IP

13.212.168.196

Network

13.208.0.0/13

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class

Operating System

Linux Linux Kernel

URL

http://13.212.168.196:4242/ 301

Reverse DNS

ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com

ASN

AS16509

Organization

AMAZON-02

Protocol

http

Source

datascan

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Operating System

Linux Linux Kernel

Product

F5 Nginx

HTTP Component(s)

Oracle Java Atlassian Confluence

CPE(s)

<enterprise field>: cpe

Data MD5

b24b34fddd5b8923ec1ff0c47d24c4e8

HTTP Header MD5

545f6de0cf7921fa1833db1c9d249cb3

HTTP Body MD5

d41d8cd98f00b204e9800998ecf8427e

Favicon MD5

2b86aa50c3a66bb77ff07c42cc051dcc

Favicon MMH3

-1216248324

HTTP/1.1 301 Moved Permanently
Connection: keep-alive
Date: Thu, 21 Nov 2024 10:29:32 GMT
Server: nginx
X-Confluence-Request-Time: 1732184972
Content-Type: text/html;charset=UTF-8
Cache-Control: no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: JSESSIONID=ftzj1anp6xou8egff696w73836eqkh7d; Path=/; Secure; HttpOnly
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Strict-Transport-Security: max-age=63072000
Location: ./login.action
Content-Length: 0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:36:08.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1636538602,
         "component" : [
            {
               "product" : "Java",
               "productvendor" : "Oracle"
            },
            {
               "product" : "Confluence",
               "productvendor" : "Atlassian"
            }
         ],
         "headermd5" : "545f6de0cf7921fa1833db1c9d249cb3",
         "headermmh3" : -466061896
      },
      "length" : 587
   },
   "asn" : "AS16509",
   "city" : "Singapore",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 301 Moved Permanently\r\nConnection: keep-alive\r\nDate: Thu, 21 Nov 2024 10:29:32 GMT\r\nServer: nginx\r\nX-Confluence-Request-Time: 1732184972\r\nContent-Type: text/html;charset=UTF-8\r\nCache-Control: no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nSet-Cookie: JSESSIONID=ftzj1anp6xou8egff696w73836eqkh7d; Path=/; Secure; HttpOnly\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nStrict-Transport-Security: max-age=63072000\r\nLocation: ./login.action\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "b24b34fddd5b8923ec1ff0c47d24c4e8",
   "datammh3" : -165092215,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "AMAZON-SIN",
      "organization" : "Amazon Data Services Singapore",
      "subnet" : "13.212.0.0/14"
   },
   "host" : [
      "ec2-13-212-168-196"
   ],
   "hostname" : [
      "ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com"
   ],
   "ip" : "13.212.168.196",
   "ipv6" : "false",
   "latitude" : "1.2868",
   "location" : "1.2868,103.8503",
   "longitude" : "103.8503",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Moved Permanently",
   "reverse" : [
      "ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 301,
   "subdomains" : [
      "ap-southeast-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.208.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

13.212.168.196

Network

13.208.0.0/13

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class

URL

http://13.212.168.196:4242/./login.action 200

HTTP Title

Log In - Confluence

Reverse DNS

ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com

ASN

AS16509

Organization

AMAZON-02

Protocol

http

Source

datascan::redirect::1

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Product

F5 Nginx

HTTP Component(s)

Oracle Java Atlassian Confluence Atlassian Confluence 8.5.1 8703

CPE(s)

<enterprise field>: cpe

Data MD5

b22d98e4b4eb84ada5eae3d9b6990108

HTTP Header MD5

81b1b89a4fa4b0160cf697ccda47e913

HTTP Body MD5

68d299cc91510df1cbd8e6c43b0be3cf

HTTP/1.1 200 OK
Connection: keep-alive
Date: Thu, 21 Nov 2024 10:36:07 GMT
Server: nginx
X-Confluence-Request-Time: 1732185367
Content-Type: text/html;charset=UTF-8
Cache-Control: no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: JSESSIONID=ftzj1anp6xou8egff696w73836eqkh7d; Path=/; Secure; HttpOnly
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Strict-Transport-Security: max-age=63072000
Content-Length: 31642

