Returning 10 result(s) out of 27 in 0.036 second(s)

  • 15.222.46.250:9404 (tcp/http/tls) - last seen on 2024-11-21 at 08:44:07 UTC

    • IP
      15.222.46.250
      Network
      15.222.0.0/15
      Domain(s)
      amazonaws.com securitynext.edu
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://15.222.46.250:9404/ 301

      Reverse DNS
      ec2-15-222-46-250.ca-central-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      Oracle Java Atlassian Confluence
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      admin.securitynext.edu
      SHA256 Fingerprint
      c7a7e79b128f4fbe4cc8e5bde13f5a9e8201ee37a3f16afda27c0d2204482a40
      Validity Not Before
      2023-11-22T08:43:30Z
      Validity Not After
      2025-11-21T08:43:30Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      128d80f137a616a0532f0d9f8ec03019
      HTTP Header MD5
      9ff89432cf717e398ad443822f6daa5d
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 301 Moved Permanently
      Connection: keep-alive
      Date: Thu, 21 Nov 2024 08:37:52 GMT
      Server: nginx
      X-Confluence-Request-Time: 1732178272
      Content-Type: text/html;charset=UTF-8
      Cache-Control: no-cache, must-revalidate
      Expires: Thu, 01 Jan 1970 00:00:00 GMT
      Set-Cookie: JSESSIONID=k8w10j879qxhukoqyzmfza2v2wlu5ksx; Path=/; Secure; HttpOnly
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'
      Strict-Transport-Security: max-age=63072000
      Location: ./login.action
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:44:07.000Z",
         "app" : {
            "favicon" : {
               "image" : "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",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1636538602,
               "component" : [
                  {
                     "productvendor" : "Oracle",
                     "product" : "Java"
                  },
                  {
                     "productvendor" : "Atlassian",
                     "product" : "Confluence"
                  }
               ],
               "headermd5" : "9ff89432cf717e398ad443822f6daa5d",
               "headermmh3" : -456996432
            },
            "length" : 587
         },
         "asn" : "AS16509",
         "city" : "Montreal",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 301 Moved Permanently\r\nConnection: keep-alive\r\nDate: Thu, 21 Nov 2024 08:37:52 GMT\r\nServer: nginx\r\nX-Confluence-Request-Time: 1732178272\r\nContent-Type: text/html;charset=UTF-8\r\nCache-Control: no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nSet-Cookie: JSESSIONID=k8w10j879qxhukoqyzmfza2v2wlu5ksx; Path=/; Secure; HttpOnly\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nStrict-Transport-Security: max-age=63072000\r\nLocation: ./login.action\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "128d80f137a616a0532f0d9f8ec03019",
         "datammh3" : 1102211108,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com",
            "securitynext.edu"
         ],
         "fingerprint" : {
            "md5" : "60ea1355d80315e70e2011ba867c56ec",
            "sha1" : "be9d2cf5a7d8bbaba4cf0c69904bddab59ee0171",
            "sha256" : "c7a7e79b128f4fbe4cc8e5bde13f5a9e8201ee37a3f16afda27c0d2204482a40"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "AMAZON-YUL",
            "organization" : "Amazon Data Services Canada",
            "subnet" : "15.222.0.0/15"
         },
         "host" : [
            "admin",
            "ec2-15-222-46-250"
         ],
         "hostname" : [
            "admin.securitynext.edu",
            "ec2-15-222-46-250.ca-central-1.compute.amazonaws.com"
         ],
         "ip" : "15.222.46.250",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "45.5075",
         "location" : "45.5075,-73.5887",
         "longitude" : "-73.5887",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Moved Permanently",
         "reverse" : [
            "ec2-15-222-46-250.ca-central-1.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "3d:0b:92:0a:74:b1:04:0c:c3:86:bb:ae:e4:22:53:5d:8c:74:4e:b0",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 301,
         "subdomains" : [
            "ca-central-1.compute.amazonaws.com",
            "compute.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "admin.securitynext.edu"
         },
         "subnet" : "15.222.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "edu"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-21T08:43:30Z",
            "notbefore" : "2023-11-22T08:43:30Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 13.125.43.62:9404 (tcp/http/tls) - last seen on 2024-11-21 at 06:48:08 UTC

    • IP
      13.125.43.62
      Network
      13.124.0.0/14
      Domain(s)
      amazonaws.com novelregulation.ca
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://13.125.43.62:9404/ 200

      HTTP Title
      KACE Systems Management Appliance Service Center
      Reverse DNS
      ec2-13-125-43-62.ap-northeast-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Apache HTTP Server
      HTTP Component(s)
      Quest KACE Systems Management Appliance Bootstrap Bootstrap
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      *.novelregulation.ca
      SHA256 Fingerprint
      4ebfdb7e6c365924e3ff38c26be5ac65954884873d4f20204c713c15453d4a37
      Validity Not Before
      2023-11-22T06:38:00Z
      Validity Not After
      2025-11-21T06:38:00Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c960cb4f425f8334c1da35058b7540b1
      HTTP Header MD5
      114e612087ffeaf5f76927dd76720718
      HTTP Body MD5
      d408fd011fef9e2daec83a8aa38ee7ab
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 200 OK
      Connection: close
      Date: Thu, 21 Nov 2024 06:41:27 GMT
      Server: Apache
      Expires: Thu, 21 Nov 2024 06:41:27 GMT
      Cache-Control: no-store, no-cache, must-revalidate
      Pragma: no-cache
      Set-Cookie: kboxid=mvu0n69rntg2ft8q7z5b77fsqmri2jnb; path=/; secure; HttpOnly; SameSite=Lax
      X-Content-Type-Options: nosniff
      X-Frame-Options: sameorigin
      X-XSS-Protection: 1; mode=block
      Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
      Access-Control-Allow-Headers: x-kace-auth-timestamp, x-kace-auth-key, x-kace-auth-signature, accept, origin, content-type
      Access-Control-Allow-Methods: PUT, DELETE, POST, GET, OPTIONS
      X-Kace-Appliance: K1000
      X-Ua-Compatible: IE=9,EDGE
      Content-Length: 8986
      Content-Type: text/html
      
      <!DOCTYPE html>
      <html data-template="welcome" data-page-type="welcome" data-area="user" lang="en" ><head>
              <script id="fr-fek">try{(function (k){localStorage.FEK=k;t=document.getElementById('fr-fek');t.parentNode.removeChild(t);})('mIBEVFBOHC1d2UNYVM==')}catch(e){}</script>
              <meta http-equiv="X-UA-Compatible" content="IE=9; IE=EDGE" /><meta http-equiv="content-type" content="text/html; charset=utf-8" /><meta name="robots" content="noindex"><title>KACE Systems Management Appliance Service Center</title><link rel="shortcut icon" href="/favicon.ico"><link type="text/css" rel="stylesheet" href="/common/css/minified/vendor/select2.css?build=10.1.99" /><link type="text/css" rel="stylesheet" media="print" href="/common/css/minified/print.css?build=10.1.99" /><link type="text/css" rel="stylesheet" href="/common/css/minified/vendor/froala_style.css?build=10.1.99" /><!--[if lte IE 9]><link rel="stylesheet" type="text/css" href="/common/css/minified/kace-theme-ie.css?build=10.1.99" /><![endif]--><link type="text/css" rel="stylesheet" href="/common/css/minified/kace-theme-light.css?build=10.1.99" /><!--[if IE]><script type="text/javascript" src="/common/js/minified/vendor/html5.js?build=10.1.99"></script><![endif]--><script type="text/javascript" src="/common/js/minified/kpolyfills.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/jquery.fixes.js?build=10.1.99"></script><script type="text/javascript">jQuery.noConflict();</script><script type="text/javascript" src="/common/js/minified/vendor/jquery.cookie.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery-ui.custom.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.json.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/bootstrap.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/select2.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.form.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/jquery.wheelmouse.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/bootbox.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/vendor/google.html-sanitizer.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/lang.php?locale=en&build=10.1.99"></script><script type="text/javascript" src="/common/js/scw.php?locale=en&build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/functions.js?build=10.1.99"></script></head><body id="welcome" ><div class="k-main k-main-collapsed">
      <div class="k-page-message-box-container" style="visibility:collapse; display:none;">
      
          
              <div class="k-page-message-box k-error" style="display:none;" >
                      </div>
          
          
              <div class="k-page-message-box k-warning" style="display:none;" >
                      </div>
          
          
              <div class="k-page-message-box k-success" style="display:none;" >
                      </div>
          
          
              <div class="k-page-message-box k-info" style="display:none;" >
                      </div>
          </div>
              <form id="LoginForm" name="LoginForm" method="post" action="/userui/check_login.php" target="_self">
              <input type="hidden" name="CSRF_TOKEN" value="chbtjh8cg4642mlxfbn773muv45h9kh8dw2u01226b9acv8a995estxo0plrt0gca2n7kp6m9wjv9j1sn4mvw3tu7yswt71nr0yj85nxxdj8svhar1xnoocdv1gblnur" />
              <img class="k-logo k-user-logo" id="welcomeLogo" alt="K1000 Logo" src="/packages/partnerlogos/userportal_logo" data-interface="user" />
              <h1>Welcome and Login...</h1>
              <div class="wysiwyg fr-view"><p>Welcome to the User Console. The &quot;Downloads&quot; tab contains software available for you to download and install. You can search on software by title, vendor, or label. Please only download and install software that you require.</p><p><br></p><p>You must login in to the User Console to browse software. Please enter your organization&#39;s common user name and password below to login.&nbsp;</p></div>
                      <div class="button_login">
                  <div class="k-login">
                      <div id='loginid'>
                          <label>Login (user name):</label>
                          <input type="text" maxlength="50" class="k-text-field" name="LOGIN_NAME" />
                      </div>
                      <div id='password'>
                          <label>Password:</label>
                          <input type="password" class="k-text-field" maxlength="50" name="LOGIN_PASSWORD" autocomplete="off" />
                      </div>
                  </div>
                  <div class="k-login-note">
                      (Note: Credentials will be saved on this computer between sessions unless you explicitly "Log Out")
                  </div>
              </div>
      
              <div class="k-login" id="org_select">
                                  <input id="orgtextbox" type="hidden" name="ORGANIZATION" value="Default" />
                          </div>
      
