whois.handle: CAT-BANGKOK
whois.name: CAT Telecom public company Ltd
whois.cidrs: 122.154.0.0/19
whois.updated: 2008-09-04T00:00:00.000000
services.protocol: SSH
services.transport_protocol: TCP
services.scan_time: 2025-07-28T07:40:22.268711
services.banner: SSH-2.0-OpenSSH_7.4
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: OpenBSD
services.product: OpenSSH
services.version: 7.4
services.cpe: cpe:2.3:a:openbsd:openssh:7.4:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.value: remote-access
services.raw: SSH-2.0-OpenSSH_7.4
services.protocol_version: 2.0
services.software_version: OpenSSH_7.4
services.kex_algorithms: curve25519-sha256 curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group-exchange-sha256 diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 diffie-hellman-group-exchange-sha1 diffie-hellman-group14-sha256 diffie-hellman-group14-sha1 diffie-hellman-group1-sha1
services.host_key_algorithms: ssh-rsa rsa-sha2-512 rsa-sha2-256 ecdsa-sha2-nistp256 ssh-ed25519
services.client_to_server_ciphers: chacha20-poly1305@openssh.com aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com aes256-gcm@openssh.com aes128-cbc aes192-cbc aes256-cbc blowfish-cbc cast128-cbc 3des-cbc
services.server_to_client_ciphers: chacha20-poly1305@openssh.com aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com aes256-gcm@openssh.com aes128-cbc aes192-cbc aes256-cbc blowfish-cbc cast128-cbc 3des-cbc
services.client_to_server_macs: umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha1-etm@openssh.com umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-sha1
services.server_to_client_macs: umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha1-etm@openssh.com umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-sha1
services.client_to_server_compression: none zlib@openssh.com
services.server_to_client_compression: none zlib@openssh.com
services.kex_algorithm: curve25519-sha256@libssh.org
services.host_key_algorithm: ecdsa-sha2-nistp256
services.cipher: aes128-ctr
services.mac: hmac-sha2-256
services.compression: none
services.cipher: aes128-ctr
services.mac: hmac-sha2-256
services.compression: none
services.curve: P-256
services.hassh_fingerprint: 6832f1ce43d4397c2c0a3e2f8c94334e
services.protocol: UNKNOWN
services.transport_protocol: TCP
services.scan_time: 2025-07-27T07:34:40.940256
services.banner: HTTP/1.1 400 Bad Request
  Date: Sun, 27 Jul 2025 07:34:51 GMT
  Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/7.2.16
  Content-Length: 362
  Connection: close
  Content-Type: text/html; charset=iso-8859-1
  
  <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  <html><head>
  <title>400 Bad Request</title>
  </head><body>
  <h1>Bad Request</h1>
  <p>Your browser sent a request that this server could not understand.<br />
  Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
   Instead use the HTTPS
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.protocol: MYSQL
services.transport_protocol: TCP
services.scan_time: 2025-07-28T08:37:29.408004
services.source: OSI_APPLICATION_LAYER
services.part: a
services.vendor: Oracle
services.product: MySQL
services.cpe: cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
services.source: OSI_TRANSPORT_LAYER
services.part: o
services.product: linux
services.cpe: cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*
services.value: database
services.error_id: ER_HOST_IS_BLOCKED
services.error_message: Host 'gateway' is blocked because of many connection errors; unblock with 'mysqladmin flush-hosts'
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T23:54:00.610514
services.banner: HTTP/1.1 302 Found
  Location: https://122.154.9.160:8015/
  Connection: close
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Content-Security-Policy: frame-ancestors
  
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T23:54:00.610514
services.uri: http://122.154.9.160:8008/
services.protocol: HTTP/1.1
services.status_reason: Found
services.key: Location
services.headers: https://122.154.9.160:8015/
services.key: X-Frame-Options
services.headers: SAMEORIGIN
services.key: X-XSS-Protection
services.headers: 1; mode=block
services.key: Connection
services.headers: close
services.key: Content-Security-Policy
services.headers: frame-ancestors
services.key: X-Content-Type-Options
services.headers: nosniff
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-28T07:58:37.017821
services.banner: HTTP/1.1 200 OK
  Content-Length: 2487
  Connection: close
  Cache-Control: no-cache
  Content-Type: text/html; charset=utf-8
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Content-Security-Policy: frame-ancestors
  
services.version_selected: TLSv1_2
services.cipher_selected: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
services.ja4s: t120200_cca8_8fe157b277d7
services.version: TLSv1_2
services.ja4s: t120200_cca8_8fe157b277d7
services.version: TLSv1_1
services.ja4s: t110200_c014_8fe157b277d7
services.version: TLSv1_0
services.ja4s: t100200_c014_8fe157b277d7
services.version: SSLv3
services.issuer_dn: C=US, ST=California, L=Sunnyvale, O=Fortinet, OU=Certificate Authority, CN=FG4H0ETB20902463, emailAddress=support@fortinet.com
services.common_name: FG4H0ETB20902463
services.country: US
services.locality: Sunnyvale
services.province: California
services.organization: Fortinet
services.organizational_unit: Certificate Authority
services.email_address: support@fortinet.com
services.subject_dn: CN=6 0.0.0.0:32941 =\> 0.0.0.0:20255\ 
services.common_name: 6 0.0.0.0:32941 => 0.0.0.0:20255 
services.source: OSI_APPLICATION_LAYER
services.part: h
services.vendor: Fortinet
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Fortinet
services.product: FortiOS
services.cpe: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
services.value: network.device.firewall
services.value: network.device
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-28T07:58:37.017821
services.uri: https://122.154.9.160:8015/
services.protocol: HTTP/1.1
services.status_reason: OK
services.key: X-Frame-Options
services.headers: SAMEORIGIN
services.key: X-XSS-Protection
services.headers: 1; mode=block
services.key: X-Content-Type-Options
services.headers: nosniff
services.key: Content-Type
services.headers: text/html; charset=utf-8
services.key: Connection
services.headers: close
services.key: Content-Length
services.headers: 2487
services.key: Cache-Control
services.headers: no-cache
services.key: Content-Security-Policy
services.headers: frame-ancestors
services.html_tags: <title>Web Filter Block Override</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="referrer" content="no-referrer">
services.body: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  <meta name="referrer" content="no-referrer">
      <title>Web Filter Block Override</title>
      <style type="text/css">
          html, body { margin: 0; padding: 0; font-family: Verdana, Arial, sans-serif; font-size: 10pt; }
          h1, h2 { height: 82px; text-indent: -999em; margin: 0; padding: 0; margin: 0; }
          div { margin: 0; padding: 0; }
          div.header { background: url(https://122.154.9.160:8015/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 0 repeat-x; height: 82px; }
          div.header h1 { background: url(https://122.154.9.160:8015/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGHGFHBGCHEGPFHHGG) 0 0 no-repeat; }
          div.header h2 { background: url(https://122.154.9.160:8015/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 -82px no-repeat; width: 160px; float: right; }
          div.sidebar { width: 195px; height: 200px; float: left; }
          div.main { padding: 5px; margin-left: 195px; }
          div.buttons { margin-top: 30px; text-align: right; }
          h3 { margin: 36px 0; font-size: 16pt; }
          .blocked      h3 { color: #c00; }
          .authenticate h3 { color: #36c; }
          h2.fgd_icon { background: url(https://122.154.9.160:8015/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 -166px repeat-x; width: 90px; height: 92px; margin: 48px auto; }
          .blocked      h2.fgd_icon { background-position: 0 -166px; }
          .authenticate h2.fgd_icon { background-position: -89px -166px; }
          form { width: 300px; margin: 30px 0; }
          label { display: block; width: 300px; margin: 5px 0; line-height: 25px; }
          label input { width: 200px; border: 1px solid #7f9db9; height: 20px; float: right; }
      </style>
  </head>
  <body class="authenticate">
      <div class="header">
          <h2>Powered By Fortinet</h2>
          <h1>FortiGuard Web Filtering</h1>
      </div>
      <div class="sidebar">
          <h2 class="fgd_icon">authenticate</h2>
      </div>
      <div class="main">
  <h3>Web Filter Block Override</h3><div class="notice">If you have been granted override creation privileges by your administrator, you can enter your username and password here to gain immediate access to the blocked web-page.  If you do not have these privileges, please contact your administrator to gain access to the web-page.</div> <div><font color="#FF0000">Invalid FortiGuard Web Filtering override request.</font></div>    </div>
  </body>
  </html>
  
services.body_hash_sha1: sha1:388dc9de41cd2f282011e41a810b9e31b598af7a
services.supported_versions: HTTP/1.1
services.protocol: HTTP
services.transport_protocol: TCP
services.scan_time: 2025-07-27T21:03:00.729997
services.banner: HTTP/1.1 200 OK
  Content-Length: 2483
  Connection: close
  Cache-Control: no-cache
  Content-Type: text/html; charset=utf-8
  X-Frame-Options: SAMEORIGIN
  X-XSS-Protection: 1; mode=block
  X-Content-Type-Options: nosniff
  Content-Security-Policy: frame-ancestors
  
services.source: OSI_APPLICATION_LAYER
services.part: h
services.vendor: Fortinet
services.source: OSI_APPLICATION_LAYER
services.part: o
services.vendor: Fortinet
services.product: FortiOS
services.cpe: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
services.value: network.device.firewall
services.value: network.device
services.path: /
services.endpoint_type: HTTP
services.scan_time: 2025-07-27T21:03:00.729997
services.uri: http://122.154.9.160:8020/
services.protocol: HTTP/1.1
services.status_reason: OK
services.key: X-Frame-Options
services.headers: SAMEORIGIN
services.key: X-XSS-Protection
services.headers: 1; mode=block
services.key: X-Content-Type-Options
services.headers: nosniff
services.key: Content-Type
services.headers: text/html; charset=utf-8
services.key: Connection
services.headers: close
services.key: Content-Length
services.headers: 2483
services.key: Cache-Control
services.headers: no-cache
services.key: Content-Security-Policy
services.headers: frame-ancestors
services.html_tags: <title>Web Filter Block Override</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="referrer" content="no-referrer">
services.body: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
  <html>
  <head>
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  <meta name="referrer" content="no-referrer">
      <title>Web Filter Block Override</title>
      <style type="text/css">
          html, body { margin: 0; padding: 0; font-family: Verdana, Arial, sans-serif; font-size: 10pt; }
          h1, h2 { height: 82px; text-indent: -999em; margin: 0; padding: 0; margin: 0; }
          div { margin: 0; padding: 0; }
          div.header { background: url(http://122.154.9.160:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 0 repeat-x; height: 82px; }
          div.header h1 { background: url(http://122.154.9.160:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGHGFHBGCHEGPFHHGG) 0 0 no-repeat; }
          div.header h2 { background: url(http://122.154.9.160:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 -82px no-repeat; width: 160px; float: right; }
          div.sidebar { width: 195px; height: 200px; float: left; }
          div.main { padding: 5px; margin-left: 195px; }
          div.buttons { margin-top: 30px; text-align: right; }
          h3 { margin: 36px 0; font-size: 16pt; }
          .blocked      h3 { color: #c00; }
          .authenticate h3 { color: #36c; }
          h2.fgd_icon { background: url(http://122.154.9.160:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 -166px repeat-x; width: 90px; height: 92px; margin: 48px auto; }
          .blocked      h2.fgd_icon { background-position: 0 -166px; }
          .authenticate h2.fgd_icon { background-position: -89px -166px; }
          form { width: 300px; margin: 30px 0; }
          label { display: block; width: 300px; margin: 5px 0; line-height: 25px; }
          label input { width: 200px; border: 1px solid #7f9db9; height: 20px; float: right; }
      </style>
  </head>
  <body class="authenticate">
      <div class="header">
          <h2>Powered By Fortinet</h2>
          <h1>FortiGuard Web Filtering</h1>
      </div>
      <div class="sidebar">
          <h2 class="fgd_icon">authenticate</h2>
      </div>
      <div class="main">
  <h3>Web Filter Block Override</h3><div class="notice">If you have been granted override creation privileges by your administrator, you can enter your username and password here to gain immediate access to the blocked web-page.  If you do not have these privileges, please contact your administrator to gain access to the web-page.</div> <div><font color="#FF0000">Invalid FortiGuard Web Filtering override request.</font></div>    </div>
  </body>
  </html>
  
services.body_hash_sha1: sha1:ab4cb49b82948c06e8f28a17ab970ae909c83d42
services.supported_versions: HTTP/1.1
[binary data, 21 values, 608 bytes]