Returning 10 result(s) out of 151,376 in 0.093 second(s)

  • 35.160.17.112:20020 (tcp/http) - last seen on 2024-11-21 at 08:38:06 UTC

    • IP
      35.160.17.112
      Network
      35.160.0.0/13
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://35.160.17.112:20020/ 200

      HTTP Title
      PaperCut Login
      HTTP Description
      PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.
      HTTP Keyword(s)
      print accounting print control print management print quota software
      Reverse DNS
      ec2-35-160-17-112.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      Oracle Java jQuery jQuery 3.5.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6602a320a278b26f544c1f7e9b11bbae
      HTTP Header MD5
      fa25c4eea42a342854fe45cdc0273a72
      HTTP Body MD5
      8c5529452ed2e5ae1d4f29e7345687a7
      Favicon MD5
      2b86aa50c3a66bb77ff07c42cc051dcc
      Favicon MMH3
      -1216248324
    • HTTP/1.1 200 OK
      Connection: close
      Date: Thu, 21 Nov 2024 08:31:24 GMT
      Server: nginx
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1
      Expires: Thu, 01 Jan 1970 00:00:00 UTC
      Cache-Control: no-cache
      Set-Cookie: JSESSIONID=node0wyvn3clj9nbxi2jawz0dcjulv5ddgl8eeztfq4sa.node0; Path=/; Secure; HttpOnly
      Content-Length: 13222
      
      <!DOCTYPE HTML>
      <!-- Application: app-server -->
      <!-- Page: Home -->
      <!-- Generated: Mon Nov 20 12:34:06 EST 2023 -->
      <html lang="en">
      <head>
      <meta http-equiv="Content-Type" content="text/html;charset=UTF-8"/>
      <title>PaperCut Login</title>
      <link rel="shortcut icon" href="/images/icons3/favicon.ico" type="image/vnd.microsoft.icon"/>
      <meta http-equiv="X-UA-Compatible" content="IE=Edge"/>
      <meta name="description" content="PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system."/>
      <meta name="keywords" content="print quota, print control, print management, print accounting, software"/>
      <meta name="viewport" content="width=device-width, initial-scale=0.8"/>
      <link rel="stylesheet" type="text/css" href="/css/style.css?66961papercut-mf" />
      <link rel="stylesheet" type="text/css" href="/css/style-override.css?66961papercut-mf" />
      <link rel="stylesheet" type="text/css" href="/css/refresh.css?66961papercut-mf" />
      <!--[if IE 9]><link rel="stylesheet" type="text/css" href="/css/style-ie9.css?66961papercut-mf" />
      <![endif]-->
      <!--[if IE 8]><link rel="stylesheet" type="text/css" href="/css/style-ie8.css?66961papercut-mf" />
      <![endif]-->
      <!--[if IE 7]><link rel="stylesheet" type="text/css" href="/css/style-ie7.css?66961papercut-mf" />
      <![endif]-->
      <!--[if IE 6]><link rel="stylesheet" type="text/css" href="/css/style-ie6.css?66961papercut-mf" />
      <![endif]-->
      <script type="text/javascript">var CacheParam = "66961papercut-mf";</script>
      <script type="text/javascript" src="/js/jquery/jquery-3.5.1.min.js?66961papercut-mf"></script>
      <script type="text/javascript" src="/js/jquery/jquery-migrate-3.3.1.min.js?66961papercut-mf"></script>
      <script type="text/javascript" src="/js/jquery/config.js?66961papercut-mf"></script>
      <script type="text/javascript" src="/js/lib/underscore/underscore-min.js?66961papercut-mf"></script>
      <script type="text/javascript" src="/js/common.js?66961papercut-mf"></script>
      <script type="text/javascript" src="/js/lib/require.js?66961papercut-mf"></script>
      <script type="text/javascript" src="/js/pages/configure.js?66961papercut-mf"></script>
      <script type="text/javascript" src="/js/refresh.js?66961papercut-mf"></script>
      </head>
      
      <body id="loginBody">
      <script language="JavaScript" type="text/javascript"><!--
      
      window.onload = function ()
      {
      document.Form0.inputUsername.focus();
      document.Form0.inputUsername.select();
      }
      
      // --></script> <div class="wrap">
          <script type="text/javascript">
          insertScript('/js/pages/Home.js');
          insertScript('/js/pages/LoginPages.js');
          </script>
            <svg viewBox="0 0 280.7 198.5" class="pc-shards">
      <polygon points="96.3,136.3 140.4,198.5 162.4,198.5 183.9,130.1 134.9,95.4 "/>
      <polygon points="45,63.6 74.9,53 0,0 "/>
      <polygon points="134.9,95.4 96.3,136.3 45,63.6 74.9,53 "/>
      <polygon points="74.9,53 224.8,0 134.9,95.4 "/>
      <polygon points="224.8,0 183.9,130.1 134.9,95.4 "/>
      <polygon points="224.8,0 224.8,0 224.8,159 183.9,130.1 "/>
      <polygon points="162.4,198.5 224.8,198.5 224.8,159 183.9,130.1 "/>
      <polygon points="37.7,198.5 140.4,198.5 96.3,136.3 "/>
      <polygon points="0,79.5 0,198.5 37.7,198.5 96.3,136.3 45,63.6 "/>
      <polygon points="0,79.5 45,63.6 0,0 "/>
      <polygon points="0,79.5 0,79.5 0,79.5 "/>
      <polygon points="262.3,198.5 280.7,198.5 265.7,187.9 "/>
      <polygon points="224.8,198.5 262.3,198.5 265.7,187.9 224.8,159 "/>
      </svg>
      <form method="post" name="Form0" action="/app" onsubmit="recordLocale()" autocomplete="off">
      <input type="hidden" name="service" value="direct/1/Home/$Form"/>
      <input type="hidden" name="sp" value="S0"/>
      <input type="hidden" name="Form0" value="$Hidden$0,$Hidden$1,inputUsername,inputPassword,$Submit$0,$PropertySelection"/>
      <input type="hidden" name="$Hidden$0" id="javascript-enabled" value="F"/>
      <input type="hidden" name="$Hidden$1" value="X"/>
       <div class="login" role="main">
            <div class="box">
              <table class="box-table" title="Login" role="presentation">
                <tr role="row">
                  <th class="box-nw" aria-label="No value" role="columnheader" scope="col"></th>
                  <th class="box-n" aria-label="No value" role="columnheader" scope="col"></th>
                  <th class="box-ne" aria-label="No value" role="columnheader" scope="col"></th>
                </tr>
                <tr role="row">
                  <td class="box-w"></td>
                  <td class="box-content">
      
                    <div id="login">
       <h1><img alt="PaperCut Logo" src="/custom/login-logo.png?1667504163324" class="logo"></img></h1>
      
       <h1 id="papercut-user-login-title">Log in</h1>
       <table style="margin-bottom:5px;" title="Username and Password" role="presentation">
                              <tbody>
                                <tr role="row">
                                  <th role="rowheader"><label for="inputUsername">Username</label></th>
                                  <td><input type="text" name="inputUsername" autocorrect="off" maxlength="50" aria-describedby="login-feedback-message" style="width: 150px;" id="inputUsername" autocapitalize="off" class="field"/></td>
                                </tr>
                                <tr role="row">
                                  <th role="rowheader"><label for="inputPassword">Password</label></th>
                                  <td><input type="password" name="inputPassword" style="width: 150px;" id="inputPassword" class="field" aria-describedby="login-feedback-message"/></td>
                                </tr>
                              </tbody>
                            </table>
      
      
                          <div id="login-feedback-message">
      
      
      
       </div>
      <input type="submit" name="$Submit$0" value="Log in" class="loginSubmit" aria-describedby="login-feedback-message"/>
      
      
      
      <a href="/app?service=direct/1/Home/oAuth2LoginSuccess" style="display:none" class="btn secondary google">Sign in with Google</a>
      <a href="/app?service=direct/1/Home/oAuth2LoginCancel" style="display:none" class="btn secondary microsoft">Sign in with Microsoft</a>
       <a style="display:block; margin-top: 10px;" id="forgot-link" href="/app?service=external/ForgotLoginDetails">
      Forgot username or password?</a>
      