              <div id="samllogin" style="margin-top:10px;display:none;" class="button_saml">
                  <button id="button_saml" name="saml" class="k-btn-dark button_saml">Login</button>
                  <p style="margin-top:5px;"><a id="showotherlogin">Local Sign On</a></p>
              </div>
      
              <buttons>
                  <button id="button_login" name="save" class="k-btn-dark button_login">Login</button>
                  <p style="margin-top:5px;" class="button_login"><a id="showsamllogin">Single Sign On</a></p>
              </buttons>
      
          </form>
          </div><footer><span class="k-copyright">� 2023 Quest Software Inc. All Rights Reserved.</span></footer><div id="alert-div"></div><script type="text/javascript" src="/common/js/minified/nav.js?build=10.1.99"></script><script type="text/javascript" src="/common/js/minified/core.js?build=10.1.99"></script><script type="text/javascript">ShowMessageBox();</script>
      
      <script type="text/javascript">var loginmode="local";var login_timeout_active=false;const saml_orgs={ 'Default':{ 'name':'Default','id':'1','required':'','enabled':''},};function all_orgs_saml_enabled(){ var rval=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if(saml_orgs[key].enabled==false){ return false;}else{ rval=true;}}}return rval;}function show_hide_saml(org){ var saml=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if((key==org)&&(saml_orgs[key].enabled==true)){ saml=true;}}}if(saml||all_orgs_saml_enabled()){ loginmode="saml";jQuery('.button_login').hide();jQuery('.button_saml').show();jQuery('#org_select').attr('class','');jQuery('#showsamllogin').show();}else{ loginmode="local";jQuery('.button_login').show();jQuery('.button_saml').hide();jQuery('#showsamllogin').hide();jQuery('#org_select').attr('class','k-login');jQuery('[name="LOGIN_NAME"]').focus();}};function set_local_focue(){ var last_user='';if(last_user!=''){ jQuery('[name="LOGIN_NAME"]').val(last_user);jQuery('[name="LOGIN_PASSWORD"]').focus();}else{ jQuery('[name="LOGIN_NAME"]').focus();}};function lockout_timer(){ jQuery('[name="LOGIN_NAME"]').removeAttr('disabled');jQuery('[name="LOGIN_PASSWORD"]').removeAttr('disabled');jQuery('#button_login').removeAttr('disabled');jQuery('.k-error-explanation').hide();jQuery('div').removeClass("k-error-explanation");jQuery('.k-login-locked').hide();jQuery('div').removeClass("k-loader");login_timeout_active=false;}jQuery(document).ready(function(){ jQuery(document).on('keypress',function(e){ if((e.which&&e.which==13)||(e.keyCode&&e.keyCode==13)){ if(login_timeout_active==true){ return false;}if(loginmode=='local'){ jQuery('#LoginForm').submit();}else if(loginmode=='saml'){ jQuery('#button_saml').click();}return false;}else{ return true;}});jQuery('#orgselect').change(function(){ show_hide_saml(this.value);});jQuery('#showotherlogin').on('click',function(event){ jQuery('.button_saml').hide();jQuery('.button_login').show();jQuery('[name="LOGIN_NAME"]').focus();jQuery('#org_select').attr('class','k-login');loginmode="local";event.preventDefault();});jQuery('#showsamllogin').on('click',function(event){ jQuery('.button_saml').show();jQuery('.button_login').hide();jQuery('#org_select').attr('class','');loginmode='saml';event.preventDefault();});jQuery('#button_saml').on('click',function(event){ if(typeof(jQuery('[name="ORGANIZATION"]').select2('val'))=='string'){ var torg=jQuery('[name="ORGANIZATION"]').select2('val');}else{ var torg=jQuery("#orgtextbox").val();}if(torg.length==0){ torg="Default";}event.preventDefault();window.location.href="/common/saml_login.php?active="+torg;});if(typeof(torg=jQuery('[name="ORGANIZATION"]').select2('val'))=='string'){ show_hide_saml(jQuery('[name="ORGANIZATION"]').select2('val'));}else{ show_hide_saml(jQuery('#orgtextbox').val());}});</script>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T06:48:08.000Z",
         "app" : {
            "extract" : {
               "file" : [
                  "check_login.php"
               ]
            },
            "favicon" : {
               "image" : "AAABAAIAEBAQAAAAAAAoAQAAJgAAACAgEAAAAAAA6AIAAE4BAAAoAAAAEAAAACAAAAABAAQAAAAAAIAAAAAAAAAAAAAAABAAAAAQAAAAAAAAAAAAgAAAgAAAAICAAIAAAACAAIAAgIAAAICAgADAwMAAAAD/AAD/AAAA//8A/wAAAP8A/wD//wAA////AAAAAAAAAAAAAABERERERAAABEREREREAABERAAAAAAAAERAAAAAAAAEREAAAAAAAAREREREREQABERERERERAAEREAAAAAAAAREQAAAAAAAAEREAAAAAAAARERAAAAAAAAEREREREQAAAAERERERAAAAAAAAAAAAAAAAAAAAAAA//8AAPADAADgAwAAw/8AAMf/AACH/wAAgAMAAIADAACH/wAAh/8AAMP/AADB/wAA4AMAAPgDAAD//wAA//8AACgAAAAgAAAAQAAAAAEABAAAAAAAAAIAAAAAAAAAAAAAEAAAABAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEREREREREREQAAAAAAAAEREREREREREREAAAAAAAERERERERERERERAAAAAAAREREREREREREREQAAAAABEREREREREREREREAAAAAAREREREAAAAAAAAAAAAAABEREREQAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREQAAAAAAAAAAAAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREREREREREREREAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREQAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAABEREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREREREREREQAAAAAAEREREREREREREREAAAAAAAERERERERERERERAAAAAAAAAREREREREREREQAAAAAAAAABEREREREREREAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/////////////////4AAP/4AAD/4AAA/8AAAP+AAAD/gD///wB///8A////Af///gH///4B///+AAAA/gAAAP4AAAD+AAAA/gAAAP4B////Af///wD///8Af///gD///8AAAP/AAAD/4AAA//gAAP/+AAD////////////////w==",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "d408fd011fef9e2daec83a8aa38ee7ab",
               "bodymmh3" : -1880990209,
               "component" : [
                  {
                     "product" : "Bootstrap",
                     "productvendor" : "Bootstrap"
                  },
                  {
                     "product" : "KACE Systems Management Appliance",
                     "productvendor" : "Quest"
                  }
               ],
               "headermd5" : "114e612087ffeaf5f76927dd76720718",
               "headermmh3" : -1930851617,
               "title" : "KACE Systems Management Appliance Service Center"
            },
            "length" : 9734
         },
         "asn" : "AS16509",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 06:41:27 GMT\r\nServer: Apache\r\nExpires: Thu, 21 Nov 2024 06:41:27 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nSet-Cookie: kboxid=mvu0n69rntg2ft8q7z5b77fsqmri2jnb; path=/; secure; HttpOnly; SameSite=Lax\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: sameorigin\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nAccess-Control-Allow-Headers: x-kace-auth-timestamp, x-kace-auth-key, x-kace-auth-signature, accept, origin, content-type\r\nAccess-Control-Allow-Methods: PUT, DELETE, POST, GET, OPTIONS\r\nX-Kace-Appliance: K1000\r\nX-Ua-Compatible: IE=9,EDGE\r\nContent-Length: 8986\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html>\n<html data-template=\"welcome\" data-page-type=\"welcome\" data-area=\"user\" lang=\"en\" ><head>\n        <script id=\"fr-fek\">try{(function (k){localStorage.FEK=k;t=document.getElementById('fr-fek');t.parentNode.removeChild(t);})('mIBEVFBOHC1d2UNYVM==')}catch(e){}</script>\n        <meta http-equiv=\"X-UA-Compatible\" content=\"IE=9; IE=EDGE\" /><meta http-equiv=\"content-type\" content=\"text/html; charset=utf-8\" /><meta name=\"robots\" content=\"noindex\"><title>KACE Systems Management Appliance Service Center</title><link rel=\"shortcut icon\" href=\"/favicon.ico\"><link type=\"text/css\" rel=\"stylesheet\" href=\"/common/css/minified/vendor/select2.css?build=10.1.99\" /><link type=\"text/css\" rel=\"stylesheet\" media=\"print\" href=\"/common/css/minified/print.css?build=10.1.99\" /><link type=\"text/css\" rel=\"stylesheet\" href=\"/common/css/minified/vendor/froala_style.css?build=10.1.99\" /><!--[if lte IE 9]><link rel=\"stylesheet\" type=\"text/css\" href=\"/common/css/minified/kace-theme-ie.css?build=10.1.99\" /><![endif]--><link type=\"text/css\" rel=\"stylesheet\" href=\"/common/css/minified/kace-theme-light.css?build=10.1.99\" /><!--[if IE]><script type=\"text/javascript\" src=\"/common/js/minified/vendor/html5.js?build=10.1.99\"></script><![endif]--><script type=\"text/javascript\" src=\"/common/js/minified/kpolyfills.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/jquery.fixes.js?build=10.1.99\"></script><script type=\"text/javascript\">jQuery.noConflict();</script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.cookie.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery-ui.custom.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.json.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/bootstrap.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/select2.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.form.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/jquery.wheelmouse.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/bootbox.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/vendor/google.html-sanitizer.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/lang.php?locale=en&build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/scw.php?locale=en&build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/functions.js?build=10.1.99\"></script></head><body id=\"welcome\" ><div class=\"k-main k-main-collapsed\">\n<div class=\"k-page-message-box-container\" style=\"visibility:collapse; display:none;\">\n\n    \n        <div class=\"k-page-message-box k-error\" style=\"display:none;\" >\n                </div>\n    \n    \n        <div class=\"k-page-message-box k-warning\" style=\"display:none;\" >\n                </div>\n    \n    \n        <div class=\"k-page-message-box k-success\" style=\"display:none;\" >\n                </div>\n    \n    \n        <div class=\"k-page-message-box k-info\" style=\"display:none;\" >\n                </div>\n    </div>\n        <form id=\"LoginForm\" name=\"LoginForm\" method=\"post\" action=\"/userui/check_login.php\" target=\"_self\">\n        <input type=\"hidden\" name=\"CSRF_TOKEN\" value=\"chbtjh8cg4642mlxfbn773muv45h9kh8dw2u01226b9acv8a995estxo0plrt0gca2n7kp6m9wjv9j1sn4mvw3tu7yswt71nr0yj85nxxdj8svhar1xnoocdv1gblnur\" />\n        <img class=\"k-logo k-user-logo\" id=\"welcomeLogo\" alt=\"K1000 Logo\" src=\"/packages/partnerlogos/userportal_logo\" data-interface=\"user\" />\n        <h1>Welcome and Login...</h1>\n        <div class=\"wysiwyg fr-view\"><p>Welcome to the User Console. The &quot;Downloads&quot; tab contains software available for you to download and install. You can search on software by title, vendor, or label. Please only download and install software that you require.</p><p><br></p><p>You must login in to the User Console to browse software. Please enter your organization&#39;s common user name and password below to login.&nbsp;</p></div>\n                <div class=\"button_login\">\n            <div class=\"k-login\">\n                <div id='loginid'>\n                    <label>Login (user name):</label>\n                    <input type=\"text\" maxlength=\"50\" class=\"k-text-field\" name=\"LOGIN_NAME\" />\n                </div>\n                <div id='password'>\n                    <label>Password:</label>\n                    <input type=\"password\" class=\"k-text-field\" maxlength=\"50\" name=\"LOGIN_PASSWORD\" autocomplete=\"off\" />\n                </div>\n            </div>\n            <div class=\"k-login-note\">\n                (Note: Credentials will be saved on this computer between sessions unless you explicitly \"Log Out\")\n            </div>\n        </div>\n\n        <div class=\"k-login\" id=\"org_select\">\n                            <input id=\"orgtextbox\" type=\"hidden\" name=\"ORGANIZATION\" value=\"Default\" />\n                    </div>\n\n        <div id=\"samllogin\" style=\"margin-top:10px;display:none;\" class=\"button_saml\">\n            <button id=\"button_saml\" name=\"saml\" class=\"k-btn-dark button_saml\">Login</button>\n            <p style=\"margin-top:5px;\"><a id=\"showotherlogin\">Local Sign On</a></p>\n        </div>\n\n        <buttons>\n            <button id=\"button_login\" name=\"save\" class=\"k-btn-dark button_login\">Login</button>\n            <p style=\"margin-top:5px;\" class=\"button_login\"><a id=\"showsamllogin\">Single Sign On</a></p>\n        </buttons>\n\n    </form>\n    </div><footer><span class=\"k-copyright\">\ufffd 2023 Quest Software Inc. All Rights Reserved.</span></footer><div id=\"alert-div\"></div><script type=\"text/javascript\" src=\"/common/js/minified/nav.js?build=10.1.99\"></script><script type=\"text/javascript\" src=\"/common/js/minified/core.js?build=10.1.99\"></script><script type=\"text/javascript\">ShowMessageBox();</script>\n\n<script type=\"text/javascript\">var loginmode=\"local\";var login_timeout_active=false;const saml_orgs={ 'Default':{ 'name':'Default','id':'1','required':'','enabled':''},};function all_orgs_saml_enabled(){ var rval=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if(saml_orgs[key].enabled==false){ return false;}else{ rval=true;}}}return rval;}function show_hide_saml(org){ var saml=false;for(var key in saml_orgs){ if(saml_orgs.hasOwnProperty(key)){ if((key==org)&&(saml_orgs[key].enabled==true)){ saml=true;}}}if(saml||all_orgs_saml_enabled()){ loginmode=\"saml\";jQuery('.button_login').hide();jQuery('.button_saml').show();jQuery('#org_select').attr('class','');jQuery('#showsamllogin').show();}else{ loginmode=\"local\";jQuery('.button_login').show();jQuery('.button_saml').hide();jQuery('#showsamllogin').hide();jQuery('#org_select').attr('class','k-login');jQuery('[name=\"LOGIN_NAME\"]').focus();}};function set_local_focue(){ var last_user='';if(last_user!=''){ jQuery('[name=\"LOGIN_NAME\"]').val(last_user);jQuery('[name=\"LOGIN_PASSWORD\"]').focus();}else{ jQuery('[name=\"LOGIN_NAME\"]').focus();}};function lockout_timer(){ jQuery('[name=\"LOGIN_NAME\"]').removeAttr('disabled');jQuery('[name=\"LOGIN_PASSWORD\"]').removeAttr('disabled');jQuery('#button_login').removeAttr('disabled');jQuery('.k-error-explanation').hide();jQuery('div').removeClass(\"k-error-explanation\");jQuery('.k-login-locked').hide();jQuery('div').removeClass(\"k-loader\");login_timeout_active=false;}jQuery(document).ready(function(){ jQuery(document).on('keypress',function(e){ if((e.which&&e.which==13)||(e.keyCode&&e.keyCode==13)){ if(login_timeout_active==true){ return false;}if(loginmode=='local'){ jQuery('#LoginForm').submit();}else if(loginmode=='saml'){ jQuery('#button_saml').click();}return false;}else{ return true;}});jQuery('#orgselect').change(function(){ show_hide_saml(this.value);});jQuery('#showotherlogin').on('click',function(event){ jQuery('.button_saml').hide();jQuery('.button_login').show();jQuery('[name=\"LOGIN_NAME\"]').focus();jQuery('#org_select').attr('class','k-login');loginmode=\"local\";event.preventDefault();});jQuery('#showsamllogin').on('click',function(event){ jQuery('.button_saml').show();jQuery('.button_login').hide();jQuery('#org_select').attr('class','');loginmode='saml';event.preventDefault();});jQuery('#button_saml').on('click',function(event){ if(typeof(jQuery('[name=\"ORGANIZATION\"]').select2('val'))=='string'){ var torg=jQuery('[name=\"ORGANIZATION\"]').select2('val');}else{ var torg=jQuery(\"#orgtextbox\").val();}if(torg.length==0){ torg=\"Default\";}event.preventDefault();window.location.href=\"/common/saml_login.php?active=\"+torg;});if(typeof(torg=jQuery('[name=\"ORGANIZATION\"]').select2('val'))=='string'){ show_hide_saml(jQuery('[name=\"ORGANIZATION\"]').select2('val'));}else{ show_hide_saml(jQuery('#orgtextbox').val());}});</script>\n</body></html>\n",
         "datamd5" : "c960cb4f425f8334c1da35058b7540b1",
         "datammh3" : 99841409,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com",
            "novelregulation.ca"
         ],
         "fingerprint" : {
            "md5" : "3120179a43e9546de26e4cd65f8d9f5c",
            "sha1" : "01b812a1d5874610e98193144e34f702d5bc5bf0",
            "sha256" : "4ebfdb7e6c365924e3ff38c26be5ac65954884873d4f20204c713c15453d4a37"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "AMAZON-ICN",
            "organization" : "AWS Asia Pacific (Seoul) Region",
            "subnet" : "13.125.0.0/16"
         },
         "host" : [
            "ec2-13-125-43-62"
         ],
         "hostname" : [
            "ec2-13-125-43-62.ap-northeast-2.compute.amazonaws.com"
         ],
         "ip" : "13.125.43.62",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "37.5112",
         "location" : "37.5112,126.9741",
         "longitude" : "126.9741",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "ec2-13-125-43-62.ap-northeast-2.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "5f:76:f7:d9:d5:da:99:e3:80:87:6d:ed:3f:78:08:1a:82:ac:91:87",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "ap-northeast-2.compute.amazonaws.com",
            "compute.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "*.novelregulation.ca"
         },
         "subnet" : "13.124.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "ca",
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-21T06:38:00Z",
            "notbefore" : "2023-11-22T06:38:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 18.144.63.24:9404 (tcp/http/tls) - last seen on 2024-11-21 at 00:40:08 UTC

