "protocol": {"application": "", "probe": "NULL", "transport": "tcp"}, "portinfo": {"hostname": "", "service": "telnet", "title": null, "extrainfo": "", "version": "0.61 - 1.00-pre7", "device": "", "os": "", "port": 23, "app": "BusyBox telnetd", "banner": "\u00ff\u00fd\u0001\u00ff\u00fd!\u00ff\u00fb\u0001\u00ff\u00fb\u0003GPON ONT\r\nwlctl: wl driver adapter not found\r\nLogin: \n\n\n"}, "honeypot": 0}, {"protocol": {"application": "", "transport": "tcp", "probe": "NULL"}, "rdns_new": "fixed-189-203-161-7.totalplay.net", "ip": "189.203.161.7", "geoinfo": {"continent": {"code": "NA", "names": {"en": "North American", "zh-CN": "\u5317\u7f8e\u6d32"}, "geoname_id": null}, "country": {"code": "MX", "names": {"en": "Mexico", "zh-CN": "\u58a8\u897f\u54e5"}, "geoname_id": null}, "PoweredBy": "IPIP", "base_station": "", "city": {"names": {"en": "", "zh-CN": ""}, "geoname_id": null}, "organization_CN": null, "isp": "totalplay.com.mx", "idc": "", "organization": null, "location": {"lon": "-99.723267", "lat": "19.496873"}, "aso": null, "asn": "22884", "subdivisions": {"code": null, "names": {"en": "State of Mexico", "zh-CN": "\u58a8\u897f\u54e5\u5dde"}, "geoname_id": null}}, "portinfo": {"hostname": "", "os": "", "port": 23, "service": "telnet", "title": null, "version": "", "device": "broadband router", "extrainfo": "", "app": "Huawei Home Gateway telnetd", "banner": "\u00ff\u00fb\u0001\u00ff\u00fb\u0003\u00ff\u00fb\u0018\r\nWelcome Visiting Huawei Home Gateway\r\nCopyright by Huawei Technologies Co., Ltd.\r\n\r\nLogin:\n\n\n"}, "timestamp": "2021-01-13T12:41:08", "honeypot": 0}, {"protocol": {"application": "", "probe": "NULL", "transport": "tcp"}, "ip": "195.5.229.150", "timestamp": "2021-01-13T12:41:08", "geoinfo": {"city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "FR", "names": {"zh-CN": "\u6cd5\u56fd", "en": "France"}}, "isp": "nerim.fr", "asn": "13193", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u6cd5\u56fd", "en": "France"}}, "location": {"lat": "46.227638", "lon": "2.213749"}, "organization": null, "aso": null, "continent": {"geoname_id": null, "code": "EU", "names": {"zh-CN": "\u6b27\u6d32", "en": "Europe"}}, "base_station": "", "idc": "", "PoweredBy": "IPIP", "organization_CN": null}, "portinfo": {"hostname": "", "service": "telnet", "title": null, "extrainfo": "", "version": "", "device": "router", "os": "OneOS", "port": 23, "app": "OneAccess ONE100A router telnetd", "banner": "\u00ff\u00fc\u0001\u00ff\u00fb\u0001\u00ff\u00fb\u0003\u00ff\u00fd\u0018\u00ff\u00fb\u0018\u00ff\u00fd\u001f\u00ff\u00fb\u001f\u00ff\u00fb\"\u00ff\u00fb\u0005Username:\n\n\n"}, "rdns_new": "mitilogbkp-2m-os1-229-150.fib.nerim.net", "honeypot": 0}, {"protocol": {"application": "", "transport": "tcp", "probe": "NULL"}, "rdns_new": "59.17.96.58.static.exetel.com.au", "geoinfo": {"continent": {"code": "OA", "names": {"en": "Australia", "zh-CN": "\u5927\u6d0b\u6d32"}, "geoname_id": null}, "country": {"code": "AU", "names": {"en": "Australia", "zh-CN": "\u6fb3\u5927\u5229\u4e9a"}, "geoname_id": null}, "PoweredBy": "IPIP", "base_station": "", "city": {"names": {"en": "", "zh-CN": ""}, "geoname_id": null}, "isp": "exetel.com.au", "organization_CN": null, "idc": "", "organization": null, "location": {"lon": "133.397995", "lat": "-24.912100"}, "aso": null, "asn": "10143", "subdivisions": {"code": null, "names": {"en": "Australia", "zh-CN": "\u6fb3\u5927\u5229\u4e9a"}, "geoname_id": null}}, "ip": "58.96.17.59", "portinfo": {"hostname": "", "os": "IOS", "port": 23, "service": "telnet", "title": null, "version": "", "device": "switch", "extrainfo": "", "app": "Cisco IOS telnetd", "banner": "\u00ff\u00fb\u0001\u00ff\u00fb\u0003\u00ff\u00fd\u0018\u00ff\u00fd\u001f\r\n\r\nUser Access Verification\r\n\r\nPassword: \n\n\n"}, "timestamp": "2021-01-13T12:41:07", "honeypot": 0}, {"protocol": {"application": "SSL", "transport": "tcp", "probe": "SSLSessionReq"}, "rdns_new": "170-150-237-146.torrenet.net", "ip": "170.150.237.146", "geoinfo": {"continent": {"code": "LA", "names": {"en": "South America", "zh-CN": "\u5357\u7f8e\u6d32"}, "geoname_id": null}, "country": {"code": "BR", "names": {"en": "Brazil", "zh-CN": "\u5df4\u897f"}, "geoname_id": null}, "PoweredBy": "IPIP", "base_station": "", "city": {"names": {"en": "", "zh-CN": ""}, "geoname_id": null}, "isp": "", "organization_CN": null, "idc": "", "organization": null, "location": {"lon": "-54.387798", "lat": "-14.242900"}, "aso": null, "asn": "53062", "subdivisions": {"code": null, "names": {"en": "Brazil", "zh-CN": "\u5df4\u897f"}, "geoname_id": null}}, "portinfo": {"hostname": "", "os": "", "port": 8181, "service": "http", "title": ["RouterOS router configuration page"], "version": "", "device": "", "extrainfo": "", "app": "Apache httpd", "banner": "HTTP/1.1 200 OK\nContent-Length: 7066\nContent-Type: text/html\nDate: Wed, 13 Jan 2021 04:38:56 GMT\nExpires: 0\nConnection: Keep-Alive\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<link rel=\"icon\" href=\"/favicon.png\"/>\r\n<title>RouterOS router configuration page</title>\r\n<style type=\"text/css\">\r\nbody {\r\nfont-family: Verdana, Geneva, sans-serif;\r\nfont-size: 11px;\r\n}\r\nimg {border: none}\r\nimg:hover {opacity: 0.8;}\r\nh1 {\r\nfont-size: 1.7em;\r\ndisplay: inline;\r\nmargin-bottom: 10px;\r\n}\r\nfieldset {\r\nmargin-top: 20px;\r\nbackground: #fff;\r\npadding: 20px;\r\nborder: 1px solid #c1c1c1; \r\n}\r\n#container {\r\nwidth: 70%;\r\nmargin: 10% auto;\r\n}\r\n#box {\r\nbackground-color: #fff; \r\n-moz-border-radius: 7px; \r\n-webkit-border-radius: 7px; \r\nborder: 1px solid #c1c1c1; \r\npadding: 30px;\r\nfilter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */\r\nbackground: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */\r\nbackground: -moz-linear-gradient(top, #fff, #f3f3f3); /* for firefox 3.6+ */\r\n}\r\n.floater {float: left; margin-right: 10px;}\r\n.floater label {display: block; text-align: center;}\r\n\r\n#login {\r\n margin: 2em 0 4em 0;\r\n}\r\n#login h2 {\r\n font-weight: normal;\r\n font-size: 14px;\r\n margin: 0 0 0.5em 1em;\r\n}\r\n#login td {\r\n padding: 0 4px 0 0;\r\n}\r\n#login td.label {\r\n text-align: right;\r\n}\r\n#login td.toolbar {\r\n padding: 0 0 0 1em;\r\n vertical-align: top;\r\n}\r\n#login ul.toolbar {\r\n margin: 0;\r\n}\r\n#login input {\r\n margin: 2px;\r\n padding: 2px;\r\n border: 1px solid #888;\r\n box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n}\r\n#error {\r\n display:none;\r\n color:red;\r\n padding: 1em 0 0 0;\r\n}\r\nul.toolbar {\r\n font-size: 11px;\r\n text-align: left;\r\n list-style-type: none;\r\n padding: 0;\r\n margin: 2px 0 4px 2px;\r\n}\r\nul.toolbar li {\r\n float: left;\r\n vertical-align: middle;\r\n}\r\nul.toolbar a {\r\n float: none;\r\n display: block;\r\n margin: 2px 4px 2px 0;\r\n padding: 5px;\r\n\r\n background: #ddd;\r\n border: 1px solid #888;\r\n border-radius: 3px;\r\n -moz-border-radius: 3px;\r\n box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */\r\n\t1px 1px 2px rgba(0,0,0,0.2); /* shadow */\r\n -webkit-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n -moz-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n color: #000;\r\n\r\n text-decoration: none;\r\n text-align: center;\r\n white-space: nowrap;\r\n cursor: inherit;\r\n min-width: 4em;\r\n\r\n -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n}\r\nul.toolbar a:hover {\r\n