       </div>
      
      
                  </td>
                  <td class="box-e"></td>
                </tr>
                <tr role="row">
                  <td class="box-sw"></td>
                  <td class="box-s"></td>
                  <td class="box-se"></td>
                </tr>
              </table>
            </div>
       <div class="language-box">
                <p id="language-select-text">Language Select</p>
                <svg width="24" height="24" viewBox="50 1777 24 24" class="global" alt="Globe Language Icon">
                      <path fill="gray" d="M62,1777c-6.627,0-12,5.373-12,12s5.373,12,12,12s12-5.373,12-12S68.627,1777,62,1777z M58.129,1780.116
              c-0.665,0.732-1.359,1.699-1.925,2.94h-1.833C55.355,1781.79,56.643,1780.771,58.129,1780.116z M53.217,1784.957h2.304
              c-0.251,0.918-0.417,1.954-0.481,3.1h-2.664C52.48,1786.959,52.775,1785.918,53.217,1784.957z M53.236,1793.057
              c-0.447-0.96-0.749-2.001-0.859-3.1h2.662c0.064,1.146,0.23,2.182,0.481,3.1H53.236z M54.401,1794.957h1.803
              c0.549,1.204,1.218,2.146,1.865,2.87C56.624,1797.179,55.369,1796.188,54.401,1794.957z M61.05,1798.054
              c-0.541-0.34-1.814-1.283-2.828-3.097h2.828V1798.054z M61.05,1793.057h-3.645c-0.288-0.893-0.493-1.921-0.566-3.1h4.211V1793.057z
               M61.05,1788.057h-4.211c0.073-1.179,0.278-2.207,0.566-3.1h3.645V1788.057z M61.05,1783.057h-2.828
              c1.014-1.813,2.287-2.757,2.828-3.097V1783.057z M70.823,1784.957c0.441,0.961,0.736,2.002,0.842,3.1h-2.704
              c-0.064-1.146-0.23-2.182-0.481-3.1H70.823z M69.669,1783.057h-1.873c-0.574-1.259-1.279-2.237-1.953-2.974
              C67.358,1780.736,68.669,1781.77,69.669,1783.057z M62.95,1779.96c0.541,0.34,1.814,1.283,2.828,3.097H62.95V1779.96z
               M62.95,1784.957h3.645c0.288,0.893,0.493,1.921,0.566,3.1H62.95V1784.957z M62.95,1789.957h4.211
              c-0.073,1.179-0.278,2.207-0.566,3.1H62.95V1789.957z M62.95,1798.055v-3.098h2.828
              C64.764,1796.772,63.488,1797.716,62.95,1798.055z M65.902,1797.86c0.656-0.729,1.337-1.682,1.894-2.903h1.843
              C68.656,1796.208,67.376,1797.213,65.902,1797.86z M70.804,1793.057h-2.324c0.251-0.918,0.417-1.954,0.481-3.1h2.702
              C71.553,1791.056,71.251,1792.097,70.804,1793.057z"/>
                </svg>
      <select name="$PropertySelection" alt="Select language" role="listbox" id="language" aria-label="Select language">
      <option value="en" selected="selected">English</option>
      <option value="ca">catal&#224;</option>
      <option value="zh_CN">&#20013;&#25991; (&#20013;&#22269;)</option>
      <option value="zh_HK">&#20013;&#25991; (&#39321;&#28207;)</option>
      <option value="zh_TW">&#20013;&#25991; (&#21488;&#28771;)</option>
      <option value="hr">hrvatski</option>
      <option value="cs">&#269;e&#353;tina</option>
      <option value="da">Dansk</option>
      <option value="nl">Nederlands</option>
      <option value="fi">suomi</option>
      <option value="fr">fran&#231;ais</option>
      <option value="de">Deutsch</option>
      <option value="iw">&#1506;&#1489;&#1512;&#1497;&#1514;</option>
      <option value="hu">magyar</option>
      <option value="it">italiano</option>
      <option value="ja">&#26085;&#26412;&#35486;</option>
      <option value="ko">&#54620;&#44397;&#50612;</option>
      <option value="lv">Latvie&#353;u</option>
      <option value="lt">Lietuvi&#371;</option>
      <option value="no">norsk</option>
      <option value="pl">polski</option>
      <option value="pt">portugu&#234;s (Brasil)</option>
      <option value="pt_PT">portugu&#234;s (Portugal)</option>
      <option value="ru">&#1088;&#1091;&#1089;&#1089;&#1082;&#1080;&#1081;</option>
      <option value="sr">&#1057;&#1088;&#1087;&#1089;&#1082;&#1080;</option>
      <option value="sk">Sloven&#269;ina</option>
      <option value="sl">Sloven&#353;&#269;ina</option>
      <option value="es">espa&#241;ol</option>
      <option value="es_ES">espa&#241;ol (Espa&#241;a)</option>
      <option value="sv">svenska</option>
      <option value="th_TH">&#3652;&#3607;&#3618; (&#3611;&#3619;&#3632;&#3648;&#3607;&#3624;&#3652;&#3607;&#3618;)</option>
      <option value="tr">T&#252;rk&#231;e</option>
      <option value="cy_GB">Welsh (United Kingdom)</option>
      </select> </div>
       <script>
                  let languageOptions = document.getElementById("language").children;
                  for (let languageOption of languageOptions)
                  {
                      let lang = languageOption.getAttribute("value");
                      if (lang.includes("_")) lang = lang.substr(0, lang.indexOf("_")); // to remove region if specified
                      languageOption.setAttribute("lang", lang);
                  }
              </script>
      <span data-background-uri="/images/login-bg.jpg?66961papercut-mf" data-background-selection="COLOR" data-background-color="#FFFFFF" id="loginCustomization" data-button-color="#01B256" data-forgot-link-text=""></span> <!-- The license has expired!  -->
       </div>
      </form>
      
       <div id="footer" style="position:absolute; bottom: 0px; left: 0px; right: 0px; width: 100%;">
       <div class="product-details">
          <div class="logo"><img src="/images/footer-logo2.png?66961papercut-mf" border="0"/></div>
      
          <div class="text">
      <span class="product"><a href="https://www.papercut.com/products/mf/?clicked=app-footer">PaperCut MF</a></span>
      
       <div>
      Print Management Software</div>
       <!-- analytic purpose -->
      <span class="analytic-license-expiry-date" style="display:none"></span>
      <span class="analytic-product-build-number" style="display:none">66961</span>
      <span class="analytic-product-version" style="display:none">22.1.3</span>
      <span class="analytic-product" style="display:none">PaperCut MF</span>
      <span class="analytic-product-edition" style="display:none">MF</span> <div class="copyright">
              &copy; Copyright 1999-2023. PaperCut Software Pty Ltd. All rights reserved. </div>
          </div>
        </div>
       </div>
       </div>
        <script language="JavaScript" type="text/javascript">
        var oldonload = window.onload;
        if (typeof window.onload != 'function') {
          window.onload = applyLoginCustomization;
        } else {
          window.onload = function () {
            if (oldonload) {
              oldonload();
            }
              applyLoginCustomization();
          }
        }
      
        /*
         Apply login customization
         */
        function applyLoginCustomization() {
            var loginCustomization = $("#loginCustomization");
            if (loginCustomization.attr("data-background-selection") == 'IMAGE') {
                loadBackground(loginCustomization.attr("data-background-uri"));
            } else {
                $('#loginBody').find('.wrap').css('background-color', loginCustomization.attr("data-background-color"))
                        .css('background-image', 'none');
            }
            if (loginCustomization.attr("data-button-color") != "") {
                $('#loginBody input[type="submit"].loginSubmit').removeClass('loginSubmit')
                        .css('background-color', loginCustomization.attr("data-button-color"))
                        .css('border-color', loginCustomization.attr("data-button-color"));
            }
            if (loginCustomization.attr("data-forgot-link-text") != "") {
                $('a#forgot-link').text(loginCustomization.attr("data-forgot-link-text"));
            }
        }
      
        function recordLocale() {
            var languageElement = document.getElementById("language");
            if (languageElement) {
                document.cookie = "ui.locale=" + languageElement.value;
            }
        }
        </script>
      </body>
      </html>
      <!-- Render time: ~ 20 ms -->
      