    • IP
      18.144.63.24
      Network
      18.144.0.0/15
      Domain(s)
      amazonaws.com today-communication.org
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://18.144.63.24:9404/ 200

      HTTP Title
      Ray Dashboard
      Reverse DNS
      ec2-18-144-63-24.us-west-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      *.today-communication.org
      SHA256 Fingerprint
      1af54ff195f7a14eeca1364553900cd89a29af1307b430420cc486b70342ba32
      Validity Not Before
      2023-11-21T23:56:39Z
      Validity Not After
      2025-11-20T23:56:39Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f877fb142569cd4e3d1a157ce28b1a00
      HTTP Header MD5
      9eae81c07eb3b6a669f5e5feb9ff8fc4
      HTTP Body MD5
      d8a4f9e0ac5057437828492f30c1d1ad
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 200 OK
      Connection: close
      Date: Thu, 21 Nov 2024 00:33:30 GMT
      Server: Python/3.11 aiohttp/3.9.5
      Content-Type: application/json; charset=utf-8
      Content-Length: 446
      
      <!doctype html><html lang="en"><head><meta charset="utf-8"/><link rel="shortcut icon" href="./favicon.ico"/><meta name="viewport" content="width=device-width,initial-scale=1"/><title>Ray Dashboard</title><script defer="defer" src="./static/js/main.8c11aab8.js"></script><link href="./static/css/main.388a904b.css" rel="stylesheet"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id="root"></div></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T00:40:08.000Z",
         "app" : {
            "favicon" : {
               "image" : "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",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "d8a4f9e0ac5057437828492f30c1d1ad",
               "bodymmh3" : 1173419914,
               "headermd5" : "9eae81c07eb3b6a669f5e5feb9ff8fc4",
               "headermmh3" : 1587132396,
               "title" : "Ray Dashboard"
            },
            "length" : 624
         },
         "asn" : "AS16509",
         "city" : "San Jose",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 00:33:30 GMT\r\nServer: Python/3.11 aiohttp/3.9.5\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 446\r\n\r\n<!doctype html><html lang=\"en\"><head><meta charset=\"utf-8\"/><link rel=\"shortcut icon\" href=\"./favicon.ico\"/><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"/><title>Ray Dashboard</title><script defer=\"defer\" src=\"./static/js/main.8c11aab8.js\"></script><link href=\"./static/css/main.388a904b.css\" rel=\"stylesheet\"></head><body><noscript>You need to enable JavaScript to run this app.</noscript><div id=\"root\"></div></body></html>",
         "datamd5" : "f877fb142569cd4e3d1a157ce28b1a00",
         "datammh3" : -196754178,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com",
            "today-communication.org"
         ],
         "fingerprint" : {
            "md5" : "97a8dfbc35449a3964ff71474eaa4712",
            "sha1" : "2d81dfbaec8ea60dd17217836cb684e65053e9f8",
            "sha256" : "1af54ff195f7a14eeca1364553900cd89a29af1307b430420cc486b70342ba32"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZON-SFO",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "18.144.0.0/16"
         },
         "host" : [
            "ec2-18-144-63-24"
         ],
         "hostname" : [
            "ec2-18-144-63-24.us-west-1.compute.amazonaws.com"
         ],
         "ip" : "18.144.63.24",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "37.1835",
         "location" : "37.1835,-121.7714",
         "longitude" : "-121.7714",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "ec2-18-144-63-24.us-west-1.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "76:fd:ca:fa:32:ec:8a:91:46:c5:57:7f:70:e7:34:a4:0a:78:96:a8",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "us-west-1.compute.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "*.today-communication.org"
         },
         "subnet" : "18.144.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "org"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-20T23:56:39Z",
            "notbefore" : "2023-11-21T23:56:39Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 44.243.106.175:9404 (tcp/http/tls) - last seen on 2024-11-20 at 19:53:07 UTC