<!DOCTYPE html>
<html lang="en-US" >
<head>
                    <title>Log In - Confluence</title>
    <meta http-equiv="X-UA-Compatible" content="IE=EDGE,chrome=IE7">
<meta charset="UTF-8">
<meta id="confluence-context-path" name="confluence-context-path" content="">
<meta id="confluence-base-url" name="confluence-base-url" content="https://www.example.com">
    <meta id="atlassian-token" name="atlassian-token" content="e68dfa45d0ec9701eac9e51568b6020923c96741">
<script type="text/javascript">
        var contextPath = '';
</script>
    <meta name="robots" content="noindex,nofollow">
    <meta name="robots" content="noarchive">
    <meta name="confluence-request-time" content="1655127501448">
            <meta name="ajs-use-keyboard-shortcuts" content="true">
            <meta name="ajs-discovered-plugin-features" content="$discoveredList">
            <meta name="ajs-keyboardshortcut-hash" content="fff979e4c9da5640ff51afde5a995be8">
            <meta id="team-calendars-has-jira-link" content="true">
            <meta name="ajs-team-calendars-display-time-format" content="displayTimeFormat12">
            <meta id="team-calendars-display-week-number" content="false">
            <meta id="team-calendars-user-timezone" content="-07:00">
            <script type="text/x-template" id="team-calendars-messages" title="team-calendars-messages"><fieldset class="i18n hidden"><input type="hidden" name="calendar3.month.long.july" value="July"><input type="hidden" name="calendar3.day.short.wednesday" value="Wed"><input type="hidden" name="calendar3.day.short.thursday" value="Thu"><input type="hidden" name="calendar3.month.short.march" value="Mar"><input type="hidden" name="calendar3.month.long.april" value="April"><input type="hidden" name="calendar3.month.long.october" value="October"><input type="hidden" name="calendar3.month.long.august" value="August"><input type="hidden" name="calendar3.month.short.july" value="Jul"><input type="hidden" name="calendar3.month.short.may" value="May"><input type="hidden" name="calendar3.month.short.november" value="Nov"><input type="hidden" name="calendar3.day.long.friday" value="Friday"><input type="hidden" name="calendar3.day.long.sunday" value="Sunday"><input type="hidden" name="calendar3.day.long.saturday" value="Saturday"><input type="hidden" name="calendar3.month.short.april" value="Apr"><input type="hidden" name="calendar3.day.long.wednesday" value="Wednesday"><input type="hidden" name="calendar3.month.long.december" value="December"><input type="hidden" name="calendar3.month.short.october" value="Oct"><input type="hidden" name="calendar3.day.long.monday" value="Monday"><input type="hidden" name="calendar3.month.short.june" value="Jun"><input type="hidden" name="calendar3.day.short.monday" value="Mon"><input type="hidden" name="calendar3.day.short.tuesday" value="Tue"><input type="hidden" name="calendar3.day.short.saturday" value="Sat"><input type="hidden" name="calendar3.month.long.march" value="March"><input type="hidden" name="calendar3.month.long.june" value="June"><input type="hidden" name="calendar3.month.short.february" value="Feb"><input type="hidden" name="calendar3.month.short.august" value="Aug"><input type="hidden" name="calendar3.month.short.december" value="Dec"><input type="hidden" name="calendar3.day.short.sunday" value="Sun"><input type="hidden" name="calendar3.month.long.february" value="February"><input type="hidden" name="calendar3.day.long.tuesday" value="Tuesday"><input type="hidden" name="calendar3.month.long.may" value="May"><input type="hidden" name="calendar3.month.long.september" value="September"><input type="hidden" name="calendar3.month.long.november" value="November"><input type="hidden" name="calendar3.month.short.january" value="Jan"><input type="hidden" name="calendar3.month.short.september" value="Sep"><input type="hidden" name="calendar3.day.long.thursday" value="Thursday"><input type="hidden" name="calendar3.month.long.january" value="January"><input type="hidden" name="calendar3.day.short.friday" value="Fri"></fieldset></script>
            <meta name="ajs-is-confluence-admin" content="false">
            <meta name="ajs-connection-timeout" content="10000">
            <meta name="ajs-context-path" content="">
            <meta name="ajs-base-url" content="https://www.example.com">
            <meta name="ajs-version-number" content="8.5.1">
            <meta name="ajs-build-number" content="8703">
            <meta name="ajs-remote-user" content="">
            <meta name="ajs-remote-user-key" content="">
            <meta name="ajs-remote-user-has-licensed-access" content="false">
            <meta name="ajs-remote-user-has-browse-users-permission" content="false">
            <meta name="ajs-current-user-fullname" content="">
            <meta name="ajs-current-user-avatar-url" content="">
            <meta name="ajs-current-user-avatar-uri-reference" content="/images/icons/profilepics/anonymous.svg">
            <meta name="ajs-static-resource-url-prefix" content="/s/biaqv0/8703/189cb2l/_">
            <meta name="ajs-global-settings-attachment-max-size" content="104857600">
            <meta name="ajs-global-settings-quick-search-enabled" content="true">
            <meta name="ajs-user-locale" content="en_US">
            <meta name="ajs-enabled-dark-features" content="site-wide.shared-drafts,clc.quick.create,confluence.view.edit.transition,cql.search.screen,confluence-inline-comments-resolved,frontend.editor.v4,http.session.registrar,nps.survey.inline.dialog,confluence.efi.onboarding.new.templates,frontend.editor.v4.compatibility,atlassian.cdn.static.assets,pdf-preview,previews.sharing,previews.versions,file-annotations,confluence.efi.onboarding.rich.space.content,collaborative-audit-log,confluence.reindex.improvements,previews.conversion-service,editor.ajax.save,read.only.mode,graphql,previews.trigger-all-file-types,attachment.extracted.text.extractor,lucene.caching.filter,confluence.table.resizable,notification.batch,previews.sharing.pushstate,confluence-inline-comments-rich-editor,tc.tacca.dacca,site-wide.synchrony.opt-in,file-annotations.likes,gatekeeper-ui-v2,v2.content.name.searcher,mobile.supported.version,pulp,confluence-inline-comments,confluence-inline-comments-dangling-comment,quick-reload-inline-comments-flags">
            <meta name="ajs-atl-token" content="e68dfa45d0ec9701eac9e51568b6020923c96741">
            <meta name="ajs-confluence-flavour" content="VANILLA">
            <meta name="ajs-user-date-pattern" content="dd MMM yyyy">
            <meta name="ajs-access-mode" content="READ_WRITE">
            <meta name="ajs-render-mode" content="READ_WRITE">
            <meta name="ajs-date.format" content="MMM dd, yyyy">
    <link rel="shortcut icon" href="/s/biaqv0/8703/189cb2l/7/_/favicon.ico">
    <link rel="icon" type="image/x-icon" href="/s/biaqv0/8703/189cb2l/7/_/favicon.ico">
<link rel="search" type="application/opensearchdescription+xml" href="/opensearch/osd.action" title="Confluence"/>
    <script>
window.WRM=window.WRM||{};window.WRM._unparsedData=window.WRM._unparsedData||{};window.WRM._unparsedErrors=window.WRM._unparsedErrors||{};
WRM._unparsedData["com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path"]="\u0022\u0022";
WRM._unparsedData["com.atlassian.analytics.analytics-client:policy-update-init.policy-update-data-provider"]="false";
WRM._unparsedData["com.atlassian.analytics.analytics-client:programmatic-analytics-init.programmatic-analytics-data-provider"]="false";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-help-paths"]="{\u0022entries\u0022:{\u0022applinks.docs.root\u0022:\u0022https://confluence.atlassian.com/display/APPLINKS-072/\u0022,\u0022applinks.docs.diagnostics.troubleshoot.sslunmatched\u0022:\u0022SSL+and+application+link+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthsignatureinvalid\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthtimestamprefused\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.delete.entity.link\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.adding.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.administration.guide\u0022:\u0022Application+Links+Documentation\u0022,\u0022applinks.docs.oauth.security\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.troubleshoot.application.links\u0022:\u0022Troubleshoot+application+links\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unknownerror\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.trusted.apps\u0022:\u0022Configuring+Trusted+Applications+authentication+for+an+application+link\u0022,\u0022applinks.docs.diagnostics.troubleshoot.authlevelunsupported\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.ssluntrusted\u0022:\u0022SSL+and+application+link+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unknownhost\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.delete.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.adding.project.link\u0022:\u0022Configuring+Project+links+across+Applications\u0022,\u0022applinks.docs.link.applications\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthproblem\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.migration\u0022:\u0022Update+application+links+to+use+OAuth\u0022,\u0022applinks.docs.relocate.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.administering.entity.links\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.upgrade.application.link\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.diagnostics.troubleshoot.connectionrefused\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.oauth\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.insufficient.remote.permission\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.configuring.application.link.auth\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.diagnostics\u0022:\u0022Application+links+diagnostics\u0022,\u0022applinks.docs.configured.authentication.types\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.adding.entity.link\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unexpectedresponse\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.basic\u0022:\u0022Configuring+Basic+HTTP+Authentication+for+an+Application+Link\u0022,\u0022applinks.docs.diagnostics.troubleshoot.authlevelmismatch\u0022:\u0022OAuth+troubleshooting+guide\u0022}}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-types"]="{\u0022crowd\u0022:\u0022Crowd\u0022,\u0022confluence\u0022:\u0022Confluence\u0022,\u0022fecru\u0022:\u0022FishEye / Crucible\u0022,\u0022stash\u0022:\u0022Stash\u0022,\u0022jira\u0022:\u0022Jira\u0022,\u0022refapp\u0022:\u0022Reference Application\u0022,\u0022bamboo\u0022:\u0022Bamboo\u0022,\u0022generic\u0022:\u0022Generic Application\u0022}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.entity-types"]="{\u0022singular\u0022:{\u0022refapp.charlie\u0022:\u0022Charlie\u0022,\u0022fecru.project\u0022:\u0022Crucible Project\u0022,\u0022fecru.repository\u0022:\u0022FishEye Repository\u0022,\u0022stash.project\u0022:\u0022Stash Project\u0022,\u0022generic.entity\u0022:\u0022Generic Project\u0022,\u0022confluence.space\u0022:\u0022Confluence Space\u0022,\u0022bamboo.project\u0022:\u0022Bamboo Project\u0022,\u0022jira.project\u0022:\u0022Jira Project\u0022},\u0022plural\u0022:{\u0022refapp.charlie\u0022:\u0022Charlies\u0022,\u0022fecru.project\u0022:\u0022Crucible Projects\u0022,\u0022fecru.repository\u0022:\u0022FishEye Repositories\u0022,\u0022stash.project\u0022:\u0022Stash Projects\u0022,\u0022generic.entity\u0022:\u0022Generic Projects\u0022,\u0022confluence.space\u0022:\u0022Confluence Spaces\u0022,\u0022bamboo.project\u0022:\u0022Bamboo Projects\u0022,\u0022jira.project\u0022:\u0022Jira Projects\u0022}}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.authentication-types"]="{\u0022com.atlassian.applinks.api.auth.types.BasicAuthenticationProvider\u0022:\u0022Basic Access\u0022,\u0022com.atlassian.applinks.api.auth.types.TrustedAppsAuthenticationProvider\u0022:\u0022Trusted Applications\u0022,\u0022com.atlassian.applinks.api.auth.types.CorsAuthenticationProvider\u0022:\u0022CORS\u0022,\u0022com.atlassian.applinks.api.auth.types.OAuthAuthenticationProvider\u0022:\u0022OAuth\u0022,\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthAuthenticationProvider\u0022:\u0022OAuth\u0022,\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthWithImpersonationAuthenticationProvider\u0022:\u0022OAuth\u0022}";
WRM._unparsedData["com.atlassian.confluence.plugins.synchrony-interop:synchrony-status-banner-loader.synchrony-status"]="false";
WRM._unparsedData["com.atlassian.confluence.plugins.confluence-feature-discovery-plugin:confluence-feature-discovery-plugin-resources.test-mode"]="false";
WRM._unparsedData["com.atlassian.confluence.plugins.confluence-license-banner:confluence-license-banner-resources.license-details"]="{\u0022daysBeforeLicenseExpiry\u0022:0,\u0022daysBeforeMaintenanceExpiry\u0022:0,\u0022showLicenseExpiryBanner\u0022:false,\u0022showMaintenanceExpiryBanner\u0022:false,\u0022renewUrl\u0022:null,\u0022salesUrl\u0022:null}";
WRM._unparsedData["com.atlassian.confluence.plugins.confluence-search-ui-plugin:confluence-search-ui-plugin-resources.i18n-data"]="{\u0022search.ui.recent.link.text\u0022:\u0022View more recently visited\u0022,\u0022search.ui.filter.space.category.input.label\u0022:\u0022Find space categories...\u0022,\u0022search.ui.search.results.empty\u0022:\u0022We couldn\u005Cu0027\u005Cu0027t find anything matching \u005C\u0022{0}\u005C\u0022.\u0022,\u0022search.ui.filter.clear.selected\u0022:\u0022Clear selected items\u0022,\u0022search.ui.content.name.search.items.panel.load.all.top.items.button.text\u0022:\u0022Show more app results...\u0022,\u0022search.ui.filter.space.archive.label\u0022:\u0022Search archived spaces\u0022,\u0022search.ui.filter.label\u0022:\u0022filter\u0022,\u0022search.ui.filter.contributor.button.text\u0022:\u0022Contributor\u0022,\u0022search.ui.filter.date.all.text\u0022:\u0022Any time\u0022,\u0022search.ui.filter.space.current.label\u0022:\u0022CURRENT\u0022,\u0022search.ui.clear.input.button.text\u0022:\u0022Clear text\u0022,\u0022search.ui.search.results.clear.button\u0022:\u0022clear your filters.\u0022,\u0022search.ui.filter.date.hour.text\u0022:\u0022The past day\u0022,\u0022help.search.ui.link.title\u0022:\u0022Search tips\u0022,\u0022search.ui.filters.heading\u0022:\u0022Filter by\u0022,\u0022search.ui.filter.label.input.label\u0022:\u0022Find labels...\u0022,\u0022search.ui.recent.items.anonymous\u0022:\u0022Start exploring. Your search results will appear here.\u0022,\u0022search.ui.filter.date.month.text\u0022:\u0022The past month\u0022,\u0022search.ui.input.label\u0022:\u0022Search\u0022,\u0022search.ui.search.result\u0022:\u0022{0,choice,1#{0} search result|1\u005Cu003c{0} search results}\u0022,\u0022search.ui.infinite.scroll.button.text\u0022:\u0022More results\u0022,\u0022search.ui.filter