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:38:06.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "papercut.com"
               ],
               "hostname" : [
                  "www.papercut.com"
               ],
               "url" : [
                  "https://www.papercut.com/products/mf/?clicked=app-footer"
               ]
            },
            "favicon" : {
               "image" : "AAABAAIAEBAQAAAAAAAoAQAAJgAAACAgEAAAAAAA6AIAAE4BAAAoAAAAEAAAACAAAAABAAQAAAAAAIAAAAAAAAAAAAAAABAAAAAQAAAAAAAAAAAAgAAAgAAAAICAAIAAAACAAIAAgIAAAICAgADAwMAAAAD/AAD/AAAA//8A/wAAAP8A/wD//wAA////AAAAAAAAAAAAAABERERERAAABEREREREAABERAAAAAAAAERAAAAAAAAEREAAAAAAAAREREREREQABERERERERAAEREAAAAAAAAREQAAAAAAAAEREAAAAAAAARERAAAAAAAAEREREREQAAAAERERERAAAAAAAAAAAAAAAAAAAAAAA//8AAPADAADgAwAAw/8AAMf/AACH/wAAgAMAAIADAACH/wAAh/8AAMP/AADB/wAA4AMAAPgDAAD//wAA//8AACgAAAAgAAAAQAAAAAEABAAAAAAAAAIAAAAAAAAAAAAAEAAAABAAAAAAAAAAAACAAACAAAAAgIAAgAAAAIAAgACAgAAAgICAAMDAwAAAAP8AAP8AAAD//wD/AAAA/wD/AP//AAD///8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEREREREREREQAAAAAAAAEREREREREREREAAAAAAAERERERERERERERAAAAAAAREREREREREREREQAAAAABEREREREREREREREAAAAAAREREREAAAAAAAAAAAAAABEREREQAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAARERERAAAAAAAAAAAAAAAAEREREQAAAAAAAAAAAAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREREREREREREREAAAABERERERERERERERERAAAAAREREREREREREREREQAAAAEREREQAAAAAAAAAAAAAAAAEREREAAAAAAAAAAAAAAAABEREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREAAAAAAAAAAAAAAAAREREREREREREREQAAAAAAEREREREREREREREAAAAAAAERERERERERERERAAAAAAAAAREREREREREREQAAAAAAAAABEREREREREREAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/////////////////4AAP/4AAD/4AAA/8AAAP+AAAD/gD///wB///8A////Af///gH///4B///+AAAA/gAAAP4AAAD+AAAA/gAAAP4B////Af///wD///8Af///gD///8AAAP/AAAD/4AAA//gAAP/+AAD////////////////w==",
               "imagemd5" : "2b86aa50c3a66bb77ff07c42cc051dcc",
               "imagemmh3" : -1216248324,
               "length" : 1078,
               "url" : "/favicon.ico"
            },
            "http" : {
               "bodymd5" : "8c5529452ed2e5ae1d4f29e7345687a7",
               "bodymmh3" : -856371065,
               "component" : [
                  {
                     "productversion" : "3.5.1",
                     "productvendor" : "jQuery",
                     "product" : "jQuery"
                  },
                  {
                     "productvendor" : "Oracle",
                     "product" : "Java"
                  }
               ],
               "description" : "PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.",
               "headermd5" : "fa25c4eea42a342854fe45cdc0273a72",
               "headermmh3" : 1869438135,
               "keywords" : [
                  "print accounting",
                  "print control",
                  "print management",
                  "print quota",
                  "software"
               ],
               "title" : "PaperCut Login"
            },
            "length" : 13610
         },
         "asn" : "AS16509",
         "city" : "Boardman",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:31:24 GMT\r\nServer: nginx\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1\r\nExpires: Thu, 01 Jan 1970 00:00:00 UTC\r\nCache-Control: no-cache\r\nSet-Cookie: JSESSIONID=node0wyvn3clj9nbxi2jawz0dcjulv5ddgl8eeztfq4sa.node0; Path=/; Secure; HttpOnly\r\nContent-Length: 13222\r\n\r\n<!DOCTYPE HTML>\n<!-- Application: app-server -->\n<!-- Page: Home -->\n<!-- Generated: Mon Nov 20 12:34:06 EST 2023 -->\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html;charset=UTF-8\"/>\n<title>PaperCut Login</title>\n<link rel=\"shortcut icon\" href=\"/images/icons3/favicon.ico\" type=\"image/vnd.microsoft.icon\"/>\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=Edge\"/>\n<meta name=\"description\" content=\"PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.\"/>\n<meta name=\"keywords\" content=\"print quota, print control, print management, print accounting, software\"/>\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=0.8\"/>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style.css?66961papercut-mf\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-override.css?66961papercut-mf\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/refresh.css?66961papercut-mf\" />\n<!--[if IE 9]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie9.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 8]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie8.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 7]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie7.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 6]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie6.css?66961papercut-mf\" />\n<![endif]-->\n<script type=\"text/javascript\">var CacheParam = \"66961papercut-mf\";</script>\n<script type=\"text/javascript\" src=\"/js/jquery/jquery-3.5.1.min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/jquery/jquery-migrate-3.3.1.min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/jquery/config.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/lib/underscore/underscore-min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/common.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/lib/require.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/pages/configure.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/refresh.js?66961papercut-mf\"></script>\n</head>\n\n<body id=\"loginBody\">\n<script language=\"JavaScript\" type=\"text/javascript\"><!--\n\nwindow.onload = function ()\n{\ndocument.Form0.inputUsername.focus();\ndocument.Form0.inputUsername.select();\n}\n\n// --></script> <div class=\"wrap\">\n    <script type=\"text/javascript\">\n    insertScript('/js/pages/Home.js');\n    insertScript('/js/pages/LoginPages.js');\n    </script>\n      <svg viewBox=\"0 0 280.7 198.5\" class=\"pc-shards\">\n<polygon points=\"96.3,136.3 140.4,198.5 162.4,198.5 183.9,130.1 134.9,95.4 \"/>\n<polygon points=\"45,63.6 74.9,53 0,0 \"/>\n<polygon points=\"134.9,95.4 96.3,136.3 45,63.6 74.9,53 \"/>\n<polygon points=\"74.9,53 224.8,0 134.9,95.4 \"/>\n<polygon points=\"224.8,0 183.9,130.1 134.9,95.4 \"/>\n<polygon points=\"224.8,0 224.8,0 224.8,159 183.9,130.1 \"/>\n<polygon points=\"162.4,198.5 224.8,198.5 224.8,159 183.9,130.1 \"/>\n<polygon points=\"37.7,198.5 140.4,198.5 96.3,136.3 \"/>\n<polygon points=\"0,79.5 0,198.5 37.7,198.5 96.3,136.3 45,63.6 \"/>\n<polygon points=\"0,79.5 45,63.6 0,0 \"/>\n<polygon points=\"0,79.5 0,79.5 0,79.5 \"/>\n<polygon points=\"262.3,198.5 280.7,198.5 265.7,187.9 \"/>\n<polygon points=\"224.8,198.5 262.3,198.5 265.7,187.9 224.8,159 \"/>\n</svg>\n<form method=\"post\" name=\"Form0\" action=\"/app\" onsubmit=\"recordLocale()\" autocomplete=\"off\">\n<input type=\"hidden\" name=\"service\" value=\"direct/1/Home/$Form\"/>\n<input type=\"hidden\" name=\"sp\" value=\"S0\"/>\n<input type=\"hidden\" name=\"Form0\" value=\"$Hidden$0,$Hidden$1,inputUsername,inputPassword,$Submit$0,$PropertySelection\"/>\n<input type=\"hidden\" name=\"$Hidden$0\" id=\"javascript-enabled\" value=\"F\"/>\n<input type=\"hidden\" name=\"$Hidden$1\" value=\"X\"/>\n <div class=\"login\" role=\"main\">\n      <div class=\"box\">\n        <table class=\"box-table\" title=\"Login\" role=\"presentation\">\n          <tr role=\"row\">\n            <th class=\"box-nw\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n            <th class=\"box-n\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n            <th class=\"box-ne\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n          </tr>\n          <tr role=\"row\">\n            <td class=\"box-w\"></td>\n            <td class=\"box-content\">\n\n              <div id=\"login\">\n <h1><img alt=\"PaperCut Logo\" src=\"/custom/login-logo.png?1667504163324\" class=\"logo\"></img></h1>\n\n <h1 id=\"papercut-user-login-title\">Log in</h1>\n <table style=\"margin-bottom:5px;\" title=\"Username and Password\" role=\"presentation\">\n                        <tbody>\n                          <tr role=\"row\">\n                            <th role=\"rowheader\"><label for=\"inputUsername\">Username</label></th>\n                            <td><input type=\"text\" name=\"inputUsername\" autocorrect=\"off\" maxlength=\"50\" aria-describedby=\"login-feedback-message\" style=\"width: 150px;\" id=\"inputUsername\" autocapitalize=\"off\" class=\"field\"/></td>\n                          </tr>\n                          <tr role=\"row\">\n                            <th role=\"rowheader\"><label for=\"inputPassword\">Password</label></th>\n                            <td><input type=\"password\" name=\"inputPassword\" style=\"width: 150px;\" id=\"inputPassword\" class=\"field\" aria-describedby=\"login-feedback-message\"/></td>\n                          </tr>\n                        </tbody>\n                      </table>\n\n\n                    <div id=\"login-feedback-message\">\n\n\n\n </div>\n<input type=\"submit\" name=\"$Submit$0\" value=\"Log in\" class=\"loginSubmit\" aria-describedby=\"login-feedback-message\"/>\n\n\n\n<a href=\"/app?service=direct/1/Home/oAuth2LoginSuccess\" style=\"display:none\" class=\"btn secondary google\">Sign in with Google</a>\n<a href=\"/app?service=direct/1/Home/oAuth2LoginCancel\" style=\"display:none\" class=\"btn secondary microsoft\">Sign in with Microsoft</a>\n <a style=\"display:block; margin-top: 10px;\" id=\"forgot-link\" href=\"/app?service=external/ForgotLoginDetails\">\nForgot username or password?