    • IP
      44.243.106.175
      Network
      44.224.0.0/11
      Domain(s)
      amazonaws.com novel-manufacturing.us
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://44.243.106.175:9404/ 404

      HTTP Title
      Error 404--Not Found
      Reverse DNS
      ec2-44-243-106-175.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Oracle Weblogic Server 10.3.6.0.0
      HTTP Component(s)
      Oracle Weblogic Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      *.sonicwall.novel-manufacturing.us
      SHA256 Fingerprint
      b470c0735c506956d2bb3c4c29b6ef6dc23d609432e46d35edee953a4ed0fdd1
      Validity Not Before
      2023-11-21T19:46:14Z
      Validity Not After
      2025-11-20T19:46:14Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e26e7874bcd5613de7a73a09bb31100c
      HTTP Header MD5
      522c4e821ae16fa1f93f1ac71c0e412a
      HTTP Body MD5
      693ba5c2587c2994de7843b9c3c9e384
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 404 Not Found
      Connection: close
      Date: Wed, 20 Nov 2024 19:46:17 GMT
      Server: WebLogic Server 10.3.6.0.0
      Content-Type: text/html
      Content-Length: 1766
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Draft//EN">
      <HTML>
          <HEAD>
              <TITLE>Error 404--Not Found</TITLE>
          </HEAD>
          <BODY bgcolor="white">
              <FONT FACE=Helvetica><BR CLEAR=all>
              <TABLE border=0 cellspacing=5>
                  <TR>
                      <TD>
                          <BR CLEAR=all>
                          <FONT FACE="Helvetica" COLOR="black" SIZE="3">
                              <H2>Error 404--Not Found</H2>
                          </FONT>
                      </TD>
                  </TR>
              </TABLE>
              <TABLE border=0 width=100% cellpadding=10>
                  <TR>
                      <TD VALIGN=top WIDTH=100% BGCOLOR=white>
                          <FONT FACE="Courier New">
                              <FONT FACE="Helvetica" SIZE="3">
                                  <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>
                              </FONT>
                              <FONT FACE="Helvetica" SIZE="3">
                                  <H4>10.4.5 404 Not Found</H4>
                              </FONT>
                              <P>
                                  <FONT FACE="Courier New">
                                      The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.
                              </p>
                              <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>
                          </FONT>
                      </TD>
                  </TR>
              </TABLE>
          </BODY>
      </HTML>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T19:53:07.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "10.3.6.0"
               ]
            },
            "favicon" : {
               "image" : "AAABAAIAEBAQAAAAAAAoAQAAJgAAACAgEAAAAAAA6AIAAE4BAAAoAAAAEAAAACAAAAABAAQAAAAAAIAAAAAAAAAAAAAAABAAAAAQAAAAAAAAAAAAgAAAgAAAAICAAIAAAACAAIAAgIAAAICAgADAwMAAAAD/AAD/AAAA//8A/wAAAP8A/wD//wAA////AAAAAAAAAAAAAABERERERAAABEREREREAABERAAAAAAAAERAAAAAAAAEREAAAAAAAAREREREREQABERERERERAAEREAAAAAAAAREQAAAAAAAAEREAAAAAAAARERAAAAAAAAEREREREQAAAAERERERAAAAAAAAAAAAAAAAAAAAAAA//8AAPADAADgAwAAw/8AAMf/AACH/wAAgAMAAIADAACH/wAAh/8AAMP/AADB/wAA4AMAAPgDAAD//wAA//8AACgAAAAgAAAAQAAAAAEABAAAAAAAAAIAAAAAAAAAAAAAEAAAABAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEREREREREREQAAAAAAAAEREREREREREREAAAAAAAERERERERERERERAAAAAAAREREREREREREREQAAAAABEREREREREREREREAAAAAAREREREAAAAAAAAAAAAAABEREREQAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREQAAAAAAAAAAAAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREREREREREREREAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREQAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAABEREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREREREREREQAAAAAAEREREREREREREREAAAAAAAERERERERERERERAAAAAAAAAREREREREREREQAAAAAAAAABEREREREREREAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/////////////////4AAP/4AAD/4AAA/8AAAP+AAAD/gD///wB///8A////Af///gH///4B///+AAAA/gAAAP4AAAD+AAAA/gAAAP4B////Af///wD///8Af///gD///8AAAP/AAAD/4AAA//gAAP/+AAD////////////////w==",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "693ba5c2587c2994de7843b9c3c9e384",
               "bodymmh3" : -369160404,
               "component" : [
                  {
                     "product" : "Weblogic Server",
                     "productvendor" : "Oracle"
                  }
               ],
               "headermd5" : "522c4e821ae16fa1f93f1ac71c0e412a",
               "headermmh3" : -1826208058,
               "title" : "Error 404--Not Found"
            },
            "length" : 1931
         },
         "asn" : "AS16509",
         "city" : "Boardman",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 404 Not Found\r\nConnection: close\r\nDate: Wed, 20 Nov 2024 19:46:17 GMT\r\nServer: WebLogic Server 10.3.6.0.0\r\nContent-Type: text/html\r\nContent-Length: 1766\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Draft//EN\">\n<HTML>\n    <HEAD>\n        <TITLE>Error 404--Not Found</TITLE>\n    </HEAD>\n    <BODY bgcolor=\"white\">\n        <FONT FACE=Helvetica><BR CLEAR=all>\n        <TABLE border=0 cellspacing=5>\n            <TR>\n                <TD>\n                    <BR CLEAR=all>\n                    <FONT FACE=\"Helvetica\" COLOR=\"black\" SIZE=\"3\">\n                        <H2>Error 404--Not Found</H2>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n        <TABLE border=0 width=100% cellpadding=10>\n            <TR>\n                <TD VALIGN=top WIDTH=100% BGCOLOR=white>\n                    <FONT FACE=\"Courier New\">\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>\n                        </FONT>\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H4>10.4.5 404 Not Found</H4>\n                        </FONT>\n                        <P>\n                            <FONT FACE=\"Courier New\">\n                                The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.\n                        </p>\n                        <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n    </BODY>\n</HTML>",
         "datamd5" : "e26e7874bcd5613de7a73a09bb31100c",
         "datammh3" : 1679174131,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com",
            "novel-manufacturing.us"
         ],
         "fingerprint" : {
            "md5" : "8a1daec4c2253b338dbb535f20f20fe8",
            "sha1" : "9f9823d9e50f1fc7bfb46d4ff2b70043dfc6d3cb",
            "sha256" : "b470c0735c506956d2bb3c4c29b6ef6dc23d609432e46d35edee953a4ed0fdd1"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZO-ZPDX",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "44.224.0.0/11"
         },
         "host" : [
            "ec2-44-243-106-175"
         ],
         "hostname" : [
            "ec2-44-243-106-175.us-west-2.compute.amazonaws.com"
         ],
         "ip" : "44.243.106.175",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "45.8491",
         "location" : "45.8491,-119.7143",
         "longitude" : "-119.7143",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "product" : "Weblogic Server",
         "productvendor" : "Oracle",
         "productversion" : "10.3.6.0.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Not Found",
         "reverse" : [
            "ec2-44-243-106-175.us-west-2.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-20",
         "serial" : "2f:63:cd:26:f4:56:a0:65:b8:a8:b1:57:b2:1c:d3:f5:c4:e6:05:23",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 404,
         "subdomains" : [
            "compute.amazonaws.com",
            "sonicwall.novel-manufacturing.us",
            "us-west-2.compute.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "*.sonicwall.novel-manufacturing.us"
         },
         "subnet" : "44.224.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "us"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-20T19:46:14Z",
            "notbefore" : "2023-11-21T19:46:14Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 51.20.80.86:9404 (tcp/http/tls) - last seen on 2024-11-20 at 17:03:07 UTC

    • IP
      51.20.80.86
      Network
      51.20.0.0/15
      Domain(s)
      amazonaws.com south-energy.gc.ca
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://51.20.80.86:9404/ 200

      HTTP Title
      Download Master
      Reverse DNS
      ec2-51-20-80-86.eu-north-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      *.south-energy.gc.ca
      SHA256 Fingerprint
      dfe8dc6943d649219f417ed3b46a6691e0259567e916004046fde71f6ce8d5bf
      Validity Not Before
      2023-11-21T16:56:21Z
      Validity Not After
      2025-11-20T16:56:21Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a52ae731c45deec6fcf5b3934ee55e00
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      18ccd80dc0943311ea6b6014e12a985c
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 200 OK
      Connection: close
      Date: Wed, 20 Nov 2024 16:56:22 GMT
      Server: nginx
      Content-Length: 1767
      Content-Type: text/html
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml">
      <html xmlns:v>
      <head>
      <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" />
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
      <meta http-equiv="Expires" content="-1" />
      <meta HTTP-EQUIV="Cache-Control" CONTENT="no-cache">
      <meta http-equiv="Pragma" content="no-cache" />
      <title>Download Master</title>
      <script type="text/javascript" src="jquery.js"></script>
      </head>
      <body>
      <script>
      var httpTag = 'https:' == document.location.protocol ? false : true;
              if(( navigator.userAgent.match(/iPhone/i)) ||
                  ( navigator.userAgent.match(/iPod/i))   ||
                      ( navigator.userAgent.match(/windows ce/i)) ||
                      ( navigator.userAgent.match(/windows phone/i)) ||
                      ( navigator.userAgent.match(/Android/i)) &&
                      ( navigator.userAgent.match(/Mobile/i)))
                      {
                      if(httpTag)
                              self.location = "http://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                      else
                              self.location = "https://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                      }
              else{
                      if(httpTag)
                              self.location = "http://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                      else
                              self.location = "https://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                      }
      
