ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 12,858 in 0.070 second(s)

  • 103.43.16.76:50070 (tcp/http) - last seen on 2024-11-07 at 05:31:43 UTC

    • IP
      103.43.16.76
      Network
      103.43.16.0/22
      Device

      <enterprise field>: device.class

      URL

      http://103.43.16.76:50070/$%7BrandomUrl%7D 200

      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      urlscan::redirect
    • Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a921ec0c33b287a5b32845ce36a9f9b4
      HTTP Header MD5
      7cb8a64a5c41d5db44d85d677dbec3ce
      HTTP Body MD5
      db475c674e230d3b59b9d4c51e192872 
    • HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Thu, 07 Nov 2024 05:31:03 GMT
Content-Type: text/html
Content-Length: 1728
Last-Modified: Mon, 04 Nov 2024 11:57:54 GMT
Connection: close
ETag: "6728b6c2-6c0"
Accept-Ranges: bytes

<!DOCTYPE html>
<html lang="zh-CN">
<head>
    <!-- Google tag (gtag.js) -->
    <script async src="https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"></script>
    <script>
        <script>
            window.dataLayer = window.dataLayer || [];
            function gtag(){dataLayer.push(arguments);}
            gtag('js', new Date());

            gtag('config', 'G-0GJHN159XX');
    </script>

<script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
<script>LA.init({id:"3IsbgF2faH56SAiO",ck:"3IsbgF2faH56SAiO"})</script>

<script charset="UTF-8" id="LA_COLLECT" src="//sdk.51.la/js-sdk-pro.min.js"></script>
<script>LA.init({id:"3GuWRdQLAUfAEIDe",ck:"3GuWRdQLAUfAEIDe"})</script>



    <meta charset="UTF-8">
    <meta name="format-detection" content="telephone=yes">
    <meta name="viewport"
          content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">
    <script>
        const urls = [
            "https://139.155.134.148/tt/test.html?333?666aaa",
            "https://162.14.69.113/"
        ];
        const randomUrl = urls[Math.floor(Math.random() * urls.length)];

        document.write(`<meta http-equiv="refresh" content="9;url=${randomUrl}">`);
        window.onload = function () {
            document.getElementById('myiframe').src = randomUrl;
        };
    </script>
    <style>
        body, html {
            margin: 0;
            padding: 0;
            height: 100%;
            overflow: hidden;
        }

        iframe {
            width: 100%;
            height: 100vh;
            border: none;
        }
    </style>
</head>
<body>
<iframe id="myiframe" scrolling="no"></iframe>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:31:43.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "googletagmanager.com"
         ],
         "hostname" : [
            "www.googletagmanager.com"
         ],
         "ip" : [
            "162.14.69.113",
            "139.155.134.148"
         ],
         "url" : [
            "https://139.155.134.148/tt/test.html?333?666aaa",
            "https://162.14.69.113/",
            "https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX"
         ]
      },
      "http" : {
         "bodymd5" : "db475c674e230d3b59b9d4c51e192872",
         "bodymmh3" : 488145746,
         "header" : [
            {
               "value" : "Mon, 04 Nov 2024 11:57:54 GMT",
               "name" : "Last-Modified"
            },
            {
               "name" : "ETag",
               "value" : "6728b6c2-6c0"
            }
         ],
         "headermd5" : "7cb8a64a5c41d5db44d85d677dbec3ce",
         "headermmh3" : -1289681366,
         "tracker" : {
            "ga" : [
               "G-0GJHN159XX"
            ]
         }
      },
      "length" : 1962
   },
   "asn" : "AS132883",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 05:31:03 GMT\r\nContent-Type: text/html\r\nContent-Length: 1728\r\nLast-Modified: Mon, 04 Nov 2024 11:57:54 GMT\r\nConnection: close\r\nETag: \"6728b6c2-6c0\"\r\nAccept-Ranges: bytes\r\n\r\n<!DOCTYPE html>\n<html lang=\"zh-CN\">\n<head>\n    <!-- Google tag (gtag.js) -->\n    <script async src=\"https://www.googletagmanager.com/gtag/js?id=G-0GJHN159XX\"></script>\n    <script>\n        <script>\n            window.dataLayer = window.dataLayer || [];\n            function gtag(){dataLayer.push(arguments);}\n            gtag('js', new Date());\n\n            gtag('config', 'G-0GJHN159XX');\n    </script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3IsbgF2faH56SAiO\",ck:\"3IsbgF2faH56SAiO\"})</script>\n\n<script charset=\"UTF-8\" id=\"LA_COLLECT\" src=\"//sdk.51.la/js-sdk-pro.min.js\"></script>\n<script>LA.init({id:\"3GuWRdQLAUfAEIDe\",ck:\"3GuWRdQLAUfAEIDe\"})</script>\n\n\n\n    <meta charset=\"UTF-8\">\n    <meta name=\"format-detection\" content=\"telephone=yes\">\n    <meta name=\"viewport\"\n          content=\"width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no\">\n    <script>\n        const urls = [\n            \"https://139.155.134.148/tt/test.html?333?666aaa\",\n            \"https://162.14.69.113/\"\n        ];\n        const randomUrl = urls[Math.floor(Math.random() * urls.length)];\n\n        document.write(`<meta http-equiv=\"refresh\" content=\"9;url=${randomUrl}\">`);\n        window.onload = function () {\n            document.getElementById('myiframe').src = randomUrl;\n        };\n    </script>\n    <style>\n        body, html {\n            margin: 0;\n            padding: 0;\n            height: 100%;\n            overflow: hidden;\n        }\n\n        iframe {\n            width: 100%;\n            height: 100vh;\n            border: none;\n        }\n    </style>\n</head>\n<body>\n<iframe id=\"myiframe\" scrolling=\"no\"></iframe>\n</body>\n</html>\n",
   "datamd5" : "a921ec0c33b287a5b32845ce36a9f9b4",
   "datammh3" : -1249100627,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "forward" : "103.43.16.76",
   "geolocus" : {
      "asn" : "AS132883",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "cnaaa.com",
         "cnnic.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "cnaaa",
      "organization" : "Jiangsu Sanai network science and technology co ,LTD",
      "subnet" : "103.43.16.0/22"
   },
   "hostname" : [
      "103.43.16.76"
   ],
   "ip" : "103.43.16.76",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "TOPWAY GLOBAL LIMITED",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.17.6",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 200,
   "subnet" : "103.43.16.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/$%7BrandomUrl%7D"
}

  • 138.113.216.48:50070 (tcp/http) - last seen on 2024-11-07 at 05:04:44 UTC

    • IP
      138.113.216.48
      Network
      138.113.192.0/19
      Device

      <enterprise field>: device.class

      URL

      http://138.113.216.48:50070/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      251a5822ff914173b3a1b95ee9e48b3f
      HTTP Header MD5
      f0cbd655acefde5fa0de4dfa0c12ae8a
      HTTP Body MD5
      7a1ee2619b7cb1b15d1604772698d5a1 
    • HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:04:44 GMT
Content-Type: text/html
Content-Length: 2427
Connection: close
x-ws-request-id: 672c4a6c_PS-TPE-04DoK26_10814-28573

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 05:04:44 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: PS-TPE-04DoK26
				<br>URL: http://<ip>:50070/
				<br>Request-Id: 672c4a6c_PS-TPE-04DoK26_10814-28573
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G">http://<ip>:50070/</pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:04:44.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "7a1ee2619b7cb1b15d1604772698d5a1",
         "bodymmh3" : 2021298962,
         "headermd5" : "f0cbd655acefde5fa0de4dfa0c12ae8a",
         "headermmh3" : 975872585,
         "title" : "400 Bad Request"
      },
      "length" : 2601
   },
   "asn" : "AS54994",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:04:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 2427\r\nConnection: close\r\nx-ws-request-id: 672c4a6c_PS-TPE-04DoK26_10814-28573\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 05:04:44 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-TPE-04DoK26\n\t\t\t\t<br>URL: http://<ip>:50070/\n\t\t\t\t<br>Request-Id: 672c4a6c_PS-TPE-04DoK26_10814-28573\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:50070/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "251a5822ff914173b3a1b95ee9e48b3f",
   "datammh3" : -1497375806,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS54994",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "domain" : [
         "meteversecloud.com"
      ],
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "METEVERSE-NETWORKS",
      "organization" : "Meteverse Limited.",
      "subnet" : "138.113.216.0/24"
   },
   "ip" : "138.113.216.48",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ML-1432-54994",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "138.113.192.0/19",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 34.220.149.231:50070 (tcp/http) - last seen on 2024-11-07 at 05:04:14 UTC