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:36:08.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "atlassian.com",
            "example.com"
         ],
         "hostname" : [
            "confluence.atlassian.com",
            "www.example.com"
         ],
         "url" : [
            "https://confluence.atlassian.com/display/APPLINKS-072/",
            "https://www.example.com"
         ]
      },
      "favicon" : {
         "url" : "/s/biaqv0/8703/189cb2l/7/_/favicon.ico"
      },
      "http" : {
         "bodymd5" : "68d299cc91510df1cbd8e6c43b0be3cf",
         "bodymmh3" : 832047516,
         "component" : [
            {
               "productvendor" : "Atlassian",
               "product" : "Confluence"
            },
            {
               "product" : "Confluence",
               "productvendor" : "Atlassian",
               "productversion" : "8.5.1",
               "productversionpatch" : "8703"
            },
            {
               "productvendor" : "Oracle",
               "product" : "Java"
            }
         ],
         "headermd5" : "81b1b89a4fa4b0160cf697ccda47e913",
         "headermmh3" : 321604637,
         "title" : "Log In - Confluence"
      },
      "length" : 16384
   },
   "asn" : "AS16509",
   "city" : "Singapore",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nDate: Thu, 21 Nov 2024 10:36:07 GMT\r\nServer: nginx\r\nX-Confluence-Request-Time: 1732185367\r\nContent-Type: text/html;charset=UTF-8\r\nCache-Control: no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nSet-Cookie: JSESSIONID=ftzj1anp6xou8egff696w73836eqkh7d; Path=/; Secure; HttpOnly\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nStrict-Transport-Security: max-age=63072000\r\nContent-Length: 31642\r\n\r\n<!DOCTYPE html>\n<html lang=\"en-US\" >\n<head>\n                    <title>Log In - Confluence</title>\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=EDGE,chrome=IE7\">\n<meta charset=\"UTF-8\">\n<meta id=\"confluence-context-path\" name=\"confluence-context-path\" content=\"\">\n<meta id=\"confluence-base-url\" name=\"confluence-base-url\" content=\"https://www.example.com\">\n    <meta id=\"atlassian-token\" name=\"atlassian-token\" content=\"e68dfa45d0ec9701eac9e51568b6020923c96741\">\n<script type=\"text/javascript\">\n        var contextPath = '';\n</script>\n    <meta name=\"robots\" content=\"noindex,nofollow\">\n    <meta name=\"robots\" content=\"noarchive\">\n    <meta name=\"confluence-request-time\" content=\"1655127501448\">\n            <meta name=\"ajs-use-keyboard-shortcuts\" content=\"true\">\n            <meta name=\"ajs-discovered-plugin-features\" content=\"$discoveredList\">\n            <meta name=\"ajs-keyboardshortcut-hash\" content=\"fff979e4c9da5640ff51afde5a995be8\">\n            <meta id=\"team-calendars-has-jira-link\" content=\"true\">\n            <meta name=\"ajs-team-calendars-display-time-format\" content=\"displayTimeFormat12\">\n            <meta id=\"team-calendars-display-week-number\" content=\"false\">\n            <meta id=\"team-calendars-user-timezone\" content=\"-07:00\">\n            <script type=\"text/x-template\" id=\"team-calendars-messages\" title=\"team-calendars-messages\"><fieldset class=\"i18n hidden\"><input type=\"hidden\" name=\"calendar3.month.long.july\" value=\"July\"><input type=\"hidden\" name=\"calendar3.day.short.wednesday\" value=\"Wed\"><input type=\"hidden\" name=\"calendar3.day.short.thursday\" value=\"Thu\"><input type=\"hidden\" name=\"calendar3.month.short.march\" value=\"Mar\"><input type=\"hidden\" name=\"calendar3.month.long.april\" value=\"April\"><input type=\"hidden\" name=\"calendar3.month.long.october\" value=\"October\"><input type=\"hidden\" name=\"calendar3.month.long.august\" value=\"August\"><input type=\"hidden\" name=\"calendar3.month.short.july\" value=\"Jul\"><input type=\"hidden\" name=\"calendar3.month.short.may\" value=\"May\"><input type=\"hidden\" name=\"calendar3.month.short.november\" value=\"Nov\"><input type=\"hidden\" name=\"calendar3.day.long.friday\" value=\"Friday\"><input type=\"hidden\" name=\"calendar3.day.long.sunday\" value=\"Sunday\"><input type=\"hidden\" name=\"calendar3.day.long.saturday\" value=\"Saturday\"><input type=\"hidden\" name=\"calendar3.month.short.april\" value=\"Apr\"><input type=\"hidden\" name=\"calendar3.day.long.wednesday\" value=\"Wednesday\"><input type=\"hidden\" name=\"calendar3.month.long.december\" value=\"December\"><input type=\"hidden\" name=\"calendar3.month.short.october\" value=\"Oct\"><input type=\"hidden\" name=\"calendar3.day.long.monday\" value=\"Monday\"><input type=\"hidden\" name=\"calendar3.month.short.june\" value=\"Jun\"><input type=\"hidden\" name=\"calendar3.day.short.monday\" value=\"Mon\"><input type=\"hidden\" name=\"calendar3.day.short.tuesday\" value=\"Tue\"><input type=\"hidden\" name=\"calendar3.day.short.saturday\" value=\"Sat\"><input type=\"hidden\" name=\"calendar3.month.long.march\" value=\"March\"><input type=\"hidden\" name=\"calendar3.month.long.june\" value=\"June\"><input type=\"hidden\" name=\"calendar3.month.short.february\" value=\"Feb\"><input type=\"hidden\" name=\"calendar3.month.short.august\" value=\"Aug\"><input type=\"hidden\" name=\"calendar3.month.short.december\" value=\"Dec\"><input type=\"hidden\" name=\"calendar3.day.short.sunday\" value=\"Sun\"><input type=\"hidden\" name=\"calendar3.month.long.february\" value=\"February\"><input type=\"hidden\" name=\"calendar3.day.long.tuesday\" value=\"Tuesday\"><input type=\"hidden\" name=\"calendar3.month.long.may\" value=\"May\"><input type=\"hidden\" name=\"calendar3.month.long.september\" value=\"September\"><input type=\"hidden\" name=\"calendar3.month.long.november\" value=\"November\"><input type=\"hidden\" name=\"calendar3.month.short.january\" value=\"Jan\"><input type=\"hidden\" name=\"calendar3.month.short.september\" value=\"Sep\"><input type=\"hidden\" name=\"calendar3.day.long.thursday\" value=\"Thursday\"><input type=\"hidden\" name=\"calendar3.month.long.january\" value=\"January\"><input type=\"hidden\" name=\"calendar3.day.short.friday\" value=\"Fri\"></fieldset></script>\n            <meta name=\"ajs-is-confluence-admin\" content=\"false\">\n            <meta name=\"ajs-connection-timeout\" content=\"10000\">\n            <meta name=\"ajs-context-path\" content=\"\">\n            <meta name=\"ajs-base-url\" content=\"https://www.example.com\">\n            <meta name=\"ajs-version-number\" content=\"8.5.1\">\n            <meta name=\"ajs-build-number\" content=\"8703\">\n            <meta name=\"ajs-remote-user\" content=\"\">\n            <meta name=\"ajs-remote-user-key\" content=\"\">\n            <meta name=\"ajs-remote-user-has-licensed-access\" content=\"false\">\n            <meta name=\"ajs-remote-user-has-browse-users-permission\" content=\"false\">\n            <meta name=\"ajs-current-user-fullname\" content=\"\">\n            <meta name=\"ajs-current-user-avatar-url\" content=\"\">\n            <meta name=\"ajs-current-user-avatar-uri-reference\" content=\"/images/icons/profilepics/anonymous.svg\">\n            <meta name=\"ajs-static-resource-url-prefix\" content=\"/s/biaqv0/8703/189cb2l/_\">\n            <meta name=\"ajs-global-settings-attachment-max-size\" content=\"104857600\">\n            <meta name=\"ajs-global-settings-quick-search-enabled\" content=\"true\">\n            <meta name=\"ajs-user-locale\" content=\"en_US\">\n            <meta name=\"ajs-enabled-dark-features\" content=\"site-wide.shared-drafts,clc.quick.create,confluence.view.edit.transition,cql.search.screen,confluence-inline-comments-resolved,frontend.editor.v4,http.session.registrar,nps.survey.inline.dialog,confluence.efi.onboarding.new.templates,frontend.editor.v4.compatibility,atlassian.cdn.static.assets,pdf-preview,previews.sharing,previews.versions,file-annotations,confluence.efi.onboarding.rich.space.content,collaborative-audit-log,confluence.reindex.improvements,previews.conversion-service,editor.ajax.save,read.only.mode,graphql,previews.trigger-all-file-types,attachment.extracted.text.extractor,lucene.caching.filter,confluence.table.resizable,notification.batch,previews.sharing.pushstate,confluence-inline-comments-rich-editor,tc.tacca.dacca,site-wide.synchrony.opt-in,file-annotations.likes,gatekeeper-ui-v2,v2.content.name.searcher,mobile.supported.version,pulp,confluence-inline-comments,confluence-inline-comments-dangling-comment,quick-reload-inline-comments-flags\">\n            <meta name=\"ajs-atl-token\" content=\"e68dfa45d0ec9701eac9e51568b6020923c96741\">\n            <meta name=\"ajs-confluence-flavour\" content=\"VANILLA\">\n            <meta name=\"ajs-user-date-pattern\" content=\"dd MMM yyyy\">\n            <meta name=\"ajs-access-mode\" content=\"READ_WRITE\">\n            <meta name=\"ajs-render-mode\" content=\"READ_WRITE\">\n            <meta name=\"ajs-date.format\" content=\"MMM dd, yyyy\">\n    <link rel=\"shortcut icon\" href=\"/s/biaqv0/8703/189cb2l/7/_/favicon.ico\">\n    <link rel=\"icon\" type=\"image/x-icon\" href=\"/s/biaqv0/8703/189cb2l/7/_/favicon.ico\">\n<link rel=\"search\" type=\"application/opensearchdescription+xml\" href=\"/opensearch/osd.action\" title=\"Confluence\"/>\n    <script>\nwindow.WRM=window.WRM||{};window.WRM._unparsedData=window.WRM._unparsedData||{};window.WRM._unparsedErrors=window.WRM._unparsedErrors||{};\nWRM._unparsedData[\"com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path\"]=\"\\u0022\\u0022\";\nWRM._unparsedData[\"com.atlassian.analytics.analytics-client:policy-update-init.policy-update-data-provider\"]=\"false\";\nWRM._unparsedData[\"com.atlassian.analytics.analytics-client:programmatic-analytics-init.programmatic-analytics-data-provider\"]=\"false\";\nWRM._unparsedData[\"com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-help-paths\"]=\"{\\u0022entries\\u0022:{\\u0022applinks.docs.root\\u0022:\\u0022https://confluence.atlassian.com/display/APPLINKS-072/\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.sslunmatched\\u0022:\\u0022SSL+and+application+link+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.oauthsignatureinvalid\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.oauthtimestamprefused\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022,\\u0022applinks.docs.delete.entity.link\\u0022:\\u0022Create+links+between+projects\\u0022,\\u0022applinks.docs.adding.application.link\\u0022:\\u0022Link+Atlassian+applications+to+work+together\\u0022,\\u0022applinks.docs.administration.guide\\u0022:\\u0022Application+Links+Documentation\\u0022,\\u0022applinks.docs.oauth.security\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.troubleshoot.application.links\\u0022:\\u0022Troubleshoot+application+links\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.unknownerror\\u0022:\\u0022Network+and+connectivity+troubleshooting+guide\\u0022,\\u0022applinks.docs.configuring.auth.trusted.apps\\u0022:\\u0022Configuring+Trusted+Applications+authentication+for+an+application+link\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.authlevelunsupported\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.ssluntrusted\\u0022:\\u0022SSL+and+application+link+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.unknownhost\\u0022:\\u0022Network+and+connectivity+troubleshooting+guide\\u0022,\\u0022applinks.docs.delete.application.link\\u0022:\\u0022Link+Atlassian+applications+to+work+together\\u0022,\\u0022applinks.docs.adding.project.link\\u0022:\\u0022Configuring+Project+links+across+Applications\\u0022,\\u0022applinks.docs.link.applications\\u0022:\\u0022Link+Atlassian+applications+to+work+together\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.oauthproblem\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.migration\\u0022:\\u0022Update+application+links+to+use+OAuth\\u0022,\\u0022applinks.docs.relocate.application.link\\u0022:\\u0022Link+Atlassian+applications+to+work+together\\u0022,\\u0022applinks.docs.administering.entity.links\\u0022:\\u0022Create+links+between+projects\\u0022,\\u0022applinks.docs.upgrade.application.link\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.connectionrefused\\u0022:\\u0022Network+and+connectivity+troubleshooting+guide\\u0022,\\u0022applinks.docs.configuring.auth.oauth\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.insufficient.remote.permission\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.configuring.application.link.auth\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.diagnostics\\u0022:\\u0022Application+links+diagnostics\\u0022,\\u0022applinks.docs.configured.authentication.types\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.adding.entity.link\\u0022:\\u0022Create+links+between+projects\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.unexpectedresponse\\u0022:\\u0022Network+and+connectivity+troubleshooting+guide\\u0022,\\u0022applinks.docs.configuring.auth.basic\\u0022:\\u0022Configuring+Basic+HTTP+Authentication+for+an+Application+Link\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.authlevelmismatch\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022}}\";\nWRM._unparsedData[\"com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-types\"]=\"{\\u0022crowd\\u0022:\\u0022Crowd\\u0022,\\u0022confluence\\u0022:\\u0022Confluence\\u0022,\\u0022fecru\\u0022:\\u0022FishEye / Crucible\\u0022,\\u0022stash\\u0022:\\u0022Stash\\u0022,\\u0022jira\\u0022:\\u0022Jira\\u0022,\\u0022refapp\\u0022:\\u0022Reference Application\\u0022,\\u0022bamboo\\u0022:\\u0022Bamboo\\u0022,\\u0022generic\\u0022:\\u0022Generic Application\\u0022}\";\nWRM._unparsedData[\"com.atlassian.applinks.applinks-plugin:applinks-common-exported.entity-types\"]=\"{\\u0022singular\\u0022:{\\u0022refapp.charlie\\u0022:\\u0022Charlie\\u0022,\\u0022fecru.project\\u0022:\\u0022Crucible Project\\u0022,\\u0022fecru.repository\\u0022:\\u0022FishEye Repository\\u0022,\\u0022stash.project\\u0022:\\u0022Stash Project\\u0022,\\u0022generic.entity\\u0022:\\u0022Generic Project\\u0022,\\u0022confluence.space\\u0022:\\u0022Confluence Space\\u0022,\\u0022bamboo.project\\u0022:\\u0022Bamboo Project\\u0022,\\u0022jira.project\\u0022:\\u0022Jira Project\\u0022},\\u0022plural\\u0022:{\\u0022refapp.charlie\\u0022:\\u0022Charlies\\u0022,\\u0022fecru.project\\u0022:\\u0022Crucible Projects\\u0022,\\u0022fecru.repository\\u0022:\\u0022FishEye Repositories\\u0022,\\u0022stash.project\\u0022:\\u0022Stash Projects\\u0022,\\u0022generic.entity\\u0022:\\u0022Generic Projects\\u0022,\\u0022confluence.space\\u0022:\\u0022Confluence Spaces\\u0022,\\u0022bamboo.project\\u0022:\\u0022Bamboo Projects\\u0022,\\u0022jira.project\\u0022:\\u0022Jira Projects\\u0022}}\";\nWRM._unparsedData[\"com.atlassian.applinks.applinks-plugin:applinks-common-exported.authentication-types\"]=\"{\\u0022com.atlassian.applinks.api.auth.types.BasicAuthenticationProvider\\u0022:\\u0022Basic Access\\u0022,\\u0022com.atlassian.applinks.api.auth.types.TrustedAppsAuthenticationProvider\\u0022:\\u0022Trusted Applications\\u0022,\\u0022com.atlassian.applinks.api.auth.types.CorsAuthenticationProvider\\u0022:\\u0022CORS\\u0022,\\u0022com.atlassian.applinks.api.auth.types.OAuthAuthenticationProvider\\u0022:\\u0022OAuth\\u0022,\\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthAuthenticationProvider\\u0022:\\u0022OAuth\\u0022,\\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthWithImpersonationAuthenticationProvider\\u0022:\\u0022OAuth\\u0022}\";\nWRM._unparsedData[\"com.atlassian.confluence.plugins.synchrony-interop:synchrony-status-banner-loader.synchrony-status\"]=\"false\";\nWRM._unparsedData[\"com.atlassian.confluence.plugins.confluence-feature-discovery-plugin:confluence-feature-discovery-plugin-resources.test-mode\"]=\"false\";\nWRM._unparsedData[\"com.atlassian.confluence.plugins.confluence-license-banner:confluence-license-banner-resources.license-details\"]=\"{\\u0022daysBeforeLicenseExpiry\\u0022:0,\\u0022daysBeforeMaintenanceExpiry\\u0022:0,\\u0022showLicenseExpiryBanner\\u0022:false,\\u0022showMaintenanceExpiryBanner\\u0022:false,\\u0022renewUrl\\u0022:null,\\u0022salesUrl\\u0022:null}\";\nWRM._unparsedData[\"com.atlassian.confluence.plugins.confluence-search-ui-plugin:confluence-search-ui-plugin-resources.i18n-data\"]=\"{\\u0022search.ui.recent.link.text\\u0022:\\u0022View more recently visited\\u0022,\\u0022search.ui.filter.space.category.input.label\\u0022:\\u0022Find space categories...\\u0022,\\u0022search.ui.search.results.empty\\u0022:\\u0022We couldn\\u005Cu0027\\u005Cu0027t find anything matching \\u005C\\u0022{0}\\u005C\\u0022.\\u0022,\\u0022search.ui.filter.clear.selected\\u0022:\\u0022Clear selected items\\u0022,\\u0022search.ui.content.name.search.items.panel.load.all.top.items.button.text\\u0022:\\u0022Show more app results...\\u0022,\\u0022search.ui.filter.space.archive.label\\u0022:\\u0022Search archived spaces\\u0022,\\u0022search.ui.filter.label\\u0022:\\u0022filter\\u0022,\\u0022search.ui.filter.contributor.button.text\\u0022:\\u0022Contributor\\u0022,\\u0022search.ui.filter.date.all.text\\u0022:\\u0022Any time\\u0022,\\u0022search.ui.filter.space.current.label\\u0022:\\u0022CURRENT\\u0022,\\u0022search.ui.clear.input.button.text\\u0022:\\u0022Clear text\\u0022,\\u0022search.ui.search.results.clear.button\\u0022:\\u0022clear your filters.\\u0022,\\u0022search.ui.filter.date.hour.text\\u0022:\\u0022The past day\\u0022,\\u0022help.search.ui.link.title\\u0022:\\u0022Search tips\\u0022,\\u0022search.ui.filters.heading\\u0022:\\u0022Filter by\\u0022,\\u0022search.ui.filter.label.input.label\\u0022:\\u0022Find labels...\\u0022,\\u0022search.ui.recent.items.anonymous\\u0022:\\u0022Start exploring. Your search results will appear here.\\u0022,\\u0022search.ui.filter.date.month.text\\u0022:\\u0022The past month\\u0022,\\u0022search.ui.input.label\\u0022:\\u0022Search\\u0022,\\u0022search.ui.search.result\\u0022:\\u0022{0,choice,1#{0} search result|1\\u005Cu003c{0} search results}\\u0022,\\u0022search.ui.infinite.scroll.button.text\\u0022:\\u0022More results\\u0022,\\u0022search.ui.filter",
   "datamd5" : "b22d98e4b4eb84ada5eae3d9b6990108",
   "datammh3" : -2106567653,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "forward" : "13.212.168.196",
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "AMAZON-SIN",
      "organization" : "Amazon Data Services Singapore",
      "subnet" : "13.212.0.0/14"
   },
   "host" : [
      "ec2-13-212-168-196"
   ],
   "hostname" : [
      "13.212.168.196",
      "ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com"
   ],
   "ip" : "13.212.168.196",
   "ipv6" : "false",
   "latitude" : "1.2868",
   "location" : "1.2868,103.8503",
   "longitude" : "103.8503",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "port" : 4242,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan::redirect::1",
   "status" : 200,
   "subdomains" : [
      "ap-southeast-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.208.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/./login.action"
}

IP

34.219.245.98

Network

34.208.0.0/12

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class

Operating System

Linux Linux Kernel

URL

http://34.219.245.98:4242/ 200

Reverse DNS

ec2-34-219-245-98.us-west-2.compute.amazonaws.com

ASN

AS16509

Organization

AMAZON-02

Protocol

http

Source

datascan

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Operating System

Linux Linux Kernel

Product

F5 Nginx

CPE(s)

<enterprise field>: cpe

Data MD5

97f64c9c6bf158d0d05d3f05372b5a7a

HTTP Header MD5

9f060a9cb1b31c417a3a68e629ae97e3

HTTP Body MD5

c25cbaf569d22e9f526ff69fe9e61bbf

Favicon MD5

2b86aa50c3a66bb77ff07c42cc051dcc

Favicon MMH3

-1216248324

HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:27:08 GMT
Server: nginx
Content-Length: 583
Content-Type: text/html

<html style="background:#007cef">
<head>
<meta http-equiv="expires" content="0">
<script type='text/javascript'>
pr=(document.location.protocol == 'https:') ? 'https' : 'http';
pt=(location.port == '') ? '' : ':' + location.port;
redirect_suffix = "/redirect.html?count="+Math.random();
if(location.hostname.indexOf(':') == -1)
{
location.href=pr+"://"+location.hostname+pt+redirect_suffix;
}
else    //could be ipv6 addr
{
var url = "";
url=pr+"://["+ location.hostname.replace(/[\[\]]/g, '') +"]"+pt+redirect_suffix;
location.href = url;
}
</script>
</head>
<body>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:34:08.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "c25cbaf569d22e9f526ff69fe9e61bbf",
         "bodymmh3" : 2073015905,
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : -826540638
      },
      "length" : 719
   },
   "asn" : "AS16509",
   "city" : "Boardman",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:27:08 GMT\r\nServer: nginx\r\nContent-Length: 583\r\nContent-Type: text/html\r\n\r\n<html style=\"background:#007cef\">\n<head>\n<meta http-equiv=\"expires\" content=\"0\">\n<script type='text/javascript'>\npr=(document.location.protocol == 'https:') ? 'https' : 'http';\npt=(location.port == '') ? '' : ':' + location.port;\nredirect_suffix = \"/redirect.html?count=\"+Math.random();\nif(location.hostname.indexOf(':') == -1)\n{\nlocation.href=pr+\"://\"+location.hostname+pt+redirect_suffix;\n}\nelse    //could be ipv6 addr\n{\nvar url = \"\";\nurl=pr+\"://[\"+ location.hostname.replace(/[\\[\\]]/g, '') +\"]\"+pt+redirect_suffix;\nlocation.href = url;\n}\n</script>\n</head>\n<body>\n</body>\n</html>\n",
   "datamd5" : "97f64c9c6bf158d0d05d3f05372b5a7a",
   "datammh3" : 1079192638,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AT-88-Z",
      "organization" : "Amazon Technologies Inc.",
      "subnet" : "34.208.0.0/12"
   },
   "host" : [
      "ec2-34-219-245-98"
   ],
   "hostname" : [
      "ec2-34-219-245-98.us-west-2.compute.amazonaws.com"
   ],
   "ip" : "34.219.245.98",
   "ipv6" : "false",
   "latitude" : "45.8491",
   "location" : "45.8491,-119.7143",
   "longitude" : "-119.7143",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-34-219-245-98.us-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "us-west-2.compute.amazonaws.com"
   ],
   "subnet" : "34.208.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

44.211.10.91

Network

44.192.0.0/11

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class

Operating System

Linux Linux Kernel

URL

http://44.211.10.91:4242/ 400

HTTP Title

400 The plain HTTP request was sent to HTTPS port

Reverse DNS

ec2-44-211-10-91.compute-1.amazonaws.com

ASN

AS14618

Organization

AMAZON-AES

Protocol

http

Source

datascan

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Operating System

Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

Data MD5

48019056dae86f0ecd4f30cd411f6b9d

HTTP Header MD5

b651698532891d90e07d7ec88aeb4a18

HTTP Body MD5

248381a99d710dd6be65116a0a873d31

HTTP/1.1 400 Bad Request
Server: awselb/2.0
Date: Thu, 21 Nov 2024 10:33:27 GMT
Content-Type: text/html
Content-Length: 220
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:33:28.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "248381a99d710dd6be65116a0a873d31",
         "bodymmh3" : -1044839222,
         "headermd5" : "b651698532891d90e07d7ec88aeb4a18",
         "headermmh3" : 661189438,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 370
   },
   "asn" : "AS14618",
   "city" : "Ashburn",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: awselb/2.0\r\nDate: Thu, 21 Nov 2024 10:33:27 GMT\r\nContent-Type: text/html\r\nContent-Length: 220\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "48019056dae86f0ecd4f30cd411f6b9d",
   "datammh3" : -1673766030,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS14618",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AMAZON-IAD",
      "organization" : "Amazon Data Services NoVa",
      "subnet" : "44.192.0.0/11"
   },
   "host" : [
      "ec2-44-211-10-91"
   ],
   "hostname" : [
      "ec2-44-211-10-91.compute-1.amazonaws.com"
   ],
   "ip" : "44.211.10.91",
   "ipv6" : "false",
   "latitude" : "39.0469",
   "location" : "39.0469,-77.4903",
   "longitude" : "-77.4903",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-AES",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "ec2-44-211-10-91.compute-1.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "compute-1.amazonaws.com"
   ],
   "subnet" : "44.192.0.0/11",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

54.94.12.52

Network

54.94.0.0/15

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class

Operating System

Linux Linux ubuntu

URL

http://54.94.12.52:4242/ 200

HTTP Title

ASUS Wireless Router TUF-AX4200

Reverse DNS

ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

ASN

AS16509

Organization

AMAZON-02

Protocol

http

Source

datascan

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Operating System

Linux Linux ubuntu

HTTP Component(s)

PHP PHP 5.5.9

CPE(s)

<enterprise field>: cpe

Data MD5

3f9c241929dedb018b5b50fa822db515

HTTP Header MD5

eefd4baf04a6787a8b489110d585dfa4

HTTP Body MD5

cee9a9c51330e19a6a0052bc982542ec

Favicon MD5

2b86aa50c3a66bb77ff07c42cc051dcc

Favicon MMH3

-1216248324

HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:25:10 GMT
Server: OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.4
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Content-Length: 541
Content-Type: text/html
Set-Cookie: csrftoken=8shzaaAyoCI7d4BYRvYVjSVwDFV6tD0FlA5NtAYwRPr71fj1kFbUwMqXiCtOgfhO

<html><head><link rel="icon" href="/favicon_dcc0435f-2be4-4414-b971-d9ffeaa47ea3.ico"><title>ASUS Wireless Router TUF-AX4200</title></head><body><h2>8ao7tj7h9y9ucywsj9hezswz</h2><h2>q954rjmv48bhnc9rxfiw</h2><h1>m8x8pi4oefe117hls</h1><p>bphwmb</p><h1>x53ykuw4j75h</h1><h1>geu39kvrbf</h1><div>33jykwrmmv</div><h1>h1i7vl4lvfeg83zvis7wr32bdoit5y</h1><h2>nqkaknq7</h2><h3>1d8sjr</h3><p>y6etty4jd</p><h3>lc4oqlp056zkao5vot1wzkg7l5</h3><p>90u0359clnnn5zz</p><h2>jb1h0qm0bubx6e19</h2><div>phuksaxcj0a0y61yx9</div><span>x8ci8o0qb</span></body></html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:32:11.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "cee9a9c51330e19a6a0052bc982542ec",
         "bodymmh3" : 1415978017,
         "component" : [
            {
               "productversion" : "5.5.9",
               "productvendor" : "PHP",
               "product" : "PHP"
            }
         ],
         "headermd5" : "eefd4baf04a6787a8b489110d585dfa4",
         "headermmh3" : -2133198998,
         "title" : "ASUS Wireless Router TUF-AX4200"
      },
      "length" : 836
   },
   "asn" : "AS16509",
   "city" : "S\u00e3o Paulo",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:25:10 GMT\r\nServer: OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.4\r\nX-Powered-By: PHP/5.5.9-1ubuntu4.21\r\nContent-Length: 541\r\nContent-Type: text/html\r\nSet-Cookie: csrftoken=8shzaaAyoCI7d4BYRvYVjSVwDFV6tD0FlA5NtAYwRPr71fj1kFbUwMqXiCtOgfhO\r\n\r\n<html><head><link rel=\"icon\" href=\"/favicon_dcc0435f-2be4-4414-b971-d9ffeaa47ea3.ico\"><title>ASUS Wireless Router TUF-AX4200</title></head><body><h2>8ao7tj7h9y9ucywsj9hezswz</h2><h2>q954rjmv48bhnc9rxfiw</h2><h1>m8x8pi4oefe117hls</h1><p>bphwmb</p><h1>x53ykuw4j75h</h1><h1>geu39kvrbf</h1><div>33jykwrmmv</div><h1>h1i7vl4lvfeg83zvis7wr32bdoit5y</h1><h2>nqkaknq7</h2><h3>1d8sjr</h3><p>y6etty4jd</p><h3>lc4oqlp056zkao5vot1wzkg7l5</h3><p>90u0359clnnn5zz</p><h2>jb1h0qm0bubx6e19</h2><div>phuksaxcj0a0y61yx9</div><span>x8ci8o0qb</span></body></html>",
   "datamd5" : "3f9c241929dedb018b5b50fa822db515",
   "datammh3" : -931594398,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "AMAZON-GRU",
      "organization" : "Amazon Data Services Brazil",
      "subnet" : "54.94.0.0/16"
   },
   "host" : [
      "ec2-54-94-12-52"
   ],
   "hostname" : [
      "ec2-54-94-12-52.sa-east-1.compute.amazonaws.com"
   ],
   "ip" : "54.94.12.52",
   "ipv6" : "false",
   "latitude" : "-23.5335",
   "location" : "-23.5335,-46.6359",
   "longitude" : "-46.6359",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux",
   "osdistribution" : "ubuntu",
   "osvendor" : "Linux",
   "port" : 4242,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-54-94-12-52.sa-east-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "sa-east-1.compute.amazonaws.com"
   ],
   "subnet" : "54.94.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

35.159.166.142

Network

35.156.0.0/14

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

Operating System

Juniper JunOS

URL

http://35.159.166.142:4242/ 200

HTTP Title

Ivanti Connect Secure

Reverse DNS

ec2-35-159-166-142.eu-central-1.compute.amazonaws.com

ASN

AS16509

Organization

AMAZON-02

Protocol

http

Source

datascan

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Operating System

Juniper JunOS

HTTP Component(s)

Ivanti Connect Secure

CPE(s)

<enterprise field>: cpe

Data MD5

b6d3a241174e5fbb65d88768f526cc4f

HTTP Header MD5

2ad59f08560ff26dde50963eb249438d

HTTP Body MD5

41fdbc9650454476e99026bd7f1a5217

Favicon MD5

2b86aa50c3a66bb77ff07c42cc051dcc

Favicon MMH3

-1216248324

HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:24:07 GMT
Content-Length: 4680
Content-Type: text/html

<html lang="en">
   <head>
      <meta http-equiv="Content-Language">
      <meta http-equiv="Content-Type" content="text/html">
      <meta name="robots" content="none">
      <link rel="icon" href="/Product_favicon.png" type="image/png">
      <title>Ivanti Connect Secure</title>
   </head>
   <body onload="FinishLoad(1);hideJSWarn();setWin11();" bgcolor="#FFFFFF" color="#000000" link="#3366CC" vlink="#CC6699" alink="#3366CC" leftmargin="0" topmargin="0" rightmargin="0" marginwidth="0" marginheight="0">
      <table id="table_LoginPage_1" border="0" width="100%" cellspacing="0" cellpadding="3">
         <tr>
            <td bgcolor="#FFFFFF"></td>
            <td bgcolor="#FFFFFF" align="right">&nbsp;</td>
         </tr>
      </table>
      <table id="table_LoginPage_2" cellpadding="0" cellspacing="0" border="0" width="100%">
         <tr>
            <td bgcolor="#000000" colspan="2"></td>
         </tr>
      </table>
      <blockquote>
         <form id="frmLogin_4" name="frmLogin" action="login.cgi" method="POST" autocomplete="off" onsubmit="return Login(1)">
            <input id="tz_offset_5" type="hidden" name="tz_offset">
            <input id="win11" type="hidden" name="win11" value="">
            <input id="uach" type="hidden" name="uach" value="">
            <input id="client_mac" type="hidden" name="clientMAC" value="">
            <input id="xsauth_token" type="hidden" name="xsauth_token" value="58fefe3c1b2717c8845c0d630ab035c3">
            <table id="table_LoginPage_3" border="0" cellpadding="2" cellspacing="0">
               <tr>
                  <td nowrap  colspan="3"><b>Welcome to</b></td>
               </tr>
               <tr>
                  <td nowrap  colspan="3"><span class="cssLarge"><b>Ivanti Connect Secure</b></span></td>
               </tr>
               <tr>
                  <td colspan="3">&nbsp;</td>
               </tr>
               <tr>
                  <td valign="top">
                     <table id="table_LoginPage_6" border="0" cellspacing="0" cellpadding="2">
                        <tr>
                           <td><label for="username">Username</label></td>
                           <td>&nbsp;</td>
                           <td><input id="username" type="text" name="username" size="20"></td>
                        </tr>
                        <tr>
                           <td><label for="password">Password</label></td>
                           <td>&nbsp;</td>
                           <td><input id="password" type="password" name="password" size="20"></td>
                        </tr>
                        <tr>                                                                <input id="realm_16" type="hidden" name="realm" value="OTS User Realm">                                                </tr>
                        <tr>
                           <td colspan="3">&nbsp;</td>
                        </tr>
                        <tr>
                           <td>&nbsp;</td>
                           <td>&nbsp;</td>
                           <td><input id="btnSubmit_6" type="submit" value="Sign In" name="btnSubmit">&nbsp;</td>
                        </tr>
                     </table>
                  </td>
                  <td valign="top">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
                  <td valign="top">
                     <table tabindex="1" aria-label="instructions for user login page FILTER verbatim" role="alert" id="TABLE_LoginPage_1" border="0" cellspacing="0" cellpadding="2">
                        <tr>
                           <td>
                              Please sign in to begin your secure session.<br><br>
                              <noscript>Note: Javascript is disabled on your browser.</noscript>
                        </tr>
                        </td>
                     </table>
                  </td>
               </tr>
            </table>
         </form>
      </blockquote>
      <table id="table_LoginPage_9" border="0" cellspacing="0" cellpadding="0" width="100%">
         <tr>
            <td>
               <table id="table_LoginPage_10" cellpadding="0" cellspacing="0" border="0" width="100%">
                  <tr>
                     <td></td>
                     <td></td>
                     <td></td>
                  </tr>
                  <tr valign="top">
                     <td></td>
                     <td nowrap ><br><br><br><br>
                     <td align="right"></td>
                  </tr>
               </table>
            </td>
         </tr>
         <tr>
            <td colspan="2"></td>
         </tr>
      </table>
   </body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:31:15.000Z",
   "app" : {
      "extract" : {
         "file" : [
            "login.cgi"
         ]
      },
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "41fdbc9650454476e99026bd7f1a5217",
         "bodymmh3" : -766336104,
         "component" : [
            {
               "product" : "Connect Secure",
               "productvendor" : "Ivanti"
            }
         ],
         "headermd5" : "2ad59f08560ff26dde50963eb249438d",
         "headermmh3" : 970015065,
         "title" : "Ivanti Connect Secure"
      },
      "length" : 4802
   },
   "asn" : "AS16509",
   "city" : "Frankfurt am Main",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:24:07 GMT\r\nContent-Length: 4680\r\nContent-Type: text/html\r\n\r\n<html lang=\"en\">\n   <head>\n      <meta http-equiv=\"Content-Language\">\n      <meta http-equiv=\"Content-Type\" content=\"text/html\">\n      <meta name=\"robots\" content=\"none\">\n      <link rel=\"icon\" href=\"/Product_favicon.png\" type=\"image/png\">\n      <title>Ivanti Connect Secure</title>\n   </head>\n   <body onload=\"FinishLoad(1);hideJSWarn();setWin11();\" bgcolor=\"#FFFFFF\" color=\"#000000\" link=\"#3366CC\" vlink=\"#CC6699\" alink=\"#3366CC\" leftmargin=\"0\" topmargin=\"0\" rightmargin=\"0\" marginwidth=\"0\" marginheight=\"0\">\n      <table id=\"table_LoginPage_1\" border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"3\">\n         <tr>\n            <td bgcolor=\"#FFFFFF\"></td>\n            <td bgcolor=\"#FFFFFF\" align=\"right\">&nbsp;</td>\n         </tr>\n      </table>\n      <table id=\"table_LoginPage_2\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n         <tr>\n            <td bgcolor=\"#000000\" colspan=\"2\"></td>\n         </tr>\n      </table>\n      <blockquote>\n         <form id=\"frmLogin_4\" name=\"frmLogin\" action=\"login.cgi\" method=\"POST\" autocomplete=\"off\" onsubmit=\"return Login(1)\">\n            <input id=\"tz_offset_5\" type=\"hidden\" name=\"tz_offset\">\n            <input id=\"win11\" type=\"hidden\" name=\"win11\" value=\"\">\n            <input id=\"uach\" type=\"hidden\" name=\"uach\" value=\"\">\n            <input id=\"client_mac\" type=\"hidden\" name=\"clientMAC\" value=\"\">\n            <input id=\"xsauth_token\" type=\"hidden\" name=\"xsauth_token\" value=\"58fefe3c1b2717c8845c0d630ab035c3\">\n            <table id=\"table_LoginPage_3\" border=\"0\" cellpadding=\"2\" cellspacing=\"0\">\n               <tr>\n                  <td nowrap  colspan=\"3\"><b>Welcome to</b></td>\n               </tr>\n               <tr>\n                  <td nowrap  colspan=\"3\"><span class=\"cssLarge\"><b>Ivanti Connect Secure</b></span></td>\n               </tr>\n               <tr>\n                  <td colspan=\"3\">&nbsp;</td>\n               </tr>\n               <tr>\n                  <td valign=\"top\">\n                     <table id=\"table_LoginPage_6\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n                        <tr>\n                           <td><label for=\"username\">Username</label></td>\n                           <td>&nbsp;</td>\n                           <td><input id=\"username\" type=\"text\" name=\"username\" size=\"20\"></td>\n                        </tr>\n                        <tr>\n                           <td><label for=\"password\">Password</label></td>\n                           <td>&nbsp;</td>\n                           <td><input id=\"password\" type=\"password\" name=\"password\" size=\"20\"></td>\n                        </tr>\n                        <tr>                                                                <input id=\"realm_16\" type=\"hidden\" name=\"realm\" value=\"OTS User Realm\">                                                </tr>\n                        <tr>\n                           <td colspan=\"3\">&nbsp;</td>\n                        </tr>\n                        <tr>\n                           <td>&nbsp;</td>\n                           <td>&nbsp;</td>\n                           <td><input id=\"btnSubmit_6\" type=\"submit\" value=\"Sign In\" name=\"btnSubmit\">&nbsp;</td>\n                        </tr>\n                     </table>\n                  </td>\n                  <td valign=\"top\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>\n                  <td valign=\"top\">\n                     <table tabindex=\"1\" aria-label=\"instructions for user login page FILTER verbatim\" role=\"alert\" id=\"TABLE_LoginPage_1\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n                        <tr>\n                           <td>\n                              Please sign in to begin your secure session.<br><br>\n                              <noscript>Note: Javascript is disabled on your browser.</noscript>\n                        </tr>\n                        </td>\n                     </table>\n                  </td>\n               </tr>\n            </table>\n         </form>\n      </blockquote>\n      <table id=\"table_LoginPage_9\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\">\n         <tr>\n            <td>\n               <table id=\"table_LoginPage_10\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n                  <tr>\n                     <td></td>\n                     <td></td>\n                     <td></td>\n                  </tr>\n                  <tr valign=\"top\">\n                     <td></td>\n                     <td nowrap ><br><br><br><br>\n                     <td align=\"right\"></td>\n                  </tr>\n               </table>\n            </td>\n         </tr>\n         <tr>\n            <td colspan=\"2\"></td>\n         </tr>\n      </table>\n   </body>\n</html>\n",
   "datamd5" : "b6d3a241174e5fbb65d88768f526cc4f",
   "datammh3" : 1285816960,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "AMAZO-ZFRA",
      "organization" : "A100 ROW GmbH",
      "subnet" : "35.156.0.0/14"
   },
   "host" : [
      "ec2-35-159-166-142"
   ],
   "hostname" : [
      "ec2-35-159-166-142.eu-central-1.compute.amazonaws.com"
   ],
   "ip" : "35.159.166.142",
   "ipv6" : "false",
   "latitude" : "50.1187",
   "location" : "50.1187,8.6842",
   "longitude" : "8.6842",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "JunOS",
   "osvendor" : "Juniper",
   "port" : 4242,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-35-159-166-142.eu-central-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "eu-central-1.compute.amazonaws.com"
   ],
   "subnet" : "35.156.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

54.152.152.75

Network

54.152.0.0/16

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class

Operating System

Linux Linux Kernel

URL

http://54.152.152.75:4242/ 404

HTTP Title

Error 404--Not Found

Reverse DNS

ec2-54-152-152-75.compute-1.amazonaws.com

ASN

AS14618

Organization

AMAZON-AES

Protocol

http

Source

datascan

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Operating System

Linux Linux Kernel

Product

Oracle Weblogic Server 10.3.6.0.0

HTTP Component(s)

Oracle Weblogic Server

CPE(s)

<enterprise field>: cpe

Data MD5

e26e7874bcd5613de7a73a09bb31100c

HTTP Header MD5

522c4e821ae16fa1f93f1ac71c0e412a

HTTP Body MD5

693ba5c2587c2994de7843b9c3c9e384

Favicon MD5

2b86aa50c3a66bb77ff07c42cc051dcc

Favicon MMH3

-1216248324

HTTP/1.1 404 Not Found
Connection: close
Date: Thu, 21 Nov 2024 10:20:00 GMT
Server: WebLogic Server 10.3.6.0.0
Content-Type: text/html
Content-Length: 1766

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Draft//EN">
<HTML>
    <HEAD>
        <TITLE>Error 404--Not Found</TITLE>
    </HEAD>
    <BODY bgcolor="white">
        <FONT FACE=Helvetica><BR CLEAR=all>
        <TABLE border=0 cellspacing=5>
            <TR>
                <TD>
                    <BR CLEAR=all>
                    <FONT FACE="Helvetica" COLOR="black" SIZE="3">
                        <H2>Error 404--Not Found</H2>
                    </FONT>
                </TD>
            </TR>
        </TABLE>
        <TABLE border=0 width=100% cellpadding=10>
            <TR>
                <TD VALIGN=top WIDTH=100% BGCOLOR=white>
                    <FONT FACE="Courier New">
                        <FONT FACE="Helvetica" SIZE="3">
                            <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>
                        </FONT>
                        <FONT FACE="Helvetica" SIZE="3">
                            <H4>10.4.5 404 Not Found</H4>
                        </FONT>
                        <P>
                            <FONT FACE="Courier New">
                                The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.
                        </p>
                        <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>
                    </FONT>
                </TD>
            </TR>
        </TABLE>
    </BODY>
</HTML>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:27:09.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "10.3.6.0"
         ]
      },
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "693ba5c2587c2994de7843b9c3c9e384",
         "bodymmh3" : -369160404,
         "component" : [
            {
               "product" : "Weblogic Server",
               "productvendor" : "Oracle"
            }
         ],
         "headermd5" : "522c4e821ae16fa1f93f1ac71c0e412a",
         "headermmh3" : 490448885,
         "title" : "Error 404--Not Found"
      },
      "length" : 1931
   },
   "asn" : "AS14618",
   "city" : "Ashburn",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:20:00 GMT\r\nServer: WebLogic Server 10.3.6.0.0\r\nContent-Type: text/html\r\nContent-Length: 1766\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Draft//EN\">\n<HTML>\n    <HEAD>\n        <TITLE>Error 404--Not Found</TITLE>\n    </HEAD>\n    <BODY bgcolor=\"white\">\n        <FONT FACE=Helvetica><BR CLEAR=all>\n        <TABLE border=0 cellspacing=5>\n            <TR>\n                <TD>\n                    <BR CLEAR=all>\n                    <FONT FACE=\"Helvetica\" COLOR=\"black\" SIZE=\"3\">\n                        <H2>Error 404--Not Found</H2>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n        <TABLE border=0 width=100% cellpadding=10>\n            <TR>\n                <TD VALIGN=top WIDTH=100% BGCOLOR=white>\n                    <FONT FACE=\"Courier New\">\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>\n                        </FONT>\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H4>10.4.5 404 Not Found</H4>\n                        </FONT>\n                        <P>\n                            <FONT FACE=\"Courier New\">\n                                The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.\n                        </p>\n                        <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n    </BODY>\n</HTML>",
   "datamd5" : "e26e7874bcd5613de7a73a09bb31100c",
   "datammh3" : 1679174131,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS14618",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AMAZON",
      "organization" : "Amazon Technologies Inc.",
      "subnet" : "54.152.0.0/16"
   },
   "host" : [
      "ec2-54-152-152-75"
   ],
   "hostname" : [
      "ec2-54-152-152-75.compute-1.amazonaws.com"
   ],
   "ip" : "54.152.152.75",
   "ipv6" : "false",
   "latitude" : "39.0469",
   "location" : "39.0469,-77.4903",
   "longitude" : "-77.4903",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-AES",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "product" : "Weblogic Server",
   "productvendor" : "Oracle",
   "productversion" : "10.3.6.0.0",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "reverse" : [
      "ec2-54-152-152-75.compute-1.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 404,
   "subdomains" : [
      "compute-1.amazonaws.com"
   ],
   "subnet" : "54.152.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

51.17.240.84

Network

51.16.0.0/15

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class

Operating System

Linux Linux Kernel

URL

http://51.17.240.84:4242/ 404

HTTP Title

Error 404--Not Found

Reverse DNS

ec2-51-17-240-84.il-central-1.compute.amazonaws.com

ASN

AS16509

Organization

AMAZON-02

Protocol

http

Source

datascan

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Operating System

Linux Linux Kernel

Product

Oracle Weblogic Server 10.3.6.0.0

HTTP Component(s)

Oracle Weblogic Server

CPE(s)

<enterprise field>: cpe

Data MD5

e26e7874bcd5613de7a73a09bb31100c

HTTP Header MD5

522c4e821ae16fa1f93f1ac71c0e412a

HTTP Body MD5

693ba5c2587c2994de7843b9c3c9e384

HTTP/1.1 404 Not Found
Connection: close
Date: Thu, 21 Nov 2024 10:20:31 GMT
Server: WebLogic Server 10.3.6.0.0
Content-Type: text/html
Content-Length: 1766

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Draft//EN">
<HTML>
    <HEAD>
        <TITLE>Error 404--Not Found</TITLE>
    </HEAD>
    <BODY bgcolor="white">
        <FONT FACE=Helvetica><BR CLEAR=all>
        <TABLE border=0 cellspacing=5>
            <TR>
                <TD>
                    <BR CLEAR=all>
                    <FONT FACE="Helvetica" COLOR="black" SIZE="3">
                        <H2>Error 404--Not Found</H2>
                    </FONT>
                </TD>
            </TR>
        </TABLE>
        <TABLE border=0 width=100% cellpadding=10>
            <TR>
                <TD VALIGN=top WIDTH=100% BGCOLOR=white>
                    <FONT FACE="Courier New">
                        <FONT FACE="Helvetica" SIZE="3">
                            <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>
                        </FONT>
                        <FONT FACE="Helvetica" SIZE="3">
                            <H4>10.4.5 404 Not Found</H4>
                        </FONT>
                        <P>
                            <FONT FACE="Courier New">
                                The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.
                        </p>
                        <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>
                    </FONT>
                </TD>
            </TR>
        </TABLE>
    </BODY>
</HTML>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:20:31.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "10.3.6.0"
         ]
      },
      "http" : {
         "bodymd5" : "693ba5c2587c2994de7843b9c3c9e384",
         "bodymmh3" : -369160404,
         "component" : [
            {
               "productvendor" : "Oracle",
               "product" : "Weblogic Server"
            }
         ],
         "headermd5" : "522c4e821ae16fa1f93f1ac71c0e412a",
         "headermmh3" : 1684615485,
         "title" : "Error 404--Not Found"
      },
      "length" : 1931
   },
   "asn" : "AS16509",
   "city" : "Tel Aviv",
   "country" : "IL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:20:31 GMT\r\nServer: WebLogic Server 10.3.6.0.0\r\nContent-Type: text/html\r\nContent-Length: 1766\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Draft//EN\">\n<HTML>\n    <HEAD>\n        <TITLE>Error 404--Not Found</TITLE>\n    </HEAD>\n    <BODY bgcolor=\"white\">\n        <FONT FACE=Helvetica><BR CLEAR=all>\n        <TABLE border=0 cellspacing=5>\n            <TR>\n                <TD>\n                    <BR CLEAR=all>\n                    <FONT FACE=\"Helvetica\" COLOR=\"black\" SIZE=\"3\">\n                        <H2>Error 404--Not Found</H2>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n        <TABLE border=0 width=100% cellpadding=10>\n            <TR>\n                <TD VALIGN=top WIDTH=100% BGCOLOR=white>\n                    <FONT FACE=\"Courier New\">\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>\n                        </FONT>\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H4>10.4.5 404 Not Found</H4>\n                        </FONT>\n                        <P>\n                            <FONT FACE=\"Courier New\">\n                                The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.\n                        </p>\n                        <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n    </BODY>\n</HTML>",
   "datamd5" : "e26e7874bcd5613de7a73a09bb31100c",
   "datammh3" : 1679174131,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "host" : [
      "ec2-51-17-240-84"
   ],
   "hostname" : [
      "ec2-51-17-240-84.il-central-1.compute.amazonaws.com"
   ],
   "ip" : "51.17.240.84",
   "ipv6" : "false",
   "latitude" : "32.0803",
   "location" : "32.0803,34.7805",
   "longitude" : "34.7805",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "product" : "Weblogic Server",
   "productvendor" : "Oracle",
   "productversion" : "10.3.6.0.0",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "reverse" : [
      "ec2-51-17-240-84.il-central-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 404,
   "subdomains" : [
      "compute.amazonaws.com",
      "il-central-1.compute.amazonaws.com"
   ],
   "subnet" : "51.16.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

100.27.30.180

Network

100.24.0.0/13

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

Operating System

Cisco IOS

URL

http://100.27.30.180:4242/ 200

HTTP Title

SSL VPN Service

Reverse DNS

ec2-100-27-30-180.compute-1.amazonaws.com

ASN

AS14618

Organization

AMAZON-AES

Protocol

http

Source

datascan

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Operating System

Cisco IOS

Product

F5 Nginx

HTTP Component(s)

Cisco WebVPN

CPE(s)

<enterprise field>: cpe

Data MD5

e73fb32120bbccbb6ce84d72a9811f27

HTTP Header MD5

9f060a9cb1b31c417a3a68e629ae97e3

HTTP Body MD5

f7876d48967864b57d32b168c0fba837

HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:20:07 GMT
Server: nginx
Content-Length: 627
Content-Type: text/html

<?xml version="1.0" encoding="UTF-8"?>
<auth id="main">
<title>SSL VPN Service</title>
<ca status="disabled" href="/+CSCOCA+/login.html" />



<banner></banner>
<message>Please enter your username and password.</message>


<form method="post" action="/+webvpn+/index.html">

<input type="text" name="username" label="Username:" />
<input type="password" name="password" label="Password:" />


<select name="group_list" label="GROUP:">
<option value="telecommuters" noaaa="0" >Remote_Users</option></select>

<input type="submit" name="Login" value="Login" />
<input type="reset" name="Clear" value="Clear" />


</form>
</auth>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:20:07.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "f7876d48967864b57d32b168c0fba837",
         "bodymmh3" : 353668724,
         "component" : [
            {
               "product" : "WebVPN",
               "productvendor" : "Cisco"
            }
         ],
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : 747519200,
         "title" : "SSL VPN Service"
      },
      "length" : 763
   },
   "asn" : "AS14618",
   "city" : "Ashburn",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:20:07 GMT\r\nServer: nginx\r\nContent-Length: 627\r\nContent-Type: text/html\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<auth id=\"main\">\n<title>SSL VPN Service</title>\n<ca status=\"disabled\" href=\"/+CSCOCA+/login.html\" />\n\n\n\n<banner></banner>\n<message>Please enter your username and password.</message>\n\n\n<form method=\"post\" action=\"/+webvpn+/index.html\">\n\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n<input type=\"password\" name=\"password\" label=\"Password:\" />\n\n\n<select name=\"group_list\" label=\"GROUP:\">\n<option value=\"telecommuters\" noaaa=\"0\" >Remote_Users</option></select>\n\n<input type=\"submit\" name=\"Login\" value=\"Login\" />\n<input type=\"reset\" name=\"Clear\" value=\"Clear\" />\n\n\n</form>\n</auth>\n",
   "datamd5" : "e73fb32120bbccbb6ce84d72a9811f27",
   "datammh3" : 1679286467,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS14618",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AMAZON-IAD",
      "organization" : "Amazon Data Services NoVa",
      "subnet" : "100.24.0.0/13"
   },
   "host" : [
      "ec2-100-27-30-180"
   ],
   "hostname" : [
      "ec2-100-27-30-180.compute-1.amazonaws.com"
   ],
   "ip" : "100.27.30.180",
   "ipv6" : "false",
   "latitude" : "39.0469",
   "location" : "39.0469,-77.4903",
   "longitude" : "-77.4903",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-AES",
   "os" : "IOS",
   "osvendor" : "Cisco",
   "port" : 4242,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-100-27-30-180.compute-1.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute-1.amazonaws.com"
   ],
   "subnet" : "100.24.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

52.67.212.168

Network

52.64.0.0/14

Domain(s)

amazonaws.com

Device

<enterprise field>: device.class

Operating System

Linux Linux Kernel

URL

http://52.67.212.168:4242/ 200

HTTP Title

Dashboard [Jenkins]

Reverse DNS

ec2-52-67-212-168.sa-east-1.compute.amazonaws.com

ASN

AS16509

Organization

AMAZON-02

Protocol

http

Source

datascan

NOTE

This tab is a merge from current page results.

CPE(s)

<enterprise field>: cpe

Domain(s)

amazonaws.com

Hostname(s)

13.212.168.196 ec2-100-27-30-180.compute-1.amazonaws.com ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com ec2-34-219-245-98.us-west-2.compute.amazonaws.com ec2-35-159-166-142.eu-central-1.compute.amazonaws.com ec2-44-211-10-91.compute-1.amazonaws.com ec2-51-17-240-84.il-central-1.compute.amazonaws.com ec2-52-67-212-168.sa-east-1.compute.amazonaws.com ec2-54-152-152-75.compute-1.amazonaws.com ec2-54-94-12-52.sa-east-1.compute.amazonaws.com

IP(s)

100.27.30.180 13.212.168.196 34.219.245.98 35.159.166.142 44.211.10.91 51.17.240.84 52.67.212.168 54.152.152.75 54.94.12.52

Port(s)

4242

Protocol(s)

http

Tag(s)

<enterprise field>: tag

URL(s)

/ /./login.action

Operating System

Linux Linux Kernel

HTTP Component(s)

PHP PHP 5.4.7

CPE(s)

<enterprise field>: cpe

Data MD5

85e19b30f852feba3313c9b7c5ebeb1e

HTTP Header MD5

c5d6bfafee938be631a67f30b700e410

HTTP Body MD5

9a540776364cff54e369e9aa8a4aec2e

HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:17:48 GMT
Server: JRun/3.1
X-Powered-By: PHP/5.4.7
Content-Length: 488
Content-Type: text/html
Set-Cookie: csrftoken=xUVT38ZW4JYsiGi8y6qMdXDwylwhIeRS

<html><head><link rel="icon" href="/favicon_7e5ce8fe-7928-442e-b0fa-e6d283142f94.ico"><title>Dashboard [Jenkins]</title></head><body><h2>pbvovfosgcpj1hxsbghy2ph</h2><p>eddl8zu47d2pzuea5mqdqshkx</p><p>ugzcohlv7</p><h1>zhykv5cwc</h1><div>x5dg4pkxiee</div><h3>q9gkbbdhd7zb8vcjgsfcc6slbl6l1</h3><h1>qz226afx3tjambz6ad</h1><p>hrjkfa0n21ri4cxgvrx2o5evpvr2t2</p><span>a15fjwzx4pi9p8bjb3ityvu76h</span><span>5560x0e</span><h3>lkdo68any4pt67k5r</h3><p>yz5l68d0uwqzbsir442ik9tjykk</p></body></html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:17:48.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "9a540776364cff54e369e9aa8a4aec2e",
         "bodymmh3" : -1985928424,
         "component" : [
            {
               "product" : "PHP",
               "productvendor" : "PHP",
               "productversion" : "5.4.7"
            }
         ],
         "headermd5" : "c5d6bfafee938be631a67f30b700e410",
         "headermmh3" : 839082322,
         "title" : "Dashboard [Jenkins]"
      },
      "length" : 708
   },
   "asn" : "AS16509",
   "city" : "S\u00e3o Paulo",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:17:48 GMT\r\nServer: JRun/3.1\r\nX-Powered-By: PHP/5.4.7\r\nContent-Length: 488\r\nContent-Type: text/html\r\nSet-Cookie: csrftoken=xUVT38ZW4JYsiGi8y6qMdXDwylwhIeRS\r\n\r\n<html><head><link rel=\"icon\" href=\"/favicon_7e5ce8fe-7928-442e-b0fa-e6d283142f94.ico\"><title>Dashboard [Jenkins]</title></head><body><h2>pbvovfosgcpj1hxsbghy2ph</h2><p>eddl8zu47d2pzuea5mqdqshkx</p><p>ugzcohlv7</p><h1>zhykv5cwc</h1><div>x5dg4pkxiee</div><h3>q9gkbbdhd7zb8vcjgsfcc6slbl6l1</h3><h1>qz226afx3tjambz6ad</h1><p>hrjkfa0n21ri4cxgvrx2o5evpvr2t2</p><span>a15fjwzx4pi9p8bjb3ityvu76h</span><span>5560x0e</span><h3>lkdo68any4pt67k5r</h3><p>yz5l68d0uwqzbsir442ik9tjykk</p></body></html>",
   "datamd5" : "85e19b30f852feba3313c9b7c5ebeb1e",
   "datammh3" : 632514926,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "AMAZON-GRU",
      "organization" : "Amazon Data Services Brazil",
      "subnet" : "52.67.0.0/16"
   },
   "host" : [
      "ec2-52-67-212-168"
   ],
   "hostname" : [
      "ec2-52-67-212-168.sa-east-1.compute.amazonaws.com"
   ],
   "ip" : "52.67.212.168",
   "ipv6" : "false",
   "latitude" : "-23.5335",
   "location" : "-23.5335,-46.6359",
   "longitude" : "-46.6359",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-52-67-212-168.sa-east-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "sa-east-1.compute.amazonaws.com"
   ],
   "subnet" : "52.64.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}