      </script>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T17:03:07.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
               ]
            },
            "favicon" : {
               "image" : "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",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "18ccd80dc0943311ea6b6014e12a985c",
               "bodymmh3" : 559765034,
               "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
               "headermmh3" : -1928976662,
               "title" : "Download Master"
            },
            "length" : 1904
         },
         "asn" : "AS16509",
         "city" : "Stockholm",
         "country" : "SE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Wed, 20 Nov 2024 16:56:22 GMT\r\nServer: nginx\r\nContent-Length: 1767\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\n<html xmlns:v>\n<head>\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=EmulateIE8\" />\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta http-equiv=\"Expires\" content=\"-1\" />\n<meta HTTP-EQUIV=\"Cache-Control\" CONTENT=\"no-cache\">\n<meta http-equiv=\"Pragma\" content=\"no-cache\" />\n<title>Download Master</title>\n<script type=\"text/javascript\" src=\"jquery.js\"></script>\n</head>\n<body>\n<script>\nvar httpTag = 'https:' == document.location.protocol ? false : true;\n        if(( navigator.userAgent.match(/iPhone/i)) ||\n            ( navigator.userAgent.match(/iPod/i))   ||\n                ( navigator.userAgent.match(/windows ce/i)) ||\n                ( navigator.userAgent.match(/windows phone/i)) ||\n                ( navigator.userAgent.match(/Android/i)) &&\n                ( navigator.userAgent.match(/Mobile/i)))\n                {\n                if(httpTag)\n                        self.location = \"http://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                else\n                        self.location = \"https://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                }\n        else{\n                if(httpTag)\n                        self.location = \"http://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                else\n                        self.location = \"https://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                }\n\n</script>\n</body>\n</html>\n",
         "datamd5" : "a52ae731c45deec6fcf5b3934ee55e00",
         "datammh3" : -434684070,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com",
            "south-energy.gc.ca"
         ],
         "fingerprint" : {
            "md5" : "faa56be06c1ff8ef4b0153075ce400a1",
            "sha1" : "9c203b42f0909a0e22b2fa2dcddb52b5216a88a7",
            "sha256" : "dfe8dc6943d649219f417ed3b46a6691e0259567e916004046fde71f6ce8d5bf"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "SE",
            "countryname" : "Sweden",
            "domain" : [
               "amazonaws.com"
            ],
            "isineu" : "true",
            "latitude" : "60.128161",
            "location" : "60.128161,18.643501",
            "longitude" : "18.643501",
            "netname" : "EC2",
            "organization" : "EC2",
            "subnet" : "51.20.0.0/16"
         },
         "host" : [
            "ec2-51-20-80-86"
         ],
         "hostname" : [
            "ec2-51-20-80-86.eu-north-1.compute.amazonaws.com"
         ],
         "ip" : "51.20.80.86",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "59.3241",
         "location" : "59.3241,18.0517",
         "longitude" : "18.0517",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "ec2-51-20-80-86.eu-north-1.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-20",
         "serial" : "76:78:c1:aa:a5:11:d1:66:6f:a7:5c:85:11:aa:5d:26:0d:be:36:82",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "eu-north-1.compute.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "*.south-energy.gc.ca"
         },
         "subnet" : "51.20.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "gc.ca"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-20T16:56:21Z",
            "notbefore" : "2023-11-21T16:56:21Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 15.228.235.108:9404 (tcp/http/tls) - last seen on 2024-11-20 at 16:24:06 UTC

    • IP
      15.228.235.108
      Network
      15.228.0.0/15
      Domain(s)
      amazonaws.com stealth-north-electric.us
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://15.228.235.108:9404/ 301

      Reverse DNS
      ec2-15-228-235-108.sa-east-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      Oracle Java Atlassian Confluence
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      atlassian.stealth-north-electric.us
      SHA256 Fingerprint
      5709da0bdb93b37254219461973f2fc03dd544a4164ca14249a1d1ca09b820df
      Validity Not Before
      2023-11-21T16:17:06Z
      Validity Not After
      2025-11-20T16:17:06Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e4297ea92a00e2325388ff5a6cf96a9c
      HTTP Header MD5
      8ec45507eafed284e287ab05d88537f5
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 301 Moved Permanently
      Connection: keep-alive
      Date: Wed, 20 Nov 2024 16:17:07 GMT
      Server: nginx
      X-Confluence-Request-Time: 1732119427
      Content-Type: text/html;charset=UTF-8
      Cache-Control: no-cache, must-revalidate
      Expires: Thu, 01 Jan 1970 00:00:00 GMT
      Set-Cookie: JSESSIONID=idib3ci49sg7izdxzgb0idfh9ispfeoq; Path=/; Secure; HttpOnly
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'
      Strict-Transport-Security: max-age=63072000
      Location: ./login.action
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T16:24:06.000Z",
         "app" : {
            "favicon" : {
               "image" : "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",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1636538602,
               "component" : [
                  {
                     "product" : "Confluence",
                     "productvendor" : "Atlassian"
                  },
                  {
                     "productvendor" : "Oracle",
                     "product" : "Java"
                  }
               ],
               "headermd5" : "8ec45507eafed284e287ab05d88537f5",
               "headermmh3" : 786426250
            },
            "length" : 587
         },
         "asn" : "AS16509",
         "city" : "S\u00e3o Paulo",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 301 Moved Permanently\r\nConnection: keep-alive\r\nDate: Wed, 20 Nov 2024 16:17:07 GMT\r\nServer: nginx\r\nX-Confluence-Request-Time: 1732119427\r\nContent-Type: text/html;charset=UTF-8\r\nCache-Control: no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nSet-Cookie: JSESSIONID=idib3ci49sg7izdxzgb0idfh9ispfeoq; Path=/; Secure; HttpOnly\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nStrict-Transport-Security: max-age=63072000\r\nLocation: ./login.action\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "e4297ea92a00e2325388ff5a6cf96a9c",
         "datammh3" : 1392161141,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com",
            "stealth-north-electric.us"
         ],
         "fingerprint" : {
            "md5" : "88b2324506b242761e7b9ff8e9e4eb54",
            "sha1" : "65235d1a91df9e1082753552dd65d620e38ebbf2",
            "sha256" : "5709da0bdb93b37254219461973f2fc03dd544a4164ca14249a1d1ca09b820df"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "AMAZON-GRU",
            "organization" : "Amazon Data Services Brazil",
            "subnet" : "15.228.0.0/15"
         },
         "host" : [
            "atlassian",
            "ec2-15-228-235-108"
         ],
         "hostname" : [
            "atlassian.stealth-north-electric.us",
            "ec2-15-228-235-108.sa-east-1.compute.amazonaws.com"
         ],
         "ip" : "15.228.235.108",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "-23.5335",
         "location" : "-23.5335,-46.6359",
         "longitude" : "-46.6359",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Moved Permanently",
         "reverse" : [
            "ec2-15-228-235-108.sa-east-1.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-20",
         "serial" : "2a:dc:c5:e0:ad:c7:73:53:5e:9a:b0:43:c7:2c:e5:e8:e0:e5:79:11",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 301,
         "subdomains" : [
            "compute.amazonaws.com",
            "sa-east-1.compute.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "atlassian.stealth-north-electric.us"
         },
         "subnet" : "15.228.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "us"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-20T16:17:06Z",
            "notbefore" : "2023-11-21T16:17:06Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 3.94.114.216:9404 (tcp/http/tls) - last seen on 2024-11-20 at 15:59:06 UTC

    • IP
      3.94.114.216
      Network
      3.80.0.0/12
      Domain(s)
      amazonaws.com bright-electric-beta.gc.ca
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://3.94.114.216:9404/ 200

      HTTP Title
      Mirth Connect Administrator
      Reverse DNS
      ec2-3-94-114-216.compute-1.amazonaws.com
      ASN
      AS14618
      Organization
      AMAZON-AES
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Mortbay Jetty 7.5.4
      HTTP Component(s)
      jQuery jQuery 1.7.1 NextGen Mirth Connect
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      *.bright-electric-beta.gc.ca
      SHA256 Fingerprint
      23fb96538586ffc4851d9653507844b23ec5f308eee9bafba45a8cc91c5ea7f8
      Validity Not Before
      2023-11-21T15:59:05Z
      Validity Not After
      2025-11-20T15:59:05Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1daed4653a87feca74189d213366aebc
      HTTP Header MD5
      d5160aa982efd63bbe9e16e88e1be7b4
      HTTP Body MD5
      7b724ebb4da17721f96e0a76b46163ef
    • HTTP/1.1 200 OK
      Connection: close
      Date: Wed, 20 Nov 2024 15:59:05 GMT
      Server: Jetty(7.5.4.v20111024)
      Content-Security-Policy: frame-ancestors 'none'
      X-Frame-Options: DENY
      Content-Language: en-US
      Expires: Wed, 20 Nov 2024 15:59:05 GMT
      Content-Type: text/html;charset=iso-8859-1
      Content-Length: 3676
      
      <!doctype html>
      <html>
      <head>
              <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
              <meta http-equiv="x-ua-compatible" content="IE=edge">
              <meta http-equiv="cache-control" content="no-cache">
              <meta http-equiv="cache-control" content="no-store">
      
              <title>Mirth Connect Administrator</title>
      
              <link rel="shortcut icon" type="image/x-icon" href="images/favicon.ico" />
              <link rel="stylesheet" type="text/css" href="css/bootstrap.css" />
              <link rel="stylesheet" type="text/css" href="css/main.css" />
      
              <script type="text/javascript">
                      /* Break out of frame if inside a frame. */
                      if (window != window.top) {
                              window.top.location = window.location;
                      }
              </script>
      
              <script type="text/javascript" src="js/jquery-1.7.1.min.js"></script>
      </head>
      
      <body id="body" style="display:none;" class="subpage">
              <div id="centerWrapper">
                      <div class="row">
                              <div style="padding: 10px; text-align: center;">
                                      <img id="mirthLogo" src="images/mirthconnectlogowide.png"/>
                              </div>
      
                              <div id="mcadministrator" class="span9">
                                      <h1 style="text-align: center;">Mirth Connect Administrator</h1>
      
                                      <div class="help-block">
                                              <strong>Overview of Web Start:</strong><br /> Java Web Start is a framework developed by Sun Microsystems
                                              that enables launching Java applications directly from a browser.
                                              Unlike Java applets, Web Start applications do not run inside the
                                              browser.
                                      </div>
                                      <div class="help-block">
                                              <br/>Click the big green button below to launch the Mirth Connect
                                              Administrator using Java Web Start.
                                      </div>
      
                                      <div style="text-align: center; margin-top: 10px;">
                                              <a class="btn btn-large btn-themebutton" type="submit" href="javascript:launchAdministrator()">Launch Mirth Connect Administrator</a>
                                      </div>
                              </div>
                      </div>
              </div>
      
              <footer class="smallSubPage" style="width:100%;">
                      <table>
                              <tr>
                                      <td style="text-align: center;">&copy; 2017 Mirth Corporation | Mirth Connect</td>
                              </tr>
                      </table>
              </footer>
      
              <script type="text/javascript">
                      $(document).ready(function() {
                              $.ajax({
                                  type: 'HEAD',
                                  url: 'webadmin/Index.action',
                                      success: function() {
                                              window.location.replace("webadmin/Index.action");
                                      },
                                      error: function() {
                                              $("#body").css("display", "inline");
                                      }
                              });
                      });
              </script>
      
          <script type="text/javascript">
                      function launchAdministrator(){
                      window.location.href = 'webstart.jnlp?time=' + new Date().getTime();
                      }
              </script>
      </body>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T15:59:06.000Z",
         "app" : {
            "favicon" : {
               "url" : "/images/favicon.ico"
            },
            "http" : {
               "bodymd5" : "7b724ebb4da17721f96e0a76b46163ef",
               "bodymmh3" : 494211827,
               "component" : [
                  {
                     "product" : "Mirth Connect",
                     "productvendor" : "NextGen"
                  },
                  {
                     "productvendor" : "jQuery",
                     "productversion" : "1.7.1",
                     "product" : "jQuery"
                  }
               ],
               "headermd5" : "d5160aa982efd63bbe9e16e88e1be7b4",
               "headermmh3" : 968962021,
               "title" : "Mirth Connect Administrator"
            },
            "length" : 3986
         },
         "asn" : "AS14618",
         "city" : "Ashburn",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Wed, 20 Nov 2024 15:59:05 GMT\r\nServer: Jetty(7.5.4.v20111024)\r\nContent-Security-Policy: frame-ancestors 'none'\r\nX-Frame-Options: DENY\r\nContent-Language: en-US\r\nExpires: Wed, 20 Nov 2024 15:59:05 GMT\r\nContent-Type: text/html;charset=iso-8859-1\r\nContent-Length: 3676\r\n\r\n<!doctype html>\n<html>\n<head>\n        <meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\">\n        <meta http-equiv=\"x-ua-compatible\" content=\"IE=edge\">\n        <meta http-equiv=\"cache-control\" content=\"no-cache\">\n        <meta http-equiv=\"cache-control\" content=\"no-store\">\n\n        <title>Mirth Connect Administrator</title>\n\n        <link rel=\"shortcut icon\" type=\"image/x-icon\" href=\"images/favicon.ico\" />\n        <link rel=\"stylesheet\" type=\"text/css\" href=\"css/bootstrap.css\" />\n        <link rel=\"stylesheet\" type=\"text/css\" href=\"css/main.css\" />\n\n        <script type=\"text/javascript\">\n                /* Break out of frame if inside a frame. */\n                if (window != window.top) {\n                        window.top.location = window.location;\n                }\n        </script>\n\n        <script type=\"text/javascript\" src=\"js/jquery-1.7.1.min.js\"></script>\n</head>\n\n<body id=\"body\" style=\"display:none;\" class=\"subpage\">\n        <div id=\"centerWrapper\">\n                <div class=\"row\">\n                        <div style=\"padding: 10px; text-align: center;\">\n                                <img id=\"mirthLogo\" src=\"images/mirthconnectlogowide.png\"/>\n                        </div>\n\n                        <div id=\"mcadministrator\" class=\"span9\">\n                                <h1 style=\"text-align: center;\">Mirth Connect Administrator</h1>\n\n                                <div class=\"help-block\">\n                                        <strong>Overview of Web Start:</strong><br /> Java Web Start is a framework developed by Sun Microsystems\n                                        that enables launching Java applications directly from a browser.\n                                        Unlike Java applets, Web Start applications do not run inside the\n                                        browser.\n                                </div>\n                                <div class=\"help-block\">\n                                        <br/>Click the big green button below to launch the Mirth Connect\n                                        Administrator using Java Web Start.\n                                </div>\n\n                                <div style=\"text-align: center; margin-top: 10px;\">\n                                        <a class=\"btn btn-large btn-themebutton\" type=\"submit\" href=\"javascript:launchAdministrator()\">Launch Mirth Connect Administrator</a>\n                                </div>\n                        </div>\n                </div>\n        </div>\n\n        <footer class=\"smallSubPage\" style=\"width:100%;\">\n                <table>\n                        <tr>\n                                <td style=\"text-align: center;\">&copy; 2017 Mirth Corporation | Mirth Connect</td>\n                        </tr>\n                </table>\n        </footer>\n\n        <script type=\"text/javascript\">\n                $(document).ready(function() {\n                        $.ajax({\n                            type: 'HEAD',\n                            url: 'webadmin/Index.action',\n                                success: function() {\n                                        window.location.replace(\"webadmin/Index.action\");\n                                },\n                                error: function() {\n                                        $(\"#body\").css(\"display\", \"inline\");\n                                }\n                        });\n                });\n        </script>\n\n    <script type=\"text/javascript\">\n                function launchAdministrator(){\n                window.location.href = 'webstart.jnlp?time=' + new Date().getTime();\n                }\n        </script>\n</body>\n",
         "datamd5" : "1daed4653a87feca74189d213366aebc",
         "datammh3" : 2105623133,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com",
            "bright-electric-beta.gc.ca"
         ],
         "fingerprint" : {
            "md5" : "14f5221761a61908bb80b79a9391f6a5",
            "sha1" : "dfa2d534020c4286856ecacb8efbbde0c715bf46",
            "sha256" : "23fb96538586ffc4851d9653507844b23ec5f308eee9bafba45a8cc91c5ea7f8"
         },
         "geolocus" : {
            "asn" : "AS14618",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZON-IAD",
            "organization" : "Amazon Data Services NoVa",
            "subnet" : "3.80.0.0/12"
         },
         "host" : [
            "ec2-3-94-114-216"
         ],
         "hostname" : [
            "ec2-3-94-114-216.compute-1.amazonaws.com"
         ],
         "ip" : "3.94.114.216",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-AES",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "product" : "Jetty",
         "productvendor" : "Mortbay",
         "productversion" : "7.5.4",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "ec2-3-94-114-216.compute-1.amazonaws.com"
         ],
         "seen_date" : "2024-11-20",
         "serial" : "03:ad:39:c6:e6:9f:3e:4b:54:20:42:89:46:d9:16:2a:33:5a:02:6f",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute-1.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "*.bright-electric-beta.gc.ca"
         },
         "subnet" : "3.80.0.0/12",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "gc.ca"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-20T15:59:05Z",
            "notbefore" : "2023-11-21T15:59:05Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 50.18.16.17:9404 (tcp/http/tls) - last seen on 2024-11-20 at 11:57:08 UTC

    • IP
      50.18.16.17
      Network
      50.18.0.0/16
      Domain(s)
      amazonaws.com north-finance-dev.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://50.18.16.17:9404/ 301

      Reverse DNS
      ec2-50-18-16-17.us-west-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      Oracle Java Atlassian Confluence
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      *.north-finance-dev.com
      SHA256 Fingerprint
      708beb4834bc8235333b3c2f3e6578cd0fc141c120ce860330737977791198c2
      Validity Not Before
      2023-11-21T11:08:13Z
      Validity Not After
      2025-11-20T11:08:13Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4fb94b29deac4e8134442027c962b495
      HTTP Header MD5
      e05b1d4f46c77a16534c402122381476
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 301 Moved Permanently
      Connection: keep-alive
      Date: Wed, 20 Nov 2024 11:50:33 GMT
      Server: nginx
      X-Confluence-Request-Time: 1732103433
      Content-Type: text/html;charset=UTF-8
      Cache-Control: no-cache, must-revalidate
      Expires: Thu, 01 Jan 1970 00:00:00 GMT
      Set-Cookie: JSESSIONID=ksbe4lyyxkbr62q9qjh0ugemksjki2cr; Path=/; Secure; HttpOnly
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'
      Strict-Transport-Security: max-age=63072000
      Location: ./login.action
      Content-Length: 0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T11:57:08.000Z",
         "app" : {
            "favicon" : {
               "image" : "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",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1636538602,
               "component" : [
                  {
                     "productvendor" : "Oracle",
                     "product" : "Java"
                  },
                  {
                     "productvendor" : "Atlassian",
                     "product" : "Confluence"
                  }
               ],
               "headermd5" : "e05b1d4f46c77a16534c402122381476",
               "headermmh3" : -1974616354
            },
            "length" : 587
         },
         "asn" : "AS16509",
         "city" : "San Jose",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 301 Moved Permanently\r\nConnection: keep-alive\r\nDate: Wed, 20 Nov 2024 11:50:33 GMT\r\nServer: nginx\r\nX-Confluence-Request-Time: 1732103433\r\nContent-Type: text/html;charset=UTF-8\r\nCache-Control: no-cache, must-revalidate\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nSet-Cookie: JSESSIONID=ksbe4lyyxkbr62q9qjh0ugemksjki2cr; Path=/; Secure; HttpOnly\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nStrict-Transport-Security: max-age=63072000\r\nLocation: ./login.action\r\nContent-Length: 0\r\n\r\n",
         "datamd5" : "4fb94b29deac4e8134442027c962b495",
         "datammh3" : -1058352555,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com",
            "north-finance-dev.com"
         ],
         "fingerprint" : {
            "md5" : "4672cad374f86bbf415f295521b1a872",
            "sha1" : "a0247e9dbe5e61c4a9d1da23755ad0a8aaaa5101",
            "sha256" : "708beb4834bc8235333b3c2f3e6578cd0fc141c120ce860330737977791198c2"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZON-SFO",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "50.18.0.0/16"
         },
         "host" : [
            "ec2-50-18-16-17"
         ],
         "hostname" : [
            "ec2-50-18-16-17.us-west-1.compute.amazonaws.com"
         ],
         "ip" : "50.18.16.17",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "37.1835",
         "location" : "37.1835,-121.7714",
         "longitude" : "-121.7714",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Moved Permanently",
         "reverse" : [
            "ec2-50-18-16-17.us-west-1.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-20",
         "serial" : "45:b7:89:4c:cb:f0:e6:fa:22:dd:93:3d:24:99:c5:86:0f:bc:fa:79",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 301,
         "subdomains" : [
            "compute.amazonaws.com",
            "us-west-1.compute.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "*.north-finance-dev.com"
         },
         "subnet" : "50.18.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-20T11:08:13Z",
            "notbefore" : "2023-11-21T11:08:13Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 13.208.181.215:9404 (tcp/http/tls) - last seen on 2024-11-20 at 09:32:09 UTC

    • IP
      13.208.181.215
      Network
      13.208.0.0/13
      Domain(s)
      amazonaws.com east-election-mtu.us
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://13.208.181.215:9404/ 404

      HTTP Title
      Error 404--Not Found
      Reverse DNS
      ec2-13-208-181-215.ap-northeast-3.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Oracle Weblogic Server 10.3.6.0.0
      HTTP Component(s)
      Oracle Weblogic Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      east-election-mtu.us
      SHA256 Fingerprint
      2d93e7f81427aec567230da3f560849d61d13d69584808abfe6209bce9b32ed2
      Validity Not Before
      2023-11-21T09:10:53Z
      Validity Not After
      2025-11-20T09:10:53Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e26e7874bcd5613de7a73a09bb31100c
      HTTP Header MD5
      522c4e821ae16fa1f93f1ac71c0e412a
      HTTP Body MD5
      693ba5c2587c2994de7843b9c3c9e384
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 404 Not Found
      Connection: close
      Date: Wed, 20 Nov 2024 09:25:24 GMT
      Server: WebLogic Server 10.3.6.0.0
      Content-Type: text/html
      Content-Length: 1766
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Draft//EN">
      <HTML>
          <HEAD>
              <TITLE>Error 404--Not Found</TITLE>
          </HEAD>
          <BODY bgcolor="white">
              <FONT FACE=Helvetica><BR CLEAR=all>
              <TABLE border=0 cellspacing=5>
                  <TR>
                      <TD>
                          <BR CLEAR=all>
                          <FONT FACE="Helvetica" COLOR="black" SIZE="3">
                              <H2>Error 404--Not Found</H2>
                          </FONT>
                      </TD>
                  </TR>
              </TABLE>
              <TABLE border=0 width=100% cellpadding=10>
                  <TR>
                      <TD VALIGN=top WIDTH=100% BGCOLOR=white>
                          <FONT FACE="Courier New">
                              <FONT FACE="Helvetica" SIZE="3">
                                  <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>
                              </FONT>
                              <FONT FACE="Helvetica" SIZE="3">
                                  <H4>10.4.5 404 Not Found</H4>
                              </FONT>
                              <P>
                                  <FONT FACE="Courier New">
                                      The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.
                              </p>
                              <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>
                          </FONT>
                      </TD>
                  </TR>
              </TABLE>
          </BODY>
      </HTML>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T09:32:09.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "10.3.6.0"
               ]
            },
            "favicon" : {
               "image" : "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",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "693ba5c2587c2994de7843b9c3c9e384",
               "bodymmh3" : -369160404,
               "component" : [
                  {
                     "product" : "Weblogic Server",
                     "productvendor" : "Oracle"
                  }
               ],
               "headermd5" : "522c4e821ae16fa1f93f1ac71c0e412a",
               "headermmh3" : 1959930423,
               "title" : "Error 404--Not Found"
            },
            "length" : 1931
         },
         "asn" : "AS16509",
         "city" : "Osaka",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 404 Not Found\r\nConnection: close\r\nDate: Wed, 20 Nov 2024 09:25:24 GMT\r\nServer: WebLogic Server 10.3.6.0.0\r\nContent-Type: text/html\r\nContent-Length: 1766\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Draft//EN\">\n<HTML>\n    <HEAD>\n        <TITLE>Error 404--Not Found</TITLE>\n    </HEAD>\n    <BODY bgcolor=\"white\">\n        <FONT FACE=Helvetica><BR CLEAR=all>\n        <TABLE border=0 cellspacing=5>\n            <TR>\n                <TD>\n                    <BR CLEAR=all>\n                    <FONT FACE=\"Helvetica\" COLOR=\"black\" SIZE=\"3\">\n                        <H2>Error 404--Not Found</H2>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n        <TABLE border=0 width=100% cellpadding=10>\n            <TR>\n                <TD VALIGN=top WIDTH=100% BGCOLOR=white>\n                    <FONT FACE=\"Courier New\">\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H3>From RFC 2068 <i>Hypertext Transfer Protocol -- HTTP/1.1</i>:</H3>\n                        </FONT>\n                        <FONT FACE=\"Helvetica\" SIZE=\"3\">\n                            <H4>10.4.5 404 Not Found</H4>\n                        </FONT>\n                        <P>\n                            <FONT FACE=\"Courier New\">\n                                The server has not found anything matching the Request-URI. No indication is given of whether the condition is temporary or permanent.\n                        </p>\n                        <p>If the server does not wish to make this information available to the client, the status code 403 (Forbidden) can be used instead. The 410 (Gone) status code SHOULD be used if the server knows, through some internally configurable mechanism, that an old resource is permanently unavailable and has no forwarding address.</FONT></P>\n                    </FONT>\n                </TD>\n            </TR>\n        </TABLE>\n    </BODY>\n</HTML>",
         "datamd5" : "e26e7874bcd5613de7a73a09bb31100c",
         "datammh3" : 1679174131,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com",
            "east-election-mtu.us"
         ],
         "fingerprint" : {
            "md5" : "8185c29cc4d6f0e0643c038b73a7a9a5",
            "sha1" : "4192cdb302e2367d4a79d81b8b042a429139c9bc",
            "sha256" : "2d93e7f81427aec567230da3f560849d61d13d69584808abfe6209bce9b32ed2"
         },
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "AMAZON-KIX",
            "organization" : "Amazon Data Services Osaka",
            "subnet" : "13.208.0.0/16"
         },
         "host" : [
            "ec2-13-208-181-215"
         ],
         "hostname" : [
            "east-election-mtu.us",
            "ec2-13-208-181-215.ap-northeast-3.compute.amazonaws.com"
         ],
         "ip" : "13.208.181.215",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "34.6946",
         "location" : "34.6946,135.5021",
         "longitude" : "135.5021",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 9404,
         "product" : "Weblogic Server",
         "productvendor" : "Oracle",
         "productversion" : "10.3.6.0.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Not Found",
         "reverse" : [
            "ec2-13-208-181-215.ap-northeast-3.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-20",
         "serial" : "67:6b:16:47:b4:03:ff:cd:87:51:c9:21:c3:d7:12:5a:b3:d9:9a:af",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 404,
         "subdomains" : [
            "ap-northeast-3.compute.amazonaws.com",
            "compute.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "east-election-mtu.us"
         },
         "subnet" : "13.208.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "us"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-20T09:10:53Z",
            "notbefore" : "2023-11-21T09:10:53Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 34.224.37.72:9404 (tcp/http/tls) - last seen on 2024-11-19 at 09:31:04 UTC

    • IP
      34.224.37.72
      Network
      34.224.0.0/12
      Domain(s)
      amazonaws.com eastpower.us
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Juniper JunOS
      URL

      https://34.224.37.72:9404/ 200

      HTTP Title
      Ivanti Connect Secure
      Reverse DNS
      ec2-34-224-37-72.compute-1.amazonaws.com
      ASN
      AS14618
      Organization
      AMAZON-AES
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Juniper JunOS
      HTTP Component(s)
      Ivanti Connect Secure
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Amazon RSA 2048 M02
      Issuer Organization
      Amazon
      Subject Common Name
      *.eastpower.us
      SHA256 Fingerprint
      acc9f2f20328ebcc21d2e653826b98b277057ed8102b0b65b3723e7d0b3727cc
      Validity Not Before
      2023-11-20T09:24:43Z
      Validity Not After
      2025-11-19T09:24:43Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b6d3a241174e5fbb65d88768f526cc4f
      HTTP Header MD5
      2ad59f08560ff26dde50963eb249438d
      HTTP Body MD5
      41fdbc9650454476e99026bd7f1a5217
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 200 OK
      Connection: close
      Date: Tue, 19 Nov 2024 09:24:43 GMT
      Content-Length: 4680
      Content-Type: text/html
      
      <html lang="en">
         <head>
            <meta http-equiv="Content-Language">
            <meta http-equiv="Content-Type" content="text/html">
            <meta name="robots" content="none">
            <link rel="icon" href="/Product_favicon.png" type="image/png">
            <title>Ivanti Connect Secure</title>
         </head>
         <body onload="FinishLoad(1);hideJSWarn();setWin11();" bgcolor="#FFFFFF" color="#000000" link="#3366CC" vlink="#CC6699" alink="#3366CC" leftmargin="0" topmargin="0" rightmargin="0" marginwidth="0" marginheight="0">
            <table id="table_LoginPage_1" border="0" width="100%" cellspacing="0" cellpadding="3">
               <tr>
                  <td bgcolor="#FFFFFF"></td>
                  <td bgcolor="#FFFFFF" align="right">&nbsp;</td>
               </tr>
            </table>
            <table id="table_LoginPage_2" cellpadding="0" cellspacing="0" border="0" width="100%">
               <tr>
                  <td bgcolor="#000000" colspan="2"></td>
               </tr>
            </table>
            <blockquote>
               <form id="frmLogin_4" name="frmLogin" action="login.cgi" method="POST" autocomplete="off" onsubmit="return Login(1)">
                  <input id="tz_offset_5" type="hidden" name="tz_offset">
                  <input id="win11" type="hidden" name="win11" value="">
                  <input id="uach" type="hidden" name="uach" value="">
                  <input id="client_mac" type="hidden" name="clientMAC" value="">
                  <input id="xsauth_token" type="hidden" name="xsauth_token" value="58fefe3c1b2717c8845c0d630ab035c3">
                  <table id="table_LoginPage_3" border="0" cellpadding="2" cellspacing="0">
                     <tr>
                        <td nowrap  colspan="3"><b>Welcome to</b></td>
                     </tr>
                     <tr>
                        <td nowrap  colspan="3"><span class="cssLarge"><b>Ivanti Connect Secure</b></span></td>
                     </tr>
                     <tr>
                        <td colspan="3">&nbsp;</td>
                     </tr>
                     <tr>
                        <td valign="top">
                           <table id="table_LoginPage_6" border="0" cellspacing="0" cellpadding="2">
                              <tr>
                                 <td><label for="username">Username</label></td>
                                 <td>&nbsp;</td>
                                 <td><input id="username" type="text" name="username" size="20"></td>
                              </tr>
                              <tr>
                                 <td><label for="password">Password</label></td>
                                 <td>&nbsp;</td>
                                 <td><input id="password" type="password" name="password" size="20"></td>
                              </tr>
                              <tr>                                                                <input id="realm_16" type="hidden" name="realm" value="OTS User Realm">                                                </tr>
                              <tr>
                                 <td colspan="3">&nbsp;</td>
                              </tr>
                              <tr>
                                 <td>&nbsp;</td>
                                 <td>&nbsp;</td>
                                 <td><input id="btnSubmit_6" type="submit" value="Sign In" name="btnSubmit">&nbsp;</td>
                              </tr>
                           </table>
                        </td>
                        <td valign="top">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>
                        <td valign="top">
                           <table tabindex="1" aria-label="instructions for user login page FILTER verbatim" role="alert" id="TABLE_LoginPage_1" border="0" cellspacing="0" cellpadding="2">
                              <tr>
                                 <td>
                                    Please sign in to begin your secure session.<br><br>
                                    <noscript>Note: Javascript is disabled on your browser.</noscript>
                              </tr>
                              </td>
                           </table>
                        </td>
                     </tr>
                  </table>
               </form>
            </blockquote>
            <table id="table_LoginPage_9" border="0" cellspacing="0" cellpadding="0" width="100%">
               <tr>
                  <td>
                     <table id="table_LoginPage_10" cellpadding="0" cellspacing="0" border="0" width="100%">
                        <tr>
                           <td></td>
                           <td></td>
                           <td></td>
                        </tr>
                        <tr valign="top">
                           <td></td>
                           <td nowrap ><br><br><br><br>
                           <td align="right"></td>
                        </tr>
                     </table>
                  </td>
               </tr>
               <tr>
                  <td colspan="2"></td>
               </tr>
            </table>
         </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-19T09:31:04.000Z",
         "app" : {
            "extract" : {
               "file" : [
                  "login.cgi"
               ]
            },
            "favicon" : {
               "image" : "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",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "41fdbc9650454476e99026bd7f1a5217",
               "bodymmh3" : -766336104,
               "component" : [
                  {
                     "product" : "Connect Secure",
                     "productvendor" : "Ivanti"
                  }
               ],
               "headermd5" : "2ad59f08560ff26dde50963eb249438d",
               "headermmh3" : -644980813,
               "title" : "Ivanti Connect Secure"
            },
            "length" : 4802
         },
         "asn" : "AS14618",
         "city" : "Ashburn",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Tue, 19 Nov 2024 09:24:43 GMT\r\nContent-Length: 4680\r\nContent-Type: text/html\r\n\r\n<html lang=\"en\">\n   <head>\n      <meta http-equiv=\"Content-Language\">\n      <meta http-equiv=\"Content-Type\" content=\"text/html\">\n      <meta name=\"robots\" content=\"none\">\n      <link rel=\"icon\" href=\"/Product_favicon.png\" type=\"image/png\">\n      <title>Ivanti Connect Secure</title>\n   </head>\n   <body onload=\"FinishLoad(1);hideJSWarn();setWin11();\" bgcolor=\"#FFFFFF\" color=\"#000000\" link=\"#3366CC\" vlink=\"#CC6699\" alink=\"#3366CC\" leftmargin=\"0\" topmargin=\"0\" rightmargin=\"0\" marginwidth=\"0\" marginheight=\"0\">\n      <table id=\"table_LoginPage_1\" border=\"0\" width=\"100%\" cellspacing=\"0\" cellpadding=\"3\">\n         <tr>\n            <td bgcolor=\"#FFFFFF\"></td>\n            <td bgcolor=\"#FFFFFF\" align=\"right\">&nbsp;</td>\n         </tr>\n      </table>\n      <table id=\"table_LoginPage_2\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n         <tr>\n            <td bgcolor=\"#000000\" colspan=\"2\"></td>\n         </tr>\n      </table>\n      <blockquote>\n         <form id=\"frmLogin_4\" name=\"frmLogin\" action=\"login.cgi\" method=\"POST\" autocomplete=\"off\" onsubmit=\"return Login(1)\">\n            <input id=\"tz_offset_5\" type=\"hidden\" name=\"tz_offset\">\n            <input id=\"win11\" type=\"hidden\" name=\"win11\" value=\"\">\n            <input id=\"uach\" type=\"hidden\" name=\"uach\" value=\"\">\n            <input id=\"client_mac\" type=\"hidden\" name=\"clientMAC\" value=\"\">\n            <input id=\"xsauth_token\" type=\"hidden\" name=\"xsauth_token\" value=\"58fefe3c1b2717c8845c0d630ab035c3\">\n            <table id=\"table_LoginPage_3\" border=\"0\" cellpadding=\"2\" cellspacing=\"0\">\n               <tr>\n                  <td nowrap  colspan=\"3\"><b>Welcome to</b></td>\n               </tr>\n               <tr>\n                  <td nowrap  colspan=\"3\"><span class=\"cssLarge\"><b>Ivanti Connect Secure</b></span></td>\n               </tr>\n               <tr>\n                  <td colspan=\"3\">&nbsp;</td>\n               </tr>\n               <tr>\n                  <td valign=\"top\">\n                     <table id=\"table_LoginPage_6\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n                        <tr>\n                           <td><label for=\"username\">Username</label></td>\n                           <td>&nbsp;</td>\n                           <td><input id=\"username\" type=\"text\" name=\"username\" size=\"20\"></td>\n                        </tr>\n                        <tr>\n                           <td><label for=\"password\">Password</label></td>\n                           <td>&nbsp;</td>\n                           <td><input id=\"password\" type=\"password\" name=\"password\" size=\"20\"></td>\n                        </tr>\n                        <tr>                                                                <input id=\"realm_16\" type=\"hidden\" name=\"realm\" value=\"OTS User Realm\">                                                </tr>\n                        <tr>\n                           <td colspan=\"3\">&nbsp;</td>\n                        </tr>\n                        <tr>\n                           <td>&nbsp;</td>\n                           <td>&nbsp;</td>\n                           <td><input id=\"btnSubmit_6\" type=\"submit\" value=\"Sign In\" name=\"btnSubmit\">&nbsp;</td>\n                        </tr>\n                     </table>\n                  </td>\n                  <td valign=\"top\">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</td>\n                  <td valign=\"top\">\n                     <table tabindex=\"1\" aria-label=\"instructions for user login page FILTER verbatim\" role=\"alert\" id=\"TABLE_LoginPage_1\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n                        <tr>\n                           <td>\n                              Please sign in to begin your secure session.<br><br>\n                              <noscript>Note: Javascript is disabled on your browser.</noscript>\n                        </tr>\n                        </td>\n                     </table>\n                  </td>\n               </tr>\n            </table>\n         </form>\n      </blockquote>\n      <table id=\"table_LoginPage_9\" border=\"0\" cellspacing=\"0\" cellpadding=\"0\" width=\"100%\">\n         <tr>\n            <td>\n               <table id=\"table_LoginPage_10\" cellpadding=\"0\" cellspacing=\"0\" border=\"0\" width=\"100%\">\n                  <tr>\n                     <td></td>\n                     <td></td>\n                     <td></td>\n                  </tr>\n                  <tr valign=\"top\">\n                     <td></td>\n                     <td nowrap ><br><br><br><br>\n                     <td align=\"right\"></td>\n                  </tr>\n               </table>\n            </td>\n         </tr>\n         <tr>\n            <td colspan=\"2\"></td>\n         </tr>\n      </table>\n   </body>\n</html>\n",
         "datamd5" : "b6d3a241174e5fbb65d88768f526cc4f",
         "datammh3" : 1285816960,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "amazonaws.com",
            "eastpower.us"
         ],
         "fingerprint" : {
            "md5" : "d92440e4a8da6f1d9224fe4e0c00fcf5",
            "sha1" : "94d844585a277f7fcce1d9fe64b4a593281bf334",
            "sha256" : "acc9f2f20328ebcc21d2e653826b98b277057ed8102b0b65b3723e7d0b3727cc"
         },
         "geolocus" : {
            "asn" : "AS14618",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AT-88-Z",
            "organization" : "Amazon Technologies Inc.",
            "subnet" : "34.224.0.0/12"
         },
         "host" : [
            "ec2-34-224-37-72"
         ],
         "hostname" : [
            "ec2-34-224-37-72.compute-1.amazonaws.com"
         ],
         "ip" : "34.224.37.72",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Amazon RSA 2048 M02",
            "country" : "US",
            "organization" : "Amazon"
         },
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-AES",
         "os" : "JunOS",
         "osvendor" : "Juniper",
         "port" : 9404,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "reverse" : [
            "ec2-34-224-37-72.compute-1.amazonaws.com"
         ],
         "seen_date" : "2024-11-19",
         "serial" : "53:bb:ed:bb:54:7d:3e:db:8e:81:cf:fd:f7:57:31:62:16:a8:26:00",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute-1.amazonaws.com"
         ],
         "subject" : {
            "commonname" : "*.eastpower.us"
         },
         "subnet" : "34.224.0.0/12",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "us"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-19T09:24:43Z",
            "notbefore" : "2023-11-20T09:24:43Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }