High-Volume Automated PaperCut Exploitation Sweep (AI-Agent Mass Scanning)

Ibrahim Saud@tektrix

•updated Sep 17, 2026•0•0•3

Detects high-volume HTTP GET requests containing the 'SetupCompleted' URI pattern directed at PaperCut servers, which is indicative of automated exploitation attempts targeting authentication bypass vulnerabilities.