background: #eee;\r\n}\r\nul.toolbar a:active {\r\n background: #aaa;\r\n box-shadow: 1px 1px 2px #999 inset;\r\n -webkit-box-shadow: 1px 1px 2px #999 inset;\r\n -moz-box-shadow: 1px 1px 2px #999 inset;\r\n}\r\n</style>\r\n<script>\r\nfunction get(id) {\r\n return document.getElementById(id);\r\n}\r\nfunction trim(str) {\r\n return str.replace(/^\\s+|\\s+$/g, '');\r\n}\r\nfunction login(user, pwd, autologin) {\r\n var expires = new Date();\r\n expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));\r\n document.cookie = 'username=' + user +\r\n '; expires=' + expires.toGMTString() + '; path=/';\r\n\r\n window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;\r\n window.location.replace('/webfig/' + window.location.hash);\r\n}\r\nfunction dologin() {\r\n login(get('name').value, get('password').value);\r\n}\r\nfunction loaded() {\r\n var p = window.name.split('=');\r\n if (p[0] == 'error' && p[1]) {\r\n var err = get('error');\r\n err.appendChild(document.createTextNode(p[1]));\r\n err.style.display = 'block';\r\n } else if (p[0] != 'noautologin' || p[1] != 1) {\r\n var user = '';\r\n if (user) {\r\n login(user, '', true);\r\n return;\r\n }\r\n }\r\n window.name = '';\r\n\r\n document.onkeydown = function(e) {\r\n e = e || event;\r\n if (e.keyCode == 13) {\r\n dologin();\r\n return false;\r\n }\r\n return true;\r\n };\r\n\r\n var username = null;\r\n var cookies = document.cookie.split(';');\r\n for (var i in cookies) {\r\n\tvar c = trim(cookies[i]).split('=');\r\n\tif (c[0] == 'username') {\r\n\t username = c[1];\r\n\t break;\r\n\t}\r\n }\r\n \r\n if (username != null) {\r\n\tget('name').value = username;\r\n\tget('password').focus();\r\n } else {\r\n get('name').value = 'admin';\r\n\tget('name').focus();\r\n }\r\n}\r\n</script>\r\n</head>\r\n\r\n<body onload=\"loaded()\">\r\n\r\n<div id=\"container\">\r\n\r\n <div id=\"box\">\r\n <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\r\n\r\n <br style=\"clear: both;\"/>\r\n \r\n\t\t<h1>RouterOS v6.47.1</h1>\r\n \r\n <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>\r\n \r\n <table id=\"login\">\r\n\t<tr><td colspan=\"3\"><h2>WebFig Login:</h2>\r\n <tr><td class=\"label\">Login: <td><input id=\"name\" type=\"text\" tabindex=\"1\">\r\n\t <td class=\"toolbar\" rowspan=\"2\">\r\n <ul class=\"toolbar\">\r\n\t <li><a onclick=\"dologin()\" ondragstart=\"return false;\"><span>Login</span></a></li>\r\n </ul>\r\n <tr><td class=\"label\">Password: <td><input id=\"password\" type=\"password\" tabindex=\"2\">\r\n\t<tr><td colspan=\"3\">\r\n\t <div id=\"error\"></div>\r\n </table>\r\n \r\n <fieldset>\r\n <div class=\"floater\"> \r\n \t<a href=\"http://www.mikrotik.com/download/winbox.exe\"><img src=\"winbox.png\"/></a><br/>\r\n <label>Winbox</label>\r\n </div>\r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"telnet://170.150.237.146\"><img src=\"console.png\"/></a><br/>\r\n <label>Telnet</label>\r\n </div>\r\n\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/graphs\"><img src=\"green.png\"/></a><br/>\r\n <label>Graphs</label>\r\n </div>\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/help/license.html\"><img src=\"license.png\"/></a><br/>\r\n <label>License</label>\r\n </div>\r\n \r\n\t\t\t<div class=\"floater\"> \r\n \t<a href=\"http://wiki.mikrotik.com\"><img src=\"help.png\"/></a><br/>\r\n <label>Help</label>\r\n </div>\r\n\r\n</fieldset>\r\n \r\n <br style=\"clear: both\"/> \r\n <div style=\"float: right\">© mikrotik</div>\r\n\r\n </div>\r\n</div>\r\n\r\n</div>\r\n\r\n</body>\r\n</html>\r\n\n\n\n"}, "timestamp": "2021-01-13T12:39:49", "honeypot": 0}, {"geoinfo": {"city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "US", "names": {"zh-CN": "\u7f8e\u56fd", "en": "United States"}}, "isp": "gci.net", "continent": {"geoname_id": null, "code": "NA", "names": {"zh-CN": "\u5317\u7f8e\u6d32", "en": "North American"}}, "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u963f\u62c9\u65af\u52a0\u5dde", "en": "Alaska"}}, "location": {"lat": "63.036541", "lon": "-149.105682"}, "organization": null, "aso": null, "asn": "8047", "base_station": "", "idc": "", "PoweredBy": "IPIP", "organization_CN": null}, "ip": "66.223.246.115", "portinfo": {"extrainfo": "", "service": "telnet", "hostname": "", "version": "", "device": "router", "os": "IOS", "port": 9030, "title": null, "app": "Cisco router telnetd", "banner": "\u00ff\u00fb\u0001\u00ff\u00fb\u0003\u00ff\u00fd\u0018\u00ff\u00fd\u001f\n\n\n"}, "timestamp": "2021-01-13T12:39:48", "protocol": {"application": "HTTP", "transport": "tcp", "probe": "GetRequest"}, "rdns_new": "115-246-223-66.gci.net", "honeypot": 0}, {"protocol": {"application": "HTTP", "probe": "GetRequest", "transport": "tcp"}, "ip": "180.242.144.115", "timestamp": "2021-01-13T12:39:45", "geoinfo": {"organization_CN": null, "aso": null, "continent": {"geoname_id": null, "code": "AP", "names": {"zh-CN": "\u4e9a\u6d32", "en": "Asia"}}, "city": {"geoname_id": null, "names": {"zh-CN": "\u96c5\u52a0\u8fbe", "en": "DKI Jakarta"}}, "country": {"geoname_id": null, "code": "ID", "names": {"zh-CN": "\u5370\u5ea6\u5c3c\u897f\u4e9a", "en": "Indonesia"}}, "isp": "telkom.co.id", "asn": "7713", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u96c5\u52a0\u8fbe\u9996\u90fd\u7279\u533a", "en": "DKI Jakarta"}}, "location": {"lat": "-6.208428", "lon": "106.844563"}, "PoweredBy": "IPIP", "organization": null, "base_station": "", "idc": ""}, "portinfo": {"hostname": "", "service": "http", "title": ["RouterOS router configuration page"], "extrainfo": "", "version": "", "device": "", "os": "", "port": 64210, "rdns": "", "app": "", "banner": "HTTP/1.0 200 OK\r\nConnection: close\r\nContent-Length: 7062\r\nContent-Type: text/html\r\nDate: Wed, 13 Jan 2021 04:39:19 GMT\r\nExpires: 0\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<link rel=\"icon\" href=\"/favicon.png\"/>\r\n<title>RouterOS router configuration page</title>\r\n<style type=\"text/css\">\r\nbody {\r\nfont-family: Verdana, Geneva, sans-serif;\r\nfont-size: 11px;\r\n}\r\nimg {border: none}\r\nimg:hover {opacity: 0.8;}\r\nh1 {\r\nfont-size: 1.7em;\r\ndisplay: inline;\r\nmargin-bottom: 10px;\r\n}\r\nfieldset {\r\nmargin-top: 20px;\r\nbackground: #fff;\r\npadding: 20px;\r\nborder: 1px solid #c1c1c1; \r\n}\r\n#container {\r\nwidth: 70%;\r\nmargin: 10% auto;\r\n}\r\n#box {\r\nbackground-color: #fff; \r\n-moz-border-radius: 7px; \r\n-webkit-border-radius: 7px; \r\nborder: 1px solid #c1c1c1; \r\npadding: 30px;\r\nfilter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */\r\nbackground: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */\r\nbackground: -moz-linear-gradient(top, #fff, #f3f3f3); /* for firefox 3.6+ */\r\n}\r\n.floater {float: left; margin-right: 10px;}\r\n.floater label {display: block; text-align: center;}\r\n\r\n#login {\r\n margin: 2em 0 4em 0;\r\n}\r\n#login h2 {\r\n font-weight: normal;\r\n font-size: 14px;\r\n margin: 0 0 0.5em 1em;\r\n}\r\n#login td {\r\n padding: 0 4px 0 0;\r\n}\r\n#login td.label {\r\n text-align: right;\r\n}\r\n#login td.toolbar {\r\n padding: 0 0 0 1em;\r\n vertical-align: top;\r\n}\r\n#login ul.toolbar {\r\n margin: 0;\r\n}\r\n#login input {\r\n margin: 2px;\r\n padding: 2px;\r\n border: 1px solid #888;\r\n box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n}\r\n#error {\r\n display:none;\r\n color:red;\r\n padding: 1em 0 0 0;\r\n}\r\nul.toolbar {\r\n font-size: 11px;\r\n