</a>\n\n </div>\n\n\n            </td>\n            <td class=\"box-e\"></td>\n          </tr>\n          <tr role=\"row\">\n            <td class=\"box-sw\"></td>\n            <td class=\"box-s\"></td>\n            <td class=\"box-se\"></td>\n          </tr>\n        </table>\n      </div>\n <div class=\"language-box\">\n          <p id=\"language-select-text\">Language Select</p>\n          <svg width=\"24\" height=\"24\" viewBox=\"50 1777 24 24\" class=\"global\" alt=\"Globe Language Icon\">\n                <path fill=\"gray\" d=\"M62,1777c-6.627,0-12,5.373-12,12s5.373,12,12,12s12-5.373,12-12S68.627,1777,62,1777z M58.129,1780.116\n        c-0.665,0.732-1.359,1.699-1.925,2.94h-1.833C55.355,1781.79,56.643,1780.771,58.129,1780.116z M53.217,1784.957h2.304\n        c-0.251,0.918-0.417,1.954-0.481,3.1h-2.664C52.48,1786.959,52.775,1785.918,53.217,1784.957z M53.236,1793.057\n        c-0.447-0.96-0.749-2.001-0.859-3.1h2.662c0.064,1.146,0.23,2.182,0.481,3.1H53.236z M54.401,1794.957h1.803\n        c0.549,1.204,1.218,2.146,1.865,2.87C56.624,1797.179,55.369,1796.188,54.401,1794.957z M61.05,1798.054\n        c-0.541-0.34-1.814-1.283-2.828-3.097h2.828V1798.054z M61.05,1793.057h-3.645c-0.288-0.893-0.493-1.921-0.566-3.1h4.211V1793.057z\n         M61.05,1788.057h-4.211c0.073-1.179,0.278-2.207,0.566-3.1h3.645V1788.057z M61.05,1783.057h-2.828\n        c1.014-1.813,2.287-2.757,2.828-3.097V1783.057z M70.823,1784.957c0.441,0.961,0.736,2.002,0.842,3.1h-2.704\n        c-0.064-1.146-0.23-2.182-0.481-3.1H70.823z M69.669,1783.057h-1.873c-0.574-1.259-1.279-2.237-1.953-2.974\n        C67.358,1780.736,68.669,1781.77,69.669,1783.057z M62.95,1779.96c0.541,0.34,1.814,1.283,2.828,3.097H62.95V1779.96z\n         M62.95,1784.957h3.645c0.288,0.893,0.493,1.921,0.566,3.1H62.95V1784.957z M62.95,1789.957h4.211\n        c-0.073,1.179-0.278,2.207-0.566,3.1H62.95V1789.957z M62.95,1798.055v-3.098h2.828\n        C64.764,1796.772,63.488,1797.716,62.95,1798.055z M65.902,1797.86c0.656-0.729,1.337-1.682,1.894-2.903h1.843\n        C68.656,1796.208,67.376,1797.213,65.902,1797.86z M70.804,1793.057h-2.324c0.251-0.918,0.417-1.954,0.481-3.1h2.702\n        C71.553,1791.056,71.251,1792.097,70.804,1793.057z\"/>\n          </svg>\n<select name=\"$PropertySelection\" alt=\"Select language\" role=\"listbox\" id=\"language\" aria-label=\"Select language\">\n<option value=\"en\" selected=\"selected\">English</option>\n<option value=\"ca\">catal&#224;</option>\n<option value=\"zh_CN\">&#20013;&#25991; (&#20013;&#22269;)</option>\n<option value=\"zh_HK\">&#20013;&#25991; (&#39321;&#28207;)</option>\n<option value=\"zh_TW\">&#20013;&#25991; (&#21488;&#28771;)</option>\n<option value=\"hr\">hrvatski</option>\n<option value=\"cs\">&#269;e&#353;tina</option>\n<option value=\"da\">Dansk</option>\n<option value=\"nl\">Nederlands</option>\n<option value=\"fi\">suomi</option>\n<option value=\"fr\">fran&#231;ais</option>\n<option value=\"de\">Deutsch</option>\n<option value=\"iw\">&#1506;&#1489;&#1512;&#1497;&#1514;</option>\n<option value=\"hu\">magyar</option>\n<option value=\"it\">italiano</option>\n<option value=\"ja\">&#26085;&#26412;&#35486;</option>\n<option value=\"ko\">&#54620;&#44397;&#50612;</option>\n<option value=\"lv\">Latvie&#353;u</option>\n<option value=\"lt\">Lietuvi&#371;</option>\n<option value=\"no\">norsk</option>\n<option value=\"pl\">polski</option>\n<option value=\"pt\">portugu&#234;s (Brasil)</option>\n<option value=\"pt_PT\">portugu&#234;s (Portugal)</option>\n<option value=\"ru\">&#1088;&#1091;&#1089;&#1089;&#1082;&#1080;&#1081;</option>\n<option value=\"sr\">&#1057;&#1088;&#1087;&#1089;&#1082;&#1080;</option>\n<option value=\"sk\">Sloven&#269;ina</option>\n<option value=\"sl\">Sloven&#353;&#269;ina</option>\n<option value=\"es\">espa&#241;ol</option>\n<option value=\"es_ES\">espa&#241;ol (Espa&#241;a)</option>\n<option value=\"sv\">svenska</option>\n<option value=\"th_TH\">&#3652;&#3607;&#3618; (&#3611;&#3619;&#3632;&#3648;&#3607;&#3624;&#3652;&#3607;&#3618;)</option>\n<option value=\"tr\">T&#252;rk&#231;e</option>\n<option value=\"cy_GB\">Welsh (United Kingdom)</option>\n</select> </div>\n <script>\n            let languageOptions = document.getElementById(\"language\").children;\n            for (let languageOption of languageOptions)\n            {\n                let lang = languageOption.getAttribute(\"value\");\n                if (lang.includes(\"_\")) lang = lang.substr(0, lang.indexOf(\"_\")); // to remove region if specified\n                languageOption.setAttribute(\"lang\", lang);\n            }\n        </script>\n<span data-background-uri=\"/images/login-bg.jpg?66961papercut-mf\" data-background-selection=\"COLOR\" data-background-color=\"#FFFFFF\" id=\"loginCustomization\" data-button-color=\"#01B256\" data-forgot-link-text=\"\"></span> <!-- The license has expired!  -->\n </div>\n</form>\n\n <div id=\"footer\" style=\"position:absolute; bottom: 0px; left: 0px; right: 0px; width: 100%;\">\n <div class=\"product-details\">\n    <div class=\"logo\"><img src=\"/images/footer-logo2.png?66961papercut-mf\" border=\"0\"/></div>\n\n    <div class=\"text\">\n<span class=\"product\"><a href=\"https://www.papercut.com/products/mf/?clicked=app-footer\">PaperCut MF</a></span>\n\n <div>\nPrint Management Software</div>\n <!-- analytic purpose -->\n<span class=\"analytic-license-expiry-date\" style=\"display:none\"></span>\n<span class=\"analytic-product-build-number\" style=\"display:none\">66961</span>\n<span class=\"analytic-product-version\" style=\"display:none\">22.1.3</span>\n<span class=\"analytic-product\" style=\"display:none\">PaperCut MF</span>\n<span class=\"analytic-product-edition\" style=\"display:none\">MF</span> <div class=\"copyright\">\n        &copy; Copyright 1999-2023. PaperCut Software Pty Ltd. All rights reserved. </div>\n    </div>\n  </div>\n </div>\n </div>\n  <script language=\"JavaScript\" type=\"text/javascript\">\n  var oldonload = window.onload;\n  if (typeof window.onload != 'function') {\n    window.onload = applyLoginCustomization;\n  } else {\n    window.onload = function () {\n      if (oldonload) {\n        oldonload();\n      }\n        applyLoginCustomization();\n    }\n  }\n\n  /*\n   Apply login customization\n   */\n  function applyLoginCustomization() {\n      var loginCustomization = $(\"#loginCustomization\");\n      if (loginCustomization.attr(\"data-background-selection\") == 'IMAGE') {\n          loadBackground(loginCustomization.attr(\"data-background-uri\"));\n      } else {\n          $('#loginBody').find('.wrap').css('background-color', loginCustomization.attr(\"data-background-color\"))\n                  .css('background-image', 'none');\n      }\n      if (loginCustomization.attr(\"data-button-color\") != \"\") {\n          $('#loginBody input[type=\"submit\"].loginSubmit').removeClass('loginSubmit')\n                  .css('background-color', loginCustomization.attr(\"data-button-color\"))\n                  .css('border-color', loginCustomization.attr(\"data-button-color\"));\n      }\n      if (loginCustomization.attr(\"data-forgot-link-text\") != \"\") {\n          $('a#forgot-link').text(loginCustomization.attr(\"data-forgot-link-text\"));\n      }\n  }\n\n  function recordLocale() {\n      var languageElement = document.getElementById(\"language\");\n      if (languageElement) {\n          document.cookie = \"ui.locale=\" + languageElement.value;\n      }\n  }\n  </script>\n</body>\n</html>\n<!-- Render time: ~ 20 ms -->\n\n\n",
         "datamd5" : "6602a320a278b26f544c1f7e9b11bbae",
         "datammh3" : 1404482669,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "amazonaws.com"
         ],
         "geolocus" : {
            "asn" : "AS16509",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "amazon.com",
               "amazonaws.com",
               "aws.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "AMAZO-ZPDX9",
            "organization" : "Amazon.com, Inc.",
            "subnet" : "35.160.0.0/13"
         },
         "host" : [
            "ec2-35-160-17-112"
         ],
         "hostname" : [
            "ec2-35-160-17-112.us-west-2.compute.amazonaws.com"
         ],
         "ip" : "35.160.17.112",
         "ipv6" : "false",
         "latitude" : "45.8491",
         "location" : "45.8491,-119.7143",
         "longitude" : "-119.7143",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AMAZON-02",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 20020,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "ec2-35-160-17-112.us-west-2.compute.amazonaws.com"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "compute.amazonaws.com",
            "us-west-2.compute.amazonaws.com"
         ],
         "subnet" : "35.160.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 165.227.52.39:20020 (tcp/http) - last seen on 2024-11-21 at 08:33:24 UTC

    • IP
      165.227.52.39
      Network
      165.227.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://165.227.52.39:20020/ 302

      ASN
      AS14061
      Organization
      DIGITALOCEAN-ASN
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      341fd5ab2cce0237326bc15a9b7aab45
      HTTP Header MD5
      6b50a0488467a885a1bd558366cbab8a
      HTTP Body MD5
      3218944e20292790b2ed64ac41474ce1
    • HTTP/1.1 302
      Cache-Control: private
      Content-Type: text/html; charset=utf-8
      Vary: Accept-Encoding
      Content-Length: 14
      Location: https://cn.bing.com/
      
      redirecting...
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:24.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "bing.com"
               ],
               "hostname" : [
                  "cn.bing.com"
               ],
               "url" : [
                  "https://cn.bing.com/"
               ]
            },
            "http" : {
               "bodymd5" : "3218944e20292790b2ed64ac41474ce1",
               "bodymmh3" : 1296173098,
               "headermd5" : "6b50a0488467a885a1bd558366cbab8a",
               "headermmh3" : -161532005
            },
            "length" : 169
         },
         "asn" : "AS14061",
         "city" : "Santa Clara",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nVary: Accept-Encoding\r\nContent-Length: 14\r\nLocation: https://cn.bing.com/\r\n\r\nredirecting...",
         "datamd5" : "341fd5ab2cce0237326bc15a9b7aab45",
         "datammh3" : -187365216,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS14061",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "digitalocean.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "DIGITALOCEAN-165-227-0-0",
            "organization" : "DigitalOcean, LLC",
            "subnet" : "165.227.48.0/20"
         },
         "ip" : "165.227.52.39",
         "ipv6" : "false",
         "latitude" : "37.3417",
         "location" : "37.3417,-121.9753",
         "longitude" : "-121.9753",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "DIGITALOCEAN-ASN",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 20020,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Cache-Control: private",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "165.227.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 213.176.55.43:20020 (tcp/http) - last seen on 2024-11-21 at 08:33:16 UTC

    • IP
      213.176.55.43
      Network
      213.176.32.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://213.176.55.43:20020/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS142578
      Organization
      E-Large HongKong
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3b40fcd13ec4c48698cf15e0d2ba5977
      HTTP Header MD5
      7de09592d0cc3062011d73fa292680b0
      HTTP Body MD5
      77bd43987adf27926b335fbe22b67813
    • HTTP/1.1 400 Bad Request
      Server: WAF
      Date: Thu, 21 Nov 2024 08:33:16 GMT
      Content-Type: text/html
      Content-Length: 262
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>WAF</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:33:16.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "77bd43987adf27926b335fbe22b67813",
               "bodymmh3" : -2135056736,
               "headermd5" : "7de09592d0cc3062011d73fa292680b0",
               "headermmh3" : 760745987,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 405
         },
         "asn" : "AS142578",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: WAF\r\nDate: Thu, 21 Nov 2024 08:33:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 262\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>WAF</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3b40fcd13ec4c48698cf15e0d2ba5977",
         "datammh3" : 401141661,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS35372",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "IR",
            "countryname" : "Iran",
            "domain" : [
               "irost.org"
            ],
            "isineu" : "false",
            "latitude" : "32.427908",
            "location" : "32.427908,53.688046",
            "longitude" : "53.688046",
            "netname" : "IR-IROST-19991208",
            "organization" : "Iranian Research Organization for Science & Technology",
            "subnet" : "213.176.0.0/17"
         },
         "ip" : "213.176.55.43",
         "ipv6" : "false",
         "latitude" : "34.0544",
         "location" : "34.0544,-118.2440",
         "longitude" : "-118.2440",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "E-Large HongKong",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 20020,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "213.176.32.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 213.176.49.227:20020 (tcp/http) - last seen on 2024-11-21 at 08:32:29 UTC

    • IP
      213.176.49.227
      Network
      213.176.32.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://213.176.49.227:20020/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS142578
      Organization
      E-Large HongKong
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3b40fcd13ec4c48698cf15e0d2ba5977
      HTTP Header MD5
      7de09592d0cc3062011d73fa292680b0
      HTTP Body MD5
      77bd43987adf27926b335fbe22b67813
    • HTTP/1.1 400 Bad Request
      Server: WAF
      Date: Thu, 21 Nov 2024 08:32:29 GMT
      Content-Type: text/html
      Content-Length: 262
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>WAF</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:32:29.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "77bd43987adf27926b335fbe22b67813",
               "bodymmh3" : -2135056736,
               "headermd5" : "7de09592d0cc3062011d73fa292680b0",
               "headermmh3" : 1894896740,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 405
         },
         "asn" : "AS142578",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: WAF\r\nDate: Thu, 21 Nov 2024 08:32:29 GMT\r\nContent-Type: text/html\r\nContent-Length: 262\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>WAF</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3b40fcd13ec4c48698cf15e0d2ba5977",
         "datammh3" : 401141661,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS35372",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "IR",
            "countryname" : "Iran",
            "domain" : [
               "irost.org"
            ],
            "isineu" : "false",
            "latitude" : "32.427908",
            "location" : "32.427908,53.688046",
            "longitude" : "53.688046",
            "netname" : "IR-IROST-19991208",
            "organization" : "Iranian Research Organization for Science & Technology",
            "subnet" : "213.176.0.0/17"
         },
         "ip" : "213.176.49.227",
         "ipv6" : "false",
         "latitude" : "34.0544",
         "location" : "34.0544,-118.2440",
         "longitude" : "-118.2440",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "E-Large HongKong",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 20020,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "213.176.32.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 140.150.3.96:20020 (tcp/http) - last seen on 2024-11-21 at 08:32:28 UTC

    • IP
      140.150.3.96
      Network
      140.150.2.0/23
      Device

      <enterprise field>: device.class

      URL

      http://140.150.3.96:20020/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8d766195834c20e139fe5cc29a2f2afe
      HTTP Header MD5
      6eebdd0ccfd74b7958a1071b2fc74ae1
      HTTP Body MD5
      8d4643385fd986f0eaa01d93332aa0be
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 08:32:28 GMT
      Content-Type: text/html
      Content-Length: 2425
      Connection: close
      x-ws-request-id: 673ef01c_PS-KIX-01UU5174_40213-44552
      
      <!DOCTYPE html>
      <html>
      	<head>
      		<meta charset="utf-8">
      		<meta http-equiv="X-UA-Compatible" content="IE=edge">
      		<meta name="viewport" content="width=device-width, initial-scale=1">
      		<title>400 Bad Request</title>
      		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
      	</head>
      	<body>
      		<div id="p" class="P">
      			<div class="K">400</div>
      			<div class="O I">Bad Request</div>
      			<p class="J A L">Error Times: Thu, 21 Nov 2024 08:32:28 GMT
      				<br>
      				<span class="F">IP: <srcip></span>Node information: PS-KIX-01UU5174
      				<br>URL: http://<ip>:20020/
      				<br>Request-Id: 673ef01c_PS-KIX-01UU5174_40213-44552
      				<br>
      				<br>Check:
      				<span class="C G" onclick="s(0)">Details</span></p>
      		</div>
      		<div id="d" class="hide_me P H">
      			<div class="K">ERROR</div>
      			<p class="O I">"The Requested URL could not be retrieved</p>
      			<div class="O">
      				<div>While trying to retrieve the URL:</div>
      				<pre class="B G">http://<ip>:20020/</pre></div>
      			<div class="M">
      				<span>The following error was encountered:</span>
      				<ul class="E">
      					<li class="D G">Invalid Request</li></ul>
      			</div>
      			<div class="M">
      				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
      				<ul class="E G">
      					<li class="D">Missing or unknown request method</li>
      					<li class="D">Missing URL</li>
      					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
      					<li class="D">Request is too large</li>
      					<li class="D">Content-Length missing for POST or PUT requests</li>
      					<li class="D">Illegal character in hostname;underscores are not allowed</li>
      					<li class="D">Range Invalid</li></ul>
      			</div>
      			<a class="N C" href="#" onclick="s(1)">return</a></div>
      		<script type="text/javascript">function e(i) {
      				return document.getElementById(i);
      			}
      			function d(i, t) {
      				e(i).style.display = (t ? 'block': 'none');
      			}
      			function s(e) {
      				d('p', e);
      				d('d', !e);
      			}</script>
      	</body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:32:28.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "8d4643385fd986f0eaa01d93332aa0be",
               "bodymmh3" : 777283359,
               "headermd5" : "6eebdd0ccfd74b7958a1071b2fc74ae1",
               "headermmh3" : -272030432,
               "title" : "400 Bad Request"
            },
            "length" : 2604
         },
         "asn" : "AS54994",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:32:28 GMT\r\nContent-Type: text/html\r\nContent-Length: 2425\r\nConnection: close\r\nx-ws-request-id: 673ef01c_PS-KIX-01UU5174_40213-44552\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 21 Nov 2024 08:32:28 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-KIX-01UU5174\n\t\t\t\t<br>URL: http://<ip>:20020/\n\t\t\t\t<br>Request-Id: 673ef01c_PS-KIX-01UU5174_40213-44552\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:20020/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
         "datamd5" : "8d766195834c20e139fe5cc29a2f2afe",
         "datammh3" : -1675193025,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "SE",
            "countryname" : "Sweden",
            "isineu" : "true",
            "latitude" : "60.128161",
            "location" : "60.128161,18.643501",
            "longitude" : "18.643501",
            "netname" : "FUJITSU-SE",
            "organization" : "Fujitsu Sweden AB",
            "subnet" : "140.150.0.0/19"
         },
         "ip" : "140.150.3.96",
         "ipv6" : "false",
         "latitude" : "43.6319",
         "location" : "43.6319,-79.3716",
         "longitude" : "-79.3716",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 20020,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "140.150.2.0/23",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 43.174.69.139:20020 (tcp/http) - last seen on 2024-11-21 at 08:32:27 UTC

    • IP
      43.174.69.139
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://43.174.69.139:20020/ 400

      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8a5df5b6b18ab77f1c1de5c8eef9f397
      HTTP Header MD5
      30417aa652668a290deefbe31cf779df
      HTTP Body MD5
      0a077687c365f2dab7fb2f0aff27ace4
    • HTTP/1.1 400 Bad Request
      Connection: close
      Content-Length: 45
      Server: Lego Server
      Date: Thu, 21 Nov 2024 08:32:26 GMT
      
      The plain http request was sent to https port
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:32:27.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "0a077687c365f2dab7fb2f0aff27ace4",
               "bodymmh3" : 1839588108,
               "headermd5" : "30417aa652668a290deefbe31cf779df",
               "headermmh3" : -956506145
            },
            "length" : 170
         },
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nConnection: close\r\nContent-Length: 45\r\nServer: Lego Server\r\nDate: Thu, 21 Nov 2024 08:32:26 GMT\r\n\r\nThe plain http request was sent to https port",
         "datamd5" : "8a5df5b6b18ab77f1c1de5c8eef9f397",
         "datammh3" : 237765335,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS139341",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "SG",
            "countryname" : "Singapore",
            "domain" : [
               "gmail.com",
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "1.352083",
            "location" : "1.352083,103.819836",
            "longitude" : "103.819836",
            "netname" : "ACEVILLEPTELTD-SG",
            "organization" : "ACEVILLE PTE.LTD.",
            "subnet" : "43.174.0.0/16"
         },
         "ip" : "43.174.69.139",
         "ipv6" : "false",
         "latitude" : "1.3673",
         "location" : "1.3673,103.8014",
         "longitude" : "103.8014",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 20020,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 213.176.101.142:20020 (tcp/http) - last seen on 2024-11-21 at 08:32:18 UTC

