ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 2,320 in 0.044 second(s)

  • 18.142.105.171:4786 (tcp/http) - last seen on 2024-11-21 at 10:21:07 UTC

    • IP
      18.142.105.171
      Network
      18.140.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://18.142.105.171:4786/ 200

      HTTP Title
      ServiceNow
      Reverse DNS
      ec2-18-142-105-171.ap-southeast-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8fa99d6203111ea7c849f7781cd918ff
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      455a6a60e799d8ef8c09cad5e1100d47
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:14:56 GMT
Server: nginx
Content-Length: 46782
Content-Type: text/html

<!DOCTYPE html><html lang="en" class=" ltr " data-doctype="true" dir="ltr" ontouchend="CustomEvent.fireAll('body_clicked', event);" onclick="CustomEvent.fireAll('body_clicked', event);"><head><script type="text/javascript"></script><title>ServiceNow</title><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"></meta><meta http-equiv="cache-control" content="public"></meta><script src="/uxasset/externals/service-worker/loader.jsdbx?sysparm_substitute=false"></script><script>var mswDisabledValue = "false";
                        var disabled = mswDisabledValue === 'true' ? true : false;
                        var serviceWorkers = JSON.parse("[{\"scope\":\"/\",\"serviceWorkerUrl\":\"/uxsw/scope/root.js\"},{\"scope\":\"/x\",\"serviceWorkerUrl\":\"/uxsw/scope/now_x.js\"},{\"scope\":\"/now\",\"serviceWorkerUrl\":\"/uxsw/scope/now_x.js\"}]");
                        var SERVICE_WORKER_MANAGER_CONFIG = {disabled, serviceWorkers};
                        if (window.serviceWorkerManager) window.serviceWorkerManager.init(SERVICE_WORKER_MANAGER_CONFIG);</script><meta name="viewport" content="initial-scale=1.0"></meta><script type="text/javascript" data-description="globals population">
        window.NOW = window.NOW || {};
        var g_loadTime = new Date();
        var lastActivity = new Date();
        var g_lang = 'en';
        var g_system_lang = 'en';
        var g_enhanced_activated = 'true';
          var g_popup_timeout = parseInt(100);
        var g_export_warn_threshold = parseInt(10000);
          var g_event_handler_ids = {};
        var g_event_handlers = [];
        var g_event_handlers_onLoad = [];
        var g_event_handlers_onSubmit = [];
        var g_event_handlers_onChange = [];
        var g_event_handlers_onCellEdit = {};
        var g_event_handlers_localCache = {};
        var g_event_handlers_queryTracking = true;
        var g_user_date_time_format = "yyyy-MM-dd HH:mm:ss";
        var g_user_date_format = "yyyy-MM-dd";
        var g_user_decimal_separator = ".";
        var g_user_grouping_separator = ",";
        var g_glide_list_separator = ", ";
        var g_allow_field_dependency_for_templates = ("true" === "true");
        var g_tz_offset = 0;
          var g_tz_user_offset = true;
        var g_first_day_of_week = parseInt(1, 10);
        var g_date_picker_first_day_of_week = parseInt(0, 10);
          var g_full_calendar_edit = true;
        var g_submitted = false;
        var g_max_table_length = 80;
        var g_fontSizePreference = "";
        var g_fontSize = "10pt";
        // use to be the sys_property glide.ui.js_error_notify, hard coded for PRB603998
        var g_jsErrorNotify = "true";
        var g_cancelPreviousTransaction = true;
        var g_text_direction = "ltr";
        var g_glide_list_filter_max_length =  parseInt("0", 10);
        var g_accessibility = false;
        var g_accessibility_tooltips = false;
        var g_accessibility_tooltip_duration = parseInt("10", 10);
        var g_accessibility_visual_patterns = false;
        var g_accessibility_screen_reader_table = false;
        var g_detail_row = false;
        var g_builddate = "09-16-2022_1610";
        // default values to be used in absence of user preferences are hard coded below
        // as well as in keyboardShortcuts.js and keyboard_preference_changer.xml
        window.g_keyboard_shortcuts = {};
        window.g_keyboard_shortcuts.allow_in_input_fields = false;
        window.g_keyboard_shortcuts.enabled = true;
        window.g_keyboard_shortcuts.global_search = {};
        window.g_keyboard_shortcuts.global_search.enabled = true;
        window.g_keyboard_shortcuts.global_search.key_combination = 'ctrl+alt+g';
        window.g_keyboard_shortcuts.main_frame = {};
        window.g_keyboard_shortcuts.main_frame.enabled = true;
        window.g_keyboard_shortcuts.main_frame.key_combination = 'ctrl+alt+p';
        window.g_keyboard_shortcuts.navigator_toggle = {};
        window.g_keyboard_shortcuts.navigator_toggle.enabled = true;
        window.g_keyboard_shortcuts.navigator_toggle.key_combination = 'ctrl+alt+c';
        window.g_keyboard_shortcuts.navigator_filter = {};
        window.g_keyboard_shortcuts.navigator_filter.enabled = true;
        window.g_keyboard_shortcuts.navigator_filter.key_combination = 'ctrl+alt+f';
        window.g_keyboard_shortcuts.impersonator = {}
        window.g_keyboard_shortcuts.impersonator.enabled = true;
        window.g_keyboard_shortcuts.impersonator.key_combination = 'ctrl+alt+i';
        var g_concourse_onmessage_enforce_same_origin = 'true'.toLowerCase() === 'true';
        var g_concourse_onmessage_enforce_same_origin_whitelist = '';
        window.g_load_functions = [];
        window.g_render_functions = [];
        window.g_late_load_functions = [];
        window.g_tiny_url = {};
        window.g_tiny_url.use_tiny = 'true' === 'true';
        window.g_tiny_url.min_length = parseInt('1024');


        var g_ck = '613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc';



        var g_acWaitTime = parseInt(250);


        var g_autoRequest = '';

        try {
                window.NOW.dateFormat = JSON.parse("{\"timeAgo\": false, \"dateBoth\": false}");
        } catch (e) {
                window.NOW.dateFormat = {timeAgo: false, dateBoth: false};
        }

        window.NOW.dateFormat.dateStringFormat = "yyyy-MM-dd";
        window.NOW.dateFormat.timeStringFormat = "HH:mm:ss";
        window.NOW.shortDateFormat = false;
        window.NOW.listTableWrap = true;
        window.NOW.compact = false;
        window.NOW.templateToggle = false;
        window.NOW.tabbed = true;
        window.NOW.permalink = true;
        window.NOW.useSimpleStorage = true;
        window.NOW.httpRequestCompressionThreshold = 40000;
        window.NOW.httpRequestCompressionLevel = -1;
        window.NOW.httpRequestCompressionMemoryLevel = -1;
        window.NOW.deferAmbConnection = false;
        window.NOW.deferredAmbConnectionTimeout = 10000;
        window.NOW.simpleStorageSynch = "a38d0130e03102107f446d41db8bd865";
        window.NOW.language =  'en';
        window.NOW.listOpenInAppTab = false;
        window.NOW.floatingScrollbars = false;

        window.NOW.user = {};
        window.NOW.user.preferences = [];
        window.NOW.user.roles = '';
        window.NOW.user.allRoles = '';
        window.NOW.user.userID = '5136503cc611227c0183e96598c4f706';
        window.NOW.user.departmentID = '';
        window.NOW.user.firstName = '';
        window.NOW.user.lastName = 'Guest';
        window.NOW.user.name = 'guest';
        window.NOW.user.isImpersonating = false;
        window.NOW.batch_glide_ajax_requests = 'true' === 'true';
        window.NOW.batch_glide_ajax_requests_max_time_in_queue = ~~'50';
        window.NOW.batch_glide_ajax_disable_time = ~~'1000';

        window.NOW.currency = {};
        window.NOW.currency.code = 'USD';
        window.NOW.locale = {};
        window.NOW.locale.code = 'en_US';

        window.NOW.attachment = {};

        window.NOW.attachment.overflow_limit =  parseInt('3', 10);
        window.NOW.isPolarisEnabled = "true";
        window.NOW.polaris_page_info ={"canUsePolarisCSS":true,"canUsePolarisTemplates":true,"jvar_form_name":"welcome"};</script><script data-comment="GlideUser initialization">(function() {
                 g_render_functions.push(setGlideUser);
                function setGlideUser() {
                        if (window.g_user || !window.GlideUser)
                return;

                window.g_user = new GlideUser(NOW.user.name,
                          NOW.user.firstName,
                          NOW.user.lastName,
                          NOW.user.roles,
                          NOW.user.userID,
                          NOW.user.departmentID);
                window.g_user.setRoles(NOW.user.allRoles, true);
                }
        })();</script><script data-description="NOW glide web analytics siteid and url">window.snWebaConfig = window.snWebaConfig || {};
                // glide web analytics config
                window.snWebaConfig.siteId = "0";
                window.snWebaConfig.trackerURL = "";
                window.snWebaConfig.webaScriptPath = "/scripts/piwik-3.1.1/thirdparty/piwik.min.js";
                window.snWebaConfig.ambClient = (window.g_ambClient) ? window.g_ambClient : ((window.amb)? window.amb.getClient(): "");
                window.snWebaConfig.subscribed = false;</script><script type="text/javascript" src="/ConditionalFocus.jsdbx?v=09-16-2022_1610&amp;c=8_102"></script><link href="favicon.ico?v=5" rel="shortcut icon"></link><script>// window.performance in Chrome, Firefox, and Internet Explorer 9+ (not Safari)
                                window.NOW.xperf = window.performance || {};
                                if (!NOW.xperf.now) {
                                        NOW.xperf.now = function() { return new Date().getTime(); };
                                }
                                NOW.xperf.parseBegin = NOW.xperf.now();
                                NOW.xperf.cssBegin = NOW.xperf.now();</script><link type="text/css" rel="stylesheet" href="/styles/css_includes_doctype_polaris.cssx?v=09-16-2022_1610&amp;c=6a025a33e0c1d21c7f446d41db8bd877&amp;theme=Polaris"></link><script>window.NOW = window.NOW || {};
                 NOW.isUsingPolaris = true;</script><link type="text/css" rel="stylesheet" href="/styles/polarisberg/css_includes_polarisberg.cssx?v=09-16-2022_1610&amp;c=6a025a33e0c1d21c7f446d41db8bd877&amp;theme=Polaris"></link><script>NOW.exclude_dark_theme = "true";</script><link type="text/css" rel="stylesheet" href="/polarisberg_theme_variables.do?c=UL3tmCMCcC9tXGL%2F%2FmIVU5V1gyk%3D&amp;exclude_dark=true" id="polarisberg_theme_variables"></link><script>NOW.xperf.cssEnd = NOW.xperf.now();
                        NOW.xperf.scriptBegin = NOW.xperf.now();</script><script type="text/javascript" src="/scripts/doctype/js_includes_doctype.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102"></script><script type="text/javascript" src="/scripts/js_includes_customer.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102"></script><script>NOW.xperf.scriptEnd = NOW.xperf.now();
                                NOW.xperf.parseEnd = NOW.xperf.now();
                                $j(function() {
                                        var x = NOW.xperf;
                                        var last = x.lastDoctypeEnd - x.lastDoctypeBegin;
                                        if (window.console) {
                                                console.log("+-- Parse times");
                                                console.log("| CSS parse: " + (x.cssEnd - x.cssBegin));
                                                console.log("| JS  doctype: " + (x.scriptEnd - x.scriptBegin));
                                                console.log("| JS at end of page: " + last);
                                                console.log("+-- All parsing: " + (x.parseEnd - x.parseBegin + last));
                                        }

                                        var ms = Math.round(x.parseEnd - x.parseBegin + last);
                                        CustomEvent.fire('page_timing', { name: 'PARS', ms: ms, win: window });

                                        if (window.performance && performance.timing) {
                                                NOW.xperf.z = new Date().getTime();
                                                setTimeout(function () {
                                                   var x = performance.timing.loadEventEnd - performance.timing.domContentLoadedEventStart;
                                                   CustomEvent.fire('page_timing', { name: 'DOMC', ms: x, win: window });
                                                   x = performance.timing.loadEventStart - NOW.xperf.z;
                                                   CustomEvent.fire('page_timing', { name: 'PROC', ms: x, win: window });
                                                }, 250);  // has to be done after the loadEvent ends
                                        }
                                })</script><script type="text/javascript" src="/scripts/doctype/js_includes_legacy.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102"></script><script type="text/javascript" data-comment="navpage layout preferences, onfocus observation">/**
        * Every window needs to observe these events.
        */
        if (Prototype.Browser.IE && !isMSIE9) {
                document.onfocusout = function() { CustomEvent.fireTop(GlideEvent.WINDOW_BLURRED, window); };
                document.onfocusin = function() { CustomEvent.fireTop(GlideEvent.WINDOW_FOCUSED, window); };
        } else {
                Event.observe(window, 'blur', function() { CustomEvent.fireTop(GlideEvent.WINDOW_BLURRED, window); });
                Event.observe(window, 'focus', function() { CustomEvent.fireTop(GlideEvent.WINDOW_FOCUSED, window); });
        }</script><script type="text/javascript">g_swLoadTime = new StopWatch(g_loadTime);

    if (window.CustomEvent){
        CustomEvent.fireAll("ck_updated", "613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc");
            CustomEvent.fireTop("navigation.complete", window);
        }

    addLoadEvent( function() {

                if (isValidTouchDevice())
                        addTouchScrollClassToBody();

      if (typeof g_ck != 'undefined') {
        CustomEvent.observe("ck_updated", function(ck) { g_ck = ck; });
        CustomEvent.fireAll("ck_updated", "613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc");}try {
              var helpico = getTopWindow().document.getElementById("help_ico");

              if (helpico) {
                var urlname=window.location.pathname.split("?");
                var search_str = window.location.search;

                // if this is a form, extract the record's sys_id...
                var sys_id_loc = search_str.search(/sys_id=[0-9a-f]{32}/i);
                var sys_id_str = (sys_id_loc != -1) ? search_str.substr(sys_id_loc, 39) : null;

                // make the URL to our context help processor...
                var url_search = "?sysparm_url=" + urlname[0];
                if (sys_id_loc != -1)
                   url_search += "&" + sys_id_str;

                helpico.href="context_help.do" + url_search;
              }
            } catch (exception) {}

      synchCache();
      pageLoaded();
    });

    function synchCache() {
      try {
        var w = getTopWindow();
        if (w.g_cache_message)
          w.g_cache_message.stamp("a38d0130e03102107f446d41db8bd865");

        if (w.g_cache_td)
          w.g_cache_td.stamp("f7505c96e059da1c7f446d41db8bd8ef");
      } catch(e) {}
    }

    function isValidTouchDevice() {
                var navigator = window.navigator || {};
                var devices;
                try {
                        devices = 'iPad,Android'.split(',');
                } catch(ex) {
                        devices = [];
                }
                return devices.some(function(item) {return item.trim() === navigator.platform;});
        }

        function addTouchScrollClassToBody() {
                if ('ontouchstart' in window ||
                                (navigator.maxTouchPoints !== 'undefined' && navigator.maxTouchPoints > 0) ||
                                (navigator.msMaxTouchPoints !== 'undefined' && navigator.msMaxTouchPoints > 0)) {
                        if (typeof document.body != undefined) {
                                document.body.classList.add('touch_scroll');
                        }
                }
        }
  </script><!--googleoff: all--><noscript>This site requires JavaScript to be enabled</noscript> <!--googleon: all--><script type="text/javascript" src="/scripts/app.guided_tours/js_guided_tours_includes.jsx?v=09-16-2022_1610"></script></head><body class="                -polaris " data-formName="welcome"><span class="sr-only"><div id="html_page_aria_live_polite" r
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:21:07.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "455a6a60e799d8ef8c09cad5e1100d47",
         "bodymmh3" : 231945519,
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : 1746081044,
         "title" : "ServiceNow"
      },
      "length" : 16384
   },
   "asn" : "AS16509",
   "city" : "Singapore",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:14:56 GMT\r\nServer: nginx\r\nContent-Length: 46782\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html><html lang=\"en\" class=\" ltr \" data-doctype=\"true\" dir=\"ltr\" ontouchend=\"CustomEvent.fireAll('body_clicked', event);\" onclick=\"CustomEvent.fireAll('body_clicked', event);\"><head><script type=\"text/javascript\"></script><title>ServiceNow</title><meta http-equiv=\"X-UA-Compatible\" content=\"IE=Edge,chrome=1\"></meta><meta http-equiv=\"cache-control\" content=\"public\"></meta><script src=\"/uxasset/externals/service-worker/loader.jsdbx?sysparm_substitute=false\"></script><script>var mswDisabledValue = \"false\";\n                        var disabled = mswDisabledValue === 'true' ? true : false;\n                        var serviceWorkers = JSON.parse(\"[{\\\"scope\\\":\\\"/\\\",\\\"serviceWorkerUrl\\\":\\\"/uxsw/scope/root.js\\\"},{\\\"scope\\\":\\\"/x\\\",\\\"serviceWorkerUrl\\\":\\\"/uxsw/scope/now_x.js\\\"},{\\\"scope\\\":\\\"/now\\\",\\\"serviceWorkerUrl\\\":\\\"/uxsw/scope/now_x.js\\\"}]\");\n                        var SERVICE_WORKER_MANAGER_CONFIG = {disabled, serviceWorkers};\n                        if (window.serviceWorkerManager) window.serviceWorkerManager.init(SERVICE_WORKER_MANAGER_CONFIG);</script><meta name=\"viewport\" content=\"initial-scale=1.0\"></meta><script type=\"text/javascript\" data-description=\"globals population\">\n        window.NOW = window.NOW || {};\n        var g_loadTime = new Date();\n        var lastActivity = new Date();\n        var g_lang = 'en';\n        var g_system_lang = 'en';\n        var g_enhanced_activated = 'true';\n          var g_popup_timeout = parseInt(100);\n        var g_export_warn_threshold = parseInt(10000);\n          var g_event_handler_ids = {};\n        var g_event_handlers = [];\n        var g_event_handlers_onLoad = [];\n        var g_event_handlers_onSubmit = [];\n        var g_event_handlers_onChange = [];\n        var g_event_handlers_onCellEdit = {};\n        var g_event_handlers_localCache = {};\n        var g_event_handlers_queryTracking = true;\n        var g_user_date_time_format = \"yyyy-MM-dd HH:mm:ss\";\n        var g_user_date_format = \"yyyy-MM-dd\";\n        var g_user_decimal_separator = \".\";\n        var g_user_grouping_separator = \",\";\n        var g_glide_list_separator = \", \";\n        var g_allow_field_dependency_for_templates = (\"true\" === \"true\");\n        var g_tz_offset = 0;\n          var g_tz_user_offset = true;\n        var g_first_day_of_week = parseInt(1, 10);\n        var g_date_picker_first_day_of_week = parseInt(0, 10);\n          var g_full_calendar_edit = true;\n        var g_submitted = false;\n        var g_max_table_length = 80;\n        var g_fontSizePreference = \"\";\n        var g_fontSize = \"10pt\";\n        // use to be the sys_property glide.ui.js_error_notify, hard coded for PRB603998\n        var g_jsErrorNotify = \"true\";\n        var g_cancelPreviousTransaction = true;\n        var g_text_direction = \"ltr\";\n        var g_glide_list_filter_max_length =  parseInt(\"0\", 10);\n        var g_accessibility = false;\n        var g_accessibility_tooltips = false;\n        var g_accessibility_tooltip_duration = parseInt(\"10\", 10);\n        var g_accessibility_visual_patterns = false;\n        var g_accessibility_screen_reader_table = false;\n        var g_detail_row = false;\n        var g_builddate = \"09-16-2022_1610\";\n        // default values to be used in absence of user preferences are hard coded below\n        // as well as in keyboardShortcuts.js and keyboard_preference_changer.xml\n        window.g_keyboard_shortcuts = {};\n        window.g_keyboard_shortcuts.allow_in_input_fields = false;\n        window.g_keyboard_shortcuts.enabled = true;\n        window.g_keyboard_shortcuts.global_search = {};\n        window.g_keyboard_shortcuts.global_search.enabled = true;\n        window.g_keyboard_shortcuts.global_search.key_combination = 'ctrl+alt+g';\n        window.g_keyboard_shortcuts.main_frame = {};\n        window.g_keyboard_shortcuts.main_frame.enabled = true;\n        window.g_keyboard_shortcuts.main_frame.key_combination = 'ctrl+alt+p';\n        window.g_keyboard_shortcuts.navigator_toggle = {};\n        window.g_keyboard_shortcuts.navigator_toggle.enabled = true;\n        window.g_keyboard_shortcuts.navigator_toggle.key_combination = 'ctrl+alt+c';\n        window.g_keyboard_shortcuts.navigator_filter = {};\n        window.g_keyboard_shortcuts.navigator_filter.enabled = true;\n        window.g_keyboard_shortcuts.navigator_filter.key_combination = 'ctrl+alt+f';\n        window.g_keyboard_shortcuts.impersonator = {}\n        window.g_keyboard_shortcuts.impersonator.enabled = true;\n        window.g_keyboard_shortcuts.impersonator.key_combination = 'ctrl+alt+i';\n        var g_concourse_onmessage_enforce_same_origin = 'true'.toLowerCase() === 'true';\n        var g_concourse_onmessage_enforce_same_origin_whitelist = '';\n        window.g_load_functions = [];\n        window.g_render_functions = [];\n        window.g_late_load_functions = [];\n        window.g_tiny_url = {};\n        window.g_tiny_url.use_tiny = 'true' === 'true';\n        window.g_tiny_url.min_length = parseInt('1024');\n\n\n        var g_ck = '613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc';\n\n\n\n        var g_acWaitTime = parseInt(250);\n\n\n        var g_autoRequest = '';\n\n        try {\n                window.NOW.dateFormat = JSON.parse(\"{\\\"timeAgo\\\": false, \\\"dateBoth\\\": false}\");\n        } catch (e) {\n                window.NOW.dateFormat = {timeAgo: false, dateBoth: false};\n        }\n\n        window.NOW.dateFormat.dateStringFormat = \"yyyy-MM-dd\";\n        window.NOW.dateFormat.timeStringFormat = \"HH:mm:ss\";\n        window.NOW.shortDateFormat = false;\n        window.NOW.listTableWrap = true;\n        window.NOW.compact = false;\n        window.NOW.templateToggle = false;\n        window.NOW.tabbed = true;\n        window.NOW.permalink = true;\n        window.NOW.useSimpleStorage = true;\n        window.NOW.httpRequestCompressionThreshold = 40000;\n        window.NOW.httpRequestCompressionLevel = -1;\n        window.NOW.httpRequestCompressionMemoryLevel = -1;\n        window.NOW.deferAmbConnection = false;\n        window.NOW.deferredAmbConnectionTimeout = 10000;\n        window.NOW.simpleStorageSynch = \"a38d0130e03102107f446d41db8bd865\";\n        window.NOW.language =  'en';\n        window.NOW.listOpenInAppTab = false;\n        window.NOW.floatingScrollbars = false;\n\n        window.NOW.user = {};\n        window.NOW.user.preferences = [];\n        window.NOW.user.roles = '';\n        window.NOW.user.allRoles = '';\n        window.NOW.user.userID = '5136503cc611227c0183e96598c4f706';\n        window.NOW.user.departmentID = '';\n        window.NOW.user.firstName = '';\n        window.NOW.user.lastName = 'Guest';\n        window.NOW.user.name = 'guest';\n        window.NOW.user.isImpersonating = false;\n        window.NOW.batch_glide_ajax_requests = 'true' === 'true';\n        window.NOW.batch_glide_ajax_requests_max_time_in_queue = ~~'50';\n        window.NOW.batch_glide_ajax_disable_time = ~~'1000';\n\n        window.NOW.currency = {};\n        window.NOW.currency.code = 'USD';\n        window.NOW.locale = {};\n        window.NOW.locale.code = 'en_US';\n\n        window.NOW.attachment = {};\n\n        window.NOW.attachment.overflow_limit =  parseInt('3', 10);\n        window.NOW.isPolarisEnabled = \"true\";\n        window.NOW.polaris_page_info ={\"canUsePolarisCSS\":true,\"canUsePolarisTemplates\":true,\"jvar_form_name\":\"welcome\"};</script><script data-comment=\"GlideUser initialization\">(function() {\n                 g_render_functions.push(setGlideUser);\n                function setGlideUser() {\n                        if (window.g_user || !window.GlideUser)\n                return;\n\n                window.g_user = new GlideUser(NOW.user.name,\n                          NOW.user.firstName,\n                          NOW.user.lastName,\n                          NOW.user.roles,\n                          NOW.user.userID,\n                          NOW.user.departmentID);\n                window.g_user.setRoles(NOW.user.allRoles, true);\n                }\n        })();</script><script data-description=\"NOW glide web analytics siteid and url\">window.snWebaConfig = window.snWebaConfig || {};\n                // glide web analytics config\n                window.snWebaConfig.siteId = \"0\";\n                window.snWebaConfig.trackerURL = \"\";\n                window.snWebaConfig.webaScriptPath = \"/scripts/piwik-3.1.1/thirdparty/piwik.min.js\";\n                window.snWebaConfig.ambClient = (window.g_ambClient) ? window.g_ambClient : ((window.amb)? window.amb.getClient(): \"\");\n                window.snWebaConfig.subscribed = false;</script><script type=\"text/javascript\" src=\"/ConditionalFocus.jsdbx?v=09-16-2022_1610&amp;c=8_102\"></script><link href=\"favicon.ico?v=5\" rel=\"shortcut icon\"></link><script>// window.performance in Chrome, Firefox, and Internet Explorer 9+ (not Safari)\n                                window.NOW.xperf = window.performance || {};\n                                if (!NOW.xperf.now) {\n                                        NOW.xperf.now = function() { return new Date().getTime(); };\n                                }\n                                NOW.xperf.parseBegin = NOW.xperf.now();\n                                NOW.xperf.cssBegin = NOW.xperf.now();</script><link type=\"text/css\" rel=\"stylesheet\" href=\"/styles/css_includes_doctype_polaris.cssx?v=09-16-2022_1610&amp;c=6a025a33e0c1d21c7f446d41db8bd877&amp;theme=Polaris\"></link><script>window.NOW = window.NOW || {};\n                 NOW.isUsingPolaris = true;</script><link type=\"text/css\" rel=\"stylesheet\" href=\"/styles/polarisberg/css_includes_polarisberg.cssx?v=09-16-2022_1610&amp;c=6a025a33e0c1d21c7f446d41db8bd877&amp;theme=Polaris\"></link><script>NOW.exclude_dark_theme = \"true\";</script><link type=\"text/css\" rel=\"stylesheet\" href=\"/polarisberg_theme_variables.do?c=UL3tmCMCcC9tXGL%2F%2FmIVU5V1gyk%3D&amp;exclude_dark=true\" id=\"polarisberg_theme_variables\"></link><script>NOW.xperf.cssEnd = NOW.xperf.now();\n                        NOW.xperf.scriptBegin = NOW.xperf.now();</script><script type=\"text/javascript\" src=\"/scripts/doctype/js_includes_doctype.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102\"></script><script type=\"text/javascript\" src=\"/scripts/js_includes_customer.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102\"></script><script>NOW.xperf.scriptEnd = NOW.xperf.now();\n                                NOW.xperf.parseEnd = NOW.xperf.now();\n                                $j(function() {\n                                        var x = NOW.xperf;\n                                        var last = x.lastDoctypeEnd - x.lastDoctypeBegin;\n                                        if (window.console) {\n                                                console.log(\"+-- Parse times\");\n                                                console.log(\"| CSS parse: \" + (x.cssEnd - x.cssBegin));\n                                                console.log(\"| JS  doctype: \" + (x.scriptEnd - x.scriptBegin));\n                                                console.log(\"| JS at end of page: \" + last);\n                                                console.log(\"+-- All parsing: \" + (x.parseEnd - x.parseBegin + last));\n                                        }\n\n                                        var ms = Math.round(x.parseEnd - x.parseBegin + last);\n                                        CustomEvent.fire('page_timing', { name: 'PARS', ms: ms, win: window });\n\n                                        if (window.performance && performance.timing) {\n                                                NOW.xperf.z = new Date().getTime();\n                                                setTimeout(function () {\n                                                   var x = performance.timing.loadEventEnd - performance.timing.domContentLoadedEventStart;\n                                                   CustomEvent.fire('page_timing', { name: 'DOMC', ms: x, win: window });\n                                                   x = performance.timing.loadEventStart - NOW.xperf.z;\n                                                   CustomEvent.fire('page_timing', { name: 'PROC', ms: x, win: window });\n                                                }, 250);  // has to be done after the loadEvent ends\n                                        }\n                                })</script><script type=\"text/javascript\" src=\"/scripts/doctype/js_includes_legacy.jsx?v=09-16-2022_1610&amp;lp=Fri_Sep_30_17_08_52_UTC_2022&amp;c=8_102\"></script><script type=\"text/javascript\" data-comment=\"navpage layout preferences, onfocus observation\">/**\n        * Every window needs to observe these events.\n        */\n        if (Prototype.Browser.IE && !isMSIE9) {\n                document.onfocusout = function() { CustomEvent.fireTop(GlideEvent.WINDOW_BLURRED, window); };\n                document.onfocusin = function() { CustomEvent.fireTop(GlideEvent.WINDOW_FOCUSED, window); };\n        } else {\n                Event.observe(window, 'blur', function() { CustomEvent.fireTop(GlideEvent.WINDOW_BLURRED, window); });\n                Event.observe(window, 'focus', function() { CustomEvent.fireTop(GlideEvent.WINDOW_FOCUSED, window); });\n        }</script><script type=\"text/javascript\">g_swLoadTime = new StopWatch(g_loadTime);\n\n    if (window.CustomEvent){\n        CustomEvent.fireAll(\"ck_updated\", \"613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc\");\n            CustomEvent.fireTop(\"navigation.complete\", window);\n        }\n\n    addLoadEvent( function() {\n\n                if (isValidTouchDevice())\n                        addTouchScrollClassToBody();\n\n      if (typeof g_ck != 'undefined') {\n        CustomEvent.observe(\"ck_updated\", function(ck) { g_ck = ck; });\n        CustomEvent.fireAll(\"ck_updated\", \"613454d2e019da1c7f446d41db8bd81903bd82ecc7345fb313d34d311014af61781c03fc\");}try {\n              var helpico = getTopWindow().document.getElementById(\"help_ico\");\n\n              if (helpico) {\n                var urlname=window.location.pathname.split(\"?\");\n                var search_str = window.location.search;\n\n                // if this is a form, extract the record's sys_id...\n                var sys_id_loc = search_str.search(/sys_id=[0-9a-f]{32}/i);\n                var sys_id_str = (sys_id_loc != -1) ? search_str.substr(sys_id_loc, 39) : null;\n\n                // make the URL to our context help processor...\n                var url_search = \"?sysparm_url=\" + urlname[0];\n                if (sys_id_loc != -1)\n                   url_search += \"&\" + sys_id_str;\n\n                helpico.href=\"context_help.do\" + url_search;\n              }\n            } catch (exception) {}\n\n      synchCache();\n      pageLoaded();\n    });\n\n    function synchCache() {\n      try {\n        var w = getTopWindow();\n        if (w.g_cache_message)\n          w.g_cache_message.stamp(\"a38d0130e03102107f446d41db8bd865\");\n\n        if (w.g_cache_td)\n          w.g_cache_td.stamp(\"f7505c96e059da1c7f446d41db8bd8ef\");\n      } catch(e) {}\n    }\n\n    function isValidTouchDevice() {\n                var navigator = window.navigator || {};\n                var devices;\n                try {\n                        devices = 'iPad,Android'.split(',');\n                } catch(ex) {\n                        devices = [];\n                }\n                return devices.some(function(item) {return item.trim() === navigator.platform;});\n        }\n\n        function addTouchScrollClassToBody() {\n                if ('ontouchstart' in window ||\n                                (navigator.maxTouchPoints !== 'undefined' && navigator.maxTouchPoints > 0) ||\n                                (navigator.msMaxTouchPoints !== 'undefined' && navigator.msMaxTouchPoints > 0)) {\n                        if (typeof document.body != undefined) {\n                                document.body.classList.add('touch_scroll');\n                        }\n                }\n        }\n  </script><!--googleoff: all--><noscript>This site requires JavaScript to be enabled</noscript> <!--googleon: all--><script type=\"text/javascript\" src=\"/scripts/app.guided_tours/js_guided_tours_includes.jsx?v=09-16-2022_1610\"></script></head><body class=\"                -polaris \" data-formName=\"welcome\"><span class=\"sr-only\"><div id=\"html_page_aria_live_polite\" r",
   "datamd5" : "8fa99d6203111ea7c849f7781cd918ff",
   "datammh3" : 86490418,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "AMAZON-SIN",
      "organization" : "Amazon Data Services Singapore",
      "subnet" : "18.142.0.0/15"
   },
   "host" : [
      "ec2-18-142-105-171"
   ],
   "hostname" : [
      "ec2-18-142-105-171.ap-southeast-1.compute.amazonaws.com"
   ],
   "ip" : "18.142.105.171",
   "ipv6" : "false",
   "latitude" : "1.2868",
   "location" : "1.2868,103.8503",
   "longitude" : "103.8503",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4786,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-18-142-105-171.ap-southeast-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "ap-southeast-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "18.140.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 16.16.215.124:4786 (tcp/http) - last seen on 2024-11-21 at 10:12:11 UTC

    • IP
      16.16.215.124
      Network
      16.16.0.0/16
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://16.16.215.124:4786/ 200

      HTTP Title
      Download Master
      Reverse DNS
      ec2-16-16-215-124.eu-north-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a52ae731c45deec6fcf5b3934ee55e00
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      18ccd80dc0943311ea6b6014e12a985c
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:05:01 GMT
Server: nginx
Content-Length: 1767
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<html xmlns:v>
<head>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Expires" content="-1" />
<meta HTTP-EQUIV="Cache-Control" CONTENT="no-cache">
<meta http-equiv="Pragma" content="no-cache" />
<title>Download Master</title>
<script type="text/javascript" src="jquery.js"></script>
</head>
<body>
<script>
var httpTag = 'https:' == document.location.protocol ? false : true;
        if(( navigator.userAgent.match(/iPhone/i)) ||
            ( navigator.userAgent.match(/iPod/i))   ||
                ( navigator.userAgent.match(/windows ce/i)) ||
                ( navigator.userAgent.match(/windows phone/i)) ||
                ( navigator.userAgent.match(/Android/i)) &&
                ( navigator.userAgent.match(/Mobile/i)))
                {
                if(httpTag)
                        self.location = "http://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                else
                        self.location = "https://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                }
        else{
                if(httpTag)
                        self.location = "http://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                else
                        self.location = "https://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                }

</script>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:12:11.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "w3.org"
         ],
         "hostname" : [
            "www.w3.org"
         ],
         "url" : [
            "http://www.w3.org/1999/xhtml",
            "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
         ]
      },
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "18ccd80dc0943311ea6b6014e12a985c",
         "bodymmh3" : 559765034,
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : 863871243,
         "title" : "Download Master"
      },
      "length" : 1904
   },
   "asn" : "AS16509",
   "city" : "Stockholm",
   "country" : "SE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:05:01 GMT\r\nServer: nginx\r\nContent-Length: 1767\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\n<html xmlns:v>\n<head>\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=EmulateIE8\" />\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta http-equiv=\"Expires\" content=\"-1\" />\n<meta HTTP-EQUIV=\"Cache-Control\" CONTENT=\"no-cache\">\n<meta http-equiv=\"Pragma\" content=\"no-cache\" />\n<title>Download Master</title>\n<script type=\"text/javascript\" src=\"jquery.js\"></script>\n</head>\n<body>\n<script>\nvar httpTag = 'https:' == document.location.protocol ? false : true;\n        if(( navigator.userAgent.match(/iPhone/i)) ||\n            ( navigator.userAgent.match(/iPod/i))   ||\n                ( navigator.userAgent.match(/windows ce/i)) ||\n                ( navigator.userAgent.match(/windows phone/i)) ||\n                ( navigator.userAgent.match(/Android/i)) &&\n                ( navigator.userAgent.match(/Mobile/i)))\n                {\n                if(httpTag)\n                        self.location = \"http://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                else\n                        self.location = \"https://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                }\n        else{\n                if(httpTag)\n                        self.location = \"http://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                else\n                        self.location = \"https://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                }\n\n</script>\n</body>\n</html>\n",
   "datamd5" : "a52ae731c45deec6fcf5b3934ee55e00",
   "datammh3" : -434684070,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "SE",
      "countryname" : "Sweden",
      "domain" : [
         "amazon.com",
         "amazonaws.com"
      ],
      "isineu" : "true",
      "latitude" : "60.128161",
      "location" : "60.128161,18.643501",
      "longitude" : "18.643501",
      "netname" : "AMAZON-ARN",
      "organization" : "Amazon Data Services Sweden",
      "subnet" : "16.16.0.0/16"
   },
   "host" : [
      "ec2-16-16-215-124"
   ],
   "hostname" : [
      "ec2-16-16-215-124.eu-north-1.compute.amazonaws.com"
   ],
   "ip" : "16.16.215.124",
   "ipv6" : "false",
   "latitude" : "59.3241",
   "location" : "59.3241,18.0517",
   "longitude" : "18.0517",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4786,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-16-16-215-124.eu-north-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "eu-north-1.compute.amazonaws.com"
   ],
   "subnet" : "16.16.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 52.27.246.92:4786 (tcp/http) - last seen on 2024-11-21 at 10:12:08 UTC

    • IP
      52.27.246.92
      Network
      52.24.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://52.27.246.92:4786/ 200

      HTTP Title
      KACE Systems Management Appliance Service Center
      Reverse DNS
      ec2-52-27-246-92.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Apache HTTP Server
      HTTP Component(s)
      Bootstrap Bootstrap Quest KACE Systems Management Appliance
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      29f1cfa51eafcc7b1d4102c27dcc68dd
      HTTP Header MD5
      114e612087ffeaf5f76927dd76720718
      HTTP Body MD5
      d408fd011fef9e2daec83a8aa38ee7ab
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 10:05:08 GMT
Server: Apache
Expires: Thu, 21 Nov 2024 10:05:08 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: kboxid=lao43mnz68nk74th1qdyhurndahbs7v6; path=/; secure; HttpOnly; SameSite=Lax
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Access-Control-Allow-Headers: x-kace-auth-timestamp, x-kace-auth-key, x-kace-auth-signature, accept, origin, content-type
Access-Control-Allow-Methods: PUT, DELETE, POST, GET, OPTIONS
X-Kace-Appliance: K1000
X-Ua-Compatible: IE=9,EDGE
Content-Length: 8986
Content-Type: text/html

<!DOCTYPE html>
<html data-template="welcome" data-page-type="welcome" data-area="user" lang="en" ><head>
        <script id="fr-fek">try{(function (k){localStorage.FEK=k;t=document.getElementById('fr-fek');t.parentNode.removeChild(t);})('mIBEVFBOHC1d2UNYVM==')}catch(e){}</script>
        <meta http-equiv="X-UA-Compatible" content="IE=9; IE=EDGE" /><meta http-equiv="content-type" content="text/html; charset=utf-8" /><meta name="robots" content="noindex"><title>KACE Systems Management Appliance Service Center</title><link rel="shortcut icon" href="/favicon.ico"><link type="text/css" rel="stylesheet" href="/common/css/minified/vendor/select2.css?build=10.1.99" /><link type="text/css" rel="stylesheet" media="print" href="/common/css/minified/print.css?build=10.1.99" /><link type="text/css" rel="stylesheet" href="/common/css/minified/vendor/froala_style.css?build=10.1.99" /><!--[if lte IE 9]><link rel="stylesheet" type="text/css" href="/common/css/minified/kace-theme-ie.css?build=10.1.99" /><![endif]--><link type="text/css" rel="stylesheet" href="/common/css/minified/kace-theme-light.css?build=10.1.99" /><!--[if IE]><script type="text/javascript" src="/common/js/minified/vendor/html5.js?build=10.1.99"></script><![endif]--><script type="text/javascript" src="/common/js/minified/kpolyfills.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/jquery.fixes.js?build=10.1.99"></script><script type="text/javascript">jQuery.noConflict();</script><script type="text/javascript" src="/common/js/minified/vendor/jquery.cookie.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery-ui.custom.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.json.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/bootstrap.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/select2.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.form.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.wheelmouse.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/bootbox.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/google.html-sanitizer.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/lang.php?locale=en&build=10.1.99"></script><script type="text/javascript" src="/common/js/scw.php?locale=en&build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/functions.js?build=10.1.99"></script></head><body id="welcome" ><div class="k-main k-main-collapsed">
<div class="k-page-message-box-container" style="visibility:collapse; display:none;">

    
        <div class="k-page-message-box k-error" style="display:none;" >
                </div>
    
    
        <div class="k-page-message-box k-warning" style="display:none;" >
                </div>
    
    
        <div class="k-page-message-box k-success" style="display:none;" >
                </div>
    
    
        <div class="k-page-message-box k-info" style="display:none;" >
                </div>
    </div>
        <form id="LoginForm" name="LoginForm" method="post" action="/userui/check_login.php" target="_self">
        <input type="hidden" name="CSRF_TOKEN" value="2fzfhrtev7nhjwm3csi88fbcrrtsqzap0oteqmg14br3g02wndegh2kbexep1tpke0bchewf2oklcs36rfu85jj7gzi5y4utnbnhzv0xantpn8z6otmj9ffcsg2202q7" />
        <img class="k-logo k-user-logo" id="welcomeLogo" alt="K1000 Logo" src="/packages/partnerlogos/userportal_logo" data-interface="user" />
        <h1>Welcome and Login...</h1>
        <div class="wysiwyg fr-view"><p>Welcome to the User Console. The &quot;Downloads&quot; tab contains software available for you to download and install. You can search on software by title, vendor, or label. Please only download and install software that you require.</p><p><br></p><p>You must login in to the User Console to browse software. Please enter your organization&#39;s common user name and password below to login.&nbsp;</p></div>
                <div class="button_login">
            <div class="k-login">
                <div id='loginid'>
                    <label>Login (user name):</label>
                    <input type="text" maxlength="50" class="k-text-field" name="LOGIN_NAME" />
                </div>
                <div id='password'>
                    <label>Password:</label>
                    <input type="password" class="k-text-field" maxlength="50" name="LOGIN_PASSWORD" autocomplete="off" />
                </div>
            </div>
            <div class="k-login-note">
                (Note: Credentials will be saved on this computer between sessions unless you explicitly "Log Out")
            </div>
        </div>

        <div class="k-login" id="org_select">
                            <input id="orgtextbox" type="hidden" name="ORGANIZATION" value="Default" />
                    </div>

        <div id="samllogin" style="margin-top:10px;display:none;" class="button_saml">
            <button id="button_saml" name="saml" class="k-btn-dark button_saml">Login</button>
            <p style="margin-top:5px;"><a id="showotherlogin">Local Sign On</a></p>
        </div>

        <buttons>
            <button id="button_login" name="save" class="k-btn-dark button_login">Login</button>
            <p style="margin-top:5px;" class="button_login"><a id="showsamllogin">Single Sign On</a></p>
        </buttons>

    </form>
    </div><footer><span class="k-copyright">� 2023 Quest Software Inc. All Rights Reserved.</span></footer><div id="alert-div"></div><script type="text/javascript" src="/common/js/minified/nav.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/core.js?build=10.1.99"></script><script type="text/javascript">ShowMessageBox();</script>

<script type="text/javascript">var loginmode="local";var login_timeout_active=false;const saml_orgs={ 'Default':{ 'name':'Default','id':'1','required':'','enabled':''},};function all_orgs_saml_enabled(){ var rval=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if(saml_orgs[key].enabled==false){ return false;}else{ rval=true;}}}return rval;}function show_hide_saml(org){ var saml=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if((key==org)&&(saml_orgs[key].enabled==true)){ saml=true;}}}if(saml||all_orgs_saml_enabled()){ loginmode="saml";jQuery('.button_login').hide();jQuery('.button_saml').show();jQuery('#org_select').attr('class','');jQuery('#showsamllogin').show();}else{ loginmode="local";jQuery('.button_login').show();jQuery('.button_saml').hide();jQuery('#showsamllogin').hide();jQuery('#org_select').attr('class','k-login');jQuery('[name="LOGIN_NAME"]').focus();}};function set_local_focue(){ var last_user='';if(last_user!=''){ jQuery('[name="LOGIN_NAME"]').val(last_user);jQuery('[name="LOGIN_PASSWORD"]').focus();}else{ jQuery('[name="LOGIN_NAME"]').focus();}};function lockout_timer(){ jQuery('[name="LOGIN_NAME"]').removeAttr('disabled');jQuery('[name="LOGIN_PASSWORD"]').removeAttr('disabled');jQuery('#button_login').removeAttr('disabled');jQuery('.k-error-explanation').hide();jQuery('div').removeClass("k-error-explanation");jQuery('.k-login-locked').hide();jQuery('div').removeClass("k-loader");login_timeout_active=false;}jQuery(document).ready(function(){ jQuery(document).on('keypress',function(e){ if((e.which&&e.which==13)||(e.keyCode&&e.keyCode==13)){ if(login_timeout_active==true){ return false;}if(loginmode=='local'){ jQuery('#LoginForm').submit();}else if(loginmode=='saml'){ jQuery('#button_saml').click();}return false;}else{ return true;}});jQuery('#orgselect').change(function(){ show_hide_saml(this.value);});jQuery('#showotherlogin').on('click',function(event){ jQuery('.button_saml').hide();jQuery('.button_login').show();jQuery('[name="LOGIN_NAME"]').focus();jQuery('#org_select').attr('class','k-login');loginmode="local";event.preventDefault();});jQuery('#showsamllogin').on('click',function(event){ jQuery('.button_saml').show();jQuery('.button_login').hide();jQuery('#org_select').attr('class','');loginmode='saml';event.preventDefault();});jQuery('#button_saml').on('click',function(event){ if(typeof(jQuery('[name="ORGANIZATION"]').select2('val'))=='string'){ var torg=jQuery('[name="ORGANIZATION"]').select2('val');}else{ var torg=jQuery("#orgtextbox").val();}if(torg.length==0){ torg="Default";}event.preventDefault();window.location.href="/common/saml_login.php?active="+torg;});if(typeof(torg=jQuery('[name="ORGANIZATION"]').select2('val'))=='string'){ show_hide_saml(jQuery('[name="ORGANIZATION"]').select2('val'));}else{ show_hide_saml(jQuery('#orgtextbox').val());}});</script>
</body></html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T10:12:08.000Z",
   "app" : {
      "extract" : {
         "file" : [
            "check_login.php"
         ]
      },
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "d408fd011fef9e2daec83a8aa38ee7ab",
         "bodymmh3" : -512338196,
         "component" : [
            {
               "product" : "KACE Systems Management Appliance",
               "productvendor" : "Quest"
            },
            {
               "productvendor" : "Bootstrap",
               "product" : "Bootstrap"
            }
         ],
         "headermd5" : "114e612087ffeaf5f76927dd76720718",
         "headermmh3" : -1068371132,
         "title" : "KACE Systems Management Appliance Service Center"
      },
      "length" : 9734
   },
   "asn" : "AS16509",
   "city" : "Boardman",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:05:08 GMT\r\nServer: Apache\r\nExpires: Thu, 21 Nov 2024 10:05:08 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: kboxid=lao43mnz68nk74th1qdyhurndahbs7v6; path=/; secure; HttpOnly; SameSite=Lax\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: sameorigin\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nAccess-Control-Allow-Headers: x-kace-auth-timestamp, x-kace-auth-key, x-kace-auth-signature, accept, origin, content-type\r\nAccess-Control-Allow-Methods: PUT, DELETE, POST, GET, OPTIONS\r\nX-Kace-Appliance: K1000\r\nX-Ua-Compatible: IE=9,EDGE\r\nContent-Length: 8986\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html>\n<html data-template=\"welcome\" data-page-type=\"welcome\" data-area=\"user\" lang=\"en\" ><head>\n        <script id=\"fr-fek\">try{(function (k){localStorage.FEK=k;t=document.getElementById('fr-fek');t.parentNode.removeChild(t);})('mIBEVFBOHC1d2UNYVM==')}catch(e){}</script>\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=9; IE=EDGE\" /><meta http-equiv=\"content-type\" content=\"text/html; charset=utf-8\" /><meta name=\"robots\" content=\"noindex\"><title>KACE Systems Management Appliance Service Center</title><link rel=\"shortcut icon\" href=\"/favicon.ico\"><link type=\"text/css\" rel=\"stylesheet\" href=\"/common/css/minified/vendor/select2.css?build=10.1.99\" /><link type=\"text/css\" rel=\"stylesheet\" media=\"print\" href=\"/common/css/minified/print.css?build=10.1.99\" /><link type=\"text/css\" rel=\"stylesheet\" href=\"/common/css/minified/vendor/froala_style.css?build=10.1.99\" /><!--[if lte IE 9]><link rel=\"stylesheet\" type=\"text/css\" href=\"/common/css/minified/kace-theme-ie.css?build=10.1.99\" /><![endif]--><link type=\"text/css\" rel=\"stylesheet\" href=\"/common/css/minified/kace-theme-light.css?build=10.1.99\" /><!--[if IE]><script type=\"text/javascript\" src=\"/common/js/minified/vendor/html5.js?build=10.1.99\"></script><![endif]--><script type=\"text/javascript\" src=\"/common/js/minified/kpolyfills.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/jquery.fixes.js?build=10.1.99\"></script><script type=\"text/javascript\">jQuery.noConflict();</script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.cookie.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery-ui.custom.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.json.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/bootstrap.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/select2.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.form.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.wheelmouse.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/bootbox.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/google.html-sanitizer.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/lang.php?locale=en&build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/scw.php?locale=en&build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/functions.js?build=10.1.99\"></script></head><body id=\"welcome\" ><div class=\"k-main k-main-collapsed\">\n<div class=\"k-page-message-box-container\" style=\"visibility:collapse; display:none;\">\n\n    \n        <div class=\"k-page-message-box k-error\" style=\"display:none;\" >\n                </div>\n    \n    \n        <div class=\"k-page-message-box k-warning\" style=\"display:none;\" >\n                </div>\n    \n    \n        <div class=\"k-page-message-box k-success\" style=\"display:none;\" >\n                </div>\n    \n    \n        <div class=\"k-page-message-box k-info\" style=\"display:none;\" >\n                </div>\n    </div>\n        <form id=\"LoginForm\" name=\"LoginForm\" method=\"post\" action=\"/userui/check_login.php\" target=\"_self\">\n        <input type=\"hidden\" name=\"CSRF_TOKEN\" value=\"2fzfhrtev7nhjwm3csi88fbcrrtsqzap0oteqmg14br3g02wndegh2kbexep1tpke0bchewf2oklcs36rfu85jj7gzi5y4utnbnhzv0xantpn8z6otmj9ffcsg2202q7\" />\n        <img class=\"k-logo k-user-logo\" id=\"welcomeLogo\" alt=\"K1000 Logo\" src=\"/packages/partnerlogos/userportal_logo\" data-interface=\"user\" />\n        <h1>Welcome and Login...</h1>\n        <div class=\"wysiwyg fr-view\"><p>Welcome to the User Console. The &quot;Downloads&quot; tab contains software available for you to download and install. You can search on software by title, vendor, or label. Please only download and install software that you require.</p><p><br></p><p>You must login in to the User Console to browse software. Please enter your organization&#39;s common user name and password below to login.&nbsp;</p></div>\n                <div class=\"button_login\">\n            <div class=\"k-login\">\n                <div id='loginid'>\n                    <label>Login (user name):</label>\n                    <input type=\"text\" maxlength=\"50\" class=\"k-text-field\" name=\"LOGIN_NAME\" />\n                </div>\n                <div id='password'>\n                    <label>Password:</label>\n                    <input type=\"password\" class=\"k-text-field\" maxlength=\"50\" name=\"LOGIN_PASSWORD\" autocomplete=\"off\" />\n                </div>\n            </div>\n            <div class=\"k-login-note\">\n                (Note: Credentials will be saved on this computer between sessions unless you explicitly \"Log Out\")\n            </div>\n        </div>\n\n        <div class=\"k-login\" id=\"org_select\">\n                            <input id=\"orgtextbox\" type=\"hidden\" name=\"ORGANIZATION\" value=\"Default\" />\n                    </div>\n\n        <div id=\"samllogin\" style=\"margin-top:10px;display:none;\" class=\"button_saml\">\n            <button id=\"button_saml\" name=\"saml\" class=\"k-btn-dark button_saml\">Login</button>\n            <p style=\"margin-top:5px;\"><a id=\"showotherlogin\">Local Sign On</a></p>\n        </div>\n\n        <buttons>\n            <button id=\"button_login\" name=\"save\" class=\"k-btn-dark button_login\">Login</button>\n            <p style=\"margin-top:5px;\" class=\"button_login\"><a id=\"showsamllogin\">Single Sign On</a></p>\n        </buttons>\n\n    </form>\n    </div><footer><span class=\"k-copyright\">\ufffd 2023 Quest Software Inc. All Rights Reserved.</span></footer><div id=\"alert-div\"></div><script type=\"text/javascript\" src=\"/common/js/minified/nav.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/core.js?build=10.1.99\"></script><script type=\"text/javascript\">ShowMessageBox();</script>\n\n<script type=\"text/javascript\">var loginmode=\"local\";var login_timeout_active=false;const saml_orgs={ 'Default':{ 'name':'Default','id':'1','required':'','enabled':''},};function all_orgs_saml_enabled(){ var rval=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if(saml_orgs[key].enabled==false){ return false;}else{ rval=true;}}}return rval;}function show_hide_saml(org){ var saml=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if((key==org)&&(saml_orgs[key].enabled==true)){ saml=true;}}}if(saml||all_orgs_saml_enabled()){ loginmode=\"saml\";jQuery('.button_login').hide();jQuery('.button_saml').show();jQuery('#org_select').attr('class','');jQuery('#showsamllogin').show();}else{ loginmode=\"local\";jQuery('.button_login').show();jQuery('.button_saml').hide();jQuery('#showsamllogin').hide();jQuery('#org_select').attr('class','k-login');jQuery('[name=\"LOGIN_NAME\"]').focus();}};function set_local_focue(){ var last_user='';if(last_user!=''){ jQuery('[name=\"LOGIN_NAME\"]').val(last_user);jQuery('[name=\"LOGIN_PASSWORD\"]').focus();}else{ jQuery('[name=\"LOGIN_NAME\"]').focus();}};function lockout_timer(){ jQuery('[name=\"LOGIN_NAME\"]').removeAttr('disabled');jQuery('[name=\"LOGIN_PASSWORD\"]').removeAttr('disabled');jQuery('#button_login').removeAttr('disabled');jQuery('.k-error-explanation').hide();jQuery('div').removeClass(\"k-error-explanation\");jQuery('.k-login-locked').hide();jQuery('div').removeClass(\"k-loader\");login_timeout_active=false;}jQuery(document).ready(function(){ jQuery(document).on('keypress',function(e){ if((e.which&&e.which==13)||(e.keyCode&&e.keyCode==13)){ if(login_timeout_active==true){ return false;}if(loginmode=='local'){ jQuery('#LoginForm').submit();}else if(loginmode=='saml'){ jQuery('#button_saml').click();}return false;}else{ return true;}});jQuery('#orgselect').change(function(){ show_hide_saml(this.value);});jQuery('#showotherlogin').on('click',function(event){ jQuery('.button_saml').hide();jQuery('.button_login').show();jQuery('[name=\"LOGIN_NAME\"]').focus();jQuery('#org_select').attr('class','k-login');loginmode=\"local\";event.preventDefault();});jQuery('#showsamllogin').on('click',function(event){ jQuery('.button_saml').show();jQuery('.button_login').hide();jQuery('#org_select').attr('class','');loginmode='saml';event.preventDefault();});jQuery('#button_saml').on('click',function(event){ if(typeof(jQuery('[name=\"ORGANIZATION\"]').select2('val'))=='string'){ var torg=jQuery('[name=\"ORGANIZATION\"]').select2('val');}else{ var torg=jQuery(\"#orgtextbox\").val();}if(torg.length==0){ torg=\"Default\";}event.preventDefault();window.location.href=\"/common/saml_login.php?active=\"+torg;});if(typeof(torg=jQuery('[name=\"ORGANIZATION\"]').select2('val'))=='string'){ show_hide_saml(jQuery('[name=\"ORGANIZATION\"]').select2('val'));}else{ show_hide_saml(jQuery('#orgtextbox').val());}});</script>\n</body></html>\n",
   "datamd5" : "29f1cfa51eafcc7b1d4102c27dcc68dd",
   "datammh3" : 953832379,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AT-88-Z",
      "organization" : "Amazon Technologies Inc.",
      "subnet" : "52.24.0.0/14"
   },
   "host" : [
      "ec2-52-27-246-92"
   ],
   "hostname" : [
      "ec2-52-27-246-92.us-west-2.compute.amazonaws.com"
   ],
   "ip" : "52.27.246.92",
   "ipv6" : "false",
   "latitude" : "45.8491",
   "location" : "45.8491,-119.7143",
   "longitude" : "-119.7143",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4786,
   "product" : "HTTP Server",
   "productvendor" : "Apache",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-52-27-246-92.us-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "us-west-2.compute.amazonaws.com"
   ],
   "subnet" : "52.24.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 13.54.235.57:4786 (tcp/http) - last seen on 2024-11-21 at 09:46:06 UTC

    • IP
      13.54.235.57
      Network
      13.48.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://13.54.235.57:4786/ 200

      HTTP Title
      PaperCut Login
      HTTP Description
      PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.
      HTTP Keyword(s)
      print accounting print control print management print quota software
      Reverse DNS
      ec2-13-54-235-57.ap-southeast-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      jQuery jQuery 3.5.1 Oracle Java
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6602a320a278b26f544c1f7e9b11bbae
      HTTP Header MD5
      fa25c4eea42a342854fe45cdc0273a72
      HTTP Body MD5
      8c5529452ed2e5ae1d4f29e7345687a7
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 09:39:56 GMT
Server: nginx
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Cache-Control: no-cache
Set-Cookie: JSESSIONID=node0u6v69e8sv4msgdeym6ucqumzsjtx2yxifegu19cd.node0; Path=/; Secure; HttpOnly
Content-Length: 13222

<!DOCTYPE HTML>
<!-- Application: app-server -->
<!-- Page: Home -->
<!-- Generated: Mon Nov 20 12:34:06 EST 2023 -->
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8"/>
<title>PaperCut Login</title>
<link rel="shortcut icon" href="/images/icons3/favicon.ico" type="image/vnd.microsoft.icon"/>
<meta http-equiv="X-UA-Compatible" content="IE=Edge"/>
<meta name="description" content="PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system."/>
<meta name="keywords" content="print quota, print control, print management, print accounting, software"/>
<meta name="viewport" content="width=device-width, initial-scale=0.8"/>
<link rel="stylesheet" type="text/css" href="/css/style.css?66961papercut-mf" />
<link rel="stylesheet" type="text/css" href="/css/style-override.css?66961papercut-mf" />
<link rel="stylesheet" type="text/css" href="/css/refresh.css?66961papercut-mf" />
<!--[if IE 9]><link rel="stylesheet" type="text/css" href="/css/style-ie9.css?66961papercut-mf" />
<![endif]-->
<!--[if IE 8]><link rel="stylesheet" type="text/css" href="/css/style-ie8.css?66961papercut-mf" />
<![endif]-->
<!--[if IE 7]><link rel="stylesheet" type="text/css" href="/css/style-ie7.css?66961papercut-mf" />
<![endif]-->
<!--[if IE 6]><link rel="stylesheet" type="text/css" href="/css/style-ie6.css?66961papercut-mf" />
<![endif]-->
<script type="text/javascript">var CacheParam = "66961papercut-mf";</script>
<script type="text/javascript" src="/js/jquery/jquery-3.5.1.min.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/jquery/jquery-migrate-3.3.1.min.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/jquery/config.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/lib/underscore/underscore-min.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/common.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/lib/require.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/pages/configure.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/refresh.js?66961papercut-mf"></script>
</head>

<body id="loginBody">
<script language="JavaScript" type="text/javascript"><!--

window.onload = function ()
{
document.Form0.inputUsername.focus();
document.Form0.inputUsername.select();
}

// --></script> <div class="wrap">
    <script type="text/javascript">
    insertScript('/js/pages/Home.js');
    insertScript('/js/pages/LoginPages.js');
    </script>
      <svg viewBox="0 0 280.7 198.5" class="pc-shards">
<polygon points="96.3,136.3 140.4,198.5 162.4,198.5 183.9,130.1 134.9,95.4 "/>
<polygon points="45,63.6 74.9,53 0,0 "/>
<polygon points="134.9,95.4 96.3,136.3 45,63.6 74.9,53 "/>
<polygon points="74.9,53 224.8,0 134.9,95.4 "/>
<polygon points="224.8,0 183.9,130.1 134.9,95.4 "/>
<polygon points="224.8,0 224.8,0 224.8,159 183.9,130.1 "/>
<polygon points="162.4,198.5 224.8,198.5 224.8,159 183.9,130.1 "/>
<polygon points="37.7,198.5 140.4,198.5 96.3,136.3 "/>
<polygon points="0,79.5 0,198.5 37.7,198.5 96.3,136.3 45,63.6 "/>
<polygon points="0,79.5 45,63.6 0,0 "/>
<polygon points="0,79.5 0,79.5 0,79.5 "/>
<polygon points="262.3,198.5 280.7,198.5 265.7,187.9 "/>
<polygon points="224.8,198.5 262.3,198.5 265.7,187.9 224.8,159 "/>
</svg>
<form method="post" name="Form0" action="/app" onsubmit="recordLocale()" autocomplete="off">
<input type="hidden" name="service" value="direct/1/Home/$Form"/>
<input type="hidden" name="sp" value="S0"/>
<input type="hidden" name="Form0" value="$Hidden$0,$Hidden$1,inputUsername,inputPassword,$Submit$0,$PropertySelection"/>
<input type="hidden" name="$Hidden$0" id="javascript-enabled" value="F"/>
<input type="hidden" name="$Hidden$1" value="X"/>
 <div class="login" role="main">
      <div class="box">
        <table class="box-table" title="Login" role="presentation">
          <tr role="row">
            <th class="box-nw" aria-label="No value" role="columnheader" scope="col"></th>
            <th class="box-n" aria-label="No value" role="columnheader" scope="col"></th>
            <th class="box-ne" aria-label="No value" role="columnheader" scope="col"></th>
          </tr>
          <tr role="row">
            <td class="box-w"></td>
            <td class="box-content">

              <div id="login">
 <h1><img alt="PaperCut Logo" src="/custom/login-logo.png?1667504163324" class="logo"></img></h1>

 <h1 id="papercut-user-login-title">Log in</h1>
 <table style="margin-bottom:5px;" title="Username and Password" role="presentation">
                        <tbody>
                          <tr role="row">
                            <th role="rowheader"><label for="inputUsername">Username</label></th>
                            <td><input type="text" name="inputUsername" autocorrect="off" maxlength="50" aria-describedby="login-feedback-message" style="width: 150px;" id="inputUsername" autocapitalize="off" class="field"/></td>
                          </tr>
                          <tr role="row">
                            <th role="rowheader"><label for="inputPassword">Password</label></th>
                            <td><input type="password" name="inputPassword" style="width: 150px;" id="inputPassword" class="field" aria-describedby="login-feedback-message"/></td>
                          </tr>
                        </tbody>
                      </table>


                    <div id="login-feedback-message">



 </div>
<input type="submit" name="$Submit$0" value="Log in" class="loginSubmit" aria-describedby="login-feedback-message"/>



<a href="/app?service=direct/1/Home/oAuth2LoginSuccess" style="display:none" class="btn secondary google">Sign in with Google</a>
<a href="/app?service=direct/1/Home/oAuth2LoginCancel" style="display:none" class="btn secondary microsoft">Sign in with Microsoft</a>
 <a style="display:block; margin-top: 10px;" id="forgot-link" href="/app?service=external/ForgotLoginDetails">
Forgot username or password?</a>

 </div>


            </td>
            <td class="box-e"></td>
          </tr>
          <tr role="row">
            <td class="box-sw"></td>
            <td class="box-s"></td>
            <td class="box-se"></td>
          </tr>
        </table>
      </div>
 <div class="language-box">
          <p id="language-select-text">Language Select</p>
          <svg width="24" height="24" viewBox="50 1777 24 24" class="global" alt="Globe Language Icon">
                <path fill="gray" d="M62,1777c-6.627,0-12,5.373-12,12s5.373,12,12,12s12-5.373,12-12S68.627,1777,62,1777z M58.129,1780.116
        c-0.665,0.732-1.359,1.699-1.925,2.94h-1.833C55.355,1781.79,56.643,1780.771,58.129,1780.116z M53.217,1784.957h2.304
        c-0.251,0.918-0.417,1.954-0.481,3.1h-2.664C52.48,1786.959,52.775,1785.918,53.217,1784.957z M53.236,1793.057
        c-0.447-0.96-0.749-2.001-0.859-3.1h2.662c0.064,1.146,0.23,2.182,0.481,3.1H53.236z M54.401,1794.957h1.803
        c0.549,1.204,1.218,2.146,1.865,2.87C56.624,1797.179,55.369,1796.188,54.401,1794.957z M61.05,1798.054
        c-0.541-0.34-1.814-1.283-2.828-3.097h2.828V1798.054z M61.05,1793.057h-3.645c-0.288-0.893-0.493-1.921-0.566-3.1h4.211V1793.057z
         M61.05,1788.057h-4.211c0.073-1.179,0.278-2.207,0.566-3.1h3.645V1788.057z M61.05,1783.057h-2.828
        c1.014-1.813,2.287-2.757,2.828-3.097V1783.057z M70.823,1784.957c0.441,0.961,0.736,2.002,0.842,3.1h-2.704
        c-0.064-1.146-0.23-2.182-0.481-3.1H70.823z M69.669,1783.057h-1.873c-0.574-1.259-1.279-2.237-1.953-2.974
        C67.358,1780.736,68.669,1781.77,69.669,1783.057z M62.95,1779.96c0.541,0.34,1.814,1.283,2.828,3.097H62.95V1779.96z
         M62.95,1784.957h3.645c0.288,0.893,0.493,1.921,0.566,3.1H62.95V1784.957z M62.95,1789.957h4.211
        c-0.073,1.179-0.278,2.207-0.566,3.1H62.95V1789.957z M62.95,1798.055v-3.098h2.828
        C64.764,1796.772,63.488,1797.716,62.95,1798.055z M65.902,1797.86c0.656-0.729,1.337-1.682,1.894-2.903h1.843
        C68.656,1796.208,67.376,1797.213,65.902,1797.86z M70.804,1793.057h-2.324c0.251-0.918,0.417-1.954,0.481-3.1h2.702
        C71.553,1791.056,71.251,1792.097,70.804,1793.057z"/>
          </svg>
<select name="$PropertySelection" alt="Select language" role="listbox" id="language" aria-label="Select language">
<option value="en" selected="selected">English</option>
<option value="ca">catal&#224;</option>
<option value="zh_CN">&#20013;&#25991; (&#20013;&#22269;)</option>
<option value="zh_HK">&#20013;&#25991; (&#39321;&#28207;)</option>
<option value="zh_TW">&#20013;&#25991; (&#21488;&#28771;)</option>
<option value="hr">hrvatski</option>
<option value="cs">&#269;e&#353;tina</option>
<option value="da">Dansk</option>
<option value="nl">Nederlands</option>
<option value="fi">suomi</option>
<option value="fr">fran&#231;ais</option>
<option value="de">Deutsch</option>
<option value="iw">&#1506;&#1489;&#1512;&#1497;&#1514;</option>
<option value="hu">magyar</option>
<option value="it">italiano</option>
<option value="ja">&#26085;&#26412;&#35486;</option>
<option value="ko">&#54620;&#44397;&#50612;</option>
<option value="lv">Latvie&#353;u</option>
<option value="lt">Lietuvi&#371;</option>
<option value="no">norsk</option>
<option value="pl">polski</option>
<option value="pt">portugu&#234;s (Brasil)</option>
<option value="pt_PT">portugu&#234;s (Portugal)</option>
<option value="ru">&#1088;&#1091;&#1089;&#1089;&#1082;&#1080;&#1081;</option>
<option value="sr">&#1057;&#1088;&#1087;&#1089;&#1082;&#1080;</option>
<option value="sk">Sloven&#269;ina</option>
<option value="sl">Sloven&#353;&#269;ina</option>
<option value="es">espa&#241;ol</option>
<option value="es_ES">espa&#241;ol (Espa&#241;a)</option>
<option value="sv">svenska</option>
<option value="th_TH">&#3652;&#3607;&#3618; (&#3611;&#3619;&#3632;&#3648;&#3607;&#3624;&#3652;&#3607;&#3618;)</option>
<option value="tr">T&#252;rk&#231;e</option>
<option value="cy_GB">Welsh (United Kingdom)</option>
</select> </div>
 <script>
            let languageOptions = document.getElementById("language").children;
            for (let languageOption of languageOptions)
            {
                let lang = languageOption.getAttribute("value");
                if (lang.includes("_")) lang = lang.substr(0, lang.indexOf("_")); // to remove region if specified
                languageOption.setAttribute("lang", lang);
            }
        </script>
<span data-background-uri="/images/login-bg.jpg?66961papercut-mf" data-background-selection="COLOR" data-background-color="#FFFFFF" id="loginCustomization" data-button-color="#01B256" data-forgot-link-text=""></span> <!-- The license has expired!  -->
 </div>
</form>

 <div id="footer" style="position:absolute; bottom: 0px; left: 0px; right: 0px; width: 100%;">
 <div class="product-details">
    <div class="logo"><img src="/images/footer-logo2.png?66961papercut-mf" border="0"/></div>

    <div class="text">
<span class="product"><a href="https://www.papercut.com/products/mf/?clicked=app-footer">PaperCut MF</a></span>

 <div>
Print Management Software</div>
 <!-- analytic purpose -->
<span class="analytic-license-expiry-date" style="display:none"></span>
<span class="analytic-product-build-number" style="display:none">66961</span>
<span class="analytic-product-version" style="display:none">22.1.3</span>
<span class="analytic-product" style="display:none">PaperCut MF</span>
<span class="analytic-product-edition" style="display:none">MF</span> <div class="copyright">
        &copy; Copyright 1999-2023. PaperCut Software Pty Ltd. All rights reserved. </div>
    </div>
  </div>
 </div>
 </div>
  <script language="JavaScript" type="text/javascript">
  var oldonload = window.onload;
  if (typeof window.onload != 'function') {
    window.onload = applyLoginCustomization;
  } else {
    window.onload = function () {
      if (oldonload) {
        oldonload();
      }
        applyLoginCustomization();
    }
  }

  /*
   Apply login customization
   */
  function applyLoginCustomization() {
      var loginCustomization = $("#loginCustomization");
      if (loginCustomization.attr("data-background-selection") == 'IMAGE') {
          loadBackground(loginCustomization.attr("data-background-uri"));
      } else {
          $('#loginBody').find('.wrap').css('background-color', loginCustomization.attr("data-background-color"))
                  .css('background-image', 'none');
      }
      if (loginCustomization.attr("data-button-color") != "") {
          $('#loginBody input[type="submit"].loginSubmit').removeClass('loginSubmit')
                  .css('background-color', loginCustomization.attr("data-button-color"))
                  .css('border-color', loginCustomization.attr("data-button-color"));
      }
      if (loginCustomization.attr("data-forgot-link-text") != "") {
          $('a#forgot-link').text(loginCustomization.attr("data-forgot-link-text"));
      }
  }

  function recordLocale() {
      var languageElement = document.getElementById("language");
      if (languageElement) {
          document.cookie = "ui.locale=" + languageElement.value;
      }
  }
  </script>
</body>
</html>
<!-- Render time: ~ 20 ms -->



    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T09:46:06.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "papercut.com"
         ],
         "hostname" : [
            "www.papercut.com"
         ],
         "url" : [
            "https://www.papercut.com/products/mf/?clicked=app-footer"
         ]
      },
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "8c5529452ed2e5ae1d4f29e7345687a7",
         "bodymmh3" : -856371065,
         "component" : [
            {
               "productvendor" : "Oracle",
               "product" : "Java"
            },
            {
               "product" : "jQuery",
               "productversion" : "3.5.1",
               "productvendor" : "jQuery"
            }
         ],
         "description" : "PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.",
         "headermd5" : "fa25c4eea42a342854fe45cdc0273a72",
         "headermmh3" : -2056617831,
         "keywords" : [
            "print accounting",
            "print control",
            "print management",
            "print quota",
            "software"
         ],
         "title" : "PaperCut Login"
      },
      "length" : 13610
   },
   "asn" : "AS16509",
   "city" : "Sydney",
   "country" : "AU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 09:39:56 GMT\r\nServer: nginx\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1\r\nExpires: Thu, 01 Jan 1970 00:00:00 UTC\r\nCache-Control: no-cache\r\nSet-Cookie: JSESSIONID=node0u6v69e8sv4msgdeym6ucqumzsjtx2yxifegu19cd.node0; Path=/; Secure; HttpOnly\r\nContent-Length: 13222\r\n\r\n<!DOCTYPE HTML>\n<!-- Application: app-server -->\n<!-- Page: Home -->\n<!-- Generated: Mon Nov 20 12:34:06 EST 2023 -->\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html;charset=UTF-8\"/>\n<title>PaperCut Login</title>\n<link rel=\"shortcut icon\" href=\"/images/icons3/favicon.ico\" type=\"image/vnd.microsoft.icon\"/>\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=Edge\"/>\n<meta name=\"description\" content=\"PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.\"/>\n<meta name=\"keywords\" content=\"print quota, print control, print management, print accounting, software\"/>\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=0.8\"/>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style.css?66961papercut-mf\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-override.css?66961papercut-mf\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/refresh.css?66961papercut-mf\" />\n<!--[if IE 9]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie9.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 8]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie8.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 7]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie7.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 6]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie6.css?66961papercut-mf\" />\n<![endif]-->\n<script type=\"text/javascript\">var CacheParam = \"66961papercut-mf\";</script>\n<script type=\"text/javascript\" src=\"/js/jquery/jquery-3.5.1.min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/jquery/jquery-migrate-3.3.1.min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/jquery/config.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/lib/underscore/underscore-min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/common.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/lib/require.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/pages/configure.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/refresh.js?66961papercut-mf\"></script>\n</head>\n\n<body id=\"loginBody\">\n<script language=\"JavaScript\" type=\"text/javascript\"><!--\n\nwindow.onload = function ()\n{\ndocument.Form0.inputUsername.focus();\ndocument.Form0.inputUsername.select();\n}\n\n// --></script> <div class=\"wrap\">\n    <script type=\"text/javascript\">\n    insertScript('/js/pages/Home.js');\n    insertScript('/js/pages/LoginPages.js');\n    </script>\n      <svg viewBox=\"0 0 280.7 198.5\" class=\"pc-shards\">\n<polygon points=\"96.3,136.3 140.4,198.5 162.4,198.5 183.9,130.1 134.9,95.4 \"/>\n<polygon points=\"45,63.6 74.9,53 0,0 \"/>\n<polygon points=\"134.9,95.4 96.3,136.3 45,63.6 74.9,53 \"/>\n<polygon points=\"74.9,53 224.8,0 134.9,95.4 \"/>\n<polygon points=\"224.8,0 183.9,130.1 134.9,95.4 \"/>\n<polygon points=\"224.8,0 224.8,0 224.8,159 183.9,130.1 \"/>\n<polygon points=\"162.4,198.5 224.8,198.5 224.8,159 183.9,130.1 \"/>\n<polygon points=\"37.7,198.5 140.4,198.5 96.3,136.3 \"/>\n<polygon points=\"0,79.5 0,198.5 37.7,198.5 96.3,136.3 45,63.6 \"/>\n<polygon points=\"0,79.5 45,63.6 0,0 \"/>\n<polygon points=\"0,79.5 0,79.5 0,79.5 \"/>\n<polygon points=\"262.3,198.5 280.7,198.5 265.7,187.9 \"/>\n<polygon points=\"224.8,198.5 262.3,198.5 265.7,187.9 224.8,159 \"/>\n</svg>\n<form method=\"post\" name=\"Form0\" action=\"/app\" onsubmit=\"recordLocale()\" autocomplete=\"off\">\n<input type=\"hidden\" name=\"service\" value=\"direct/1/Home/$Form\"/>\n<input type=\"hidden\" name=\"sp\" value=\"S0\"/>\n<input type=\"hidden\" name=\"Form0\" value=\"$Hidden$0,$Hidden$1,inputUsername,inputPassword,$Submit$0,$PropertySelection\"/>\n<input type=\"hidden\" name=\"$Hidden$0\" id=\"javascript-enabled\" value=\"F\"/>\n<input type=\"hidden\" name=\"$Hidden$1\" value=\"X\"/>\n <div class=\"login\" role=\"main\">\n      <div class=\"box\">\n        <table class=\"box-table\" title=\"Login\" role=\"presentation\">\n          <tr role=\"row\">\n            <th class=\"box-nw\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n            <th class=\"box-n\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n            <th class=\"box-ne\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n          </tr>\n          <tr role=\"row\">\n            <td class=\"box-w\"></td>\n            <td class=\"box-content\">\n\n              <div id=\"login\">\n <h1><img alt=\"PaperCut Logo\" src=\"/custom/login-logo.png?1667504163324\" class=\"logo\"></img></h1>\n\n <h1 id=\"papercut-user-login-title\">Log in</h1>\n <table style=\"margin-bottom:5px;\" title=\"Username and Password\" role=\"presentation\">\n                        <tbody>\n                          <tr role=\"row\">\n                            <th role=\"rowheader\"><label for=\"inputUsername\">Username</label></th>\n                            <td><input type=\"text\" name=\"inputUsername\" autocorrect=\"off\" maxlength=\"50\" aria-describedby=\"login-feedback-message\" style=\"width: 150px;\" id=\"inputUsername\" autocapitalize=\"off\" class=\"field\"/></td>\n                          </tr>\n                          <tr role=\"row\">\n                            <th role=\"rowheader\"><label for=\"inputPassword\">Password</label></th>\n                            <td><input type=\"password\" name=\"inputPassword\" style=\"width: 150px;\" id=\"inputPassword\" class=\"field\" aria-describedby=\"login-feedback-message\"/></td>\n                          </tr>\n                        </tbody>\n                      </table>\n\n\n                    <div id=\"login-feedback-message\">\n\n\n\n </div>\n<input type=\"submit\" name=\"$Submit$0\" value=\"Log in\" class=\"loginSubmit\" aria-describedby=\"login-feedback-message\"/>\n\n\n\n<a href=\"/app?service=direct/1/Home/oAuth2LoginSuccess\" style=\"display:none\" class=\"btn secondary google\">Sign in with Google</a>\n<a href=\"/app?service=direct/1/Home/oAuth2LoginCancel\" style=\"display:none\" class=\"btn secondary microsoft\">Sign in with Microsoft</a>\n <a style=\"display:block; margin-top: 10px;\" id=\"forgot-link\" href=\"/app?service=external/ForgotLoginDetails\">\nForgot username or password?</a>\n\n </div>\n\n\n            </td>\n            <td class=\"box-e\"></td>\n          </tr>\n          <tr role=\"row\">\n            <td class=\"box-sw\"></td>\n            <td class=\"box-s\"></td>\n            <td class=\"box-se\"></td>\n          </tr>\n        </table>\n      </div>\n <div class=\"language-box\">\n          <p id=\"language-select-text\">Language Select</p>\n          <svg width=\"24\" height=\"24\" viewBox=\"50 1777 24 24\" class=\"global\" alt=\"Globe Language Icon\">\n                <path fill=\"gray\" d=\"M62,1777c-6.627,0-12,5.373-12,12s5.373,12,12,12s12-5.373,12-12S68.627,1777,62,1777z M58.129,1780.116\n        c-0.665,0.732-1.359,1.699-1.925,2.94h-1.833C55.355,1781.79,56.643,1780.771,58.129,1780.116z M53.217,1784.957h2.304\n        c-0.251,0.918-0.417,1.954-0.481,3.1h-2.664C52.48,1786.959,52.775,1785.918,53.217,1784.957z M53.236,1793.057\n        c-0.447-0.96-0.749-2.001-0.859-3.1h2.662c0.064,1.146,0.23,2.182,0.481,3.1H53.236z M54.401,1794.957h1.803\n        c0.549,1.204,1.218,2.146,1.865,2.87C56.624,1797.179,55.369,1796.188,54.401,1794.957z M61.05,1798.054\n        c-0.541-0.34-1.814-1.283-2.828-3.097h2.828V1798.054z M61.05,1793.057h-3.645c-0.288-0.893-0.493-1.921-0.566-3.1h4.211V1793.057z\n         M61.05,1788.057h-4.211c0.073-1.179,0.278-2.207,0.566-3.1h3.645V1788.057z M61.05,1783.057h-2.828\n        c1.014-1.813,2.287-2.757,2.828-3.097V1783.057z M70.823,1784.957c0.441,0.961,0.736,2.002,0.842,3.1h-2.704\n        c-0.064-1.146-0.23-2.182-0.481-3.1H70.823z M69.669,1783.057h-1.873c-0.574-1.259-1.279-2.237-1.953-2.974\n        C67.358,1780.736,68.669,1781.77,69.669,1783.057z M62.95,1779.96c0.541,0.34,1.814,1.283,2.828,3.097H62.95V1779.96z\n         M62.95,1784.957h3.645c0.288,0.893,0.493,1.921,0.566,3.1H62.95V1784.957z M62.95,1789.957h4.211\n        c-0.073,1.179-0.278,2.207-0.566,3.1H62.95V1789.957z M62.95,1798.055v-3.098h2.828\n        C64.764,1796.772,63.488,1797.716,62.95,1798.055z M65.902,1797.86c0.656-0.729,1.337-1.682,1.894-2.903h1.843\n        C68.656,1796.208,67.376,1797.213,65.902,1797.86z M70.804,1793.057h-2.324c0.251-0.918,0.417-1.954,0.481-3.1h2.702\n        C71.553,1791.056,71.251,1792.097,70.804,1793.057z\"/>\n          </svg>\n<select name=\"$PropertySelection\" alt=\"Select language\" role=\"listbox\" id=\"language\" aria-label=\"Select language\">\n<option value=\"en\" selected=\"selected\">English</option>\n<option value=\"ca\">catal&#224;</option>\n<option value=\"zh_CN\">&#20013;&#25991; (&#20013;&#22269;)</option>\n<option value=\"zh_HK\">&#20013;&#25991; (&#39321;&#28207;)</option>\n<option value=\"zh_TW\">&#20013;&#25991; (&#21488;&#28771;)</option>\n<option value=\"hr\">hrvatski</option>\n<option value=\"cs\">&#269;e&#353;tina</option>\n<option value=\"da\">Dansk</option>\n<option value=\"nl\">Nederlands</option>\n<option value=\"fi\">suomi</option>\n<option value=\"fr\">fran&#231;ais</option>\n<option value=\"de\">Deutsch</option>\n<option value=\"iw\">&#1506;&#1489;&#1512;&#1497;&#1514;</option>\n<option value=\"hu\">magyar</option>\n<option value=\"it\">italiano</option>\n<option value=\"ja\">&#26085;&#26412;&#35486;</option>\n<option value=\"ko\">&#54620;&#44397;&#50612;</option>\n<option value=\"lv\">Latvie&#353;u</option>\n<option value=\"lt\">Lietuvi&#371;</option>\n<option value=\"no\">norsk</option>\n<option value=\"pl\">polski</option>\n<option value=\"pt\">portugu&#234;s (Brasil)</option>\n<option value=\"pt_PT\">portugu&#234;s (Portugal)</option>\n<option value=\"ru\">&#1088;&#1091;&#1089;&#1089;&#1082;&#1080;&#1081;</option>\n<option value=\"sr\">&#1057;&#1088;&#1087;&#1089;&#1082;&#1080;</option>\n<option value=\"sk\">Sloven&#269;ina</option>\n<option value=\"sl\">Sloven&#353;&#269;ina</option>\n<option value=\"es\">espa&#241;ol</option>\n<option value=\"es_ES\">espa&#241;ol (Espa&#241;a)</option>\n<option value=\"sv\">svenska</option>\n<option value=\"th_TH\">&#3652;&#3607;&#3618; (&#3611;&#3619;&#3632;&#3648;&#3607;&#3624;&#3652;&#3607;&#3618;)</option>\n<option value=\"tr\">T&#252;rk&#231;e</option>\n<option value=\"cy_GB\">Welsh (United Kingdom)</option>\n</select> </div>\n <script>\n            let languageOptions = document.getElementById(\"language\").children;\n            for (let languageOption of languageOptions)\n            {\n                let lang = languageOption.getAttribute(\"value\");\n                if (lang.includes(\"_\")) lang = lang.substr(0, lang.indexOf(\"_\")); // to remove region if specified\n                languageOption.setAttribute(\"lang\", lang);\n            }\n        </script>\n<span data-background-uri=\"/images/login-bg.jpg?66961papercut-mf\" data-background-selection=\"COLOR\" data-background-color=\"#FFFFFF\" id=\"loginCustomization\" data-button-color=\"#01B256\" data-forgot-link-text=\"\"></span> <!-- The license has expired!  -->\n </div>\n</form>\n\n <div id=\"footer\" style=\"position:absolute; bottom: 0px; left: 0px; right: 0px; width: 100%;\">\n <div class=\"product-details\">\n    <div class=\"logo\"><img src=\"/images/footer-logo2.png?66961papercut-mf\" border=\"0\"/></div>\n\n    <div class=\"text\">\n<span class=\"product\"><a href=\"https://www.papercut.com/products/mf/?clicked=app-footer\">PaperCut MF</a></span>\n\n <div>\nPrint Management Software</div>\n <!-- analytic purpose -->\n<span class=\"analytic-license-expiry-date\" style=\"display:none\"></span>\n<span class=\"analytic-product-build-number\" style=\"display:none\">66961</span>\n<span class=\"analytic-product-version\" style=\"display:none\">22.1.3</span>\n<span class=\"analytic-product\" style=\"display:none\">PaperCut MF</span>\n<span class=\"analytic-product-edition\" style=\"display:none\">MF</span> <div class=\"copyright\">\n        &copy; Copyright 1999-2023. PaperCut Software Pty Ltd. All rights reserved. </div>\n    </div>\n  </div>\n </div>\n </div>\n  <script language=\"JavaScript\" type=\"text/javascript\">\n  var oldonload = window.onload;\n  if (typeof window.onload != 'function') {\n    window.onload = applyLoginCustomization;\n  } else {\n    window.onload = function () {\n      if (oldonload) {\n        oldonload();\n      }\n        applyLoginCustomization();\n    }\n  }\n\n  /*\n   Apply login customization\n   */\n  function applyLoginCustomization() {\n      var loginCustomization = $(\"#loginCustomization\");\n      if (loginCustomization.attr(\"data-background-selection\") == 'IMAGE') {\n          loadBackground(loginCustomization.attr(\"data-background-uri\"));\n      } else {\n          $('#loginBody').find('.wrap').css('background-color', loginCustomization.attr(\"data-background-color\"))\n                  .css('background-image', 'none');\n      }\n      if (loginCustomization.attr(\"data-button-color\") != \"\") {\n          $('#loginBody input[type=\"submit\"].loginSubmit').removeClass('loginSubmit')\n                  .css('background-color', loginCustomization.attr(\"data-button-color\"))\n                  .css('border-color', loginCustomization.attr(\"data-button-color\"));\n      }\n      if (loginCustomization.attr(\"data-forgot-link-text\") != \"\") {\n          $('a#forgot-link').text(loginCustomization.attr(\"data-forgot-link-text\"));\n      }\n  }\n\n  function recordLocale() {\n      var languageElement = document.getElementById(\"language\");\n      if (languageElement) {\n          document.cookie = \"ui.locale=\" + languageElement.value;\n      }\n  }\n  </script>\n</body>\n</html>\n<!-- Render time: ~ 20 ms -->\n\n\n",
   "datamd5" : "6602a320a278b26f544c1f7e9b11bbae",
   "datammh3" : 1404482669,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "AMAZO-ZSYD",
      "organization" : "Amazon Corporate Services Pty Ltd",
      "subnet" : "13.54.0.0/15"
   },
   "host" : [
      "ec2-13-54-235-57"
   ],
   "hostname" : [
      "ec2-13-54-235-57.ap-southeast-2.compute.amazonaws.com"
   ],
   "ip" : "13.54.235.57",
   "ipv6" : "false",
   "latitude" : "-33.8715",
   "location" : "-33.8715,151.2006",
   "longitude" : "151.2006",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4786,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-13-54-235-57.ap-southeast-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "ap-southeast-2.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.48.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 35.94.41.35:4786 (tcp/http) - last seen on 2024-11-21 at 09:37:06 UTC

    • IP
      35.94.41.35
      Network
      35.80.0.0/12
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://35.94.41.35:4786/ 200

      Reverse DNS
      ec2-35-94-41-35.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      434d8c65c52c439ec9d64db9c2d964d6
      HTTP Header MD5
      d895d9236422dbc747e97e3606a50c0f
      HTTP Body MD5
      99c21cbcc0452ca85e724381f73a3d1b
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: keep-alive
Date: Thu, 21 Nov 2024 09:30:03 GMT
Content-Type: text/html
Pragma: private
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000;
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline';
Content-Length: 188

<script LANGUAGE=JavaScript>
    window.location = "/global-protect/login.esp"; 
</script>
<html>

<head></head>

<body>
    <p>JavaScript must be enabled to continue!</p>
</body>

</html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T09:37:06.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "99c21cbcc0452ca85e724381f73a3d1b",
         "bodymmh3" : 956805313,
         "headermd5" : "d895d9236422dbc747e97e3606a50c0f",
         "headermmh3" : 278693437
      },
      "length" : 689
   },
   "asn" : "AS16509",
   "city" : "Boardman",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: keep-alive\r\nDate: Thu, 21 Nov 2024 09:30:03 GMT\r\nContent-Type: text/html\r\nPragma: private\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: 0\r\nX-Frame-Options: DENY\r\nStrict-Transport-Security: max-age=31536000;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; img-src * data:; style-src 'self' 'unsafe-inline';\r\nContent-Length: 188\r\n\r\n<script LANGUAGE=JavaScript>\n    window.location = \"/global-protect/login.esp\"; \n</script>\n<html>\n\n<head></head>\n\n<body>\n    <p>JavaScript must be enabled to continue!</p>\n</body>\n\n</html>",
   "datamd5" : "434d8c65c52c439ec9d64db9c2d964d6",
   "datammh3" : -985819055,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AMAZON-ZPDX",
      "organization" : "Amazon.com, Inc.",
      "subnet" : "35.80.0.0/12"
   },
   "host" : [
      "ec2-35-94-41-35"
   ],
   "hostname" : [
      "ec2-35-94-41-35.us-west-2.compute.amazonaws.com"
   ],
   "ip" : "35.94.41.35",
   "ipv6" : "false",
   "latitude" : "45.8491",
   "location" : "45.8491,-119.7143",
   "longitude" : "-119.7143",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4786,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-35-94-41-35.us-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "us-west-2.compute.amazonaws.com"
   ],
   "subnet" : "35.80.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 13.247.119.136:4786 (tcp/http) - last seen on 2024-11-21 at 09:27:08 UTC

    • IP
      13.247.119.136
      Network
      13.244.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Cisco IOS
      URL

      http://13.247.119.136:4786/ 200

      HTTP Title
      SSL VPN Service
      Reverse DNS
      ec2-13-247-119-136.af-south-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Cisco IOS
      Product
      F5 Nginx
      HTTP Component(s)
      Cisco WebVPN
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e73fb32120bbccbb6ce84d72a9811f27
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      f7876d48967864b57d32b168c0fba837
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 09:20:54 GMT
Server: nginx
Content-Length: 627
Content-Type: text/html

<?xml version="1.0" encoding="UTF-8"?>
<auth id="main">
<title>SSL VPN Service</title>
<ca status="disabled" href="/+CSCOCA+/login.html" />



<banner></banner>
<message>Please enter your username and password.</message>


<form method="post" action="/+webvpn+/index.html">

<input type="text" name="username" label="Username:" />
<input type="password" name="password" label="Password:" />


<select name="group_list" label="GROUP:">
<option value="telecommuters" noaaa="0" >Remote_Users</option></select>

<input type="submit" name="Login" value="Login" />
<input type="reset" name="Clear" value="Clear" />


</form>
</auth>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T09:27:08.000Z",
   "app" : {
      "favicon" : {
         "image" : "AAABAAIAEBAQAAAAAAAoAQAAJgAAACAgEAAAAAAA6AIAAE4BAAAoAAAAEAAAACAAAAABAAQAAAAAAIAAAAAAAAAAAAAAABAAAAAQAAAAAAAAAAAAgAAAgAAAAICAAIAAAACAAIAAgIAAAICAgADAwMAAAAD/AAD/AAAA//8A/wAAAP8A/wD//wAA////AAAAAAAAAAAAAABERERERAAABEREREREAABERAAAAAAAAERAAAAAAAAEREAAAAAAAAREREREREQABERERERERAAEREAAAAAAAAREQAAAAAAAAEREAAAAAAAARERAAAAAAAAEREREREQAAAAERERERAAAAAAAAAAAAAAAAAAAAAAA//8AAPADAADgAwAAw/8AAMf/AACH/wAAgAMAAIADAACH/wAAh/8AAMP/AADB/wAA4AMAAPgDAAD//wAA//8AACgAAAAgAAAAQAAAAAEABAAAAAAAAAIAAAAAAAAAAAAAEAAAABAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEREREREREREQAAAAAAAAEREREREREREREAAAAAAAERERERERERERERAAAAAAAREREREREREREREQAAAAABEREREREREREREREAAAAAAREREREAAAAAAAAAAAAAABEREREQAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREQAAAAAAAAAAAAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREREREREREREREAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREQAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAABEREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREREREREREQAAAAAAEREREREREREREREAAAAAAAERERERERERERERAAAAAAAAAREREREREREREQAAAAAAAAABEREREREREREAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/////////////////4AAP/4AAD/4AAA/8AAAP+AAAD/gD///wB///8A////Af///gH///4B///+AAAA/gAAAP4AAAD+AAAA/gAAAP4B////Af///wD///8Af///gD///8AAAP/AAAD/4AAA//gAAP/+AAD////////////////w==",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "f7876d48967864b57d32b168c0fba837",
         "bodymmh3" : 353668724,
         "component" : [
            {
               "productvendor" : "Cisco",
               "product" : "WebVPN"
            }
         ],
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : -633904768,
         "title" : "SSL VPN Service"
      },
      "length" : 763
   },
   "asn" : "AS16509",
   "city" : "Cape Town",
   "country" : "ZA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 09:20:54 GMT\r\nServer: nginx\r\nContent-Length: 627\r\nContent-Type: text/html\r\n\r\n<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<auth id=\"main\">\n<title>SSL VPN Service</title>\n<ca status=\"disabled\" href=\"/+CSCOCA+/login.html\" />\n\n\n\n<banner></banner>\n<message>Please enter your username and password.</message>\n\n\n<form method=\"post\" action=\"/+webvpn+/index.html\">\n\n<input type=\"text\" name=\"username\" label=\"Username:\" />\n<input type=\"password\" name=\"password\" label=\"Password:\" />\n\n\n<select name=\"group_list\" label=\"GROUP:\">\n<option value=\"telecommuters\" noaaa=\"0\" >Remote_Users</option></select>\n\n<input type=\"submit\" name=\"Login\" value=\"Login\" />\n<input type=\"reset\" name=\"Clear\" value=\"Clear\" />\n\n\n</form>\n</auth>\n",
   "datamd5" : "e73fb32120bbccbb6ce84d72a9811f27",
   "datammh3" : 1679286467,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AF",
      "continentname" : "Africa",
      "country" : "ZA",
      "countryname" : "South Africa",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "-30.559482",
      "location" : "-30.559482,22.937506",
      "longitude" : "22.937506",
      "netname" : "AMAZON-CPT",
      "organization" : "Amazon Data Services South Africa",
      "subnet" : "13.244.0.0/14"
   },
   "host" : [
      "ec2-13-247-119-136"
   ],
   "hostname" : [
      "ec2-13-247-119-136.af-south-1.compute.amazonaws.com"
   ],
   "ip" : "13.247.119.136",
   "ipv6" : "false",
   "latitude" : "-34.0486",
   "location" : "-34.0486,18.4811",
   "longitude" : "18.4811",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "IOS",
   "osvendor" : "Cisco",
   "port" : 4786,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-13-247-119-136.af-south-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "af-south-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "13.244.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 3.108.51.183:4786 (tcp/http) - last seen on 2024-11-21 at 09:09:07 UTC

    • IP
      3.108.51.183
      Network
      3.104.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://3.108.51.183:4786/ 200

      Reverse DNS
      ec2-3-108-51-183.ap-south-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      97f64c9c6bf158d0d05d3f05372b5a7a
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      c25cbaf569d22e9f526ff69fe9e61bbf
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 09:02:07 GMT
Server: nginx
Content-Length: 583
Content-Type: text/html

<html style="background:#007cef">
<head>
<meta http-equiv="expires" content="0">
<script type='text/javascript'>
pr=(document.location.protocol == 'https:') ? 'https' : 'http';
pt=(location.port == '') ? '' : ':' + location.port;
redirect_suffix = "/redirect.html?count="+Math.random();
if(location.hostname.indexOf(':') == -1)
{
location.href=pr+"://"+location.hostname+pt+redirect_suffix;
}
else    //could be ipv6 addr
{
var url = "";
url=pr+"://["+ location.hostname.replace(/[\[\]]/g, '') +"]"+pt+redirect_suffix;
location.href = url;
}
</script>
</head>
<body>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T09:09:07.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "c25cbaf569d22e9f526ff69fe9e61bbf",
         "bodymmh3" : 2073015905,
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : 1900021511
      },
      "length" : 719
   },
   "asn" : "AS16509",
   "city" : "Mumbai",
   "country" : "IN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 09:02:07 GMT\r\nServer: nginx\r\nContent-Length: 583\r\nContent-Type: text/html\r\n\r\n<html style=\"background:#007cef\">\n<head>\n<meta http-equiv=\"expires\" content=\"0\">\n<script type='text/javascript'>\npr=(document.location.protocol == 'https:') ? 'https' : 'http';\npt=(location.port == '') ? '' : ':' + location.port;\nredirect_suffix = \"/redirect.html?count=\"+Math.random();\nif(location.hostname.indexOf(':') == -1)\n{\nlocation.href=pr+\"://\"+location.hostname+pt+redirect_suffix;\n}\nelse    //could be ipv6 addr\n{\nvar url = \"\";\nurl=pr+\"://[\"+ location.hostname.replace(/[\\[\\]]/g, '') +\"]\"+pt+redirect_suffix;\nlocation.href = url;\n}\n</script>\n</head>\n<body>\n</body>\n</html>\n",
   "datamd5" : "97f64c9c6bf158d0d05d3f05372b5a7a",
   "datammh3" : 1079192638,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "IN",
      "countryname" : "India",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "20.593684",
      "location" : "20.593684,78.96288",
      "longitude" : "78.96288",
      "netname" : "AMAZON-BOM",
      "organization" : "Amazon Data Services India",
      "subnet" : "3.108.0.0/14"
   },
   "host" : [
      "ec2-3-108-51-183"
   ],
   "hostname" : [
      "ec2-3-108-51-183.ap-south-1.compute.amazonaws.com"
   ],
   "ip" : "3.108.51.183",
   "ipv6" : "false",
   "latitude" : "19.0748",
   "location" : "19.0748,72.8856",
   "longitude" : "72.8856",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4786,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-3-108-51-183.ap-south-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "ap-south-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "3.104.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 51.16.244.127:4786 (tcp/http) - last seen on 2024-11-21 at 09:02:05 UTC

    • IP
      51.16.244.127
      Network
      51.16.0.0/15
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux ubuntu
      URL

      http://51.16.244.127:4786/ 200

      HTTP Title
      MarsRouter (build 36527) - Info
      Reverse DNS
      ec2-51-16-244-127.il-central-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux ubuntu
      HTTP Component(s)
      PHP PHP 5.5.9
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      972594e9f39cff7ed64419013a333f86
      HTTP Header MD5
      5e13146da299ee88769bdc68ebf5a93f
      HTTP Body MD5
      302d0bc954a373f51c7eea5d1d750022
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 08:55:19 GMT
Server: Oracle9iAS/9.0.3.1 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.3.1.0 (N)
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Content-Length: 791
Content-Type: text/html
Set-Cookie: csrftoken=SymDN2yiNWhCZygl8yMv

<html><head><link rel="icon" href="/favicon_5d76db13-48b5-4e63-b83e-0cd9a35d0ea5.ico"><title>MarsRouter (build 36527) - Info</title></head><body><h3>chxptj7os9q801fnp6pyhwx7av3n</h3><span>92k3l5</span><p>7cqnvaza5pcpv7w989g</p><h1>gdt42lnoovtu19ewqcckss4i2l1it</h1><div>jzjgk18qdge795rrqiez239in08</div><h2>s9rvg33lppum</h2><h3>1v9y73440pbdur9q1ltghu0ovq61</h3><div>h38i9fzhyjpz9zi1</div><span>t7u54m8urj9ipkvopvn3rkyfvcci</span><div>s48x6jc</div><div>s1donwz4c2yqch5gkke31cj1u</div><p>l15470f34o66otxd8iriz</p><p>bf7aqq5ory35opb8</p><div>2jjo49ds216wm</div><h2>fb32kysnmtbjbf9nen8</h2><div>ux252bcsnkcn</div><h1>1svwdvxxdm3hwub3okwqpkutri9a</h1><div>yzt7lb0i86vma5d1wnqzw</div><p>1akegbn0i1asuqdc0nmc0b</p><div>korbqvuldhwwu4fci6ihz6k7srb</div><p>oce2wc6d</p><p>31a4o3v39n</p></body></html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T09:02:05.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "9.0.3.1"
         ]
      },
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "302d0bc954a373f51c7eea5d1d750022",
         "bodymmh3" : 164620280,
         "component" : [
            {
               "productversion" : "5.5.9",
               "productvendor" : "PHP",
               "product" : "PHP"
            }
         ],
         "headermd5" : "5e13146da299ee88769bdc68ebf5a93f",
         "headermmh3" : -1975019789,
         "title" : "MarsRouter (build 36527) - Info"
      },
      "length" : 1075
   },
   "asn" : "AS16509",
   "city" : "Tel Aviv",
   "country" : "IL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:55:19 GMT\r\nServer: Oracle9iAS/9.0.3.1 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.3.1.0 (N)\r\nX-Powered-By: PHP/5.5.9-1ubuntu4.21\r\nContent-Length: 791\r\nContent-Type: text/html\r\nSet-Cookie: csrftoken=SymDN2yiNWhCZygl8yMv\r\n\r\n<html><head><link rel=\"icon\" href=\"/favicon_5d76db13-48b5-4e63-b83e-0cd9a35d0ea5.ico\"><title>MarsRouter (build 36527) - Info</title></head><body><h3>chxptj7os9q801fnp6pyhwx7av3n</h3><span>92k3l5</span><p>7cqnvaza5pcpv7w989g</p><h1>gdt42lnoovtu19ewqcckss4i2l1it</h1><div>jzjgk18qdge795rrqiez239in08</div><h2>s9rvg33lppum</h2><h3>1v9y73440pbdur9q1ltghu0ovq61</h3><div>h38i9fzhyjpz9zi1</div><span>t7u54m8urj9ipkvopvn3rkyfvcci</span><div>s48x6jc</div><div>s1donwz4c2yqch5gkke31cj1u</div><p>l15470f34o66otxd8iriz</p><p>bf7aqq5ory35opb8</p><div>2jjo49ds216wm</div><h2>fb32kysnmtbjbf9nen8</h2><div>ux252bcsnkcn</div><h1>1svwdvxxdm3hwub3okwqpkutri9a</h1><div>yzt7lb0i86vma5d1wnqzw</div><p>1akegbn0i1asuqdc0nmc0b</p><div>korbqvuldhwwu4fci6ihz6k7srb</div><p>oce2wc6d</p><p>31a4o3v39n</p></body></html>",
   "datamd5" : "972594e9f39cff7ed64419013a333f86",
   "datammh3" : 650063901,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "host" : [
      "ec2-51-16-244-127"
   ],
   "hostname" : [
      "ec2-51-16-244-127.il-central-1.compute.amazonaws.com"
   ],
   "ip" : "51.16.244.127",
   "ipv6" : "false",
   "latitude" : "32.0803",
   "location" : "32.0803,34.7805",
   "longitude" : "34.7805",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux",
   "osdistribution" : "ubuntu",
   "osvendor" : "Linux",
   "port" : 4786,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-51-16-244-127.il-central-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "il-central-1.compute.amazonaws.com"
   ],
   "subnet" : "51.16.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 3.106.211.6:4786 (tcp/http) - last seen on 2024-11-21 at 08:52:07 UTC

    • IP
      3.106.211.6
      Network
      3.104.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://3.106.211.6:4786/ 200

      HTTP Title
      PaperCut Login
      HTTP Description
      PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.
      HTTP Keyword(s)
      print accounting print control print management print quota software
      Reverse DNS
      ec2-3-106-211-6.ap-southeast-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      jQuery jQuery 3.5.1 Oracle Java
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6602a320a278b26f544c1f7e9b11bbae
      HTTP Header MD5
      fa25c4eea42a342854fe45cdc0273a72
      HTTP Body MD5
      8c5529452ed2e5ae1d4f29e7345687a7
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 08:45:55 GMT
Server: nginx
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Cache-Control: no-cache
Set-Cookie: JSESSIONID=node0eaxyvuht0z5t7tfqr8bszpwsq1ckednina3geu5g.node0; Path=/; Secure; HttpOnly
Content-Length: 13222

<!DOCTYPE HTML>
<!-- Application: app-server -->
<!-- Page: Home -->
<!-- Generated: Mon Nov 20 12:34:06 EST 2023 -->
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8"/>
<title>PaperCut Login</title>
<link rel="shortcut icon" href="/images/icons3/favicon.ico" type="image/vnd.microsoft.icon"/>
<meta http-equiv="X-UA-Compatible" content="IE=Edge"/>
<meta name="description" content="PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system."/>
<meta name="keywords" content="print quota, print control, print management, print accounting, software"/>
<meta name="viewport" content="width=device-width, initial-scale=0.8"/>
<link rel="stylesheet" type="text/css" href="/css/style.css?66961papercut-mf" />
<link rel="stylesheet" type="text/css" href="/css/style-override.css?66961papercut-mf" />
<link rel="stylesheet" type="text/css" href="/css/refresh.css?66961papercut-mf" />
<!--[if IE 9]><link rel="stylesheet" type="text/css" href="/css/style-ie9.css?66961papercut-mf" />
<![endif]-->
<!--[if IE 8]><link rel="stylesheet" type="text/css" href="/css/style-ie8.css?66961papercut-mf" />
<![endif]-->
<!--[if IE 7]><link rel="stylesheet" type="text/css" href="/css/style-ie7.css?66961papercut-mf" />
<![endif]-->
<!--[if IE 6]><link rel="stylesheet" type="text/css" href="/css/style-ie6.css?66961papercut-mf" />
<![endif]-->
<script type="text/javascript">var CacheParam = "66961papercut-mf";</script>
<script type="text/javascript" src="/js/jquery/jquery-3.5.1.min.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/jquery/jquery-migrate-3.3.1.min.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/jquery/config.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/lib/underscore/underscore-min.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/common.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/lib/require.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/pages/configure.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/refresh.js?66961papercut-mf"></script>
</head>

<body id="loginBody">
<script language="JavaScript" type="text/javascript"><!--

window.onload = function ()
{
document.Form0.inputUsername.focus();
document.Form0.inputUsername.select();
}

// --></script> <div class="wrap">
    <script type="text/javascript">
    insertScript('/js/pages/Home.js');
    insertScript('/js/pages/LoginPages.js');
    </script>
      <svg viewBox="0 0 280.7 198.5" class="pc-shards">
<polygon points="96.3,136.3 140.4,198.5 162.4,198.5 183.9,130.1 134.9,95.4 "/>
<polygon points="45,63.6 74.9,53 0,0 "/>
<polygon points="134.9,95.4 96.3,136.3 45,63.6 74.9,53 "/>
<polygon points="74.9,53 224.8,0 134.9,95.4 "/>
<polygon points="224.8,0 183.9,130.1 134.9,95.4 "/>
<polygon points="224.8,0 224.8,0 224.8,159 183.9,130.1 "/>
<polygon points="162.4,198.5 224.8,198.5 224.8,159 183.9,130.1 "/>
<polygon points="37.7,198.5 140.4,198.5 96.3,136.3 "/>
<polygon points="0,79.5 0,198.5 37.7,198.5 96.3,136.3 45,63.6 "/>
<polygon points="0,79.5 45,63.6 0,0 "/>
<polygon points="0,79.5 0,79.5 0,79.5 "/>
<polygon points="262.3,198.5 280.7,198.5 265.7,187.9 "/>
<polygon points="224.8,198.5 262.3,198.5 265.7,187.9 224.8,159 "/>
</svg>
<form method="post" name="Form0" action="/app" onsubmit="recordLocale()" autocomplete="off">
<input type="hidden" name="service" value="direct/1/Home/$Form"/>
<input type="hidden" name="sp" value="S0"/>
<input type="hidden" name="Form0" value="$Hidden$0,$Hidden$1,inputUsername,inputPassword,$Submit$0,$PropertySelection"/>
<input type="hidden" name="$Hidden$0" id="javascript-enabled" value="F"/>
<input type="hidden" name="$Hidden$1" value="X"/>
 <div class="login" role="main">
      <div class="box">
        <table class="box-table" title="Login" role="presentation">
          <tr role="row">
            <th class="box-nw" aria-label="No value" role="columnheader" scope="col"></th>
            <th class="box-n" aria-label="No value" role="columnheader" scope="col"></th>
            <th class="box-ne" aria-label="No value" role="columnheader" scope="col"></th>
          </tr>
          <tr role="row">
            <td class="box-w"></td>
            <td class="box-content">

              <div id="login">
 <h1><img alt="PaperCut Logo" src="/custom/login-logo.png?1667504163324" class="logo"></img></h1>

 <h1 id="papercut-user-login-title">Log in</h1>
 <table style="margin-bottom:5px;" title="Username and Password" role="presentation">
                        <tbody>
                          <tr role="row">
                            <th role="rowheader"><label for="inputUsername">Username</label></th>
                            <td><input type="text" name="inputUsername" autocorrect="off" maxlength="50" aria-describedby="login-feedback-message" style="width: 150px;" id="inputUsername" autocapitalize="off" class="field"/></td>
                          </tr>
                          <tr role="row">
                            <th role="rowheader"><label for="inputPassword">Password</label></th>
                            <td><input type="password" name="inputPassword" style="width: 150px;" id="inputPassword" class="field" aria-describedby="login-feedback-message"/></td>
                          </tr>
                        </tbody>
                      </table>


                    <div id="login-feedback-message">



 </div>
<input type="submit" name="$Submit$0" value="Log in" class="loginSubmit" aria-describedby="login-feedback-message"/>



<a href="/app?service=direct/1/Home/oAuth2LoginSuccess" style="display:none" class="btn secondary google">Sign in with Google</a>
<a href="/app?service=direct/1/Home/oAuth2LoginCancel" style="display:none" class="btn secondary microsoft">Sign in with Microsoft</a>
 <a style="display:block; margin-top: 10px;" id="forgot-link" href="/app?service=external/ForgotLoginDetails">
Forgot username or password?</a>

 </div>


            </td>
            <td class="box-e"></td>
          </tr>
          <tr role="row">
            <td class="box-sw"></td>
            <td class="box-s"></td>
            <td class="box-se"></td>
          </tr>
        </table>
      </div>
 <div class="language-box">
          <p id="language-select-text">Language Select</p>
          <svg width="24" height="24" viewBox="50 1777 24 24" class="global" alt="Globe Language Icon">
                <path fill="gray" d="M62,1777c-6.627,0-12,5.373-12,12s5.373,12,12,12s12-5.373,12-12S68.627,1777,62,1777z M58.129,1780.116
        c-0.665,0.732-1.359,1.699-1.925,2.94h-1.833C55.355,1781.79,56.643,1780.771,58.129,1780.116z M53.217,1784.957h2.304
        c-0.251,0.918-0.417,1.954-0.481,3.1h-2.664C52.48,1786.959,52.775,1785.918,53.217,1784.957z M53.236,1793.057
        c-0.447-0.96-0.749-2.001-0.859-3.1h2.662c0.064,1.146,0.23,2.182,0.481,3.1H53.236z M54.401,1794.957h1.803
        c0.549,1.204,1.218,2.146,1.865,2.87C56.624,1797.179,55.369,1796.188,54.401,1794.957z M61.05,1798.054
        c-0.541-0.34-1.814-1.283-2.828-3.097h2.828V1798.054z M61.05,1793.057h-3.645c-0.288-0.893-0.493-1.921-0.566-3.1h4.211V1793.057z
         M61.05,1788.057h-4.211c0.073-1.179,0.278-2.207,0.566-3.1h3.645V1788.057z M61.05,1783.057h-2.828
        c1.014-1.813,2.287-2.757,2.828-3.097V1783.057z M70.823,1784.957c0.441,0.961,0.736,2.002,0.842,3.1h-2.704
        c-0.064-1.146-0.23-2.182-0.481-3.1H70.823z M69.669,1783.057h-1.873c-0.574-1.259-1.279-2.237-1.953-2.974
        C67.358,1780.736,68.669,1781.77,69.669,1783.057z M62.95,1779.96c0.541,0.34,1.814,1.283,2.828,3.097H62.95V1779.96z
         M62.95,1784.957h3.645c0.288,0.893,0.493,1.921,0.566,3.1H62.95V1784.957z M62.95,1789.957h4.211
        c-0.073,1.179-0.278,2.207-0.566,3.1H62.95V1789.957z M62.95,1798.055v-3.098h2.828
        C64.764,1796.772,63.488,1797.716,62.95,1798.055z M65.902,1797.86c0.656-0.729,1.337-1.682,1.894-2.903h1.843
        C68.656,1796.208,67.376,1797.213,65.902,1797.86z M70.804,1793.057h-2.324c0.251-0.918,0.417-1.954,0.481-3.1h2.702
        C71.553,1791.056,71.251,1792.097,70.804,1793.057z"/>
          </svg>
<select name="$PropertySelection" alt="Select language" role="listbox" id="language" aria-label="Select language">
<option value="en" selected="selected">English</option>
<option value="ca">catal&#224;</option>
<option value="zh_CN">&#20013;&#25991; (&#20013;&#22269;)</option>
<option value="zh_HK">&#20013;&#25991; (&#39321;&#28207;)</option>
<option value="zh_TW">&#20013;&#25991; (&#21488;&#28771;)</option>
<option value="hr">hrvatski</option>
<option value="cs">&#269;e&#353;tina</option>
<option value="da">Dansk</option>
<option value="nl">Nederlands</option>
<option value="fi">suomi</option>
<option value="fr">fran&#231;ais</option>
<option value="de">Deutsch</option>
<option value="iw">&#1506;&#1489;&#1512;&#1497;&#1514;</option>
<option value="hu">magyar</option>
<option value="it">italiano</option>
<option value="ja">&#26085;&#26412;&#35486;</option>
<option value="ko">&#54620;&#44397;&#50612;</option>
<option value="lv">Latvie&#353;u</option>
<option value="lt">Lietuvi&#371;</option>
<option value="no">norsk</option>
<option value="pl">polski</option>
<option value="pt">portugu&#234;s (Brasil)</option>
<option value="pt_PT">portugu&#234;s (Portugal)</option>
<option value="ru">&#1088;&#1091;&#1089;&#1089;&#1082;&#1080;&#1081;</option>
<option value="sr">&#1057;&#1088;&#1087;&#1089;&#1082;&#1080;</option>
<option value="sk">Sloven&#269;ina</option>
<option value="sl">Sloven&#353;&#269;ina</option>
<option value="es">espa&#241;ol</option>
<option value="es_ES">espa&#241;ol (Espa&#241;a)</option>
<option value="sv">svenska</option>
<option value="th_TH">&#3652;&#3607;&#3618; (&#3611;&#3619;&#3632;&#3648;&#3607;&#3624;&#3652;&#3607;&#3618;)</option>
<option value="tr">T&#252;rk&#231;e</option>
<option value="cy_GB">Welsh (United Kingdom)</option>
</select> </div>
 <script>
            let languageOptions = document.getElementById("language").children;
            for (let languageOption of languageOptions)
            {
                let lang = languageOption.getAttribute("value");
                if (lang.includes("_")) lang = lang.substr(0, lang.indexOf("_")); // to remove region if specified
                languageOption.setAttribute("lang", lang);
            }
        </script>
<span data-background-uri="/images/login-bg.jpg?66961papercut-mf" data-background-selection="COLOR" data-background-color="#FFFFFF" id="loginCustomization" data-button-color="#01B256" data-forgot-link-text=""></span> <!-- The license has expired!  -->
 </div>
</form>

 <div id="footer" style="position:absolute; bottom: 0px; left: 0px; right: 0px; width: 100%;">
 <div class="product-details">
    <div class="logo"><img src="/images/footer-logo2.png?66961papercut-mf" border="0"/></div>

    <div class="text">
<span class="product"><a href="https://www.papercut.com/products/mf/?clicked=app-footer">PaperCut MF</a></span>

 <div>
Print Management Software</div>
 <!-- analytic purpose -->
<span class="analytic-license-expiry-date" style="display:none"></span>
<span class="analytic-product-build-number" style="display:none">66961</span>
<span class="analytic-product-version" style="display:none">22.1.3</span>
<span class="analytic-product" style="display:none">PaperCut MF</span>
<span class="analytic-product-edition" style="display:none">MF</span> <div class="copyright">
        &copy; Copyright 1999-2023. PaperCut Software Pty Ltd. All rights reserved. </div>
    </div>
  </div>
 </div>
 </div>
  <script language="JavaScript" type="text/javascript">
  var oldonload = window.onload;
  if (typeof window.onload != 'function') {
    window.onload = applyLoginCustomization;
  } else {
    window.onload = function () {
      if (oldonload) {
        oldonload();
      }
        applyLoginCustomization();
    }
  }

  /*
   Apply login customization
   */
  function applyLoginCustomization() {
      var loginCustomization = $("#loginCustomization");
      if (loginCustomization.attr("data-background-selection") == 'IMAGE') {
          loadBackground(loginCustomization.attr("data-background-uri"));
      } else {
          $('#loginBody').find('.wrap').css('background-color', loginCustomization.attr("data-background-color"))
                  .css('background-image', 'none');
      }
      if (loginCustomization.attr("data-button-color") != "") {
          $('#loginBody input[type="submit"].loginSubmit').removeClass('loginSubmit')
                  .css('background-color', loginCustomization.attr("data-button-color"))
                  .css('border-color', loginCustomization.attr("data-button-color"));
      }
      if (loginCustomization.attr("data-forgot-link-text") != "") {
          $('a#forgot-link').text(loginCustomization.attr("data-forgot-link-text"));
      }
  }

  function recordLocale() {
      var languageElement = document.getElementById("language");
      if (languageElement) {
          document.cookie = "ui.locale=" + languageElement.value;
      }
  }
  </script>
</body>
</html>
<!-- Render time: ~ 20 ms -->



    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:52:07.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "papercut.com"
         ],
         "hostname" : [
            "www.papercut.com"
         ],
         "url" : [
            "https://www.papercut.com/products/mf/?clicked=app-footer"
         ]
      },
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "8c5529452ed2e5ae1d4f29e7345687a7",
         "bodymmh3" : -856371065,
         "component" : [
            {
               "product" : "Java",
               "productvendor" : "Oracle"
            },
            {
               "productvendor" : "jQuery",
               "productversion" : "3.5.1",
               "product" : "jQuery"
            }
         ],
         "description" : "PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.",
         "headermd5" : "fa25c4eea42a342854fe45cdc0273a72",
         "headermmh3" : 1408951288,
         "keywords" : [
            "print accounting",
            "print control",
            "print management",
            "print quota",
            "software"
         ],
         "title" : "PaperCut Login"
      },
      "length" : 13610
   },
   "asn" : "AS16509",
   "city" : "Sydney",
   "country" : "AU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:45:55 GMT\r\nServer: nginx\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1\r\nExpires: Thu, 01 Jan 1970 00:00:00 UTC\r\nCache-Control: no-cache\r\nSet-Cookie: JSESSIONID=node0eaxyvuht0z5t7tfqr8bszpwsq1ckednina3geu5g.node0; Path=/; Secure; HttpOnly\r\nContent-Length: 13222\r\n\r\n<!DOCTYPE HTML>\n<!-- Application: app-server -->\n<!-- Page: Home -->\n<!-- Generated: Mon Nov 20 12:34:06 EST 2023 -->\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html;charset=UTF-8\"/>\n<title>PaperCut Login</title>\n<link rel=\"shortcut icon\" href=\"/images/icons3/favicon.ico\" type=\"image/vnd.microsoft.icon\"/>\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=Edge\"/>\n<meta name=\"description\" content=\"PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.\"/>\n<meta name=\"keywords\" content=\"print quota, print control, print management, print accounting, software\"/>\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=0.8\"/>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style.css?66961papercut-mf\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-override.css?66961papercut-mf\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/refresh.css?66961papercut-mf\" />\n<!--[if IE 9]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie9.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 8]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie8.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 7]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie7.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 6]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie6.css?66961papercut-mf\" />\n<![endif]-->\n<script type=\"text/javascript\">var CacheParam = \"66961papercut-mf\";</script>\n<script type=\"text/javascript\" src=\"/js/jquery/jquery-3.5.1.min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/jquery/jquery-migrate-3.3.1.min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/jquery/config.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/lib/underscore/underscore-min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/common.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/lib/require.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/pages/configure.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/refresh.js?66961papercut-mf\"></script>\n</head>\n\n<body id=\"loginBody\">\n<script language=\"JavaScript\" type=\"text/javascript\"><!--\n\nwindow.onload = function ()\n{\ndocument.Form0.inputUsername.focus();\ndocument.Form0.inputUsername.select();\n}\n\n// --></script> <div class=\"wrap\">\n    <script type=\"text/javascript\">\n    insertScript('/js/pages/Home.js');\n    insertScript('/js/pages/LoginPages.js');\n    </script>\n      <svg viewBox=\"0 0 280.7 198.5\" class=\"pc-shards\">\n<polygon points=\"96.3,136.3 140.4,198.5 162.4,198.5 183.9,130.1 134.9,95.4 \"/>\n<polygon points=\"45,63.6 74.9,53 0,0 \"/>\n<polygon points=\"134.9,95.4 96.3,136.3 45,63.6 74.9,53 \"/>\n<polygon points=\"74.9,53 224.8,0 134.9,95.4 \"/>\n<polygon points=\"224.8,0 183.9,130.1 134.9,95.4 \"/>\n<polygon points=\"224.8,0 224.8,0 224.8,159 183.9,130.1 \"/>\n<polygon points=\"162.4,198.5 224.8,198.5 224.8,159 183.9,130.1 \"/>\n<polygon points=\"37.7,198.5 140.4,198.5 96.3,136.3 \"/>\n<polygon points=\"0,79.5 0,198.5 37.7,198.5 96.3,136.3 45,63.6 \"/>\n<polygon points=\"0,79.5 45,63.6 0,0 \"/>\n<polygon points=\"0,79.5 0,79.5 0,79.5 \"/>\n<polygon points=\"262.3,198.5 280.7,198.5 265.7,187.9 \"/>\n<polygon points=\"224.8,198.5 262.3,198.5 265.7,187.9 224.8,159 \"/>\n</svg>\n<form method=\"post\" name=\"Form0\" action=\"/app\" onsubmit=\"recordLocale()\" autocomplete=\"off\">\n<input type=\"hidden\" name=\"service\" value=\"direct/1/Home/$Form\"/>\n<input type=\"hidden\" name=\"sp\" value=\"S0\"/>\n<input type=\"hidden\" name=\"Form0\" value=\"$Hidden$0,$Hidden$1,inputUsername,inputPassword,$Submit$0,$PropertySelection\"/>\n<input type=\"hidden\" name=\"$Hidden$0\" id=\"javascript-enabled\" value=\"F\"/>\n<input type=\"hidden\" name=\"$Hidden$1\" value=\"X\"/>\n <div class=\"login\" role=\"main\">\n      <div class=\"box\">\n        <table class=\"box-table\" title=\"Login\" role=\"presentation\">\n          <tr role=\"row\">\n            <th class=\"box-nw\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n            <th class=\"box-n\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n            <th class=\"box-ne\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n          </tr>\n          <tr role=\"row\">\n            <td class=\"box-w\"></td>\n            <td class=\"box-content\">\n\n              <div id=\"login\">\n <h1><img alt=\"PaperCut Logo\" src=\"/custom/login-logo.png?1667504163324\" class=\"logo\"></img></h1>\n\n <h1 id=\"papercut-user-login-title\">Log in</h1>\n <table style=\"margin-bottom:5px;\" title=\"Username and Password\" role=\"presentation\">\n                        <tbody>\n                          <tr role=\"row\">\n                            <th role=\"rowheader\"><label for=\"inputUsername\">Username</label></th>\n                            <td><input type=\"text\" name=\"inputUsername\" autocorrect=\"off\" maxlength=\"50\" aria-describedby=\"login-feedback-message\" style=\"width: 150px;\" id=\"inputUsername\" autocapitalize=\"off\" class=\"field\"/></td>\n                          </tr>\n                          <tr role=\"row\">\n                            <th role=\"rowheader\"><label for=\"inputPassword\">Password</label></th>\n                            <td><input type=\"password\" name=\"inputPassword\" style=\"width: 150px;\" id=\"inputPassword\" class=\"field\" aria-describedby=\"login-feedback-message\"/></td>\n                          </tr>\n                        </tbody>\n                      </table>\n\n\n                    <div id=\"login-feedback-message\">\n\n\n\n </div>\n<input type=\"submit\" name=\"$Submit$0\" value=\"Log in\" class=\"loginSubmit\" aria-describedby=\"login-feedback-message\"/>\n\n\n\n<a href=\"/app?service=direct/1/Home/oAuth2LoginSuccess\" style=\"display:none\" class=\"btn secondary google\">Sign in with Google</a>\n<a href=\"/app?service=direct/1/Home/oAuth2LoginCancel\" style=\"display:none\" class=\"btn secondary microsoft\">Sign in with Microsoft</a>\n <a style=\"display:block; margin-top: 10px;\" id=\"forgot-link\" href=\"/app?service=external/ForgotLoginDetails\">\nForgot username or password?</a>\n\n </div>\n\n\n            </td>\n            <td class=\"box-e\"></td>\n          </tr>\n          <tr role=\"row\">\n            <td class=\"box-sw\"></td>\n            <td class=\"box-s\"></td>\n            <td class=\"box-se\"></td>\n          </tr>\n        </table>\n      </div>\n <div class=\"language-box\">\n          <p id=\"language-select-text\">Language Select</p>\n          <svg width=\"24\" height=\"24\" viewBox=\"50 1777 24 24\" class=\"global\" alt=\"Globe Language Icon\">\n                <path fill=\"gray\" d=\"M62,1777c-6.627,0-12,5.373-12,12s5.373,12,12,12s12-5.373,12-12S68.627,1777,62,1777z M58.129,1780.116\n        c-0.665,0.732-1.359,1.699-1.925,2.94h-1.833C55.355,1781.79,56.643,1780.771,58.129,1780.116z M53.217,1784.957h2.304\n        c-0.251,0.918-0.417,1.954-0.481,3.1h-2.664C52.48,1786.959,52.775,1785.918,53.217,1784.957z M53.236,1793.057\n        c-0.447-0.96-0.749-2.001-0.859-3.1h2.662c0.064,1.146,0.23,2.182,0.481,3.1H53.236z M54.401,1794.957h1.803\n        c0.549,1.204,1.218,2.146,1.865,2.87C56.624,1797.179,55.369,1796.188,54.401,1794.957z M61.05,1798.054\n        c-0.541-0.34-1.814-1.283-2.828-3.097h2.828V1798.054z M61.05,1793.057h-3.645c-0.288-0.893-0.493-1.921-0.566-3.1h4.211V1793.057z\n         M61.05,1788.057h-4.211c0.073-1.179,0.278-2.207,0.566-3.1h3.645V1788.057z M61.05,1783.057h-2.828\n        c1.014-1.813,2.287-2.757,2.828-3.097V1783.057z M70.823,1784.957c0.441,0.961,0.736,2.002,0.842,3.1h-2.704\n        c-0.064-1.146-0.23-2.182-0.481-3.1H70.823z M69.669,1783.057h-1.873c-0.574-1.259-1.279-2.237-1.953-2.974\n        C67.358,1780.736,68.669,1781.77,69.669,1783.057z M62.95,1779.96c0.541,0.34,1.814,1.283,2.828,3.097H62.95V1779.96z\n         M62.95,1784.957h3.645c0.288,0.893,0.493,1.921,0.566,3.1H62.95V1784.957z M62.95,1789.957h4.211\n        c-0.073,1.179-0.278,2.207-0.566,3.1H62.95V1789.957z M62.95,1798.055v-3.098h2.828\n        C64.764,1796.772,63.488,1797.716,62.95,1798.055z M65.902,1797.86c0.656-0.729,1.337-1.682,1.894-2.903h1.843\n        C68.656,1796.208,67.376,1797.213,65.902,1797.86z M70.804,1793.057h-2.324c0.251-0.918,0.417-1.954,0.481-3.1h2.702\n        C71.553,1791.056,71.251,1792.097,70.804,1793.057z\"/>\n          </svg>\n<select name=\"$PropertySelection\" alt=\"Select language\" role=\"listbox\" id=\"language\" aria-label=\"Select language\">\n<option value=\"en\" selected=\"selected\">English</option>\n<option value=\"ca\">catal&#224;</option>\n<option value=\"zh_CN\">&#20013;&#25991; (&#20013;&#22269;)</option>\n<option value=\"zh_HK\">&#20013;&#25991; (&#39321;&#28207;)</option>\n<option value=\"zh_TW\">&#20013;&#25991; (&#21488;&#28771;)</option>\n<option value=\"hr\">hrvatski</option>\n<option value=\"cs\">&#269;e&#353;tina</option>\n<option value=\"da\">Dansk</option>\n<option value=\"nl\">Nederlands</option>\n<option value=\"fi\">suomi</option>\n<option value=\"fr\">fran&#231;ais</option>\n<option value=\"de\">Deutsch</option>\n<option value=\"iw\">&#1506;&#1489;&#1512;&#1497;&#1514;</option>\n<option value=\"hu\">magyar</option>\n<option value=\"it\">italiano</option>\n<option value=\"ja\">&#26085;&#26412;&#35486;</option>\n<option value=\"ko\">&#54620;&#44397;&#50612;</option>\n<option value=\"lv\">Latvie&#353;u</option>\n<option value=\"lt\">Lietuvi&#371;</option>\n<option value=\"no\">norsk</option>\n<option value=\"pl\">polski</option>\n<option value=\"pt\">portugu&#234;s (Brasil)</option>\n<option value=\"pt_PT\">portugu&#234;s (Portugal)</option>\n<option value=\"ru\">&#1088;&#1091;&#1089;&#1089;&#1082;&#1080;&#1081;</option>\n<option value=\"sr\">&#1057;&#1088;&#1087;&#1089;&#1082;&#1080;</option>\n<option value=\"sk\">Sloven&#269;ina</option>\n<option value=\"sl\">Sloven&#353;&#269;ina</option>\n<option value=\"es\">espa&#241;ol</option>\n<option value=\"es_ES\">espa&#241;ol (Espa&#241;a)</option>\n<option value=\"sv\">svenska</option>\n<option value=\"th_TH\">&#3652;&#3607;&#3618; (&#3611;&#3619;&#3632;&#3648;&#3607;&#3624;&#3652;&#3607;&#3618;)</option>\n<option value=\"tr\">T&#252;rk&#231;e</option>\n<option value=\"cy_GB\">Welsh (United Kingdom)</option>\n</select> </div>\n <script>\n            let languageOptions = document.getElementById(\"language\").children;\n            for (let languageOption of languageOptions)\n            {\n                let lang = languageOption.getAttribute(\"value\");\n                if (lang.includes(\"_\")) lang = lang.substr(0, lang.indexOf(\"_\")); // to remove region if specified\n                languageOption.setAttribute(\"lang\", lang);\n            }\n        </script>\n<span data-background-uri=\"/images/login-bg.jpg?66961papercut-mf\" data-background-selection=\"COLOR\" data-background-color=\"#FFFFFF\" id=\"loginCustomization\" data-button-color=\"#01B256\" data-forgot-link-text=\"\"></span> <!-- The license has expired!  -->\n </div>\n</form>\n\n <div id=\"footer\" style=\"position:absolute; bottom: 0px; left: 0px; right: 0px; width: 100%;\">\n <div class=\"product-details\">\n    <div class=\"logo\"><img src=\"/images/footer-logo2.png?66961papercut-mf\" border=\"0\"/></div>\n\n    <div class=\"text\">\n<span class=\"product\"><a href=\"https://www.papercut.com/products/mf/?clicked=app-footer\">PaperCut MF</a></span>\n\n <div>\nPrint Management Software</div>\n <!-- analytic purpose -->\n<span class=\"analytic-license-expiry-date\" style=\"display:none\"></span>\n<span class=\"analytic-product-build-number\" style=\"display:none\">66961</span>\n<span class=\"analytic-product-version\" style=\"display:none\">22.1.3</span>\n<span class=\"analytic-product\" style=\"display:none\">PaperCut MF</span>\n<span class=\"analytic-product-edition\" style=\"display:none\">MF</span> <div class=\"copyright\">\n        &copy; Copyright 1999-2023. PaperCut Software Pty Ltd. All rights reserved. </div>\n    </div>\n  </div>\n </div>\n </div>\n  <script language=\"JavaScript\" type=\"text/javascript\">\n  var oldonload = window.onload;\n  if (typeof window.onload != 'function') {\n    window.onload = applyLoginCustomization;\n  } else {\n    window.onload = function () {\n      if (oldonload) {\n        oldonload();\n      }\n        applyLoginCustomization();\n    }\n  }\n\n  /*\n   Apply login customization\n   */\n  function applyLoginCustomization() {\n      var loginCustomization = $(\"#loginCustomization\");\n      if (loginCustomization.attr(\"data-background-selection\") == 'IMAGE') {\n          loadBackground(loginCustomization.attr(\"data-background-uri\"));\n      } else {\n          $('#loginBody').find('.wrap').css('background-color', loginCustomization.attr(\"data-background-color\"))\n                  .css('background-image', 'none');\n      }\n      if (loginCustomization.attr(\"data-button-color\") != \"\") {\n          $('#loginBody input[type=\"submit\"].loginSubmit').removeClass('loginSubmit')\n                  .css('background-color', loginCustomization.attr(\"data-button-color\"))\n                  .css('border-color', loginCustomization.attr(\"data-button-color\"));\n      }\n      if (loginCustomization.attr(\"data-forgot-link-text\") != \"\") {\n          $('a#forgot-link').text(loginCustomization.attr(\"data-forgot-link-text\"));\n      }\n  }\n\n  function recordLocale() {\n      var languageElement = document.getElementById(\"language\");\n      if (languageElement) {\n          document.cookie = \"ui.locale=\" + languageElement.value;\n      }\n  }\n  </script>\n</body>\n</html>\n<!-- Render time: ~ 20 ms -->\n\n\n",
   "datamd5" : "6602a320a278b26f544c1f7e9b11bbae",
   "datammh3" : 1404482669,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "domain" : [
         "amazon.com",
         "amazonaws.com"
      ],
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "AMAZO-SYD",
      "organization" : "Amazon Corporate Services Pty Ltd",
      "subnet" : "3.104.0.0/14"
   },
   "host" : [
      "ec2-3-106-211-6"
   ],
   "hostname" : [
      "ec2-3-106-211-6.ap-southeast-2.compute.amazonaws.com"
   ],
   "ip" : "3.106.211.6",
   "ipv6" : "false",
   "latitude" : "-33.8715",
   "location" : "-33.8715,151.2006",
   "longitude" : "151.2006",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4786,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-3-106-211-6.ap-southeast-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "ap-southeast-2.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "3.104.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 54.194.59.31:4786 (tcp/http) - last seen on 2024-11-21 at 08:45:05 UTC

    • IP
      54.194.59.31
      Network
      54.194.0.0/15
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://54.194.59.31:4786/ 200

      Reverse DNS
      ec2-54-194-59-31.eu-west-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      841ef049931f2abf64cb8efe40b3361a
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      7247f7a69fe8c58679f8e1859605c9b1
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 21 Nov 2024 08:37:17 GMT
Server: nginx
Content-Length: 88
Content-Type: text/html

<HTML><HEAD><script>window.top.location.href='/Main_Login.asp';</script>
</HEAD></HTML>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:45:05.000Z",
   "app" : {
      "favicon" : {
         "image" : "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",
         "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
         "imagemmh3" : -1216248324,
         "length" : 1078,
         "url" : "/favicon.ico"
      },
      "http" : {
         "bodymd5" : "7247f7a69fe8c58679f8e1859605c9b1",
         "bodymmh3" : -1161513703,
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : 1669353640
      },
      "length" : 223
   },
   "asn" : "AS16509",
   "city" : "Dublin",
   "country" : "IE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:37:17 GMT\r\nServer: nginx\r\nContent-Length: 88\r\nContent-Type: text/html\r\n\r\n<HTML><HEAD><script>window.top.location.href='/Main_Login.asp';</script>\n</HEAD></HTML>\n",
   "datamd5" : "841ef049931f2abf64cb8efe40b3361a",
   "datammh3" : -116911898,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AMAZO-ZDUB5",
      "organization" : "Amazon.com, Inc.",
      "subnet" : "54.194.0.0/15"
   },
   "host" : [
      "ec2-54-194-59-31"
   ],
   "hostname" : [
      "ec2-54-194-59-31.eu-west-1.compute.amazonaws.com"
   ],
   "ip" : "54.194.59.31",
   "ipv6" : "false",
   "latitude" : "53.3379",
   "location" : "53.3379,-6.2591",
   "longitude" : "-6.2591",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4786,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-54-194-59-31.eu-west-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "eu-west-1.compute.amazonaws.com"
   ],
   "subnet" : "54.194.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}