text-align: left;\r\n list-style-type: none;\r\n padding: 0;\r\n margin: 2px 0 4px 2px;\r\n}\r\nul.toolbar li {\r\n float: left;\r\n vertical-align: middle;\r\n}\r\nul.toolbar a {\r\n float: none;\r\n display: block;\r\n margin: 2px 4px 2px 0;\r\n padding: 5px;\r\n\r\n background: #ddd;\r\n border: 1px solid #888;\r\n border-radius: 3px;\r\n -moz-border-radius: 3px;\r\n box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */\r\n\t1px 1px 2px rgba(0,0,0,0.2); /* shadow */\r\n -webkit-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n -moz-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n color: #000;\r\n\r\n text-decoration: none;\r\n text-align: center;\r\n white-space: nowrap;\r\n cursor: inherit;\r\n min-width: 4em;\r\n\r\n -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n}\r\nul.toolbar a:hover {\r\n background: #eee;\r\n}\r\nul.toolbar a:active {\r\n background: #aaa;\r\n box-shadow: 1px 1px 2px #999 inset;\r\n -webkit-box-shadow: 1px 1px 2px #999 inset;\r\n -moz-box-shadow: 1px 1px 2px #999 inset;\r\n}\r\n</style>\r\n<script>\r\nfunction get(id) {\r\n return document.getElementById(id);\r\n}\r\nfunction trim(str) {\r\n return str.replace(/^\\s+|\\s+$/g, '');\r\n}\r\nfunction login(user, pwd, autologin) {\r\n var expires = new Date();\r\n expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));\r\n document.cookie = 'username=' + user +\r\n '; expires=' + expires.toGMTString() + '; path=/';\r\n\r\n window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;\r\n window.location.replace('/webfig/' + window.location.hash);\r\n}\r\nfunction dologin() {\r\n login(get('name').value, get('password').value);\r\n}\r\nfunction loaded() {\r\n var p = window.name.split('=');\r\n if (p[0] == 'error' && p[1]) {\r\n var err = get('error');\r\n err.appendChild(document.createTextNode(p[1]));\r\n err.style.display = 'block';\r\n } else if (p[0] != 'noautologin' || p[1] != 1) {\r\n var user = '';\r\n if (user) {\r\n login(user, '', true);\r\n return;\r\n }\r\n }\r\n window.name = '';\r\n\r\n document.onkeydown = function(e) {\r\n e = e || event;\r\n if (e.keyCode == 13) {\r\n dologin();\r\n return false;\r\n }\r\n return true;\r\n };\r\n\r\n var username = null;\r\n var cookies = document.cookie.split(';');\r\n for (var i in cookies) {\r\n\tvar c = trim(cookies[i]).split('=');\r\n\tif (c[0] == 'username') {\r\n\t username = c[1];\r\n\t break;\r\n\t}\r\n }\r\n \r\n if (username != null) {\r\n\tget('name').value = username;\r\n\tget('password').focus();\r\n } else {\r\n get('name').value = 'admin';\r\n\tget('name').focus();\r\n }\r\n}\r\n</script>\r\n</head>\r\n\r\n<body onload=\"loaded()\">\r\n\r\n<div id=\"container\">\r\n\r\n <div id=\"box\">\r\n <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\r\n\r\n <br style=\"clear: both;\"/>\r\n \r\n\t\t<h1>RouterOS v6.43.5</h1>\r\n \r\n <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>\r\n \r\n <table id=\"login\">\r\n\t<tr><td colspan=\"3\"><h2>WebFig Login:</h2>\r\n <tr><td class=\"label\">Login: <td><input id=\"name\" type=\"text\" tabindex=\"1\">\r\n\t <td class=\"toolbar\" rowspan=\"2\">\r\n <ul class=\"toolbar\">\r\n\t <li><a onclick=\"dologin()\" ondragstart=\"return false;\"><span>Login</span></a></li>\r\n </ul>\r\n <tr><td class=\"label\">Password: <td><input id=\"password\" type=\"password\" tabindex=\"2\">\r\n\t<tr><td colspan=\"3\">\r\n\t <div id=\"error\"></div>\r\n </table>\r\n \r\n <fieldset>\r\n <div class=\"floater\"> \r\n \t<a href=\"http://www.mikrotik.com/download/winbox.exe\"><img src=\"winbox.png\"/></a><br/>\r\n <label>Winbox</label>\r\n </div>\r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"telnet://192.168.0.2\"><img src=\"console.png\"/></a><br/>\r\n <label>Telnet</label>\r\n </div>\r\n\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/graphs\"><img src=\"green.png\"/></a><br/>\r\n <label>Graphs</label>\r\n </div>\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/help/license.html\"><img src=\"license.png\"/></a><br/>\r\n <label>License</label>\r\n </div>\r\n \r\n\t\t\t<div class=\"floater\"> \r\n \t<a href=\"http://wiki.mikrotik.com\"><img src=\"help.png\"/></a><br/>\r\n <label>Help</label>\r\n </div>\r\n\r\n</fieldset>\r\n \r\n <br style=\"clear: both\"/> \r\n <div style=\"float: right\">© mikrotik</div>\r\n\r\n </div>\r\n</div>\r\n\r\n</div>\r\n\r\n</body>\r\n</html>\r\n\n\n\n"}, "honeypot": 0}, {"protocol": {"application": "HTTP", "transport": "tcp", "probe": "GetRequest"}, "geoinfo": {"continent": {"code": "AP", "names": {"en": "Asia", "zh-CN": "\u4e9a\u6d32"}, "geoname_id": null}, "country": {"code": "IN", "names": {"en": "India", "zh-CN": "\u5370\u5ea6"}, "geoname_id": null}, "PoweredBy": "IPIP", "base_station": "", "city": {"names": {"en": "Pune", "zh-CN": "\u6d66\u90a3"}, "geoname_id": null}, "isp": "", "organization_CN": null, "idc": "", "organization": null, "location": {"lon": "73.852180", "lat": "18.536110"}, "aso": null, "asn": "132770", "subdivisions": {"code": null, "names": {"en": "Maharashtra", "zh-CN": "\u9a6c\u54c8\u62c9\u65bd\u7279\u62c9\u90a6"}, "geoname_id": null}}, "ip": "43.241.24.161", "portinfo": {"hostname": "", "os": "", "port": 80, "service": "http", "title": ["RouterOS router configuration page"], "version": "", "device": "", "extrainfo": "", "app": "Apache httpd", "banner": "HTTP/1.1 200 OK\nConnection: Keep-Alive\nContent-Length: 7064\nContent-Type: text/html\nDate: Wed, 13 Jan 2021 04:38:21 GMT\nExpires: 0\n\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<link rel=\"icon\" href=\"/favicon.png\"/>\r\n<title>RouterOS router configuration page</title>\r\n<style type=\"text/css\">\r\nbody {\r\nfont-family: Verdana, Geneva, sans-serif;\r\nfont-size: 11px;\r\n}\r\nimg {border: none}\r\nimg:hover {opacity: 0.8;}\r\nh1 {\r\nfont-size: 1.7em;\r\ndisplay: inline;\r\nmargin-bottom: 10px;\r\n}\r\nfieldset {\r\nmargin-top: 20px;\r\nbackground: #fff;\r\npadding: 20px;\r\nborder: 1px solid #c1c1c1; \r\n}\r\n#container {\r\nwidth: 70%;\r\nmargin: 10% auto;\r\n}\r\n#box {\r\nbackground-color: #fff; \r\n-moz-border-radius: 7px; \r\n-webkit-border-radius: 7px; \r\nborder: 1px solid #c1c1c1; \r\npadding: 30px;\r\nfilter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */\r\nbackground: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */\r\nbackground: -moz-linear-gradient(top, #fff, #f3f3f3); /* for firefox 3.6+ */\r\n}\r\n.floater {float: left; margin-right: 10px;}\r\n.floater label {display: block; text-align: center;}\r\n\r\n#login {\r\n margin: 2em 0 4em 0;\r\n}\r\n#login h2 {\r\n font-weight: normal;\r\n font-size: 14px;\r\n margin: 0 0 0.5em 1em;\r\n}\r\n#login td {\r\n padding: 0 4px 0 0;\r\n}\r\n#login td.label {\r\n text-align: right;\r\n}\r\n#login td.toolbar {\r\n padding: 0 0 0 1em;\r\n vertical-align: top;\r\n}\r\n#login ul.toolbar {\r\n margin: 0;\r\n}\r\n#login input {\r\n margin: 2px;\r\n padding: 2px;\r\n border: 1px solid #888;\r\n box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n}\r\n#error {\r\n display:none;\r\n color:red;\r\n padding: 1em 0 0 0;\r\n}\r\nul.toolbar {\r\n font-size: 11px;\r\n text-align: left;\r\n list-style-type: none;\r\n padding: 0;\r\n margin: 2px 0 4px 2px;\r\n}\r\nul.toolbar li {\r\n float: left;\r\n vertical-align: middle;\r\n}\r\nul.toolbar a {\r\n float: none;\r\n display: block;\r\n margin: 2px 4px 2px 0;\r\n padding: 5px;\r\n\r\n background: #ddd;\r\n border: 1px solid #888;\r\n border-radius: 3px;\r\n -moz-border-radius: 3px;\r\n box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */\r\n\t1px 1px 2px rgba(0,0,0,0.2); /* shadow */\r\n -webkit-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n -moz-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n color: #000;\r\n\r\n text-decoration: none;\r\n text-align: center;\r\n white-space: nowrap;\r\n cursor: inherit;\r\n min-width: 4em;\r\n\r\n -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n}\r\nul.toolbar a:hover {\r\n background: #eee;\r\n}\r\nul.toolbar a:active {\r\n background: #aaa;\r\n box-shadow: 1px 1px 2px #999 inset;\r\n -webkit-box-shadow: 1px 1px 2px #999 inset;\r\n -moz-box-shadow: 1px 1px 2px #999 inset;\r\n}\r\n</style>\r\n<script>\r\nfunction get(id) {\r\n return document.getElementById(id);\r\n}\r\nfunction trim(str) {\r\n return str.replace(/^\\s+|\\s+$/g, '');\r\n}\r\nfunction login(user, pwd, autologin) {\r\n var expires = new Date();\r\n expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));\r\n document.cookie = 'username=' + user +\r\n '; expires=' + expires.toGMTString() + '; path=/';\r\n\r\n window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;\r\n window.location.replace('/webfig/' + window.location.hash);\r\n}\r\nfunction dologin() {\r\n login(get('name').value, get('password').value);\r\n}\r\nfunction loaded() {\r\n var p = window.name.split('=');\r\n if (p[0] == 'error' && p[1]) {\r\n var err = get('error');\r\n err.appendChild(document.createTextNode(p[1]));\r\n err.style.display = 'block';\r\n } else if (p[0] != 'noautologin' || p[1] != 1) {\r\n var user = '';\r\n if (user) {\r\n login(user, '', true);\r\n return;\r\n }\r\n }\r\n window.name = '';\r\n\r\n document.onkeydown = function(e) {\r\n e = e || event;\r\n if (e.keyCode == 13) {\r\n dologin();\r\n return false;\r\n }\r\n return true;\r\n };\r\n\r\n var username = null;\r\n var cookies = document.cookie.split(';');\r\n for (var i in cookies) {\r\n\tvar c = trim(cookies[i]).split('=');\r\n\tif (c[0] == 'username') {\r\n\t username = c[1];\r\n\t break;\r\n\t}\r\n }\r\n \r\n if (username != null) {\r\n\tget('name').value = username;\r\n\tget('password').focus();\r\n } else {\r\n get('name').value = 'admin';\r\n\tget('name').focus();\r\n }\r\n}\r\n</script>\r\n</head>\r\n\r\n<body onload=\"loaded()\">\r\n\r\n<div id=\"container\">\r\n\r\n <div id=\"box\">\r\n <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\r\n\r\n <br style=\"clear: both;\"/>\r\n \r\n\t\t<h1>RouterOS v6.47.6</h1>\r\n \r\n <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>\r\n \r\n <table id=\"login\">\r\n\t<tr><td colspan=\"3\"><h2>WebFig Login:</h2>\r\n <tr><td class=\"label\">Login: <td><input id=\"name\" type=\"text\" tabindex=\"1\">\r\n\t <td class=\"toolbar\" rowspan=\"2\">\r\n <ul class=\"toolbar\">\r\n\t <li><a onclick=\"dologin()\" ondragstart=\"return false;\"><span>Login</span></a></li>\r\n </ul>\r\n <tr><td class=\"label\">Password: <td><input id=\"password\" type=\"password\" tabindex=\"2\">\r\n\t<tr><td colspan=\"3\">\r\n\t <div id=\"error\"></div>\r\n </table>\r\n \r\n <fieldset>\r\n <div class=\"floater\"> \r\n \t<a href=\"http://www.mikrotik.com/download/winbox.exe\"><img src=\"winbox.png\"/></a><br/>\r\n <label>Winbox</label>\r\n </div>\r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"telnet://43.241.24.161\"><img src=\"console.png\"/></a><br/>\r\n <label>Telnet</label>\r\n </div>\r\n\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/graphs\"><img src=\"green.png\"/></a><br/>\r\n <label>Graphs</label>\r\n </div>\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/help/license.html\"><img src=\"license.png\"/></a><br/>\r\n <label>License</label>\r\n </div>\r\n \r\n\t\t\t<div class=\"floater\"> \r\n \t<a href=\"http://wiki.mikrotik.com\"><img src=\"help.png\"/></a><br/>\r\n <label>Help</label>\r\n </div>\r\n\r\n</fieldset>\r\n \r\n <br style=\"clear: both\"/> \r\n <div style=\"float: right\">© mikrotik</div>\r\n\r\n </div>\r\n</div>\r\n\r\n</div>\r\n\r\n</body>\r\n</html>\r\n\n\n\n"}, "timestamp": "2021-01-13T12:39:28", "honeypot": 0}, {"protocol": {"application": "HTTP", "probe": "GetRequest", "transport": "tcp"}, "ip": "216.152.176.222", "timestamp": "2021-01-13T12:39:14", "geoinfo": {"city": {"geoname_id": null, "names": {"zh-CN": "\u74e6\u897f\u62c9", "en": "Wasilla"}}, "country": {"geoname_id": null, "code": "US", "names": {"zh-CN": "\u7f8e\u56fd", "en": "United States"}}, "isp": "mtasolutions.com", "asn": "11090", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u963f\u62c9\u65af\u52a0\u5dde", "en": "Alaska"}}, "location": {"lat": "61.581389", "lon": "-149.439444"}, "organization": null, "aso": null, "continent": {"geoname_id": null, "code": "NA", "names": {"zh-CN": "\u5317\u7f8e\u6d32", "en": "North American"}}, "base_station": "", "idc": "", "PoweredBy": "IPIP", "organization_CN": null}, "portinfo": {"hostname": "", "service": "telnet", "extrainfo": "", "version": "", "device": "", "os": "", "port": 9292, "title": null, "rdns": "as5350xm-ge0-0.mtaonline.net.", "app": "Pocket CMD telnetd", "banner": "\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfd\\x18\\xff\\xfd\\x1f\\r\\n\\r\\nUser Access Verification\\r\\n\\r\\nUsername: \n\n\n"}, "honeypot_lastupdate": "2018-12-30T05:18:18.355036", "rdns_new": "as5350xm-ge0-0.mtaonline.net", "honeypot": 0}, {"timestamp": "2021-01-13T12:39:13", "ip": "178.60.25.210", "geoinfo": {"city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "ES", "names": {"zh-CN": "\u897f\u73ed\u7259", "en": "Spain"}}, "isp": "mundo-r.com", "continent": {"geoname_id": null, "code": "EU", "names": {"zh-CN": "\u6b27\u6d32", "en": "Europe"}}, "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u52a0\u5229\u897f\u4e9a\u81ea\u6cbb\u533a", "en": "Galicia"}}, "location": {"lat": "42.575055", "lon": "-8.133856"}, "organization": null, "aso": null, "asn": "12334", "base_station": "", "idc": "", "PoweredBy": "IPIP", "organization_CN": null}, "portinfo": {"extrainfo": "", "service": "http", "hostname": "", "version": "", "device": "router", "os": "RouterOS", "port": 80, "title": ["RouterOS router configuration page"], "app": "MikroTik router config httpd", "banner": "HTTP/1.0 200 OK\r\nConnection: close\r\nContent-Length: 7061\r\nContent-Type: text/html\r\nDate: Wed, 13 Jan 2021 04:38:40 GMT\r\nExpires: 0\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<link rel=\"icon\" href=\"/favicon.png\"/>\r\n<title>RouterOS router configuration page</title>\r\n<style type=\"text/css\">\r\nbody {\r\nfont-family: Verdana, Geneva, sans-serif;\r\nfont-size: 11px;\r\n}\r\nimg {border: none}\r\nimg:hover {opacity: 0.8;}\r\nh1 {\r\nfont-size: 1.7em;\r\ndisplay: inline;\r\nmargin-bottom: 10px;\r\n}\r\nfieldset {\r\nmargin-top: 20px;\r\nbackground: #fff;\r\npadding: 20px;\r\nborder: 1px solid #c1c1c1; \r\n}\r\n#container {\r\nwidth: 70%;\r\nmargin: 10% auto;\r\n}\r\n#box {\r\nbackground-color: #fff; \r\n-moz-border-radius: 7px; \r\n-webkit-border-radius: 7px; \r\nborder: 1px solid #c1c1c1; \r\npadding: 30px;\r\nfilter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */\r\nbackground: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */\r\nbackground: -moz-linear-gradient(top, #fff, #f3f3f3); /* for firefox 3.6+ */\r\n}\r\n.floater {float: left; margin-right: 10px;}\r\n.floater label {display: block; text-align: center;}\r\n\r\n#login {\r\n margin: 2em 0 4em 0;\r\n}\r\n#login h2 {\r\n font-weight: normal;\r\n font-size: 14px;\r\n margin: 0 0 0.5em 1em;\r\n}\r\n#login td {\r\n padding: 0 4px 0 0;\r\n}\r\n#login td.label {\r\n text-align: right;\r\n}\r\n#login td.toolbar {\r\n padding: 0 0 0 1em;\r\n vertical-align: top;\r\n}\r\n#login ul.toolbar {\r\n margin: 0;\r\n}\r\n#login input {\r\n margin: 2px;\r\n padding: 2px;\r\n border: 1px solid #888;\r\n box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n}\r\n#error {\r\n display:none;\r\n color:red;\r\n padding: 1em 0 0 0;\r\n}\r\nul.toolbar {\r\n font-size: 11px;\r\n text-align: left;\r\n list-style-type: none;\r\n padding: 0;\r\n margin: 2px 0 4px 2px;\r\n}\r\nul.toolbar li {\r\n float: left;\r\n vertical-align: middle;\r\n}\r\nul.toolbar a {\r\n float: none;\r\n display: block;\r\n margin: 2px 4px 2px 0;\r\n padding: 5px;\r\n\r\n background: #ddd;\r\n border: 1px solid #888;\r\n border-radius: 3px;\r\n -moz-border-radius: 3px;\r\n box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */\r\n\t1px 1px 2px rgba(0,0,0,0.2); /* shadow */\r\n -webkit-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n -moz-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n color: #000;\r\n\r\n text-decoration: none;\r\n text-align: center;\r\n white-space: nowrap;\r\n cursor: inherit;\r\n min-width: 4em;\r\n\r\n -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n}\r\nul.toolbar a:hover {\r\n background: #eee;\r\n}\r\nul.toolbar a:active {\r\n background: #aaa;\r\n box-shadow: 1px 1px 2px #999 inset;\r\n -webkit-box-shadow: 1px 1px 2px #999 inset;\r\n -moz-box-shadow: 1px 1px 2px #999 inset;\r\n}\r\n</style>\r\n<script>\r\nfunction get(id) {\r\n return document.getElementById(id);\r\n}\r\nfunction trim(str) {\r\n return str.replace(/^\\s+|\\s+$/g, '');\r\n}\r\nfunction login(user, pwd, autologin) {\r\n var expires = new Date();\r\n expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));\r\n document.cookie = 'username=' + user +\r\n '; expires=' + expires.toGMTString() + '; path=/';\r\n\r\n window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;\r\n window.location.replace('/webfig/' + window.location.hash);\r\n}\r\nfunction dologin() {\r\n login(get('name').value, get('password').value);\r\n}\r\nfunction loaded() {\r\n var p = window.name.split('=');\r\n if (p[0] == 'error' && p[1]) {\r\n var err = get('error');\r\n err.appendChild(document.createTextNode(p[1]));\r\n err.style.display = 'block';\r\n } else if (p[0] != 'noautologin' || p[1] != 1) {\r\n var user = '';\r\n if (user) {\r\n login(user, '', true);\r\n return;\r\n }\r\n }\r\n window.name = '';\r\n\r\n document.onkeydown = function(e) {\r\n e = e || event;\r\n if (e.keyCode == 13) {\r\n dologin();\r\n return false;\r\n }\r\n return true;\r\n };\r\n\r\n var username = null;\r\n var cookies = document.cookie.split(';');\r\n for (var i in cookies) {\r\n\tvar c = trim(cookies[i]).split('=');\r\n\tif (c[0] == 'username') {\r\n\t username = c[1];\r\n\t break;\r\n\t}\r\n }\r\n \r\n if (username != null) {\r\n\tget('name').value = username;\r\n\tget('password').focus();\r\n } else {\r\n get('name').value = 'admin';\r\n\tget('name').focus();\r\n }\r\n}\r\n</script>\r\n</head>\r\n\r\n<body onload=\"loaded()\">\r\n\r\n<div id=\"container\">\r\n\r\n <div id=\"box\">\r\n <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\r\n\r\n <br style=\"clear: both;\"/>\r\n \r\n\t\t<h1>RouterOS v6.47.8</h1>\r\n \r\n <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>\r\n \r\n <table id=\"login\">\r\n\t<tr><td colspan=\"3\"><h2>WebFig Login:</h2>\r\n <tr><td class=\"label\">Login: <td><input id=\"name\" type=\"text\" tabindex=\"1\">\r\n\t <td class=\"toolbar\" rowspan=\"2\">\r\n <ul class=\"toolbar\">\r\n\t <li><a onclick=\"dologin()\" ondragstart=\"return false;\"><span>Login</span></a></li>\r\n </ul>\r\n <tr><td class=\"label\">Password: <td><input id=\"password\" type=\"password\" tabindex=\"2\">\r\n\t<tr><td colspan=\"3\">\r\n\t <div id=\"error\"></div>\r\n </table>\r\n \r\n <fieldset>\r\n <div class=\"floater\"> \r\n \t<a href=\"http://www.mikrotik.com/download/winbox.exe\"><img src=\"winbox.png\"/></a><br/>\r\n <label>Winbox</label>\r\n </div>\r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"telnet://172.31.0.3\"><img src=\"console.png\"/></a><br/>\r\n <label>Telnet</label>\r\n </div>\r\n\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/graphs\"><img src=\"green.png\"/></a><br/>\r\n <label>Graphs</label>\r\n </div>\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/help/license.html\"><img src=\"license.png\"/></a><br/>\r\n <label>License</label>\r\n </div>\r\n \r\n\t\t\t<div class=\"floater\"> \r\n \t<a href=\"http://wiki.mikrotik.com\"><img src=\"help.png\"/></a><br/>\r\n <label>Help</label>\r\n </div>\r\n\r\n</fieldset>\r\n \r\n <br style=\"clear: both\"/> \r\n <div style=\"float: right\">© mikrotik</div>\r\n\r\n </div>\r\n</div>\r\n\r\n</div>\r\n\r\n</body>\r\n</html>\r\n\n\n\n"}, "protocol": {"application": "HTTP", "transport": "tcp", "probe": "GetRequestHost"}, "honeypot_lastupdate": "2019-01-08T00:02:36.440999", "rdns_new": "210.25.60.178.unassigned.reverse-mundo-r.com", "honeypot": 0}, {"protocol": {"application": "", "transport": "tcp", "probe": "NULL"}, "ip": "116.236.212.242", "geoinfo": {"continent": {"code": "AP", "names": {"en": "Asia", "zh-CN": "\u4e9a\u6d32"}, "geoname_id": null}, "country": {"code": "CN", "names": {"en": "China", "zh-CN": "\u4e2d\u56fd"}, "geoname_id": null}, "PoweredBy": "IPIP", "base_station": "", "city": {"names": {"en": "Shanghai", "zh-CN": "\u4e0a\u6d77"}, "geoname_id": null}, "isp": "ChinaTelecom", "organization_CN": null, "idc": "", "organization": null, "location": {"lon": "121.472644", "lat": "31.231706"}, "aso": null, "asn": "4812", "subdivisions": {"code": null, "names": {"en": "Shanghai", "zh-CN": "\u4e0a\u6d77"}, "geoname_id": null}}, "portinfo": {"hostname": "", "os": "", "port": 23, "service": "telnet", "title": null, "version": "", "device": "", "extrainfo": "", "app": "", "banner": "\u00ff\u00fb\u0001\u00ff\u00fb\u0003\u00ff\u00fd\u0018\u00ff\u00fd\u001f\r\n\r\nUser Access Verification\r\n\r\nPassword: \n\n\n"}, "timestamp": "2021-01-13T12:39:05", "honeypot": 0}, {"protocol": {"application": "", "probe": "NULL", "transport": "tcp"}, "ip": "5.239.46.164", "timestamp": "2021-01-13T12:39:01", "geoinfo": {"organization_CN": null, "aso": null, "continent": {"geoname_id": null, "code": "AP", "names": {"zh-CN": "\u4e9a\u6d32", "en": "Asia"}}, "city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "IR", "names": {"zh-CN": "\u4f0a\u6717", "en": "Iran"}}, "isp": "tci.ir", "asn": "12880", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u4f0a\u6717", "en": "Iran"}}, "location": {"lat": "32.420650", "lon": "53.682362"}, "PoweredBy": "IPIP", "organization": null, "base_station": "", "idc": ""}, "portinfo": {"hostname": "", "service": "telnet", "title": null, "extrainfo": "", "version": "", "device": "", "os": "", "port": 23, "app": "", "banner": "\u00ff\u00fd\u0003\u00ff\u00fd\u0018\u00ff\u00fd\u001f\u00ff\u00fb\u0001\r\r\nUser Access Verification\r\n\r\r\nUsername: \n\n\n"}, "honeypot": 0}, {"geoinfo": {"city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "ZA", "names": {"zh-CN": "\u5357\u975e", "en": "South Africa"}}, "isp": "macrolan.co.za", "continent": {"geoname_id": null, "code": "AF", "names": {"zh-CN": "\u975e\u6d32", "en": "Africa"}}, "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u5357\u975e", "en": "South Africa"}}, "location": {"lat": "-28.479330", "lon": "24.679930"}, "organization": null, "aso": null, "asn": "37353", "base_station": "", "idc": "", "PoweredBy": "IPIP", "organization_CN": null}, "ip": "129.205.133.225", "portinfo": {"extrainfo": "", "service": "http", "hostname": "", "version": "", "device": "router", "os": "RouterOS", "port": 80, "title": ["RouterOS router configuration page"], "app": "MikroTik router config httpd", "banner": "HTTP/1.0 200 OK\r\nConnection: close\r\nContent-Length: 7066\r\nContent-Type: text/html\r\nDate: Wed, 13 Jan 2021 04:38:06 GMT\r\nExpires: 0\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<link rel=\"icon\" href=\"/favicon.png\"/>\r\n<title>RouterOS router configuration page</title>\r\n<style type=\"text/css\">\r\nbody {\r\nfont-family: Verdana, Geneva, sans-serif;\r\nfont-size: 11px;\r\n}\r\nimg {border: none}\r\nimg:hover {opacity: 0.8;}\r\nh1 {\r\nfont-size: 1.7em;\r\ndisplay: inline;\r\nmargin-bottom: 10px;\r\n}\r\nfieldset {\r\nmargin-top: 20px;\r\nbackground: #fff;\r\npadding: 20px;\r\nborder: 1px solid #c1c1c1; \r\n}\r\n#container {\r\nwidth: 70%;\r\nmargin: 10% auto;\r\n}\r\n#box {\r\nbackground-color: #fff; \r\n-moz-border-radius: 7px; \r\n-webkit-border-radius: 7px; \r\nborder: 1px solid #c1c1c1; \r\npadding: 30px;\r\nfilter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */\r\nbackground: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */\r\nbackground: -moz-linear-gradient(top, #fff, #f3f3f3); /* for firefox 3.6+ */\r\n}\r\n.floater {float: left; margin-right: 10px;}\r\n.floater label {display: block; text-align: center;}\r\n\r\n#login {\r\n margin: 2em 0 4em 0;\r\n}\r\n#login h2 {\r\n font-weight: normal;\r\n font-size: 14px;\r\n margin: 0 0 0.5em 1em;\r\n}\r\n#login td {\r\n padding: 0 4px 0 0;\r\n}\r\n#login td.label {\r\n text-align: right;\r\n}\r\n#login td.toolbar {\r\n padding: 0 0 0 1em;\r\n vertical-align: top;\r\n}\r\n#login ul.toolbar {\r\n margin: 0;\r\n}\r\n#login input {\r\n margin: 2px;\r\n padding: 2px;\r\n border: 1px solid #888;\r\n box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n}\r\n#error {\r\n display:none;\r\n color:red;\r\n padding: 1em 0 0 0;\r\n}\r\nul.toolbar {\r\n font-size: 11px;\r\n text-align: left;\r\n list-style-type: none;\r\n padding: 0;\r\n margin: 2px 0 4px 2px;\r\n}\r\nul.toolbar li {\r\n float: left;\r\n vertical-align: middle;\r\n}\r\nul.toolbar a {\r\n float: none;\r\n display: block;\r\n margin: 2px 4px 2px 0;\r\n padding: 5px;\r\n\r\n background: #ddd;\r\n border: 1px solid #888;\r\n border-radius: 3px;\r\n -moz-border-radius: 3px;\r\n box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */\r\n\t1px 1px 2px rgba(0,0,0,0.2); /* shadow */\r\n -webkit-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n -moz-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n color: #000;\r\n\r\n text-decoration: none;\r\n text-align: center;\r\n white-space: nowrap;\r\n cursor: inherit;\r\n min-width: 4em;\r\n\r\n -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n}\r\nul.toolbar a:hover {\r\n background: #eee;\r\n}\r\nul.toolbar a:active {\r\n background: #aaa;\r\n box-shadow: 1px 1px 2px #999 inset;\r\n -webkit-box-shadow: 1px 1px 2px #999 inset;\r\n -moz-box-shadow: 1px 1px 2px #999 inset;\r\n}\r\n</style>\r\n<script>\r\nfunction get(id) {\r\n return document.getElementById(id);\r\n}\r\nfunction trim(str) {\r\n return str.replace(/^\\s+|\\s+$/g, '');\r\n}\r\nfunction login(user, pwd, autologin) {\r\n var expires = new Date();\r\n expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));\r\n document.cookie = 'username=' + user +\r\n '; expires=' + expires.toGMTString() + '; path=/';\r\n\r\n window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;\r\n window.location.replace('/webfig/' + window.location.hash);\r\n}\r\nfunction dologin() {\r\n login(get('name').value, get('password').value);\r\n}\r\nfunction loaded() {\r\n var p = window.name.split('=');\r\n if (p[0] == 'error' && p[1]) {\r\n var err = get('error');\r\n err.appendChild(document.createTextNode(p[1]));\r\n err.style.display = 'block';\r\n } else if (p[0] != 'noautologin' || p[1] != 1) {\r\n var user = '';\r\n if (user) {\r\n login(user, '', true);\r\n return;\r\n }\r\n }\r\n window.name = '';\r\n\r\n document.onkeydown = function(e) {\r\n e = e || event;\r\n if (e.keyCode == 13) {\r\n dologin();\r\n return false;\r\n }\r\n return true;\r\n };\r\n\r\n var username = null;\r\n var cookies = document.cookie.split(';');\r\n for (var i in cookies) {\r\n\tvar c = trim(cookies[i]).split('=');\r\n\tif (c[0] == 'username') {\r\n\t username = c[1];\r\n\t break;\r\n\t}\r\n }\r\n \r\n if (username != null) {\r\n\tget('name').value = username;\r\n\tget('password').focus();\r\n } else {\r\n get('name').value = 'admin';\r\n\tget('name').focus();\r\n }\r\n}\r\n</script>\r\n</head>\r\n\r\n<body onload=\"loaded()\">\r\n\r\n<div id=\"container\">\r\n\r\n <div id=\"box\">\r\n <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\r\n\r\n <br style=\"clear: both;\"/>\r\n \r\n\t\t<h1>RouterOS v6.42.6</h1>\r\n \r\n <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>\r\n \r\n <table id=\"login\">\r\n\t<tr><td colspan=\"3\"><h2>WebFig Login:</h2>\r\n <tr><td class=\"label\">Login: <td><input id=\"name\" type=\"text\" tabindex=\"1\">\r\n\t <td class=\"toolbar\" rowspan=\"2\">\r\n <ul class=\"toolbar\">\r\n\t <li><a onclick=\"dologin()\" ondragstart=\"return false;\"><span>Login</span></a></li>\r\n </ul>\r\n <tr><td class=\"label\">Password: <td><input id=\"password\" type=\"password\" tabindex=\"2\">\r\n\t<tr><td colspan=\"3\">\r\n\t <div id=\"error\"></div>\r\n </table>\r\n \r\n <fieldset>\r\n <div class=\"floater\"> \r\n \t<a href=\"http://www.mikrotik.com/download/winbox.exe\"><img src=\"winbox.png\"/></a><br/>\r\n <label>Winbox</label>\r\n </div>\r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"telnet://129.205.133.225\"><img src=\"console.png\"/></a><br/>\r\n <label>Telnet</label>\r\n </div>\r\n\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/graphs\"><img src=\"green.png\"/></a><br/>\r\n <label>Graphs</label>\r\n </div>\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/help/license.html\"><img src=\"license.png\"/></a><br/>\r\n <label>License</label>\r\n </div>\r\n \r\n\t\t\t<div class=\"floater\"> \r\n \t<a href=\"http://wiki.mikrotik.com\"><img src=\"help.png\"/></a><br/>\r\n <label>Help</label>\r\n </div>\r\n\r\n</fieldset>\r\n \r\n <br style=\"clear: both\"/> \r\n <div style=\"float: right\">© mikrotik</div>\r\n\r\n </div>\r\n</div>\r\n\r\n</div>\r\n\r\n</body>\r\n</html>\r\n\n\n\n"}, "timestamp": "2021-01-13T12:38:42", "protocol": {"application": "HTTP", "transport": "tcp", "probe": "GetRequest"}, "honeypot_lastupdate": "2018-12-29T06:22:30.806171", "rdns_new": "129-205-133-225.dynamic.macrolan.co.za", "honeypot": 0}, {"protocol": {"application": "", "probe": "NULL", "transport": "tcp"}, "ip": "113.88.98.166", "timestamp": "2021-01-13T12:38:40", "geoinfo": {"city": {"geoname_id": null, "names": {"zh-CN": "\u6df1\u5733", "en": "Shenzhen"}}, "country": {"geoname_id": null, "code": "CN", "names": {"zh-CN": "\u4e2d\u56fd", "en": "China"}}, "isp": "ChinaTelecom", "asn": "4134", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u5e7f\u4e1c", "en": "Guangdong"}}, "location": {"lat": "22.547", "lon": "114.085947"}, "organization": null, "aso": null, "continent": {"geoname_id": null, "code": "AP", "names": {"zh-CN": "\u4e9a\u6d32", "en": "Asia"}}, "base_station": "", "idc": "", "PoweredBy": "IPIP", "organization_CN": null}, "portinfo": {"hostname": "", "service": "telnet", "extrainfo": "", "version": "", "device": "", "os": "", "port": 23, "title": null, "app": "Huawei telnetd", "banner": "\u00ff\u00fb\u0001\u00ff\u00fb\u0001\u00ff\u00fb\u0001\u00ff\u00fb\u0003\u00ff\u00fd\u0018\u00ff\u00fd\u001f\r\n******************************************************************************\r\n* Copyright (c) 2004-2010 Hangzhou H3C Tech. Co., Ltd. All rights reserved. *\r\n* Without the owner's prior written consent, *\r\n* no decompiling or reverse-engineering shall be allowed. *\r\n******************************************************************************\r\n\r\n\r\nLogin authentication\r\n\r\n\r\nUsername:\n\n\n"}, "honeypot": 0}, {"protocol": {"application": "HTTP", "probe": "GetRequest", "transport": "tcp"}, "ip": "110.172.142.122", "timestamp": "2021-01-13T12:38:39", "geoinfo": {"city": {"geoname_id": null, "names": {"zh-CN": "", "en": ""}}, "country": {"geoname_id": null, "code": "IN", "names": {"zh-CN": "\u5370\u5ea6", "en": "India"}}, "isp": "worldphone.in", "asn": "133647", "subdivisions": {"geoname_id": null, "code": null, "names": {"zh-CN": "\u5370\u5ea6", "en": "India"}}, "location": {"lat": "21.786600", "lon": "82.794762"}, "organization": null, "aso": null, "continent": {"geoname_id": null, "code": "AP", "names": {"zh-CN": "\u4e9a\u6d32", "en": "Asia"}}, "base_station": "", "idc": "", "PoweredBy": "IPIP", "organization_CN": null}, "portinfo": {"hostname": "", "service": "http", "extrainfo": "", "version": "", "device": "router", "os": "RouterOS", "port": 80, "title": ["RouterOS router configuration page"], "app": "MikroTik router config httpd", "banner": "HTTP/1.0 200 OK\r\nConnection: close\r\nContent-Length: 7026\r\nContent-Type: text/html\r\nDate: Wed, 13 Jan 2021 04:37:53 GMT\r\nExpires: 0\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\r\n<title>RouterOS router configuration page</title>\r\n<style type=\"text/css\">\r\nbody {\r\nfont-family: Verdana, Geneva, sans-serif;\r\nfont-size: 11px;\r\n}\r\nimg {border: none}\r\nimg:hover {opacity: 0.8;}\r\nh1 {\r\nfont-size: 1.7em;\r\ndisplay: inline;\r\nmargin-bottom: 10px;\r\n}\r\nfieldset {\r\nmargin-top: 20px;\r\nbackground: #fff;\r\npadding: 20px;\r\nborder: 1px solid #c1c1c1; \r\n}\r\n#container {\r\nwidth: 70%;\r\nmargin: 10% auto;\r\n}\r\n#box {\r\nbackground-color: #fff; \r\n-moz-border-radius: 7px; \r\n-webkit-border-radius: 7px; \r\nborder: 1px solid #c1c1c1; \r\npadding: 30px;\r\nfilter: progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffffff', endColorstr='#f3f3f3'); /* for IE */\r\nbackground: -webkit-gradient(linear, left top, left bottom, from(#fff), to(#f3f3f3)); /* for webkit browsers */\r\nbackground: -moz-linear-gradient(top, #fff, #f3f3f3); /* for firefox 3.6+ */\r\n}\r\n.floater {float: left; margin-right: 10px;}\r\n.floater label {display: block; text-align: center;}\r\n\r\n#login {\r\n margin: 2em 0 4em 0;\r\n}\r\n#login h2 {\r\n font-weight: normal;\r\n font-size: 14px;\r\n margin: 0 0 0.5em 1em;\r\n}\r\n#login td {\r\n padding: 0 4px 0 0;\r\n}\r\n#login td.label {\r\n text-align: right;\r\n}\r\n#login td.toolbar {\r\n padding: 0 0 0 1em;\r\n vertical-align: top;\r\n}\r\n#login ul.toolbar {\r\n margin: 0;\r\n}\r\n#login input {\r\n margin: 2px;\r\n padding: 2px;\r\n border: 1px solid #888;\r\n box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -webkit-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n -moz-box-shadow: 1px 1px 3px rgba(0,0,0,0.3);\r\n}\r\n#error {\r\n display:none;\r\n color:red;\r\n padding: 1em 0 0 0;\r\n}\r\nul.toolbar {\r\n font-size: 11px;\r\n text-align: left;\r\n list-style-type: none;\r\n padding: 0;\r\n margin: 2px 0 4px 2px;\r\n}\r\nul.toolbar li {\r\n float: left;\r\n vertical-align: middle;\r\n}\r\nul.toolbar a {\r\n float: none;\r\n display: block;\r\n margin: 2px 4px 2px 0;\r\n padding: 5px;\r\n\r\n background: #ddd;\r\n border: 1px solid #888;\r\n border-radius: 3px;\r\n -moz-border-radius: 3px;\r\n box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset, /* top gradient */\r\n\t1px 1px 2px rgba(0,0,0,0.2); /* shadow */\r\n -webkit-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n -moz-box-shadow:\r\n 1px 1px 2px rgba(255,255,255,0.8) inset,\r\n\t0 10px 10px -5px rgba(255,255,255,0.5) inset,\r\n\t1px 1px 2px rgba(0,0,0,0.2);\r\n color: #000;\r\n\r\n text-decoration: none;\r\n text-align: center;\r\n white-space: nowrap;\r\n cursor: inherit;\r\n min-width: 4em;\r\n\r\n -webkit-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n -moz-transition: background 0.2s linear, box-shadow 0.2s ease-out;\r\n}\r\nul.toolbar a:hover {\r\n background: #eee;\r\n}\r\nul.toolbar a:active {\r\n background: #aaa;\r\n box-shadow: 1px 1px 2px #999 inset;\r\n -webkit-box-shadow: 1px 1px 2px #999 inset;\r\n -moz-box-shadow: 1px 1px 2px #999 inset;\r\n}\r\n</style>\r\n<script>\r\nfunction get(id) {\r\n return document.getElementById(id);\r\n}\r\nfunction trim(str) {\r\n return str.replace(/^\\s+|\\s+$/g, '');\r\n}\r\nfunction login(user, pwd, autologin) {\r\n var expires = new Date();\r\n expires.setTime(expires.getTime() + (30 * 24 * 60 * 60 * 1000));\r\n document.cookie = 'username=' + user +\r\n '; expires=' + expires.toGMTString() + '; path=/';\r\n\r\n window.name = (autologin ? 'autologin=' : 'login=') + user + '|' + pwd;\r\n window.location.replace('/webfig/' + window.location.hash);\r\n}\r\nfunction dologin() {\r\n login(get('name').value, get('password').value);\r\n}\r\nfunction loaded() {\r\n var p = window.name.split('=');\r\n if (p[0] == 'error' && p[1]) {\r\n var err = get('error');\r\n err.appendChild(document.createTextNode(p[1]));\r\n err.style.display = 'block';\r\n } else if (p[0] != 'noautologin' || p[1] != 1) {\r\n var user = '';\r\n if (user) {\r\n login(user, '', true);\r\n return;\r\n }\r\n }\r\n window.name = '';\r\n\r\n document.onkeydown = function(e) {\r\n e = e || event;\r\n if (e.keyCode == 13) {\r\n dologin();\r\n return false;\r\n }\r\n return true;\r\n };\r\n\r\n var username = null;\r\n var cookies = document.cookie.split(';');\r\n for (var i in cookies) {\r\n\tvar c = trim(cookies[i]).split('=');\r\n\tif (c[0] == 'username') {\r\n\t username = c[1];\r\n\t break;\r\n\t}\r\n }\r\n \r\n if (username != null) {\r\n\tget('name').value = username;\r\n\tget('password').focus();\r\n } else {\r\n get('name').value = 'admin';\r\n\tget('name').focus();\r\n }\r\n}\r\n</script>\r\n</head>\r\n\r\n<body onload=\"loaded()\">\r\n\r\n<div id=\"container\">\r\n\r\n <div id=\"box\">\r\n <a href=\"http://mikrotik.com\"><img src=\"mikrotik_logo.png\" style=\"float: right;\" /></a>\r\n\r\n <br style=\"clear: both;\"/>\r\n \r\n\t\t<h1>RouterOS v6.34.3</h1>\r\n \r\n <p>You have connected to a router. Administrative access only. If this device is not in your possession, please contact your local network administrator. </p>\r\n \r\n <table id=\"login\">\r\n\t<tr><td colspan=\"3\"><h2>WebFig Login:</h2>\r\n <tr><td class=\"label\">Login: <td><input id=\"name\" type=\"text\" tabindex=\"1\">\r\n\t <td class=\"toolbar\" rowspan=\"2\">\r\n <ul class=\"toolbar\">\r\n\t <li><a onclick=\"dologin()\" ondragstart=\"return false;\"><span>Login</span></a></li>\r\n </ul>\r\n <tr><td class=\"label\">Password: <td><input id=\"password\" type=\"password\" tabindex=\"2\">\r\n\t<tr><td colspan=\"3\">\r\n\t <div id=\"error\"></div>\r\n </table>\r\n \r\n <fieldset>\r\n <div class=\"floater\"> \r\n \t<a href=\"http://www.mikrotik.com/download/winbox.exe\"><img src=\"winbox.png\"/></a><br/>\r\n <label>Winbox</label>\r\n </div>\r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"telnet://110.172.142.122\"><img src=\"console.png\"/></a><br/>\r\n <label>Telnet</label>\r\n </div>\r\n\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/graphs\"><img src=\"green.png\"/></a><br/>\r\n <label>Graphs</label>\r\n </div>\r\n \r\n \r\n <div class=\"floater\"> \r\n \t<a href=\"/help/license.html\"><img src=\"license.png\"/></a><br/>\r\n <label>License</label>\r\n </div>\r\n \r\n\t\t\t<div class=\"floater\"> \r\n \t<a href=\"http://wiki.mikrotik.com\"><img src=\"help.png\"/></a><br/>\r\n <label>Help</label>\r\n </div>\r\n\r\n</fieldset>\r\n \r\n <br style=\"clear: both\"/> \r\n <div style=\"float: right\">© mikrotik</div>\r\n\r\n </div>\r\n</div>\r\n\r\n</div>\r\n\r\n</body>\r\n</html>\r\n\n\n\n"}, "honeypot": 0}], "facets": {"product": [{"name": "", "count": 28323128}, {"name": "BusyBox telnetd", "count": 10180912}, {"name": "Linux telnetd", "count": 3056202}, {"name": "Cisco IOS telnetd", "count": 1507468}, {"name": "Huawei Home Gateway telnetd", "count": 1228592}, {"name": "MikroTik router config httpd", "count": 1066723}, {"name": "Huawei telnetd", "count": 965820}, {"name": "Busybox telnetd", "count": 962449}, {"name": "Netgear broadband router or ZyXel VoIP adapter telnetd", "count": 593670}, {"name": "NASLite-SMB/Sveasoft Alchemy firmware telnetd", "count": 491950}], "device": [{"name": "", "count": 45630936}, {"name": "broadband router", "count": 5121280}, {"name": "router", "count": 2103376}, {"name": "switch", "count": 2038841}, {"name": "bridge", "count": 549868}, {"name": "WAP", "count": 543088}, {"name": "firewall", "count": 513402}, {"name": "media device", "count": 137372}, {"name": "webcam", "count": 117000}, {"name": "printer", "count": 76397}], "service": [{"name": "telnet", "count": 54648168}, {"name": "http", "count": 1501431}, {"name": "nuclear", "count": 280959}, {"name": "https", "count": 248018}, {"name": "irc", "count": 21692}, {"name": "nagios-nsca", "count": 16871}, {"name": "", "count": 15424}, {"name": "3d-nfsd", "count": 14545}, {"name": "NFS-or-IIS", "count": 9548}, {"name": "netvenuechat", "count": 6836}], "os": [{"name": "", "count": 49295930}, {"name": "Linux", "count": 3985312}, {"name": "IOS", "count": 1834246}, {"name": "RouterOS", "count": 1066673}, {"name": "Unix", "count": 263580}, {"name": "Windows XP", "count": 229562}, {"name": "OneOS", "count": 88676}, {"name": "IOS XR", "count": 68709}, {"name": "Windows", "count": 32385}, {"name": "VxWorks", "count": 15753}], "port": [{"name": 23, "count": 46268474}, {"name": 2600, "count": 1507440}, {"name": 2323, "count": 1111371}, {"name": 80, "count": 797585}, {"name": 2002, "count": 505106}, {"name": 9002, "count": 473079}, {"name": 8081, "count": 428358}, {"name": 23023, "count": 277334}, {"name": 2332, "count": 240234}, {"name": 992, "count": 200018}], "country": [{"name": "China", "count": 19713929}, {"name": "United States", "count": 4672678}, {"name": "Brazil", "count": 3604676}, {"name": "Republic of Korea", "count": 2481624}, {"name": "Argentina", "count": 1706074}, {"name": "India", "count": 1644853}, {"name": "Russia", "count": 1522002}, {"name": "Italy", "count": 1299497}, {"name": "Japan", "count": 1247040}, {"name": "Mexico", "count": 1070160}], "city": [{"name": "", "count": 14263530}, {"name": "Guangzhou", "count": 1108542}, {"name": "Seoul", "count": 679747}, {"name": "Beijing", "count": 598799}, {"name": "Shanghai", "count": 489186}, {"name": "Hanoi", "count": 476418}, {"name": "Hangzhou", "count": 469624}, {"name": "Chongqing", "count": 459626}, {"name": "Qingdao", "count": 425343}, {"name": "Hebei", "count": 414046}]}}root@zoomeye:/zoomeye-python# zoomeye search telnet_20_1610513753.json
ip:port service country app banner
186.237.196.113:8112 http Brazil HTTP/1.0 200 OK\r\nConnection:...
186.232.184.15:8112 http Brazil HTTP/1.0 200 OK\r\nConnection:...
170.0.202.6:2332 telnet Brazil Linux telnetd \xff\xfd\x18\xff\xfd \xff\xfd#...
84.19.26.169:1901 telnet Germany ProFTPD 220 NASFTPD Turbo station 1.3....
59.127.176.194:19 telnet China ProFTPD 220 NASFTPD Turbo station 1.3....
113.174.12.103:23 telnet Viet Nam BusyBox telnetd \xff\xfd\x01\xff\xfd!\xff\xfb\...
189.203.161.7:23 telnet Mexico Huawei Home Gateway telnetd \xff\xfb\x01\xff\xfb\x03\xff\x...
195.5.229.150:23 telnet France OneAccess ONE100A router ... \xff\xfc\x01\xff\xfb\x01\xff\x...
58.96.17.59:23 telnet Australia Cisco IOS telnetd \xff\xfb\x01\xff\xfb\x03\xff\x...
170.150.237.146:8181 http Brazil Apache httpd HTTP/1.1 200 OK\nContent-Leng...
66.223.246.115:9030 telnet United States Cisco router telnetd \xff\xfb\x01\xff\xfb\x03\xff\x...
180.242.144.115:64210 http Indonesia HTTP/1.0 200 OK\r\nConnection:...
43.241.24.161:80 http India Apache httpd HTTP/1.1 200 OK\nConnection: ...
216.152.176.222:9292 telnet United States Pocket CMD telnetd \xff\xfb\x01\xff\xfb\x03\xff\x...
178.60.25.210:80 http Spain MikroTik router config httpd HTTP/1.0 200 OK\r\nConnection:...
116.236.212.242:23 telnet China \xff\xfb\x01\xff\xfb\x03\xff\x...
5.239.46.164:23 telnet Iran \xff\xfd\x03\xff\xfd\x18\xff\x...
129.205.133.225:80 http South Africa MikroTik router config httpd HTTP/1.0 200 OK\r\nConnection:...
113.88.98.166:23 telnet China Huawei telnetd \xff\xfb\x01\xff\xfb\x01\xff\x...
110.172.142.122:80 http India MikroTik router config httpd HTTP/1.0 200 OK\r\nConnection:...
total: 20
root@zoomeye:/zoomeye-python# zoomeye search telnet_20_1610513753.json -filter "app,port,country"
ip app port country
186.237.196.113 8112 Brazil
186.232.184.15 8112 Brazil
170.0.202.6 Linux telnetd 2332 Brazil
84.19.26.169 ProFTPD 1901 Germany
59.127.176.194 ProFTPD 19 China
113.174.12.103 BusyBox telnetd 23 Viet Nam
189.203.161.7 Huawei Home Gateway telnetd 23 Mexico
195.5.229.150 OneAccess ONE100A router telnetd23 France
58.96.17.59 Cisco IOS telnetd 23 Australia
170.150.237.146 Apache httpd 8181 Brazil
66.223.246.115 Cisco router telnetd 9030 United States
180.242.144.115 64210 Indonesia
43.241.24.161 Apache httpd 80 India
216.152.176.222 Pocket CMD telnetd 9292 United States
178.60.25.210 MikroTik router config httpd 80 Spain
116.236.212.242 23 China
5.239.46.164 23 Iran
129.205.133.225 MikroTik router config httpd 80 South Africa
113.88.98.166 Huawei telnetd 23 China
110.172.142.122 MikroTik router config httpd 80 India
total: 20
root@zoomeye:/zoomeye-python# zoomeye search telnet -stat "app,port"
app count
[unknown] 5
MikroTik router config httpd 3
ProFTPD 2
Apache httpd 2
Linux telnetd 1
BusyBox telnetd 1
Huawei Home Gateway telnetd 1
OneAccess ONE100A router telnetd 1
Cisco IOS telnetd 1
Cisco router telnetd 1
Pocket CMD telnetd 1
Huawei telnetd 1
port count
23 7
80 4
8112 2
2332 1
1901 1
19 1
8181 1
9030 1
64210 1
9292 1
root@zoomeye:/zoomeye-python# zoomeye info
Role: developer
Quota: 7816
root@zoomeye:/zoomeye-python#