    • IP
      213.176.101.142
      Network
      213.176.96.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://213.176.101.142:20020/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS142578
      Organization
      E-Large HongKong
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3b40fcd13ec4c48698cf15e0d2ba5977
      HTTP Header MD5
      7de09592d0cc3062011d73fa292680b0
      HTTP Body MD5
      77bd43987adf27926b335fbe22b67813
    • HTTP/1.1 400 Bad Request
      Server: WAF
      Date: Thu, 21 Nov 2024 08:32:18 GMT
      Content-Type: text/html
      Content-Length: 262
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>WAF</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:32:18.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "77bd43987adf27926b335fbe22b67813",
               "bodymmh3" : -2135056736,
               "headermd5" : "7de09592d0cc3062011d73fa292680b0",
               "headermmh3" : -934321924,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 405
         },
         "asn" : "AS142578",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: WAF\r\nDate: Thu, 21 Nov 2024 08:32:18 GMT\r\nContent-Type: text/html\r\nContent-Length: 262\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>WAF</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3b40fcd13ec4c48698cf15e0d2ba5977",
         "datammh3" : 401141661,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS35372",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "IR",
            "countryname" : "Iran",
            "domain" : [
               "irost.org"
            ],
            "isineu" : "false",
            "latitude" : "32.427908",
            "location" : "32.427908,53.688046",
            "longitude" : "53.688046",
            "netname" : "IR-IROST-19991208",
            "organization" : "Iranian Research Organization for Science & Technology",
            "subnet" : "213.176.0.0/17"
         },
         "ip" : "213.176.101.142",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "E-Large HongKong",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 20020,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "213.176.96.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 61.110.222.69:20020 (tcp/http) - last seen on 2024-11-21 at 08:32:17 UTC

    • IP
      61.110.222.69
      Network
      61.110.220.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://61.110.222.69:20020/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      742f51bd67b82e71b2da7698d7e35760
      HTTP Header MD5
      77b327782567e66e23b10d0e217725bc
      HTTP Body MD5
      a344c7067eabbee5ccfc9532ac9969a5
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 08:32:17 GMT
      Content-Type: text/html
      Content-Length: 2425
      Connection: close
      x-ws-request-id: 673ef011_VM-MXP-01JTu31_22883-36852
      
      <!DOCTYPE html>
      <html>
      	<head>
      		<meta charset="utf-8">
      		<meta http-equiv="X-UA-Compatible" content="IE=edge">
      		<meta name="viewport" content="width=device-width, initial-scale=1">
      		<title>400 Bad Request</title>
      		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
      	</head>
      	<body>
      		<div id="p" class="P">
      			<div class="K">400</div>
      			<div class="O I">Bad Request</div>
      			<p class="J A L">Error Times: Thu, 21 Nov 2024 08:32:17 GMT
      				<br>
      				<span class="F">IP: <srcip></span>Node information: VM-MXP-01JTu31
      				<br>URL: http://<ip>:20020/
      				<br>Request-Id: 673ef011_VM-MXP-01JTu31_22883-36852
      				<br>
      				<br>Check:
      				<span class="C G" onclick="s(0)">Details</span></p>
      		</div>
      		<div id="d" class="hide_me P H">
      			<div class="K">ERROR</div>
      			<p class="O I">"The Requested URL could not be retrieved</p>
      			<div class="O">
      				<div>While trying to retrieve the URL:</div>
      				<pre class="B G">http://<ip>:20020/</pre></div>
      			<div class="M">
      				<span>The following error was encountered:</span>
      				<ul class="E">
      					<li class="D G">Invalid Request</li></ul>
      			</div>
      			<div class="M">
      				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
      				<ul class="E G">
      					<li class="D">Missing or unknown request method</li>
      					<li class="D">Missing URL</li>
      					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
      					<li class="D">Request is too large</li>
      					<li class="D">Content-Length missing for POST or PUT requests</li>
      					<li class="D">Illegal character in hostname;underscores are not allowed</li>
      					<li class="D">Range Invalid</li></ul>
      			</div>
      			<a class="N C" href="#" onclick="s(1)">return</a></div>
      		<script type="text/javascript">function e(i) {
      				return document.getElementById(i);
      			}
      			function d(i, t) {
      				e(i).style.display = (t ? 'block': 'none');
      			}
      			function s(e) {
      				d('p', e);
      				d('d', !e);
      			}</script>
      	</body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:32:17.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "a344c7067eabbee5ccfc9532ac9969a5",
               "bodymmh3" : -1402138511,
               "headermd5" : "77b327782567e66e23b10d0e217725bc",
               "headermmh3" : -893147013,
               "title" : "400 Bad Request"
            },
            "length" : 2601
         },
         "asn" : "AS54994",
         "city" : "Osaka",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:32:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 2425\r\nConnection: close\r\nx-ws-request-id: 673ef011_VM-MXP-01JTu31_22883-36852\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 21 Nov 2024 08:32:17 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: VM-MXP-01JTu31\n\t\t\t\t<br>URL: http://<ip>:20020/\n\t\t\t\t<br>Request-Id: 673ef011_VM-MXP-01JTu31_22883-36852\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:20020/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
         "datamd5" : "742f51bd67b82e71b2da7698d7e35760",
         "datammh3" : -518508439,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "cdnetworks.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "CDNETWORKS",
            "organization" : "CDNetworks",
            "subnet" : "61.110.220.0/22"
         },
         "ip" : "61.110.222.69",
         "ipv6" : "false",
         "latitude" : "34.6946",
         "location" : "34.6946,135.5021",
         "longitude" : "135.5021",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 20020,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "61.110.220.0/22",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 91.246.179.145:20020 (tcp/http) - last seen on 2024-11-21 at 08:32:05 UTC

    • IP
      91.246.179.145
      Network
      91.246.176.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://91.246.179.145:20020/ 400

      HTTP Title
      ERROR: The requested URL could not be retrieved
      ASN
      AS3320
      Organization
      Deutsche Telekom AG
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      HTTP Component(s)
      squid-cache Squid
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c4f733df32190e79689a9fbb4bd247e6
      HTTP Header MD5
      d3c5d670aee21952f2f4e12e71f5413a
      HTTP Body MD5
      8f2866822cdd264c174ebc7ebeac5d21
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 08:32:05 GMT
      Content-Type: text/html;charset=utf-8
      Content-Length: 3505
      Content-Language: en
      Connection: close
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
      <html><head>
      <meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      <title>ERROR: The requested URL could not be retrieved</title>
      <style type="text/css"><!-- 
       /*
       * Copyright (C) 1996-2020 The Squid Software Foundation and contributors
       *
       * Squid software is distributed under GPLv2+ license and includes
       * contributions from numerous individuals and organizations.
       * Please see the COPYING and CONTRIBUTORS files for details.
       */
      
      /*
       Stylesheet for Squid Error pages
       Adapted from design by Free CSS Templates
       http://www.freecsstemplates.org
       Released for free under a Creative Commons Attribution 2.5 License
      */
      
      /* Page basics */
      * {
      	font-family: verdana, sans-serif;
      }
      
      html body {
      	margin: 0;
      	padding: 0;
      	background: #efefef;
      	font-size: 12px;
      	color: #1e1e1e;
      }
      
      /* Page displayed title area */
      #titles {
      	margin-left: 15px;
      	padding: 10px;
      	padding-left: 100px;
      	background: url('/squid-internal-static/icons/SN.png') no-repeat left;
      }
      
      /* initial title */
      #titles h1 {
      	color: #000000;
      }
      #titles h2 {
      	color: #000000;
      }
      
      /* special event: FTP success page titles */
      #titles ftpsuccess {
      	background-color:#00ff00;
      	width:100%;
      }
      
      /* Page displayed body content area */
      #content {
      	padding: 10px;
      	background: #ffffff;
      }
      
      /* General text */
      p {
      }
      
      /* error brief description */
      #error p {
      }
      
      /* some data which may have caused the problem */
      #data {
      }
      
      /* the error message received from the system or other software */
      #sysmsg {
      }
      
      pre {
      }
      
      /* special event: FTP / Gopher directory listing */
      #dirmsg {
          font-family: courier, monospace;
          color: black;
          font-size: 10pt;
      }
      #dirlisting {
          margin-left: 2%;
          margin-right: 2%;
      }
      #dirlisting tr.entry td.icon,td.filename,td.size,td.date {
          border-bottom: groove;
      }
      #dirlisting td.size {
          width: 50px;
          text-align: right;
          padding-right: 5px;
      }
      
      /* horizontal lines */
      hr {
      	margin: 0;
      }
      
      /* page displayed footer area */
      #footer {
      	font-size: 9px;
      	padding-left: 10px;
      }
      
      
      body
      :lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }
      :lang(he) { direction: rtl; }
       --></style>
      </head><body id=ERR_INVALID_URL>
      <div id="titles">
      <h1>ERROR</h1>
      <h2>The requested URL could not be retrieved</h2>
      </div>
      <hr>
      
      <div id="content">
      <p>The following error was encountered while trying to retrieve the URL: <a href="/">/</a></p>
      
      <blockquote id="error">
      <p><b>Invalid URL</b></p>
      </blockquote>
      
      <p>Some aspect of the requested URL is incorrect.</p>
      
      <p>Some possible problems are:</p>
      <ul>
      <li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li>
      <li><p>Missing hostname</p></li>
      <li><p>Illegal double-escape in the URL-Path</p></li>
      <li><p>Illegal character in hostname; underscores are not allowed.</p></li>
      </ul>
      
      <p>Your cache administrator is <a href="mailto:webmaster?subject=CacheErrorInfo%20-%20ERR_INVALID_URL&amp;body=CacheHost%3A%20dtag-isp%0D%0AErrPage%3A%20ERR_INVALID_URL%0D%0AErr%3A%20%5Bnone%5D%0D%0ATimeStamp%3A%20Thu,%2021%20Nov%202024%2008%3A32%3A05%20GMT%0D%0A%0D%0AClientIP%3A%20<srcip>%0D%0A%0D%0AHTTP%20Request%3A%0D%0A%0D%0A%0D%0A">webmaster</a>.</p>
      <br>
      </div>
      
      <hr>
      <div id="footer">
      <p>Generated Thu, 21 Nov 2024 08:32:05 GMT by dtag-isp (squid/4.10)</p>
      <!-- ERR_INVALID_URL -->
      </div>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:32:05.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "freecsstemplates.org",
                  "w3.org"
               ],
               "hostname" : [
                  "www.freecsstemplates.org",
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.freecsstemplates.org",
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "8f2866822cdd264c174ebc7ebeac5d21",
               "bodymmh3" : 2104810075,
               "component" : [
                  {
                     "product" : "Squid",
                     "productvendor" : "squid-cache"
                  }
               ],
               "headermd5" : "d3c5d670aee21952f2f4e12e71f5413a",
               "headermmh3" : -1506227738,
               "title" : "ERROR: The requested URL could not be retrieved"
            },
            "length" : 3665
         },
         "asn" : "AS3320",
         "city" : "Ashburn",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 08:32:05 GMT\r\nContent-Type: text/html;charset=utf-8\r\nContent-Length: 3505\r\nContent-Language: en\r\nConnection: close\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<meta type=\"copyright\" content=\"Copyright (C) 1996-2020 The Squid Software Foundation and contributors\">\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\n<title>ERROR: The requested URL could not be retrieved</title>\n<style type=\"text/css\"><!-- \n /*\n * Copyright (C) 1996-2020 The Squid Software Foundation and contributors\n *\n * Squid software is distributed under GPLv2+ license and includes\n * contributions from numerous individuals and organizations.\n * Please see the COPYING and CONTRIBUTORS files for details.\n */\n\n/*\n Stylesheet for Squid Error pages\n Adapted from design by Free CSS Templates\n http://www.freecsstemplates.org\n Released for free under a Creative Commons Attribution 2.5 License\n*/\n\n/* Page basics */\n* {\n\tfont-family: verdana, sans-serif;\n}\n\nhtml body {\n\tmargin: 0;\n\tpadding: 0;\n\tbackground: #efefef;\n\tfont-size: 12px;\n\tcolor: #1e1e1e;\n}\n\n/* Page displayed title area */\n#titles {\n\tmargin-left: 15px;\n\tpadding: 10px;\n\tpadding-left: 100px;\n\tbackground: url('/squid-internal-static/icons/SN.png') no-repeat left;\n}\n\n/* initial title */\n#titles h1 {\n\tcolor: #000000;\n}\n#titles h2 {\n\tcolor: #000000;\n}\n\n/* special event: FTP success page titles */\n#titles ftpsuccess {\n\tbackground-color:#00ff00;\n\twidth:100%;\n}\n\n/* Page displayed body content area */\n#content {\n\tpadding: 10px;\n\tbackground: #ffffff;\n}\n\n/* General text */\np {\n}\n\n/* error brief description */\n#error p {\n}\n\n/* some data which may have caused the problem */\n#data {\n}\n\n/* the error message received from the system or other software */\n#sysmsg {\n}\n\npre {\n}\n\n/* special event: FTP / Gopher directory listing */\n#dirmsg {\n    font-family: courier, monospace;\n    color: black;\n    font-size: 10pt;\n}\n#dirlisting {\n    margin-left: 2%;\n    margin-right: 2%;\n}\n#dirlisting tr.entry td.icon,td.filename,td.size,td.date {\n    border-bottom: groove;\n}\n#dirlisting td.size {\n    width: 50px;\n    text-align: right;\n    padding-right: 5px;\n}\n\n/* horizontal lines */\nhr {\n\tmargin: 0;\n}\n\n/* page displayed footer area */\n#footer {\n\tfont-size: 9px;\n\tpadding-left: 10px;\n}\n\n\nbody\n:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }\n:lang(he) { direction: rtl; }\n --></style>\n</head><body id=ERR_INVALID_URL>\n<div id=\"titles\">\n<h1>ERROR</h1>\n<h2>The requested URL could not be retrieved</h2>\n</div>\n<hr>\n\n<div id=\"content\">\n<p>The following error was encountered while trying to retrieve the URL: <a href=\"/\">/</a></p>\n\n<blockquote id=\"error\">\n<p><b>Invalid URL</b></p>\n</blockquote>\n\n<p>Some aspect of the requested URL is incorrect.</p>\n\n<p>Some possible problems are:</p>\n<ul>\n<li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li>\n<li><p>Missing hostname</p></li>\n<li><p>Illegal double-escape in the URL-Path</p></li>\n<li><p>Illegal character in hostname; underscores are not allowed.</p></li>\n</ul>\n\n<p>Your cache administrator is <a href=\"mailto:webmaster?subject=CacheErrorInfo%20-%20ERR_INVALID_URL&amp;body=CacheHost%3A%20dtag-isp%0D%0AErrPage%3A%20ERR_INVALID_URL%0D%0AErr%3A%20%5Bnone%5D%0D%0ATimeStamp%3A%20Thu,%2021%20Nov%202024%2008%3A32%3A05%20GMT%0D%0A%0D%0AClientIP%3A%20<srcip>%0D%0A%0D%0AHTTP%20Request%3A%0D%0A%0D%0A%0D%0A\">webmaster</a>.</p>\n<br>\n</div>\n\n<hr>\n<div id=\"footer\">\n<p>Generated Thu, 21 Nov 2024 08:32:05 GMT by dtag-isp (squid/4.10)</p>\n<!-- ERR_INVALID_URL -->\n</div>\n</body></html>\n",
         "datamd5" : "c4f733df32190e79689a9fbb4bd247e6",
         "datammh3" : 601531007,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "91.246.179.145",
         "ipv6" : "false",
         "latitude" : "39.0469",
         "location" : "39.0469,-77.4903",
         "longitude" : "-77.4903",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Deutsche Telekom AG",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 20020,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "91.246.176.0/21",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 38.47.158.129:20020 (tcp/http) - last seen on 2024-11-21 at 08:32:05 UTC

    • IP
      38.47.158.129
      Network
      38.47.128.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://38.47.158.129:20020/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS147019
      Organization
      jiii
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3b40fcd13ec4c48698cf15e0d2ba5977
      HTTP Header MD5
      7de09592d0cc3062011d73fa292680b0
      HTTP Body MD5
      77bd43987adf27926b335fbe22b67813
    • HTTP/1.1 400 Bad Request
      Server: WAF
      Date: Thu, 21 Nov 2024 08:32:05 GMT
      Content-Type: text/html
      Content-Length: 262
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>WAF</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:32:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "77bd43987adf27926b335fbe22b67813",
               "bodymmh3" : -2135056736,
               "headermd5" : "7de09592d0cc3062011d73fa292680b0",
               "headermmh3" : 1034666971,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 405
         },
         "asn" : "AS147019",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: WAF\r\nDate: Thu, 21 Nov 2024 08:32:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 262\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>WAF</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3b40fcd13ec4c48698cf15e0d2ba5977",
         "datammh3" : 401141661,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS147019",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "cogentco.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "COGENT-A",
            "organization" : "PSINet, Inc.",
            "subnet" : "38.47.128.0/19"
         },
         "ip" : "38.47.158.129",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "jiii",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 20020,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "38.47.128.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }