ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 2,265 in 0.036 second(s)

  • 13.212.168.196:4242 (tcp/http) - last seen on 2024-11-21 at 10:36:08 UTC

    • IP
      13.212.168.196
      Network
      13.208.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://13.212.168.196:4242/ 301

      Reverse DNS
      ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      Atlassian Confluence Oracle Java
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b24b34fddd5b8923ec1ff0c47d24c4e8
      HTTP Header MD5
      545f6de0cf7921fa1833db1c9d249cb3
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 301 Moved Permanently
Connection: keep-alive
Date: Thu, 21 Nov 2024 10:29:32 GMT
Server: nginx
X-Confluence-Request-Time: 1732184972
Content-Type: text/html;charset=UTF-8
Cache-Control: no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: JSESSIONID=ftzj1anp6xou8egff696w73836eqkh7d; Path=/; Secure; HttpOnly
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Strict-Transport-Security: max-age=63072000
Location: ./login.action
Content-Length: 0


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:36:08.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
         "bodymmh3" : -1636538602,
         "component" : [
            {
               "product" : "Java",
               "productvendor" : "Oracle"
            },
            {
               "product" : "Confluence",
               "productvendor" : "Atlassian"
            }
         ],
         "headermd5" : "545f6de0cf7921fa1833db1c9d249cb3",
         "headermmh3" : -466061896
      },
      "length" : 587
   },
   "asn" : "AS16509",
   "city" : "Singapore",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 301 Moved Permanently\r\nConnection: keep-alive\r\nDate: Thu, 21 Nov 2024 10:29:32 GMT\r\nServer: nginx\r\nX-Confluence-Request-Time: 1732184972\r\nContent-Type: text/html;charset=UTF-8\r\nCache-Control: no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nSet-Cookie: JSESSIONID=ftzj1anp6xou8egff696w73836eqkh7d; Path=/; Secure; HttpOnly\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nStrict-Transport-Security: max-age=63072000\r\nLocation: ./login.action\r\nContent-Length: 0\r\n\r\n",
   "datamd5" : "b24b34fddd5b8923ec1ff0c47d24c4e8",
   "datammh3" : -165092215,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "AMAZON-SIN",
      "organization" : "Amazon Data Services Singapore",
      "subnet" : "13.212.0.0/14"
   },
   "host" : [
      "ec2-13-212-168-196"
   ],
   "hostname" : [
      "ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com"
   ],
   "ip" : "13.212.168.196",
   "ipv6" : "false",
   "latitude" : "1.2868",
   "location" : "1.2868,103.8503",
   "longitude" : "103.8503",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Moved Permanently",
   "reverse" : [
      "ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 301,
   "subdomains" : [
      "ap-southeast-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.208.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 13.212.168.196:4242 (tcp/http) - last seen on 2024-11-21 at 10:36:08 UTC

    • IP
      13.212.168.196
      Network
      13.208.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      URL

      http://13.212.168.196:4242/./login.action 200

      HTTP Title
      Log In - Confluence
      Reverse DNS
      ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan::redirect::1
    • Product
      F5 Nginx
      HTTP Component(s)
      Oracle Java Atlassian Confluence 8.5.1 8703 Atlassian Confluence
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b22d98e4b4eb84ada5eae3d9b6990108
      HTTP Header MD5
      81b1b89a4fa4b0160cf697ccda47e913
      HTTP Body MD5
      68d299cc91510df1cbd8e6c43b0be3cf 
    • HTTP/1.1 200 OK
Connection: keep-alive
Date: Thu, 21 Nov 2024 10:36:07 GMT
Server: nginx
X-Confluence-Request-Time: 1732185367
Content-Type: text/html;charset=UTF-8
Cache-Control: no-cache, must-revalidate
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Set-Cookie: JSESSIONID=ftzj1anp6xou8egff696w73836eqkh7d; Path=/; Secure; HttpOnly
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
Strict-Transport-Security: max-age=63072000
Content-Length: 31642

<!DOCTYPE html>
<html lang="en-US" >
<head>
                    <title>Log In - Confluence</title>
    <meta http-equiv="X-UA-Compatible" content="IE=EDGE,chrome=IE7">
<meta charset="UTF-8">
<meta id="confluence-context-path" name="confluence-context-path" content="">
<meta id="confluence-base-url" name="confluence-base-url" content="https://www.example.com">
    <meta id="atlassian-token" name="atlassian-token" content="e68dfa45d0ec9701eac9e51568b6020923c96741">
<script type="text/javascript">
        var contextPath = '';
</script>
    <meta name="robots" content="noindex,nofollow">
    <meta name="robots" content="noarchive">
    <meta name="confluence-request-time" content="1655127501448">
            <meta name="ajs-use-keyboard-shortcuts" content="true">
            <meta name="ajs-discovered-plugin-features" content="$discoveredList">
            <meta name="ajs-keyboardshortcut-hash" content="fff979e4c9da5640ff51afde5a995be8">
            <meta id="team-calendars-has-jira-link" content="true">
            <meta name="ajs-team-calendars-display-time-format" content="displayTimeFormat12">
            <meta id="team-calendars-display-week-number" content="false">
            <meta id="team-calendars-user-timezone" content="-07:00">
            <script type="text/x-template" id="team-calendars-messages" title="team-calendars-messages"><fieldset class="i18n hidden"><input type="hidden" name="calendar3.month.long.july" value="July"><input type="hidden" name="calendar3.day.short.wednesday" value="Wed"><input type="hidden" name="calendar3.day.short.thursday" value="Thu"><input type="hidden" name="calendar3.month.short.march" value="Mar"><input type="hidden" name="calendar3.month.long.april" value="April"><input type="hidden" name="calendar3.month.long.october" value="October"><input type="hidden" name="calendar3.month.long.august" value="August"><input type="hidden" name="calendar3.month.short.july" value="Jul"><input type="hidden" name="calendar3.month.short.may" value="May"><input type="hidden" name="calendar3.month.short.november" value="Nov"><input type="hidden" name="calendar3.day.long.friday" value="Friday"><input type="hidden" name="calendar3.day.long.sunday" value="Sunday"><input type="hidden" name="calendar3.day.long.saturday" value="Saturday"><input type="hidden" name="calendar3.month.short.april" value="Apr"><input type="hidden" name="calendar3.day.long.wednesday" value="Wednesday"><input type="hidden" name="calendar3.month.long.december" value="December"><input type="hidden" name="calendar3.month.short.october" value="Oct"><input type="hidden" name="calendar3.day.long.monday" value="Monday"><input type="hidden" name="calendar3.month.short.june" value="Jun"><input type="hidden" name="calendar3.day.short.monday" value="Mon"><input type="hidden" name="calendar3.day.short.tuesday" value="Tue"><input type="hidden" name="calendar3.day.short.saturday" value="Sat"><input type="hidden" name="calendar3.month.long.march" value="March"><input type="hidden" name="calendar3.month.long.june" value="June"><input type="hidden" name="calendar3.month.short.february" value="Feb"><input type="hidden" name="calendar3.month.short.august" value="Aug"><input type="hidden" name="calendar3.month.short.december" value="Dec"><input type="hidden" name="calendar3.day.short.sunday" value="Sun"><input type="hidden" name="calendar3.month.long.february" value="February"><input type="hidden" name="calendar3.day.long.tuesday" value="Tuesday"><input type="hidden" name="calendar3.month.long.may" value="May"><input type="hidden" name="calendar3.month.long.september" value="September"><input type="hidden" name="calendar3.month.long.november" value="November"><input type="hidden" name="calendar3.month.short.january" value="Jan"><input type="hidden" name="calendar3.month.short.september" value="Sep"><input type="hidden" name="calendar3.day.long.thursday" value="Thursday"><input type="hidden" name="calendar3.month.long.january" value="January"><input type="hidden" name="calendar3.day.short.friday" value="Fri"></fieldset></script>
            <meta name="ajs-is-confluence-admin" content="false">
            <meta name="ajs-connection-timeout" content="10000">
            <meta name="ajs-context-path" content="">
            <meta name="ajs-base-url" content="https://www.example.com">
            <meta name="ajs-version-number" content="8.5.1">
            <meta name="ajs-build-number" content="8703">
            <meta name="ajs-remote-user" content="">
            <meta name="ajs-remote-user-key" content="">
            <meta name="ajs-remote-user-has-licensed-access" content="false">
            <meta name="ajs-remote-user-has-browse-users-permission" content="false">
            <meta name="ajs-current-user-fullname" content="">
            <meta name="ajs-current-user-avatar-url" content="">
            <meta name="ajs-current-user-avatar-uri-reference" content="/images/icons/profilepics/anonymous.svg">
            <meta name="ajs-static-resource-url-prefix" content="/s/biaqv0/8703/189cb2l/_">
            <meta name="ajs-global-settings-attachment-max-size" content="104857600">
            <meta name="ajs-global-settings-quick-search-enabled" content="true">
            <meta name="ajs-user-locale" content="en_US">
            <meta name="ajs-enabled-dark-features" content="site-wide.shared-drafts,clc.quick.create,confluence.view.edit.transition,cql.search.screen,confluence-inline-comments-resolved,frontend.editor.v4,http.session.registrar,nps.survey.inline.dialog,confluence.efi.onboarding.new.templates,frontend.editor.v4.compatibility,atlassian.cdn.static.assets,pdf-preview,previews.sharing,previews.versions,file-annotations,confluence.efi.onboarding.rich.space.content,collaborative-audit-log,confluence.reindex.improvements,previews.conversion-service,editor.ajax.save,read.only.mode,graphql,previews.trigger-all-file-types,attachment.extracted.text.extractor,lucene.caching.filter,confluence.table.resizable,notification.batch,previews.sharing.pushstate,confluence-inline-comments-rich-editor,tc.tacca.dacca,site-wide.synchrony.opt-in,file-annotations.likes,gatekeeper-ui-v2,v2.content.name.searcher,mobile.supported.version,pulp,confluence-inline-comments,confluence-inline-comments-dangling-comment,quick-reload-inline-comments-flags">
            <meta name="ajs-atl-token" content="e68dfa45d0ec9701eac9e51568b6020923c96741">
            <meta name="ajs-confluence-flavour" content="VANILLA">
            <meta name="ajs-user-date-pattern" content="dd MMM yyyy">
            <meta name="ajs-access-mode" content="READ_WRITE">
            <meta name="ajs-render-mode" content="READ_WRITE">
            <meta name="ajs-date.format" content="MMM dd, yyyy">
    <link rel="shortcut icon" href="/s/biaqv0/8703/189cb2l/7/_/favicon.ico">
    <link rel="icon" type="image/x-icon" href="/s/biaqv0/8703/189cb2l/7/_/favicon.ico">
<link rel="search" type="application/opensearchdescription+xml" href="/opensearch/osd.action" title="Confluence"/>
    <script>
window.WRM=window.WRM||{};window.WRM._unparsedData=window.WRM._unparsedData||{};window.WRM._unparsedErrors=window.WRM._unparsedErrors||{};
WRM._unparsedData["com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path"]="\u0022\u0022";
WRM._unparsedData["com.atlassian.analytics.analytics-client:policy-update-init.policy-update-data-provider"]="false";
WRM._unparsedData["com.atlassian.analytics.analytics-client:programmatic-analytics-init.programmatic-analytics-data-provider"]="false";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-help-paths"]="{\u0022entries\u0022:{\u0022applinks.docs.root\u0022:\u0022https://confluence.atlassian.com/display/APPLINKS-072/\u0022,\u0022applinks.docs.diagnostics.troubleshoot.sslunmatched\u0022:\u0022SSL+and+application+link+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthsignatureinvalid\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthtimestamprefused\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.delete.entity.link\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.adding.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.administration.guide\u0022:\u0022Application+Links+Documentation\u0022,\u0022applinks.docs.oauth.security\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.troubleshoot.application.links\u0022:\u0022Troubleshoot+application+links\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unknownerror\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.trusted.apps\u0022:\u0022Configuring+Trusted+Applications+authentication+for+an+application+link\u0022,\u0022applinks.docs.diagnostics.troubleshoot.authlevelunsupported\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.ssluntrusted\u0022:\u0022SSL+and+application+link+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unknownhost\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.delete.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.adding.project.link\u0022:\u0022Configuring+Project+links+across+Applications\u0022,\u0022applinks.docs.link.applications\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.diagnostics.troubleshoot.oauthproblem\u0022:\u0022OAuth+troubleshooting+guide\u0022,\u0022applinks.docs.diagnostics.troubleshoot.migration\u0022:\u0022Update+application+links+to+use+OAuth\u0022,\u0022applinks.docs.relocate.application.link\u0022:\u0022Link+Atlassian+applications+to+work+together\u0022,\u0022applinks.docs.administering.entity.links\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.upgrade.application.link\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.diagnostics.troubleshoot.connectionrefused\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.oauth\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.insufficient.remote.permission\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.configuring.application.link.auth\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.diagnostics\u0022:\u0022Application+links+diagnostics\u0022,\u0022applinks.docs.configured.authentication.types\u0022:\u0022OAuth+security+for+application+links\u0022,\u0022applinks.docs.adding.entity.link\u0022:\u0022Create+links+between+projects\u0022,\u0022applinks.docs.diagnostics.troubleshoot.unexpectedresponse\u0022:\u0022Network+and+connectivity+troubleshooting+guide\u0022,\u0022applinks.docs.configuring.auth.basic\u0022:\u0022Configuring+Basic+HTTP+Authentication+for+an+Application+Link\u0022,\u0022applinks.docs.diagnostics.troubleshoot.authlevelmismatch\u0022:\u0022OAuth+troubleshooting+guide\u0022}}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-types"]="{\u0022crowd\u0022:\u0022Crowd\u0022,\u0022confluence\u0022:\u0022Confluence\u0022,\u0022fecru\u0022:\u0022FishEye / Crucible\u0022,\u0022stash\u0022:\u0022Stash\u0022,\u0022jira\u0022:\u0022Jira\u0022,\u0022refapp\u0022:\u0022Reference Application\u0022,\u0022bamboo\u0022:\u0022Bamboo\u0022,\u0022generic\u0022:\u0022Generic Application\u0022}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.entity-types"]="{\u0022singular\u0022:{\u0022refapp.charlie\u0022:\u0022Charlie\u0022,\u0022fecru.project\u0022:\u0022Crucible Project\u0022,\u0022fecru.repository\u0022:\u0022FishEye Repository\u0022,\u0022stash.project\u0022:\u0022Stash Project\u0022,\u0022generic.entity\u0022:\u0022Generic Project\u0022,\u0022confluence.space\u0022:\u0022Confluence Space\u0022,\u0022bamboo.project\u0022:\u0022Bamboo Project\u0022,\u0022jira.project\u0022:\u0022Jira Project\u0022},\u0022plural\u0022:{\u0022refapp.charlie\u0022:\u0022Charlies\u0022,\u0022fecru.project\u0022:\u0022Crucible Projects\u0022,\u0022fecru.repository\u0022:\u0022FishEye Repositories\u0022,\u0022stash.project\u0022:\u0022Stash Projects\u0022,\u0022generic.entity\u0022:\u0022Generic Projects\u0022,\u0022confluence.space\u0022:\u0022Confluence Spaces\u0022,\u0022bamboo.project\u0022:\u0022Bamboo Projects\u0022,\u0022jira.project\u0022:\u0022Jira Projects\u0022}}";
WRM._unparsedData["com.atlassian.applinks.applinks-plugin:applinks-common-exported.authentication-types"]="{\u0022com.atlassian.applinks.api.auth.types.BasicAuthenticationProvider\u0022:\u0022Basic Access\u0022,\u0022com.atlassian.applinks.api.auth.types.TrustedAppsAuthenticationProvider\u0022:\u0022Trusted Applications\u0022,\u0022com.atlassian.applinks.api.auth.types.CorsAuthenticationProvider\u0022:\u0022CORS\u0022,\u0022com.atlassian.applinks.api.auth.types.OAuthAuthenticationProvider\u0022:\u0022OAuth\u0022,\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthAuthenticationProvider\u0022:\u0022OAuth\u0022,\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthWithImpersonationAuthenticationProvider\u0022:\u0022OAuth\u0022}";
WRM._unparsedData["com.atlassian.confluence.plugins.synchrony-interop:synchrony-status-banner-loader.synchrony-status"]="false";
WRM._unparsedData["com.atlassian.confluence.plugins.confluence-feature-discovery-plugin:confluence-feature-discovery-plugin-resources.test-mode"]="false";
WRM._unparsedData["com.atlassian.confluence.plugins.confluence-license-banner:confluence-license-banner-resources.license-details"]="{\u0022daysBeforeLicenseExpiry\u0022:0,\u0022daysBeforeMaintenanceExpiry\u0022:0,\u0022showLicenseExpiryBanner\u0022:false,\u0022showMaintenanceExpiryBanner\u0022:false,\u0022renewUrl\u0022:null,\u0022salesUrl\u0022:null}";
WRM._unparsedData["com.atlassian.confluence.plugins.confluence-search-ui-plugin:confluence-search-ui-plugin-resources.i18n-data"]="{\u0022search.ui.recent.link.text\u0022:\u0022View more recently visited\u0022,\u0022search.ui.filter.space.category.input.label\u0022:\u0022Find space categories...\u0022,\u0022search.ui.search.results.empty\u0022:\u0022We couldn\u005Cu0027\u005Cu0027t find anything matching \u005C\u0022{0}\u005C\u0022.\u0022,\u0022search.ui.filter.clear.selected\u0022:\u0022Clear selected items\u0022,\u0022search.ui.content.name.search.items.panel.load.all.top.items.button.text\u0022:\u0022Show more app results...\u0022,\u0022search.ui.filter.space.archive.label\u0022:\u0022Search archived spaces\u0022,\u0022search.ui.filter.label\u0022:\u0022filter\u0022,\u0022search.ui.filter.contributor.button.text\u0022:\u0022Contributor\u0022,\u0022search.ui.filter.date.all.text\u0022:\u0022Any time\u0022,\u0022search.ui.filter.space.current.label\u0022:\u0022CURRENT\u0022,\u0022search.ui.clear.input.button.text\u0022:\u0022Clear text\u0022,\u0022search.ui.search.results.clear.button\u0022:\u0022clear your filters.\u0022,\u0022search.ui.filter.date.hour.text\u0022:\u0022The past day\u0022,\u0022help.search.ui.link.title\u0022:\u0022Search tips\u0022,\u0022search.ui.filters.heading\u0022:\u0022Filter by\u0022,\u0022search.ui.filter.label.input.label\u0022:\u0022Find labels...\u0022,\u0022search.ui.recent.items.anonymous\u0022:\u0022Start exploring. Your search results will appear here.\u0022,\u0022search.ui.filter.date.month.text\u0022:\u0022The past month\u0022,\u0022search.ui.input.label\u0022:\u0022Search\u0022,\u0022search.ui.search.result\u0022:\u0022{0,choice,1#{0} search result|1\u005Cu003c{0} search results}\u0022,\u0022search.ui.infinite.scroll.button.text\u0022:\u0022More results\u0022,\u0022search.ui.filter
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:36:08.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "atlassian.com",
            "example.com"
         ],
         "hostname" : [
            "confluence.atlassian.com",
            "www.example.com"
         ],
         "url" : [
            "https://confluence.atlassian.com/display/APPLINKS-072/",
            "https://www.example.com"
         ]
      },
      "favicon" : {
         "url" : "/s/biaqv0/8703/189cb2l/7/_/favicon.ico"
      },
      "http" : {
         "bodymd5" : "68d299cc91510df1cbd8e6c43b0be3cf",
         "bodymmh3" : 832047516,
         "component" : [
            {
               "productvendor" : "Atlassian",
               "product" : "Confluence"
            },
            {
               "product" : "Confluence",
               "productvendor" : "Atlassian",
               "productversionpatch" : "8703",
               "productversion" : "8.5.1"
            },
            {
               "product" : "Java",
               "productvendor" : "Oracle"
            }
         ],
         "headermd5" : "81b1b89a4fa4b0160cf697ccda47e913",
         "headermmh3" : 321604637,
         "title" : "Log In - Confluence"
      },
      "length" : 16384
   },
   "asn" : "AS16509",
   "city" : "Singapore",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nDate: Thu, 21 Nov 2024 10:36:07 GMT\r\nServer: nginx\r\nX-Confluence-Request-Time: 1732185367\r\nContent-Type: text/html;charset=UTF-8\r\nCache-Control: no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nSet-Cookie: JSESSIONID=ftzj1anp6xou8egff696w73836eqkh7d; Path=/; Secure; HttpOnly\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nStrict-Transport-Security: max-age=63072000\r\nContent-Length: 31642\r\n\r\n<!DOCTYPE html>\n<html lang=\"en-US\" >\n<head>\n                    <title>Log In - Confluence</title>\n    <meta http-equiv=\"X-UA-Compatible\" content=\"IE=EDGE,chrome=IE7\">\n<meta charset=\"UTF-8\">\n<meta id=\"confluence-context-path\" name=\"confluence-context-path\" content=\"\">\n<meta id=\"confluence-base-url\" name=\"confluence-base-url\" content=\"https://www.example.com\">\n    <meta id=\"atlassian-token\" name=\"atlassian-token\" content=\"e68dfa45d0ec9701eac9e51568b6020923c96741\">\n<script type=\"text/javascript\">\n        var contextPath = '';\n</script>\n    <meta name=\"robots\" content=\"noindex,nofollow\">\n    <meta name=\"robots\" content=\"noarchive\">\n    <meta name=\"confluence-request-time\" content=\"1655127501448\">\n            <meta name=\"ajs-use-keyboard-shortcuts\" content=\"true\">\n            <meta name=\"ajs-discovered-plugin-features\" content=\"$discoveredList\">\n            <meta name=\"ajs-keyboardshortcut-hash\" content=\"fff979e4c9da5640ff51afde5a995be8\">\n            <meta id=\"team-calendars-has-jira-link\" content=\"true\">\n            <meta name=\"ajs-team-calendars-display-time-format\" content=\"displayTimeFormat12\">\n            <meta id=\"team-calendars-display-week-number\" content=\"false\">\n            <meta id=\"team-calendars-user-timezone\" content=\"-07:00\">\n            <script type=\"text/x-template\" id=\"team-calendars-messages\" title=\"team-calendars-messages\"><fieldset class=\"i18n hidden\"><input type=\"hidden\" name=\"calendar3.month.long.july\" value=\"July\"><input type=\"hidden\" name=\"calendar3.day.short.wednesday\" value=\"Wed\"><input type=\"hidden\" name=\"calendar3.day.short.thursday\" value=\"Thu\"><input type=\"hidden\" name=\"calendar3.month.short.march\" value=\"Mar\"><input type=\"hidden\" name=\"calendar3.month.long.april\" value=\"April\"><input type=\"hidden\" name=\"calendar3.month.long.october\" value=\"October\"><input type=\"hidden\" name=\"calendar3.month.long.august\" value=\"August\"><input type=\"hidden\" name=\"calendar3.month.short.july\" value=\"Jul\"><input type=\"hidden\" name=\"calendar3.month.short.may\" value=\"May\"><input type=\"hidden\" name=\"calendar3.month.short.november\" value=\"Nov\"><input type=\"hidden\" name=\"calendar3.day.long.friday\" value=\"Friday\"><input type=\"hidden\" name=\"calendar3.day.long.sunday\" value=\"Sunday\"><input type=\"hidden\" name=\"calendar3.day.long.saturday\" value=\"Saturday\"><input type=\"hidden\" name=\"calendar3.month.short.april\" value=\"Apr\"><input type=\"hidden\" name=\"calendar3.day.long.wednesday\" value=\"Wednesday\"><input type=\"hidden\" name=\"calendar3.month.long.december\" value=\"December\"><input type=\"hidden\" name=\"calendar3.month.short.october\" value=\"Oct\"><input type=\"hidden\" name=\"calendar3.day.long.monday\" value=\"Monday\"><input type=\"hidden\" name=\"calendar3.month.short.june\" value=\"Jun\"><input type=\"hidden\" name=\"calendar3.day.short.monday\" value=\"Mon\"><input type=\"hidden\" name=\"calendar3.day.short.tuesday\" value=\"Tue\"><input type=\"hidden\" name=\"calendar3.day.short.saturday\" value=\"Sat\"><input type=\"hidden\" name=\"calendar3.month.long.march\" value=\"March\"><input type=\"hidden\" name=\"calendar3.month.long.june\" value=\"June\"><input type=\"hidden\" name=\"calendar3.month.short.february\" value=\"Feb\"><input type=\"hidden\" name=\"calendar3.month.short.august\" value=\"Aug\"><input type=\"hidden\" name=\"calendar3.month.short.december\" value=\"Dec\"><input type=\"hidden\" name=\"calendar3.day.short.sunday\" value=\"Sun\"><input type=\"hidden\" name=\"calendar3.month.long.february\" value=\"February\"><input type=\"hidden\" name=\"calendar3.day.long.tuesday\" value=\"Tuesday\"><input type=\"hidden\" name=\"calendar3.month.long.may\" value=\"May\"><input type=\"hidden\" name=\"calendar3.month.long.september\" value=\"September\"><input type=\"hidden\" name=\"calendar3.month.long.november\" value=\"November\"><input type=\"hidden\" name=\"calendar3.month.short.january\" value=\"Jan\"><input type=\"hidden\" name=\"calendar3.month.short.september\" value=\"Sep\"><input type=\"hidden\" name=\"calendar3.day.long.thursday\" value=\"Thursday\"><input type=\"hidden\" name=\"calendar3.month.long.january\" value=\"January\"><input type=\"hidden\" name=\"calendar3.day.short.friday\" value=\"Fri\"></fieldset></script>\n            <meta name=\"ajs-is-confluence-admin\" content=\"false\">\n            <meta name=\"ajs-connection-timeout\" content=\"10000\">\n            <meta name=\"ajs-context-path\" content=\"\">\n            <meta name=\"ajs-base-url\" content=\"https://www.example.com\">\n            <meta name=\"ajs-version-number\" content=\"8.5.1\">\n            <meta name=\"ajs-build-number\" content=\"8703\">\n            <meta name=\"ajs-remote-user\" content=\"\">\n            <meta name=\"ajs-remote-user-key\" content=\"\">\n            <meta name=\"ajs-remote-user-has-licensed-access\" content=\"false\">\n            <meta name=\"ajs-remote-user-has-browse-users-permission\" content=\"false\">\n            <meta name=\"ajs-current-user-fullname\" content=\"\">\n            <meta name=\"ajs-current-user-avatar-url\" content=\"\">\n            <meta name=\"ajs-current-user-avatar-uri-reference\" content=\"/images/icons/profilepics/anonymous.svg\">\n            <meta name=\"ajs-static-resource-url-prefix\" content=\"/s/biaqv0/8703/189cb2l/_\">\n            <meta name=\"ajs-global-settings-attachment-max-size\" content=\"104857600\">\n            <meta name=\"ajs-global-settings-quick-search-enabled\" content=\"true\">\n            <meta name=\"ajs-user-locale\" content=\"en_US\">\n            <meta name=\"ajs-enabled-dark-features\" content=\"site-wide.shared-drafts,clc.quick.create,confluence.view.edit.transition,cql.search.screen,confluence-inline-comments-resolved,frontend.editor.v4,http.session.registrar,nps.survey.inline.dialog,confluence.efi.onboarding.new.templates,frontend.editor.v4.compatibility,atlassian.cdn.static.assets,pdf-preview,previews.sharing,previews.versions,file-annotations,confluence.efi.onboarding.rich.space.content,collaborative-audit-log,confluence.reindex.improvements,previews.conversion-service,editor.ajax.save,read.only.mode,graphql,previews.trigger-all-file-types,attachment.extracted.text.extractor,lucene.caching.filter,confluence.table.resizable,notification.batch,previews.sharing.pushstate,confluence-inline-comments-rich-editor,tc.tacca.dacca,site-wide.synchrony.opt-in,file-annotations.likes,gatekeeper-ui-v2,v2.content.name.searcher,mobile.supported.version,pulp,confluence-inline-comments,confluence-inline-comments-dangling-comment,quick-reload-inline-comments-flags\">\n            <meta name=\"ajs-atl-token\" content=\"e68dfa45d0ec9701eac9e51568b6020923c96741\">\n            <meta name=\"ajs-confluence-flavour\" content=\"VANILLA\">\n            <meta name=\"ajs-user-date-pattern\" content=\"dd MMM yyyy\">\n            <meta name=\"ajs-access-mode\" content=\"READ_WRITE\">\n            <meta name=\"ajs-render-mode\" content=\"READ_WRITE\">\n            <meta name=\"ajs-date.format\" content=\"MMM dd, yyyy\">\n    <link rel=\"shortcut icon\" href=\"/s/biaqv0/8703/189cb2l/7/_/favicon.ico\">\n    <link rel=\"icon\" type=\"image/x-icon\" href=\"/s/biaqv0/8703/189cb2l/7/_/favicon.ico\">\n<link rel=\"search\" type=\"application/opensearchdescription+xml\" href=\"/opensearch/osd.action\" title=\"Confluence\"/>\n    <script>\nwindow.WRM=window.WRM||{};window.WRM._unparsedData=window.WRM._unparsedData||{};window.WRM._unparsedErrors=window.WRM._unparsedErrors||{};\nWRM._unparsedData[\"com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path\"]=\"\\u0022\\u0022\";\nWRM._unparsedData[\"com.atlassian.analytics.analytics-client:policy-update-init.policy-update-data-provider\"]=\"false\";\nWRM._unparsedData[\"com.atlassian.analytics.analytics-client:programmatic-analytics-init.programmatic-analytics-data-provider\"]=\"false\";\nWRM._unparsedData[\"com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-help-paths\"]=\"{\\u0022entries\\u0022:{\\u0022applinks.docs.root\\u0022:\\u0022https://confluence.atlassian.com/display/APPLINKS-072/\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.sslunmatched\\u0022:\\u0022SSL+and+application+link+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.oauthsignatureinvalid\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.oauthtimestamprefused\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022,\\u0022applinks.docs.delete.entity.link\\u0022:\\u0022Create+links+between+projects\\u0022,\\u0022applinks.docs.adding.application.link\\u0022:\\u0022Link+Atlassian+applications+to+work+together\\u0022,\\u0022applinks.docs.administration.guide\\u0022:\\u0022Application+Links+Documentation\\u0022,\\u0022applinks.docs.oauth.security\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.troubleshoot.application.links\\u0022:\\u0022Troubleshoot+application+links\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.unknownerror\\u0022:\\u0022Network+and+connectivity+troubleshooting+guide\\u0022,\\u0022applinks.docs.configuring.auth.trusted.apps\\u0022:\\u0022Configuring+Trusted+Applications+authentication+for+an+application+link\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.authlevelunsupported\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.ssluntrusted\\u0022:\\u0022SSL+and+application+link+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.unknownhost\\u0022:\\u0022Network+and+connectivity+troubleshooting+guide\\u0022,\\u0022applinks.docs.delete.application.link\\u0022:\\u0022Link+Atlassian+applications+to+work+together\\u0022,\\u0022applinks.docs.adding.project.link\\u0022:\\u0022Configuring+Project+links+across+Applications\\u0022,\\u0022applinks.docs.link.applications\\u0022:\\u0022Link+Atlassian+applications+to+work+together\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.oauthproblem\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.migration\\u0022:\\u0022Update+application+links+to+use+OAuth\\u0022,\\u0022applinks.docs.relocate.application.link\\u0022:\\u0022Link+Atlassian+applications+to+work+together\\u0022,\\u0022applinks.docs.administering.entity.links\\u0022:\\u0022Create+links+between+projects\\u0022,\\u0022applinks.docs.upgrade.application.link\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.connectionrefused\\u0022:\\u0022Network+and+connectivity+troubleshooting+guide\\u0022,\\u0022applinks.docs.configuring.auth.oauth\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.insufficient.remote.permission\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.configuring.application.link.auth\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.diagnostics\\u0022:\\u0022Application+links+diagnostics\\u0022,\\u0022applinks.docs.configured.authentication.types\\u0022:\\u0022OAuth+security+for+application+links\\u0022,\\u0022applinks.docs.adding.entity.link\\u0022:\\u0022Create+links+between+projects\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.unexpectedresponse\\u0022:\\u0022Network+and+connectivity+troubleshooting+guide\\u0022,\\u0022applinks.docs.configuring.auth.basic\\u0022:\\u0022Configuring+Basic+HTTP+Authentication+for+an+Application+Link\\u0022,\\u0022applinks.docs.diagnostics.troubleshoot.authlevelmismatch\\u0022:\\u0022OAuth+troubleshooting+guide\\u0022}}\";\nWRM._unparsedData[\"com.atlassian.applinks.applinks-plugin:applinks-common-exported.applinks-types\"]=\"{\\u0022crowd\\u0022:\\u0022Crowd\\u0022,\\u0022confluence\\u0022:\\u0022Confluence\\u0022,\\u0022fecru\\u0022:\\u0022FishEye / Crucible\\u0022,\\u0022stash\\u0022:\\u0022Stash\\u0022,\\u0022jira\\u0022:\\u0022Jira\\u0022,\\u0022refapp\\u0022:\\u0022Reference Application\\u0022,\\u0022bamboo\\u0022:\\u0022Bamboo\\u0022,\\u0022generic\\u0022:\\u0022Generic Application\\u0022}\";\nWRM._unparsedData[\"com.atlassian.applinks.applinks-plugin:applinks-common-exported.entity-types\"]=\"{\\u0022singular\\u0022:{\\u0022refapp.charlie\\u0022:\\u0022Charlie\\u0022,\\u0022fecru.project\\u0022:\\u0022Crucible Project\\u0022,\\u0022fecru.repository\\u0022:\\u0022FishEye Repository\\u0022,\\u0022stash.project\\u0022:\\u0022Stash Project\\u0022,\\u0022generic.entity\\u0022:\\u0022Generic Project\\u0022,\\u0022confluence.space\\u0022:\\u0022Confluence Space\\u0022,\\u0022bamboo.project\\u0022:\\u0022Bamboo Project\\u0022,\\u0022jira.project\\u0022:\\u0022Jira Project\\u0022},\\u0022plural\\u0022:{\\u0022refapp.charlie\\u0022:\\u0022Charlies\\u0022,\\u0022fecru.project\\u0022:\\u0022Crucible Projects\\u0022,\\u0022fecru.repository\\u0022:\\u0022FishEye Repositories\\u0022,\\u0022stash.project\\u0022:\\u0022Stash Projects\\u0022,\\u0022generic.entity\\u0022:\\u0022Generic Projects\\u0022,\\u0022confluence.space\\u0022:\\u0022Confluence Spaces\\u0022,\\u0022bamboo.project\\u0022:\\u0022Bamboo Projects\\u0022,\\u0022jira.project\\u0022:\\u0022Jira Projects\\u0022}}\";\nWRM._unparsedData[\"com.atlassian.applinks.applinks-plugin:applinks-common-exported.authentication-types\"]=\"{\\u0022com.atlassian.applinks.api.auth.types.BasicAuthenticationProvider\\u0022:\\u0022Basic Access\\u0022,\\u0022com.atlassian.applinks.api.auth.types.TrustedAppsAuthenticationProvider\\u0022:\\u0022Trusted Applications\\u0022,\\u0022com.atlassian.applinks.api.auth.types.CorsAuthenticationProvider\\u0022:\\u0022CORS\\u0022,\\u0022com.atlassian.applinks.api.auth.types.OAuthAuthenticationProvider\\u0022:\\u0022OAuth\\u0022,\\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthAuthenticationProvider\\u0022:\\u0022OAuth\\u0022,\\u0022com.atlassian.applinks.api.auth.types.TwoLeggedOAuthWithImpersonationAuthenticationProvider\\u0022:\\u0022OAuth\\u0022}\";\nWRM._unparsedData[\"com.atlassian.confluence.plugins.synchrony-interop:synchrony-status-banner-loader.synchrony-status\"]=\"false\";\nWRM._unparsedData[\"com.atlassian.confluence.plugins.confluence-feature-discovery-plugin:confluence-feature-discovery-plugin-resources.test-mode\"]=\"false\";\nWRM._unparsedData[\"com.atlassian.confluence.plugins.confluence-license-banner:confluence-license-banner-resources.license-details\"]=\"{\\u0022daysBeforeLicenseExpiry\\u0022:0,\\u0022daysBeforeMaintenanceExpiry\\u0022:0,\\u0022showLicenseExpiryBanner\\u0022:false,\\u0022showMaintenanceExpiryBanner\\u0022:false,\\u0022renewUrl\\u0022:null,\\u0022salesUrl\\u0022:null}\";\nWRM._unparsedData[\"com.atlassian.confluence.plugins.confluence-search-ui-plugin:confluence-search-ui-plugin-resources.i18n-data\"]=\"{\\u0022search.ui.recent.link.text\\u0022:\\u0022View more recently visited\\u0022,\\u0022search.ui.filter.space.category.input.label\\u0022:\\u0022Find space categories...\\u0022,\\u0022search.ui.search.results.empty\\u0022:\\u0022We couldn\\u005Cu0027\\u005Cu0027t find anything matching \\u005C\\u0022{0}\\u005C\\u0022.\\u0022,\\u0022search.ui.filter.clear.selected\\u0022:\\u0022Clear selected items\\u0022,\\u0022search.ui.content.name.search.items.panel.load.all.top.items.button.text\\u0022:\\u0022Show more app results...\\u0022,\\u0022search.ui.filter.space.archive.label\\u0022:\\u0022Search archived spaces\\u0022,\\u0022search.ui.filter.label\\u0022:\\u0022filter\\u0022,\\u0022search.ui.filter.contributor.button.text\\u0022:\\u0022Contributor\\u0022,\\u0022search.ui.filter.date.all.text\\u0022:\\u0022Any time\\u0022,\\u0022search.ui.filter.space.current.label\\u0022:\\u0022CURRENT\\u0022,\\u0022search.ui.clear.input.button.text\\u0022:\\u0022Clear text\\u0022,\\u0022search.ui.search.results.clear.button\\u0022:\\u0022clear your filters.\\u0022,\\u0022search.ui.filter.date.hour.text\\u0022:\\u0022The past day\\u0022,\\u0022help.search.ui.link.title\\u0022:\\u0022Search tips\\u0022,\\u0022search.ui.filters.heading\\u0022:\\u0022Filter by\\u0022,\\u0022search.ui.filter.label.input.label\\u0022:\\u0022Find labels...\\u0022,\\u0022search.ui.recent.items.anonymous\\u0022:\\u0022Start exploring. Your search results will appear here.\\u0022,\\u0022search.ui.filter.date.month.text\\u0022:\\u0022The past month\\u0022,\\u0022search.ui.input.label\\u0022:\\u0022Search\\u0022,\\u0022search.ui.search.result\\u0022:\\u0022{0,choice,1#{0} search result|1\\u005Cu003c{0} search results}\\u0022,\\u0022search.ui.infinite.scroll.button.text\\u0022:\\u0022More results\\u0022,\\u0022search.ui.filter",
   "datamd5" : "b22d98e4b4eb84ada5eae3d9b6990108",
   "datammh3" : -2106567653,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "forward" : "13.212.168.196",
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "AMAZON-SIN",
      "organization" : "Amazon Data Services Singapore",
      "subnet" : "13.212.0.0/14"
   },
   "host" : [
      "ec2-13-212-168-196"
   ],
   "hostname" : [
      "13.212.168.196",
      "ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com"
   ],
   "ip" : "13.212.168.196",
   "ipv6" : "false",
   "latitude" : "1.2868",
   "location" : "1.2868,103.8503",
   "longitude" : "103.8503",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "port" : 4242,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-13-212-168-196.ap-southeast-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan::redirect::1",
   "status" : 200,
   "subdomains" : [
      "ap-southeast-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.208.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/./login.action"
}

  • 34.219.245.98:4242 (tcp/http) - last seen on 2024-11-21 at 10:34:08 UTC

    • IP
      34.219.245.98
      Network
      34.208.0.0/12
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://34.219.245.98:4242/ 200

      Reverse DNS
      ec2-34-219-245-98.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      97f64c9c6bf158d0d05d3f05372b5a7a
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      c25cbaf569d22e9f526ff69fe9e61bbf
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:27:08 GMT
Server: nginx
Content-Length: 583
Content-Type: text/html

<html style="background:#007cef">
<head>
<meta http-equiv="expires" content="0">
<script type='text/javascript'>
pr=(document.location.protocol == 'https:') ? 'https' : 'http';
pt=(location.port == '') ? '' : ':' + location.port;
redirect_suffix = "/redirect.html?count="+Math.random();
if(location.hostname.indexOf(':') == -1)
{
location.href=pr+"://"+location.hostname+pt+redirect_suffix;
}
else    //could be ipv6 addr
{
var url = "";
url=pr+"://["+ location.hostname.replace(/[\[\]]/g, '') +"]"+pt+redirect_suffix;
location.href = url;
}
</script>
</head>
<body>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:34:08.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "c25cbaf569d22e9f526ff69fe9e61bbf",
         "bodymmh3" : 2073015905,
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : -826540638
      },
      "length" : 719
   },
   "asn" : "AS16509",
   "city" : "Boardman",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:27:08 GMT\r\nServer: nginx\r\nContent-Length: 583\r\nContent-Type: text/html\r\n\r\n<html style=\"background:#007cef\">\n<head>\n<meta http-equiv=\"expires\" content=\"0\">\n<script type='text/javascript'>\npr=(document.location.protocol == 'https:') ? 'https' : 'http';\npt=(location.port == '') ? '' : ':' + location.port;\nredirect_suffix = \"/redirect.html?count=\"+Math.random();\nif(location.hostname.indexOf(':') == -1)\n{\nlocation.href=pr+\"://\"+location.hostname+pt+redirect_suffix;\n}\nelse    //could be ipv6 addr\n{\nvar url = \"\";\nurl=pr+\"://[\"+ location.hostname.replace(/[\\[\\]]/g, '') +\"]\"+pt+redirect_suffix;\nlocation.href = url;\n}\n</script>\n</head>\n<body>\n</body>\n</html>\n",
   "datamd5" : "97f64c9c6bf158d0d05d3f05372b5a7a",
   "datammh3" : 1079192638,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AT-88-Z",
      "organization" : "Amazon Technologies Inc.",
      "subnet" : "34.208.0.0/12"
   },
   "host" : [
      "ec2-34-219-245-98"
   ],
   "hostname" : [
      "ec2-34-219-245-98.us-west-2.compute.amazonaws.com"
   ],
   "ip" : "34.219.245.98",
   "ipv6" : "false",
   "latitude" : "45.8491",
   "location" : "45.8491,-119.7143",
   "longitude" : "-119.7143",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-34-219-245-98.us-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "us-west-2.compute.amazonaws.com"
   ],
   "subnet" : "34.208.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 54.94.12.52:4242 (tcp/http) - last seen on 2024-11-21 at 10:32:11 UTC

    • IP
      54.94.12.52
      Network
      54.94.0.0/15
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux ubuntu
      URL

      http://54.94.12.52:4242/ 200

      HTTP Title
      ASUS Wireless Router TUF-AX4200
      Reverse DNS
      ec2-54-94-12-52.sa-east-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux ubuntu
      HTTP Component(s)
      PHP PHP 5.5.9
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3f9c241929dedb018b5b50fa822db515
      HTTP Header MD5
      eefd4baf04a6787a8b489110d585dfa4
      HTTP Body MD5
      cee9a9c51330e19a6a0052bc982542ec
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:25:10 GMT
Server: OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.4
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Content-Length: 541
Content-Type: text/html
Set-Cookie: csrftoken=8shzaaAyoCI7d4BYRvYVjSVwDFV6tD0FlA5NtAYwRPr71fj1kFbUwMqXiCtOgfhO

<html><head><link rel="icon" href="/favicon_dcc0435f-2be4-4414-b971-d9ffeaa47ea3.ico"><title>ASUS Wireless Router TUF-AX4200</title></head><body><h2>8ao7tj7h9y9ucywsj9hezswz</h2><h2>q954rjmv48bhnc9rxfiw</h2><h1>m8x8pi4oefe117hls</h1><p>bphwmb</p><h1>x53ykuw4j75h</h1><h1>geu39kvrbf</h1><div>33jykwrmmv</div><h1>h1i7vl4lvfeg83zvis7wr32bdoit5y</h1><h2>nqkaknq7</h2><h3>1d8sjr</h3><p>y6etty4jd</p><h3>lc4oqlp056zkao5vot1wzkg7l5</h3><p>90u0359clnnn5zz</p><h2>jb1h0qm0bubx6e19</h2><div>phuksaxcj0a0y61yx9</div><span>x8ci8o0qb</span></body></html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:32:11.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "cee9a9c51330e19a6a0052bc982542ec",
         "bodymmh3" : 1415978017,
         "component" : [
            {
               "productvendor" : "PHP",
               "productversion" : "5.5.9",
               "product" : "PHP"
            }
         ],
         "headermd5" : "eefd4baf04a6787a8b489110d585dfa4",
         "headermmh3" : -2133198998,
         "title" : "ASUS Wireless Router TUF-AX4200"
      },
      "length" : 836
   },
   "asn" : "AS16509",
   "city" : "S\u00e3o Paulo",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:25:10 GMT\r\nServer: OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.4\r\nX-Powered-By: PHP/5.5.9-1ubuntu4.21\r\nContent-Length: 541\r\nContent-Type: text/html\r\nSet-Cookie: csrftoken=8shzaaAyoCI7d4BYRvYVjSVwDFV6tD0FlA5NtAYwRPr71fj1kFbUwMqXiCtOgfhO\r\n\r\n<html><head><link rel=\"icon\" href=\"/favicon_dcc0435f-2be4-4414-b971-d9ffeaa47ea3.ico\"><title>ASUS Wireless Router TUF-AX4200</title></head><body><h2>8ao7tj7h9y9ucywsj9hezswz</h2><h2>q954rjmv48bhnc9rxfiw</h2><h1>m8x8pi4oefe117hls</h1><p>bphwmb</p><h1>x53ykuw4j75h</h1><h1>geu39kvrbf</h1><div>33jykwrmmv</div><h1>h1i7vl4lvfeg83zvis7wr32bdoit5y</h1><h2>nqkaknq7</h2><h3>1d8sjr</h3><p>y6etty4jd</p><h3>lc4oqlp056zkao5vot1wzkg7l5</h3><p>90u0359clnnn5zz</p><h2>jb1h0qm0bubx6e19</h2><div>phuksaxcj0a0y61yx9</div><span>x8ci8o0qb</span></body></html>",
   "datamd5" : "3f9c241929dedb018b5b50fa822db515",
   "datammh3" : -931594398,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "AMAZON-GRU",
      "organization" : "Amazon Data Services Brazil",
      "subnet" : "54.94.0.0/16"
   },
   "host" : [
      "ec2-54-94-12-52"
   ],
   "hostname" : [
      "ec2-54-94-12-52.sa-east-1.compute.amazonaws.com"
   ],
   "ip" : "54.94.12.52",
   "ipv6" : "false",
   "latitude" : "-23.5335",
   "location" : "-23.5335,-46.6359",
   "longitude" : "-46.6359",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux",
   "osdistribution" : "ubuntu",
   "osvendor" : "Linux",
   "port" : 4242,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-54-94-12-52.sa-east-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "sa-east-1.compute.amazonaws.com"
   ],
   "subnet" : "54.94.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 35.159.166.142:4242 (tcp/http) - last seen on 2024-11-21 at 10:31:15 UTC

    • IP
      35.159.166.142
      Network
      35.156.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Juniper JunOS
      URL

      http://35.159.166.142:4242/ 200

      HTTP Title
      Ivanti Connect Secure
      Reverse DNS
      ec2-35-159-166-142.eu-central-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Juniper JunOS
      HTTP Component(s)
      Ivanti Connect Secure
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b6d3a241174e5fbb65d88768f526cc4f
      HTTP Header MD5
      2ad59f08560ff26dde50963eb249438d
      HTTP Body MD5
      41fdbc9650454476e99026bd7f1a5217
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:24:07 GMT
Content-Length: 4680
Content-Type: text/html

<html lang="en">
   <head>
      <meta http-equiv="Content-Language">
      <meta http-equiv="Content-Type" content="text/html">
      <meta name="robots" content="none">
      <link rel="icon" href="/Product_favicon.png" type="image/png">
      <title>Ivanti Connect Secure</title>
   </head>
   <body onload="FinishLoad(1);hideJSWarn();setWin11();" bgcolor="#FFFFFF" color="#000000" link="#3366CC" vlink="#CC6699" alink="#3366CC" leftmargin="0" topmargin="0" rightmargin="0" marginwidth="0" marginheight="0">
      <table id="table_LoginPage_1" border="0" width="100%" cellspacing="0" cellpadding="3">
         <tr>
            <td bgcolor="#FFFFFF"></td>
            <td bgcolor="#FFFFFF" align="right">&nbsp;</td>
         </tr>
      </table>
      <table id="table_LoginPage_2" cellpadding="0" cellspacing="0" border="0" width="100%">
         <tr>
            <td bgcolor="#000000" colspan="2"></td>
         </tr>
      </table>
      <blockquote>
         <form id="frmLogin_4" name="frmLogin" action="login.cgi" method="POST" autocomplete="off" onsubmit="return Login(1)">
            <input id="tz_offset_5" type="hidden" name="tz_offset">
            <input id="win11" type="hidden" name="win11" value="">
            <input id="uach" type="hidden" name="uach" value="">
            <input id="client_mac" type="hidden" name="clientMAC" value="">
            <input id="xsauth_token" type="hidden" name="xsauth_token" value="58fefe3c1b2717c8845c0d630ab035c3">
            <table id="table_LoginPage_3" border="0" cellpadding="2" cellspacing="0">
               <tr>
                  <td nowrap  colspan="3"><b>Welcome to</b></td>
               </tr>
               <tr>
                  <td nowrap  colspan="3"><span class="cssLarge"><b>Ivanti Connect Secure</b></span></td>
               </tr>
               <tr>
                  <td colspan="3">&nbsp;</td>
               </tr>
               <tr>
                  <td valign="top">
                     <table id="table_LoginPage_6" border="0" cellspacing="0" cellpadding="2">
                        <tr>
                           <td><label for="username">Username</label></td>
                           <td>&nbsp;</td>
                           <td><input id="username" type="text" name="username" size="20"></td>
                        </tr>
                        <tr>
                           <td><label for="password">Password</label></td>
                           <td>&nbsp;</td>
                           <td><input id="password" type="password" name="password" size="20"></td>
                        </tr>
                        <tr>                                                                <input id="realm_16" type="hidden" name="realm" value="OTS User Realm">                                                </tr>
                        <tr>
                           <td colspan="3">&nbsp;</td>
                        </tr>
                        <tr>
                           <td>&nbsp;</td>
                           <td>&nbsp;</td>
                           <td><input id="btnSubmit_6" type="submit" value="Sign In" name="btnSubmit">&nbsp;</td>
                        </tr>
                     </table>
                  </td>
                  <td valign="top">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
                  <td valign="top">
                     <table tabindex="1" aria-label="instructions for user login page FILTER verbatim" role="alert" id="TABLE_LoginPage_1" border="0" cellspacing="0" cellpadding="2">
                        <tr>
                           <td>
                              Please sign in to begin your secure session.<br><br>
                              <noscript>Note: Javascript is disabled on your browser.</noscript>
                        </tr>
                        </td>
                     </table>
                  </td>
               </tr>
            </table>
         </form>
      </blockquote>
      <table id="table_LoginPage_9" border="0" cellspacing="0" cellpadding="0" width="100%">
         <tr>
            <td>
               <table id="table_LoginPage_10" cellpadding="0" cellspacing="0" border="0" width="100%">
                  <tr>
                     <td></td>
                     <td></td>
                     <td></td>
                  </tr>
                  <tr valign="top">
                     <td></td>
                     <td nowrap ><br><br><br><br>
                     <td align="right"></td>
                  </tr>
               </table>
            </td>
         </tr>
         <tr>
            <td colspan="2"></td>
         </tr>
      </table>
   </body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:31:15.000Z",
   "app" : {
      "extract" : {
         "file" : [
            "login.cgi"
         ]
      },
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "41fdbc9650454476e99026bd7f1a5217",
         "bodymmh3" : -766336104,
         "component" : [
            {
               "productvendor" : "Ivanti",
               "product" : "Connect Secure"
            }
         ],
         "headermd5" : "2ad59f08560ff26dde50963eb249438d",
         "headermmh3" : 970015065,
         "title" : "Ivanti Connect Secure"
      },
      "length" : 4802
   },
   "asn" : "AS16509",
   "city" : "Frankfurt am Main",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:24:07 GMT\r\nContent-Length: 4680\r\nContent-Type: text/html\r\n\r\n<html lang=\"en\">\n   <head>\n      <meta http-equiv=\"Content-Language\">\n      <meta http-equiv=\"Content-Type\" content=\"text/html\">\n      <meta name=\"robots\" content=\"none\">\n      <link rel=\"icon\" href=\"/Product_favicon.png\" type=\"image/png\">\n      <title>Ivanti Connect Secure</title>\n   </head>\n   <body onload=\"FinishLoad(1);hideJSWarn();setWin11();\" bgcolor=\"#FFFFFF\" color=\"#000000\" link=\"#3366CC\" vlink=\"#CC6699\" alink=\"#3366CC\" leftmargin=\"0\" topmargin=\"0\" rightmargin=\"0\" marginwidth=\"0\" marginheight=\"0\">\n      <table id=\"table_LoginPage_1\" border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"3\">\n         <tr>\n            <td bgcolor=\"#FFFFFF\"></td>\n            <td bgcolor=\"#FFFFFF\" align=\"right\">&nbsp;</td>\n         </tr>\n      </table>\n      <table id=\"table_LoginPage_2\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n         <tr>\n            <td bgcolor=\"#000000\" colspan=\"2\"></td>\n         </tr>\n      </table>\n      <blockquote>\n         <form id=\"frmLogin_4\" name=\"frmLogin\" action=\"login.cgi\" method=\"POST\" autocomplete=\"off\" onsubmit=\"return Login(1)\">\n            <input id=\"tz_offset_5\" type=\"hidden\" name=\"tz_offset\">\n            <input id=\"win11\" type=\"hidden\" name=\"win11\" value=\"\">\n            <input id=\"uach\" type=\"hidden\" name=\"uach\" value=\"\">\n            <input id=\"client_mac\" type=\"hidden\" name=\"clientMAC\" value=\"\">\n            <input id=\"xsauth_token\" type=\"hidden\" name=\"xsauth_token\" value=\"58fefe3c1b2717c8845c0d630ab035c3\">\n            <table id=\"table_LoginPage_3\" border=\"0\" cellpadding=\"2\" cellspacing=\"0\">\n               <tr>\n                  <td nowrap  colspan=\"3\"><b>Welcome to</b></td>\n               </tr>\n               <tr>\n                  <td nowrap  colspan=\"3\"><span class=\"cssLarge\"><b>Ivanti Connect Secure</b></span></td>\n               </tr>\n               <tr>\n                  <td colspan=\"3\">&nbsp;</td>\n               </tr>\n               <tr>\n                  <td valign=\"top\">\n                     <table id=\"table_LoginPage_6\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n                        <tr>\n                           <td><label for=\"username\">Username</label></td>\n                           <td>&nbsp;</td>\n                           <td><input id=\"username\" type=\"text\" name=\"username\" size=\"20\"></td>\n                        </tr>\n                        <tr>\n                           <td><label for=\"password\">Password</label></td>\n                           <td>&nbsp;</td>\n                           <td><input id=\"password\" type=\"password\" name=\"password\" size=\"20\"></td>\n                        </tr>\n                        <tr>                                                                <input id=\"realm_16\" type=\"hidden\" name=\"realm\" value=\"OTS User Realm\">                                                </tr>\n                        <tr>\n                           <td colspan=\"3\">&nbsp;</td>\n                        </tr>\n                        <tr>\n                           <td>&nbsp;</td>\n                           <td>&nbsp;</td>\n                           <td><input id=\"btnSubmit_6\" type=\"submit\" value=\"Sign In\" name=\"btnSubmit\">&nbsp;</td>\n                        </tr>\n                     </table>\n                  </td>\n                  <td valign=\"top\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>\n                  <td valign=\"top\">\n                     <table tabindex=\"1\" aria-label=\"instructions for user login page FILTER verbatim\" role=\"alert\" id=\"TABLE_LoginPage_1\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n                        <tr>\n                           <td>\n                              Please sign in to begin your secure session.<br><br>\n                              <noscript>Note: Javascript is disabled on your browser.</noscript>\n                        </tr>\n                        </td>\n                     </table>\n                  </td>\n               </tr>\n            </table>\n         </form>\n      </blockquote>\n      <table id=\"table_LoginPage_9\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\">\n         <tr>\n            <td>\n               <table id=\"table_LoginPage_10\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n                  <tr>\n                     <td></td>\n                     <td></td>\n                     <td></td>\n                  </tr>\n                  <tr valign=\"top\">\n                     <td></td>\n                     <td nowrap ><br><br><br><br>\n                     <td align=\"right\"></td>\n                  </tr>\n               </table>\n            </td>\n         </tr>\n         <tr>\n            <td colspan=\"2\"></td>\n         </tr>\n      </table>\n   </body>\n</html>\n",
   "datamd5" : "b6d3a241174e5fbb65d88768f526cc4f",
   "datammh3" : 1285816960,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "AMAZO-ZFRA",
      "organization" : "A100 ROW GmbH",
      "subnet" : "35.156.0.0/14"
   },
   "host" : [
      "ec2-35-159-166-142"
   ],
   "hostname" : [
      "ec2-35-159-166-142.eu-central-1.compute.amazonaws.com"
   ],
   "ip" : "35.159.166.142",
   "ipv6" : "false",
   "latitude" : "50.1187",
   "location" : "50.1187,8.6842",
   "longitude" : "8.6842",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "JunOS",
   "osvendor" : "Juniper",
   "port" : 4242,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-35-159-166-142.eu-central-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "eu-central-1.compute.amazonaws.com"
   ],
   "subnet" : "35.156.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 51.17.240.84:4242 (tcp/http) - last seen on 2024-11-21 at 10:20:31 UTC

    • IP
      51.17.240.84
      Network
      51.16.0.0/15
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://51.17.240.84:4242/ 404

      HTTP Title
      Error 404--Not Found
      Reverse DNS
      ec2-51-17-240-84.il-central-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Oracle Weblogic Server 10.3.6.0.0
      HTTP Component(s)
      Oracle Weblogic Server
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e26e7874bcd5613de7a73a09bb31100c
      HTTP Header MD5
      522c4e821ae16fa1f93f1ac71c0e412a
      HTTP Body MD5
      693ba5c2587c2994de7843b9c3c9e384 
    • HTTP/1.1 404 Not Found
Connection: close
Date: Thu, 21 Nov 2024 10:20:31 GMT
Server: WebLogic Server 10.3.6.0.0
Content-Type: text/html
Content-Length: 1766

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Draft//EN">
<HTML>
    <HEAD>
        <TITLE>Error 404--Not Found</TITLE>
    </HEAD>
    <BODY bgcolor="white">
        <FONT FACE=Helvetica><BR CLEAR=all>
        <TABLE border=0 cellspacing=5>
            <TR>
                <TD>
                    <BR CLEAR=all>
                    <FONT FACE="Helvetica" COLOR="black" SIZE="3">
                        <H2>Error 404--Not Found</H2>
                    </FONT>
                </TD>
            </TR>
        </TABLE>
        <TABLE border=0 width=100% cellpadding=10>
            <TR>
                <TD VALIGN=top WIDTH=100% BGCOLOR=white>
                    <FONT FACE="Courier New">
                        <FONT FACE="Helvetica" SIZE="3">
                            <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>
                        </FONT>
                        <FONT FACE="Helvetica" SIZE="3">
                            <H4>10.4.5 404 Not Found</H4>
                        </FONT>
                        <P>
                            <FONT FACE="Courier New">
                                The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.
                        </p>
                        <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>
                    </FONT>
                </TD>
            </TR>
        </TABLE>
    </BODY>
</HTML>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:20:31.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "10.3.6.0"
         ]
      },
      "http" : {
         "bodymd5" : "693ba5c2587c2994de7843b9c3c9e384",
         "bodymmh3" : -369160404,
         "component" : [
            {
               "product" : "Weblogic Server",
               "productvendor" : "Oracle"
            }
         ],
         "headermd5" : "522c4e821ae16fa1f93f1ac71c0e412a",
         "headermmh3" : 1684615485,
         "title" : "Error 404--Not Found"
      },
      "length" : 1931
   },
   "asn" : "AS16509",
   "city" : "Tel Aviv",
   "country" : "IL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 404 Not Found\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:20:31 GMT\r\nServer: WebLogic Server 10.3.6.0.0\r\nContent-Type: text/html\r\nContent-Length: 1766\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Draft//EN\">\n<HTML>\n    <HEAD>\n        <TITLE>Error 404--Not Found</TITLE>\n    </HEAD>\n    <BODY bgcolor=\"white\">\n        <FONT FACE=Helvetica><BR CLEAR=all>\n        <TABLE border=0 cellspacing=5>\n            <TR>\n                <TD>\n                    <BR CLEAR=all>\n                    <FONT FACE=\"Helvetica\" COLOR=\"black\" SIZE=\"3\">\n                        <H2>Error 404--Not Found</H2>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n        <TABLE border=0 width=100% cellpadding=10>\n            <TR>\n                <TD VALIGN=top WIDTH=100% BGCOLOR=white>\n                    <FONT FACE=\"Courier New\">\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>\n                        </FONT>\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H4>10.4.5 404 Not Found</H4>\n                        </FONT>\n                        <P>\n                            <FONT FACE=\"Courier New\">\n                                The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.\n                        </p>\n                        <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n    </BODY>\n</HTML>",
   "datamd5" : "e26e7874bcd5613de7a73a09bb31100c",
   "datammh3" : 1679174131,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "host" : [
      "ec2-51-17-240-84"
   ],
   "hostname" : [
      "ec2-51-17-240-84.il-central-1.compute.amazonaws.com"
   ],
   "ip" : "51.17.240.84",
   "ipv6" : "false",
   "latitude" : "32.0803",
   "location" : "32.0803,34.7805",
   "longitude" : "34.7805",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "product" : "Weblogic Server",
   "productvendor" : "Oracle",
   "productversion" : "10.3.6.0.0",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Not Found",
   "reverse" : [
      "ec2-51-17-240-84.il-central-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 404,
   "subdomains" : [
      "compute.amazonaws.com",
      "il-central-1.compute.amazonaws.com"
   ],
   "subnet" : "51.16.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 52.67.212.168:4242 (tcp/http) - last seen on 2024-11-21 at 10:17:48 UTC

    • IP
      52.67.212.168
      Network
      52.64.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://52.67.212.168:4242/ 200

      HTTP Title
      Dashboard [Jenkins]
      Reverse DNS
      ec2-52-67-212-168.sa-east-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      HTTP Component(s)
      PHP PHP 5.4.7
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      85e19b30f852feba3313c9b7c5ebeb1e
      HTTP Header MD5
      c5d6bfafee938be631a67f30b700e410
      HTTP Body MD5
      9a540776364cff54e369e9aa8a4aec2e 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:17:48 GMT
Server: JRun/3.1
X-Powered-By: PHP/5.4.7
Content-Length: 488
Content-Type: text/html
Set-Cookie: csrftoken=xUVT38ZW4JYsiGi8y6qMdXDwylwhIeRS

<html><head><link rel="icon" href="/favicon_7e5ce8fe-7928-442e-b0fa-e6d283142f94.ico"><title>Dashboard [Jenkins]</title></head><body><h2>pbvovfosgcpj1hxsbghy2ph</h2><p>eddl8zu47d2pzuea5mqdqshkx</p><p>ugzcohlv7</p><h1>zhykv5cwc</h1><div>x5dg4pkxiee</div><h3>q9gkbbdhd7zb8vcjgsfcc6slbl6l1</h3><h1>qz226afx3tjambz6ad</h1><p>hrjkfa0n21ri4cxgvrx2o5evpvr2t2</p><span>a15fjwzx4pi9p8bjb3ityvu76h</span><span>5560x0e</span><h3>lkdo68any4pt67k5r</h3><p>yz5l68d0uwqzbsir442ik9tjykk</p></body></html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:17:48.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "9a540776364cff54e369e9aa8a4aec2e",
         "bodymmh3" : -1985928424,
         "component" : [
            {
               "productvendor" : "PHP",
               "productversion" : "5.4.7",
               "product" : "PHP"
            }
         ],
         "headermd5" : "c5d6bfafee938be631a67f30b700e410",
         "headermmh3" : 839082322,
         "title" : "Dashboard [Jenkins]"
      },
      "length" : 708
   },
   "asn" : "AS16509",
   "city" : "S\u00e3o Paulo",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:17:48 GMT\r\nServer: JRun/3.1\r\nX-Powered-By: PHP/5.4.7\r\nContent-Length: 488\r\nContent-Type: text/html\r\nSet-Cookie: csrftoken=xUVT38ZW4JYsiGi8y6qMdXDwylwhIeRS\r\n\r\n<html><head><link rel=\"icon\" href=\"/favicon_7e5ce8fe-7928-442e-b0fa-e6d283142f94.ico\"><title>Dashboard [Jenkins]</title></head><body><h2>pbvovfosgcpj1hxsbghy2ph</h2><p>eddl8zu47d2pzuea5mqdqshkx</p><p>ugzcohlv7</p><h1>zhykv5cwc</h1><div>x5dg4pkxiee</div><h3>q9gkbbdhd7zb8vcjgsfcc6slbl6l1</h3><h1>qz226afx3tjambz6ad</h1><p>hrjkfa0n21ri4cxgvrx2o5evpvr2t2</p><span>a15fjwzx4pi9p8bjb3ityvu76h</span><span>5560x0e</span><h3>lkdo68any4pt67k5r</h3><p>yz5l68d0uwqzbsir442ik9tjykk</p></body></html>",
   "datamd5" : "85e19b30f852feba3313c9b7c5ebeb1e",
   "datammh3" : 632514926,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "AMAZON-GRU",
      "organization" : "Amazon Data Services Brazil",
      "subnet" : "52.67.0.0/16"
   },
   "host" : [
      "ec2-52-67-212-168"
   ],
   "hostname" : [
      "ec2-52-67-212-168.sa-east-1.compute.amazonaws.com"
   ],
   "ip" : "52.67.212.168",
   "ipv6" : "false",
   "latitude" : "-23.5335",
   "location" : "-23.5335,-46.6359",
   "longitude" : "-46.6359",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-52-67-212-168.sa-east-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "sa-east-1.compute.amazonaws.com"
   ],
   "subnet" : "52.64.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 18.181.179.236:4242 (tcp/http) - last seen on 2024-11-21 at 10:14:59 UTC

    • IP
      18.181.179.236
      Network
      18.176.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://18.181.179.236:4242/ 200

      HTTP Title
      Mirth Connect Administrator
      Reverse DNS
      ec2-18-181-179-236.ap-northeast-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      jQuery jQuery 1.7.1 NextGen Mirth Connect
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      30c431446b838093fee570cf89c7a17d
      HTTP Header MD5
      cefa2231bee65b475f8904acbdba293e
      HTTP Body MD5
      7b724ebb4da17721f96e0a76b46163ef 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:14:59 GMT
Server: nginx
Content-Security-Policy: frame-ancestors 'none'
X-Frame-Options: DENY
Content-Language: en-US
Expires: Thu, 21 Nov 2024 10:14:59 GMT
Content-Type: text/html;charset=iso-8859-1
Content-Length: 3676

<!doctype html>
<html>
<head>
        <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
        <meta http-equiv="x-ua-compatible" content="IE=edge">
        <meta http-equiv="cache-control" content="no-cache">
        <meta http-equiv="cache-control" content="no-store">

        <title>Mirth Connect Administrator</title>

        <link rel="shortcut icon" type="image/x-icon" href="images/favicon.ico" />
        <link rel="stylesheet" type="text/css" href="css/bootstrap.css" />
        <link rel="stylesheet" type="text/css" href="css/main.css" />

        <script type="text/javascript">
                /* Break out of frame if inside a frame. */
                if (window != window.top) {
                        window.top.location = window.location;
                }
        </script>

        <script type="text/javascript" src="js/jquery-1.7.1.min.js"></script>
</head>

<body id="body" style="display:none;" class="subpage">
        <div id="centerWrapper">
                <div class="row">
                        <div style="padding: 10px; text-align: center;">
                                <img id="mirthLogo" src="images/mirthconnectlogowide.png"/>
                        </div>

                        <div id="mcadministrator" class="span9">
                                <h1 style="text-align: center;">Mirth Connect Administrator</h1>

                                <div class="help-block">
                                        <strong>Overview of Web Start:</strong><br /> Java Web Start is a framework developed by Sun Microsystems
                                        that enables launching Java applications directly from a browser.
                                        Unlike Java applets, Web Start applications do not run inside the
                                        browser.
                                </div>
                                <div class="help-block">
                                        <br/>Click the big green button below to launch the Mirth Connect
                                        Administrator using Java Web Start.
                                </div>

                                <div style="text-align: center; margin-top: 10px;">
                                        <a class="btn btn-large btn-themebutton" type="submit" href="javascript:launchAdministrator()">Launch Mirth Connect Administrator</a>
                                </div>
                        </div>
                </div>
        </div>

        <footer class="smallSubPage" style="width:100%;">
                <table>
                        <tr>
                                <td style="text-align: center;">&copy; 2017 Mirth Corporation | Mirth Connect</td>
                        </tr>
                </table>
        </footer>

        <script type="text/javascript">
                $(document).ready(function() {
                        $.ajax({
                            type: 'HEAD',
                            url: 'webadmin/Index.action',
                                success: function() {
                                        window.location.replace("webadmin/Index.action");
                                },
                                error: function() {
                                        $("#body").css("display", "inline");
                                }
                        });
                });
        </script>

    <script type="text/javascript">
                function launchAdministrator(){
                window.location.href = 'webstart.jnlp?time=' + new Date().getTime();
                }
        </script>
</body>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:14:59.000Z",
   "app" : {
      "favicon" : {
         "url" : "/images/favicon.ico"
      },
      "http" : {
         "bodymd5" : "7b724ebb4da17721f96e0a76b46163ef",
         "bodymmh3" : 494211827,
         "component" : [
            {
               "product" : "jQuery",
               "productvendor" : "jQuery",
               "productversion" : "1.7.1"
            },
            {
               "productvendor" : "NextGen",
               "product" : "Mirth Connect"
            }
         ],
         "headermd5" : "cefa2231bee65b475f8904acbdba293e",
         "headermmh3" : -910959220,
         "title" : "Mirth Connect Administrator"
      },
      "length" : 3969
   },
   "asn" : "AS16509",
   "city" : "Tokyo",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:14:59 GMT\r\nServer: nginx\r\nContent-Security-Policy: frame-ancestors 'none'\r\nX-Frame-Options: DENY\r\nContent-Language: en-US\r\nExpires: Thu, 21 Nov 2024 10:14:59 GMT\r\nContent-Type: text/html;charset=iso-8859-1\r\nContent-Length: 3676\r\n\r\n<!doctype html>\n<html>\n<head>\n        <meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\">\n        <meta http-equiv=\"x-ua-compatible\" content=\"IE=edge\">\n        <meta http-equiv=\"cache-control\" content=\"no-cache\">\n        <meta http-equiv=\"cache-control\" content=\"no-store\">\n\n        <title>Mirth Connect Administrator</title>\n\n        <link rel=\"shortcut icon\" type=\"image/x-icon\" href=\"images/favicon.ico\" />\n        <link rel=\"stylesheet\" type=\"text/css\" href=\"css/bootstrap.css\" />\n        <link rel=\"stylesheet\" type=\"text/css\" href=\"css/main.css\" />\n\n        <script type=\"text/javascript\">\n                /* Break out of frame if inside a frame. */\n                if (window != window.top) {\n                        window.top.location = window.location;\n                }\n        </script>\n\n        <script type=\"text/javascript\" src=\"js/jquery-1.7.1.min.js\"></script>\n</head>\n\n<body id=\"body\" style=\"display:none;\" class=\"subpage\">\n        <div id=\"centerWrapper\">\n                <div class=\"row\">\n                        <div style=\"padding: 10px; text-align: center;\">\n                                <img id=\"mirthLogo\" src=\"images/mirthconnectlogowide.png\"/>\n                        </div>\n\n                        <div id=\"mcadministrator\" class=\"span9\">\n                                <h1 style=\"text-align: center;\">Mirth Connect Administrator</h1>\n\n                                <div class=\"help-block\">\n                                        <strong>Overview of Web Start:</strong><br /> Java Web Start is a framework developed by Sun Microsystems\n                                        that enables launching Java applications directly from a browser.\n                                        Unlike Java applets, Web Start applications do not run inside the\n                                        browser.\n                                </div>\n                                <div class=\"help-block\">\n                                        <br/>Click the big green button below to launch the Mirth Connect\n                                        Administrator using Java Web Start.\n                                </div>\n\n                                <div style=\"text-align: center; margin-top: 10px;\">\n                                        <a class=\"btn btn-large btn-themebutton\" type=\"submit\" href=\"javascript:launchAdministrator()\">Launch Mirth Connect Administrator</a>\n                                </div>\n                        </div>\n                </div>\n        </div>\n\n        <footer class=\"smallSubPage\" style=\"width:100%;\">\n                <table>\n                        <tr>\n                                <td style=\"text-align: center;\">&copy; 2017 Mirth Corporation | Mirth Connect</td>\n                        </tr>\n                </table>\n        </footer>\n\n        <script type=\"text/javascript\">\n                $(document).ready(function() {\n                        $.ajax({\n                            type: 'HEAD',\n                            url: 'webadmin/Index.action',\n                                success: function() {\n                                        window.location.replace(\"webadmin/Index.action\");\n                                },\n                                error: function() {\n                                        $(\"#body\").css(\"display\", \"inline\");\n                                }\n                        });\n                });\n        </script>\n\n    <script type=\"text/javascript\">\n                function launchAdministrator(){\n                window.location.href = 'webstart.jnlp?time=' + new Date().getTime();\n                }\n        </script>\n</body>\n",
   "datamd5" : "30c431446b838093fee570cf89c7a17d",
   "datammh3" : -571663190,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS14618",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "AMAZON-NRT",
      "organization" : "Amazon Data Services Japan",
      "subnet" : "18.180.0.0/15"
   },
   "host" : [
      "ec2-18-181-179-236"
   ],
   "hostname" : [
      "ec2-18-181-179-236.ap-northeast-1.compute.amazonaws.com"
   ],
   "ip" : "18.181.179.236",
   "ipv6" : "false",
   "latitude" : "35.6893",
   "location" : "35.6893,139.6899",
   "longitude" : "139.6899",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-18-181-179-236.ap-northeast-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "ap-northeast-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "18.176.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 18.202.215.214:4242 (tcp/http) - last seen on 2024-11-21 at 10:14:33 UTC

    • IP
      18.202.215.214
      Network
      18.200.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://18.202.215.214:4242/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      ec2-18-202-215-214.eu-west-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      48019056dae86f0ecd4f30cd411f6b9d
      HTTP Header MD5
      b651698532891d90e07d7ec88aeb4a18
      HTTP Body MD5
      248381a99d710dd6be65116a0a873d31 
    • HTTP/1.1 400 Bad Request
Server: awselb/2.0
Date: Thu, 21 Nov 2024 10:14:33 GMT
Content-Type: text/html
Content-Length: 220
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:14:33.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "248381a99d710dd6be65116a0a873d31",
         "bodymmh3" : -1044839222,
         "headermd5" : "b651698532891d90e07d7ec88aeb4a18",
         "headermmh3" : 1927839301,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 370
   },
   "asn" : "AS16509",
   "city" : "Dublin",
   "country" : "IE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: awselb/2.0\r\nDate: Thu, 21 Nov 2024 10:14:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 220\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "48019056dae86f0ecd4f30cd411f6b9d",
   "datammh3" : -1673766030,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "IE",
      "countryname" : "Ireland",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "true",
      "latitude" : "53.41291",
      "location" : "53.41291,-8.24389",
      "longitude" : "-8.24389",
      "netname" : "AMAZON-DUB",
      "organization" : "Amazon Data Services Ireland Limited",
      "subnet" : "18.202.0.0/15"
   },
   "host" : [
      "ec2-18-202-215-214"
   ],
   "hostname" : [
      "ec2-18-202-215-214.eu-west-1.compute.amazonaws.com"
   ],
   "ip" : "18.202.215.214",
   "ipv6" : "false",
   "latitude" : "53.3379",
   "location" : "53.3379,-6.2591",
   "longitude" : "-6.2591",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "ec2-18-202-215-214.eu-west-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "compute.amazonaws.com",
      "eu-west-1.compute.amazonaws.com"
   ],
   "subnet" : "18.200.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 52.38.222.176:4242 (tcp/http) - last seen on 2024-11-21 at 10:13:56 UTC

    • IP
      52.38.222.176
      Network
      52.32.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://52.38.222.176:4242/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      ec2-52-38-222-176.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      48019056dae86f0ecd4f30cd411f6b9d
      HTTP Header MD5
      b651698532891d90e07d7ec88aeb4a18
      HTTP Body MD5
      248381a99d710dd6be65116a0a873d31 
    • HTTP/1.1 400 Bad Request
Server: awselb/2.0
Date: Thu, 21 Nov 2024 10:13:56 GMT
Content-Type: text/html
Content-Length: 220
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:13:56.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "248381a99d710dd6be65116a0a873d31",
         "bodymmh3" : -1044839222,
         "headermd5" : "b651698532891d90e07d7ec88aeb4a18",
         "headermmh3" : 1291158567,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 370
   },
   "asn" : "AS16509",
   "city" : "Boardman",
   "country" : "US",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: awselb/2.0\r\nDate: Thu, 21 Nov 2024 10:13:56 GMT\r\nContent-Type: text/html\r\nContent-Length: 220\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "48019056dae86f0ecd4f30cd411f6b9d",
   "datammh3" : -1673766030,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AT-88-Z",
      "organization" : "Amazon Technologies Inc.",
      "subnet" : "52.32.0.0/13"
   },
   "host" : [
      "ec2-52-38-222-176"
   ],
   "hostname" : [
      "ec2-52-38-222-176.us-west-2.compute.amazonaws.com"
   ],
   "ip" : "52.38.222.176",
   "ipv6" : "false",
   "latitude" : "45.8491",
   "location" : "45.8491,-119.7143",
   "longitude" : "-119.7143",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4242,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "ec2-52-38-222-176.us-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "compute.amazonaws.com",
      "us-west-2.compute.amazonaws.com"
   ],
   "subnet" : "52.32.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}