    • IP
      34.220.149.231
      Network
      34.208.0.0/12
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://34.220.149.231:50070/ 200

      HTTP Title
      PaperCut Login
      HTTP Description
      PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.
      HTTP Keyword(s)
      print accounting print control print management print quota software
      Reverse DNS
      ec2-34-220-149-231.us-west-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      HTTP Component(s)
      Oracle Java jQuery jQuery 3.5.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6602a320a278b26f544c1f7e9b11bbae
      HTTP Header MD5
      fa25c4eea42a342854fe45cdc0273a72
      HTTP Body MD5
      8c5529452ed2e5ae1d4f29e7345687a7 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 07 Nov 2024 05:04:13 GMT
Server: nginx
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Expires: Thu, 01 Jan 1970 00:00:00 UTC
Cache-Control: no-cache
Set-Cookie: JSESSIONID=node0fked3g2lqv6d3tdpdagtyrx20nxeoqnya0a8gjmu.node0; Path=/; Secure; HttpOnly
Content-Length: 13222

<!DOCTYPE HTML>
<!-- Application: app-server -->
<!-- Page: Home -->
<!-- Generated: Mon Nov 20 12:34:06 EST 2023 -->
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html;charset=UTF-8"/>
<title>PaperCut Login</title>
<link rel="shortcut icon" href="/images/icons3/favicon.ico" type="image/vnd.microsoft.icon"/>
<meta http-equiv="X-UA-Compatible" content="IE=Edge"/>
<meta name="description" content="PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system."/>
<meta name="keywords" content="print quota, print control, print management, print accounting, software"/>
<meta name="viewport" content="width=device-width, initial-scale=0.8"/>
<link rel="stylesheet" type="text/css" href="/css/style.css?66961papercut-mf" />
<link rel="stylesheet" type="text/css" href="/css/style-override.css?66961papercut-mf" />
<link rel="stylesheet" type="text/css" href="/css/refresh.css?66961papercut-mf" />
<!--[if IE 9]><link rel="stylesheet" type="text/css" href="/css/style-ie9.css?66961papercut-mf" />
<![endif]-->
<!--[if IE 8]><link rel="stylesheet" type="text/css" href="/css/style-ie8.css?66961papercut-mf" />
<![endif]-->
<!--[if IE 7]><link rel="stylesheet" type="text/css" href="/css/style-ie7.css?66961papercut-mf" />
<![endif]-->
<!--[if IE 6]><link rel="stylesheet" type="text/css" href="/css/style-ie6.css?66961papercut-mf" />
<![endif]-->
<script type="text/javascript">var CacheParam = "66961papercut-mf";</script>
<script type="text/javascript" src="/js/jquery/jquery-3.5.1.min.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/jquery/jquery-migrate-3.3.1.min.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/jquery/config.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/lib/underscore/underscore-min.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/common.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/lib/require.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/pages/configure.js?66961papercut-mf"></script>
<script type="text/javascript" src="/js/refresh.js?66961papercut-mf"></script>
</head>

<body id="loginBody">
<script language="JavaScript" type="text/javascript"><!--

window.onload = function ()
{
document.Form0.inputUsername.focus();
document.Form0.inputUsername.select();
}

// --></script> <div class="wrap">
    <script type="text/javascript">
    insertScript('/js/pages/Home.js');
    insertScript('/js/pages/LoginPages.js');
    </script>
      <svg viewBox="0 0 280.7 198.5" class="pc-shards">
<polygon points="96.3,136.3 140.4,198.5 162.4,198.5 183.9,130.1 134.9,95.4 "/>
<polygon points="45,63.6 74.9,53 0,0 "/>
<polygon points="134.9,95.4 96.3,136.3 45,63.6 74.9,53 "/>
<polygon points="74.9,53 224.8,0 134.9,95.4 "/>
<polygon points="224.8,0 183.9,130.1 134.9,95.4 "/>
<polygon points="224.8,0 224.8,0 224.8,159 183.9,130.1 "/>
<polygon points="162.4,198.5 224.8,198.5 224.8,159 183.9,130.1 "/>
<polygon points="37.7,198.5 140.4,198.5 96.3,136.3 "/>
<polygon points="0,79.5 0,198.5 37.7,198.5 96.3,136.3 45,63.6 "/>
<polygon points="0,79.5 45,63.6 0,0 "/>
<polygon points="0,79.5 0,79.5 0,79.5 "/>
<polygon points="262.3,198.5 280.7,198.5 265.7,187.9 "/>
<polygon points="224.8,198.5 262.3,198.5 265.7,187.9 224.8,159 "/>
</svg>
<form method="post" name="Form0" action="/app" onsubmit="recordLocale()" autocomplete="off">
<input type="hidden" name="service" value="direct/1/Home/$Form"/>
<input type="hidden" name="sp" value="S0"/>
<input type="hidden" name="Form0" value="$Hidden$0,$Hidden$1,inputUsername,inputPassword,$Submit$0,$PropertySelection"/>
<input type="hidden" name="$Hidden$0" id="javascript-enabled" value="F"/>
<input type="hidden" name="$Hidden$1" value="X"/>
 <div class="login" role="main">
      <div class="box">
        <table class="box-table" title="Login" role="presentation">
          <tr role="row">
            <th class="box-nw" aria-label="No value" role="columnheader" scope="col"></th>
            <th class="box-n" aria-label="No value" role="columnheader" scope="col"></th>
            <th class="box-ne" aria-label="No value" role="columnheader" scope="col"></th>
          </tr>
          <tr role="row">
            <td class="box-w"></td>
            <td class="box-content">

              <div id="login">
 <h1><img alt="PaperCut Logo" src="/custom/login-logo.png?1667504163324" class="logo"></img></h1>

 <h1 id="papercut-user-login-title">Log in</h1>
 <table style="margin-bottom:5px;" title="Username and Password" role="presentation">
                        <tbody>
                          <tr role="row">
                            <th role="rowheader"><label for="inputUsername">Username</label></th>
                            <td><input type="text" name="inputUsername" autocorrect="off" maxlength="50" aria-describedby="login-feedback-message" style="width: 150px;" id="inputUsername" autocapitalize="off" class="field"/></td>
                          </tr>
                          <tr role="row">
                            <th role="rowheader"><label for="inputPassword">Password</label></th>
                            <td><input type="password" name="inputPassword" style="width: 150px;" id="inputPassword" class="field" aria-describedby="login-feedback-message"/></td>
                          </tr>
                        </tbody>
                      </table>


                    <div id="login-feedback-message">



 </div>
<input type="submit" name="$Submit$0" value="Log in" class="loginSubmit" aria-describedby="login-feedback-message"/>



<a href="/app?service=direct/1/Home/oAuth2LoginSuccess" style="display:none" class="btn secondary google">Sign in with Google</a>
<a href="/app?service=direct/1/Home/oAuth2LoginCancel" style="display:none" class="btn secondary microsoft">Sign in with Microsoft</a>
 <a style="display:block; margin-top: 10px;" id="forgot-link" href="/app?service=external/ForgotLoginDetails">
Forgot username or password?</a>

 </div>


            </td>
            <td class="box-e"></td>
          </tr>
          <tr role="row">
            <td class="box-sw"></td>
            <td class="box-s"></td>
            <td class="box-se"></td>
          </tr>
        </table>
      </div>
 <div class="language-box">
          <p id="language-select-text">Language Select</p>
          <svg width="24" height="24" viewBox="50 1777 24 24" class="global" alt="Globe Language Icon">
                <path fill="gray" d="M62,1777c-6.627,0-12,5.373-12,12s5.373,12,12,12s12-5.373,12-12S68.627,1777,62,1777z M58.129,1780.116
        c-0.665,0.732-1.359,1.699-1.925,2.94h-1.833C55.355,1781.79,56.643,1780.771,58.129,1780.116z M53.217,1784.957h2.304
        c-0.251,0.918-0.417,1.954-0.481,3.1h-2.664C52.48,1786.959,52.775,1785.918,53.217,1784.957z M53.236,1793.057
        c-0.447-0.96-0.749-2.001-0.859-3.1h2.662c0.064,1.146,0.23,2.182,0.481,3.1H53.236z M54.401,1794.957h1.803
        c0.549,1.204,1.218,2.146,1.865,2.87C56.624,1797.179,55.369,1796.188,54.401,1794.957z M61.05,1798.054
        c-0.541-0.34-1.814-1.283-2.828-3.097h2.828V1798.054z M61.05,1793.057h-3.645c-0.288-0.893-0.493-1.921-0.566-3.1h4.211V1793.057z
         M61.05,1788.057h-4.211c0.073-1.179,0.278-2.207,0.566-3.1h3.645V1788.057z M61.05,1783.057h-2.828
        c1.014-1.813,2.287-2.757,2.828-3.097V1783.057z M70.823,1784.957c0.441,0.961,0.736,2.002,0.842,3.1h-2.704
        c-0.064-1.146-0.23-2.182-0.481-3.1H70.823z M69.669,1783.057h-1.873c-0.574-1.259-1.279-2.237-1.953-2.974
        C67.358,1780.736,68.669,1781.77,69.669,1783.057z M62.95,1779.96c0.541,0.34,1.814,1.283,2.828,3.097H62.95V1779.96z
         M62.95,1784.957h3.645c0.288,0.893,0.493,1.921,0.566,3.1H62.95V1784.957z M62.95,1789.957h4.211
        c-0.073,1.179-0.278,2.207-0.566,3.1H62.95V1789.957z M62.95,1798.055v-3.098h2.828
        C64.764,1796.772,63.488,1797.716,62.95,1798.055z M65.902,1797.86c0.656-0.729,1.337-1.682,1.894-2.903h1.843
        C68.656,1796.208,67.376,1797.213,65.902,1797.86z M70.804,1793.057h-2.324c0.251-0.918,0.417-1.954,0.481-3.1h2.702
        C71.553,1791.056,71.251,1792.097,70.804,1793.057z"/>
          </svg>
<select name="$PropertySelection" alt="Select language" role="listbox" id="language" aria-label="Select language">
<option value="en" selected="selected">English</option>
<option value="ca">catal&#224;</option>
<option value="zh_CN">&#20013;&#25991; (&#20013;&#22269;)</option>
<option value="zh_HK">&#20013;&#25991; (&#39321;&#28207;)</option>
<option value="zh_TW">&#20013;&#25991; (&#21488;&#28771;)</option>
<option value="hr">hrvatski</option>
<option value="cs">&#269;e&#353;tina</option>
<option value="da">Dansk</option>
<option value="nl">Nederlands</option>
<option value="fi">suomi</option>
<option value="fr">fran&#231;ais</option>
<option value="de">Deutsch</option>
<option value="iw">&#1506;&#1489;&#1512;&#1497;&#1514;</option>
<option value="hu">magyar</option>
<option value="it">italiano</option>
<option value="ja">&#26085;&#26412;&#35486;</option>
<option value="ko">&#54620;&#44397;&#50612;</option>
<option value="lv">Latvie&#353;u</option>
<option value="lt">Lietuvi&#371;</option>
<option value="no">norsk</option>
<option value="pl">polski</option>
<option value="pt">portugu&#234;s (Brasil)</option>
<option value="pt_PT">portugu&#234;s (Portugal)</option>
<option value="ru">&#1088;&#1091;&#1089;&#1089;&#1082;&#1080;&#1081;</option>
<option value="sr">&#1057;&#1088;&#1087;&#1089;&#1082;&#1080;</option>
<option value="sk">Sloven&#269;ina</option>
<option value="sl">Sloven&#353;&#269;ina</option>
<option value="es">espa&#241;ol</option>
<option value="es_ES">espa&#241;ol (Espa&#241;a)</option>
<option value="sv">svenska</option>
<option value="th_TH">&#3652;&#3607;&#3618; (&#3611;&#3619;&#3632;&#3648;&#3607;&#3624;&#3652;&#3607;&#3618;)</option>
<option value="tr">T&#252;rk&#231;e</option>
<option value="cy_GB">Welsh (United Kingdom)</option>
</select> </div>
 <script>
            let languageOptions = document.getElementById("language").children;
            for (let languageOption of languageOptions)
            {
                let lang = languageOption.getAttribute("value");
                if (lang.includes("_")) lang = lang.substr(0, lang.indexOf("_")); // to remove region if specified
                languageOption.setAttribute("lang", lang);
            }
        </script>
<span data-background-uri="/images/login-bg.jpg?66961papercut-mf" data-background-selection="COLOR" data-background-color="#FFFFFF" id="loginCustomization" data-button-color="#01B256" data-forgot-link-text=""></span> <!-- The license has expired!  -->
 </div>
</form>

 <div id="footer" style="position:absolute; bottom: 0px; left: 0px; right: 0px; width: 100%;">
 <div class="product-details">
    <div class="logo"><img src="/images/footer-logo2.png?66961papercut-mf" border="0"/></div>

    <div class="text">
<span class="product"><a href="https://www.papercut.com/products/mf/?clicked=app-footer">PaperCut MF</a></span>

 <div>
Print Management Software</div>
 <!-- analytic purpose -->
<span class="analytic-license-expiry-date" style="display:none"></span>
<span class="analytic-product-build-number" style="display:none">66961</span>
<span class="analytic-product-version" style="display:none">22.1.3</span>
<span class="analytic-product" style="display:none">PaperCut MF</span>
<span class="analytic-product-edition" style="display:none">MF</span> <div class="copyright">
        &copy; Copyright 1999-2023. PaperCut Software Pty Ltd. All rights reserved. </div>
    </div>
  </div>
 </div>
 </div>
  <script language="JavaScript" type="text/javascript">
  var oldonload = window.onload;
  if (typeof window.onload != 'function') {
    window.onload = applyLoginCustomization;
  } else {
    window.onload = function () {
      if (oldonload) {
        oldonload();
      }
        applyLoginCustomization();
    }
  }

  /*
   Apply login customization
   */
  function applyLoginCustomization() {
      var loginCustomization = $("#loginCustomization");
      if (loginCustomization.attr("data-background-selection") == 'IMAGE') {
          loadBackground(loginCustomization.attr("data-background-uri"));
      } else {
          $('#loginBody').find('.wrap').css('background-color', loginCustomization.attr("data-background-color"))
                  .css('background-image', 'none');
      }
      if (loginCustomization.attr("data-button-color") != "") {
          $('#loginBody input[type="submit"].loginSubmit').removeClass('loginSubmit')
                  .css('background-color', loginCustomization.attr("data-button-color"))
                  .css('border-color', loginCustomization.attr("data-button-color"));
      }
      if (loginCustomization.attr("data-forgot-link-text") != "") {
          $('a#forgot-link').text(loginCustomization.attr("data-forgot-link-text"));
      }
  }

  function recordLocale() {
      var languageElement = document.getElementById("language");
      if (languageElement) {
          document.cookie = "ui.locale=" + languageElement.value;
      }
  }
  </script>
</body>
</html>
<!-- Render time: ~ 20 ms -->



    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:04:14.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "papercut.com"
         ],
         "hostname" : [
            "www.papercut.com"
         ],
         "url" : [
            "https://www.papercut.com/products/mf/?clicked=app-footer"
         ]
      },
      "http" : {
         "bodymd5" : "8c5529452ed2e5ae1d4f29e7345687a7",
         "bodymmh3" : -856371065,
         "component" : [
            {
               "productvendor" : "Oracle",
               "product" : "Java"
            },
            {
               "productversion" : "3.5.1",
               "productvendor" : "jQuery",
               "product" : "jQuery"
            }
         ],
         "description" : "PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.",
         "headermd5" : "fa25c4eea42a342854fe45cdc0273a72",
         "headermmh3" : -1809225070,
         "keywords" : [
            "print accounting",
            "print control",
            "print management",
            "print quota",
            "software"
         ],
         "title" : "PaperCut Login"
      },
      "length" : 13610
   },
   "asn" : "AS16509",
   "city" : "Boardman",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:04:13 GMT\r\nServer: nginx\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1\r\nExpires: Thu, 01 Jan 1970 00:00:00 UTC\r\nCache-Control: no-cache\r\nSet-Cookie: JSESSIONID=node0fked3g2lqv6d3tdpdagtyrx20nxeoqnya0a8gjmu.node0; Path=/; Secure; HttpOnly\r\nContent-Length: 13222\r\n\r\n<!DOCTYPE HTML>\n<!-- Application: app-server -->\n<!-- Page: Home -->\n<!-- Generated: Mon Nov 20 12:34:06 EST 2023 -->\n<html lang=\"en\">\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html;charset=UTF-8\"/>\n<title>PaperCut Login</title>\n<link rel=\"shortcut icon\" href=\"/images/icons3/favicon.ico\" type=\"image/vnd.microsoft.icon\"/>\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=Edge\"/>\n<meta name=\"description\" content=\"PaperCut MF is a print management system. Log in to manage your print quotas, see your print history and configure your system.\"/>\n<meta name=\"keywords\" content=\"print quota, print control, print management, print accounting, software\"/>\n<meta name=\"viewport\" content=\"width=device-width, initial-scale=0.8\"/>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style.css?66961papercut-mf\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-override.css?66961papercut-mf\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"/css/refresh.css?66961papercut-mf\" />\n<!--[if IE 9]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie9.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 8]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie8.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 7]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie7.css?66961papercut-mf\" />\n<![endif]-->\n<!--[if IE 6]><link rel=\"stylesheet\" type=\"text/css\" href=\"/css/style-ie6.css?66961papercut-mf\" />\n<![endif]-->\n<script type=\"text/javascript\">var CacheParam = \"66961papercut-mf\";</script>\n<script type=\"text/javascript\" src=\"/js/jquery/jquery-3.5.1.min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/jquery/jquery-migrate-3.3.1.min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/jquery/config.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/lib/underscore/underscore-min.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/common.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/lib/require.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/pages/configure.js?66961papercut-mf\"></script>\n<script type=\"text/javascript\" src=\"/js/refresh.js?66961papercut-mf\"></script>\n</head>\n\n<body id=\"loginBody\">\n<script language=\"JavaScript\" type=\"text/javascript\"><!--\n\nwindow.onload = function ()\n{\ndocument.Form0.inputUsername.focus();\ndocument.Form0.inputUsername.select();\n}\n\n// --></script> <div class=\"wrap\">\n    <script type=\"text/javascript\">\n    insertScript('/js/pages/Home.js');\n    insertScript('/js/pages/LoginPages.js');\n    </script>\n      <svg viewBox=\"0 0 280.7 198.5\" class=\"pc-shards\">\n<polygon points=\"96.3,136.3 140.4,198.5 162.4,198.5 183.9,130.1 134.9,95.4 \"/>\n<polygon points=\"45,63.6 74.9,53 0,0 \"/>\n<polygon points=\"134.9,95.4 96.3,136.3 45,63.6 74.9,53 \"/>\n<polygon points=\"74.9,53 224.8,0 134.9,95.4 \"/>\n<polygon points=\"224.8,0 183.9,130.1 134.9,95.4 \"/>\n<polygon points=\"224.8,0 224.8,0 224.8,159 183.9,130.1 \"/>\n<polygon points=\"162.4,198.5 224.8,198.5 224.8,159 183.9,130.1 \"/>\n<polygon points=\"37.7,198.5 140.4,198.5 96.3,136.3 \"/>\n<polygon points=\"0,79.5 0,198.5 37.7,198.5 96.3,136.3 45,63.6 \"/>\n<polygon points=\"0,79.5 45,63.6 0,0 \"/>\n<polygon points=\"0,79.5 0,79.5 0,79.5 \"/>\n<polygon points=\"262.3,198.5 280.7,198.5 265.7,187.9 \"/>\n<polygon points=\"224.8,198.5 262.3,198.5 265.7,187.9 224.8,159 \"/>\n</svg>\n<form method=\"post\" name=\"Form0\" action=\"/app\" onsubmit=\"recordLocale()\" autocomplete=\"off\">\n<input type=\"hidden\" name=\"service\" value=\"direct/1/Home/$Form\"/>\n<input type=\"hidden\" name=\"sp\" value=\"S0\"/>\n<input type=\"hidden\" name=\"Form0\" value=\"$Hidden$0,$Hidden$1,inputUsername,inputPassword,$Submit$0,$PropertySelection\"/>\n<input type=\"hidden\" name=\"$Hidden$0\" id=\"javascript-enabled\" value=\"F\"/>\n<input type=\"hidden\" name=\"$Hidden$1\" value=\"X\"/>\n <div class=\"login\" role=\"main\">\n      <div class=\"box\">\n        <table class=\"box-table\" title=\"Login\" role=\"presentation\">\n          <tr role=\"row\">\n            <th class=\"box-nw\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n            <th class=\"box-n\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n            <th class=\"box-ne\" aria-label=\"No value\" role=\"columnheader\" scope=\"col\"></th>\n          </tr>\n          <tr role=\"row\">\n            <td class=\"box-w\"></td>\n            <td class=\"box-content\">\n\n              <div id=\"login\">\n <h1><img alt=\"PaperCut Logo\" src=\"/custom/login-logo.png?1667504163324\" class=\"logo\"></img></h1>\n\n <h1 id=\"papercut-user-login-title\">Log in</h1>\n <table style=\"margin-bottom:5px;\" title=\"Username and Password\" role=\"presentation\">\n                        <tbody>\n                          <tr role=\"row\">\n                            <th role=\"rowheader\"><label for=\"inputUsername\">Username</label></th>\n                            <td><input type=\"text\" name=\"inputUsername\" autocorrect=\"off\" maxlength=\"50\" aria-describedby=\"login-feedback-message\" style=\"width: 150px;\" id=\"inputUsername\" autocapitalize=\"off\" class=\"field\"/></td>\n                          </tr>\n                          <tr role=\"row\">\n                            <th role=\"rowheader\"><label for=\"inputPassword\">Password</label></th>\n                            <td><input type=\"password\" name=\"inputPassword\" style=\"width: 150px;\" id=\"inputPassword\" class=\"field\" aria-describedby=\"login-feedback-message\"/></td>\n                          </tr>\n                        </tbody>\n                      </table>\n\n\n                    <div id=\"login-feedback-message\">\n\n\n\n </div>\n<input type=\"submit\" name=\"$Submit$0\" value=\"Log in\" class=\"loginSubmit\" aria-describedby=\"login-feedback-message\"/>\n\n\n\n<a href=\"/app?service=direct/1/Home/oAuth2LoginSuccess\" style=\"display:none\" class=\"btn secondary google\">Sign in with Google</a>\n<a href=\"/app?service=direct/1/Home/oAuth2LoginCancel\" style=\"display:none\" class=\"btn secondary microsoft\">Sign in with Microsoft</a>\n <a style=\"display:block; margin-top: 10px;\" id=\"forgot-link\" href=\"/app?service=external/ForgotLoginDetails\">\nForgot username or password?</a>\n\n </div>\n\n\n            </td>\n            <td class=\"box-e\"></td>\n          </tr>\n          <tr role=\"row\">\n            <td class=\"box-sw\"></td>\n            <td class=\"box-s\"></td>\n            <td class=\"box-se\"></td>\n          </tr>\n        </table>\n      </div>\n <div class=\"language-box\">\n          <p id=\"language-select-text\">Language Select</p>\n          <svg width=\"24\" height=\"24\" viewBox=\"50 1777 24 24\" class=\"global\" alt=\"Globe Language Icon\">\n                <path fill=\"gray\" d=\"M62,1777c-6.627,0-12,5.373-12,12s5.373,12,12,12s12-5.373,12-12S68.627,1777,62,1777z M58.129,1780.116\n        c-0.665,0.732-1.359,1.699-1.925,2.94h-1.833C55.355,1781.79,56.643,1780.771,58.129,1780.116z M53.217,1784.957h2.304\n        c-0.251,0.918-0.417,1.954-0.481,3.1h-2.664C52.48,1786.959,52.775,1785.918,53.217,1784.957z M53.236,1793.057\n        c-0.447-0.96-0.749-2.001-0.859-3.1h2.662c0.064,1.146,0.23,2.182,0.481,3.1H53.236z M54.401,1794.957h1.803\n        c0.549,1.204,1.218,2.146,1.865,2.87C56.624,1797.179,55.369,1796.188,54.401,1794.957z M61.05,1798.054\n        c-0.541-0.34-1.814-1.283-2.828-3.097h2.828V1798.054z M61.05,1793.057h-3.645c-0.288-0.893-0.493-1.921-0.566-3.1h4.211V1793.057z\n         M61.05,1788.057h-4.211c0.073-1.179,0.278-2.207,0.566-3.1h3.645V1788.057z M61.05,1783.057h-2.828\n        c1.014-1.813,2.287-2.757,2.828-3.097V1783.057z M70.823,1784.957c0.441,0.961,0.736,2.002,0.842,3.1h-2.704\n        c-0.064-1.146-0.23-2.182-0.481-3.1H70.823z M69.669,1783.057h-1.873c-0.574-1.259-1.279-2.237-1.953-2.974\n        C67.358,1780.736,68.669,1781.77,69.669,1783.057z M62.95,1779.96c0.541,0.34,1.814,1.283,2.828,3.097H62.95V1779.96z\n         M62.95,1784.957h3.645c0.288,0.893,0.493,1.921,0.566,3.1H62.95V1784.957z M62.95,1789.957h4.211\n        c-0.073,1.179-0.278,2.207-0.566,3.1H62.95V1789.957z M62.95,1798.055v-3.098h2.828\n        C64.764,1796.772,63.488,1797.716,62.95,1798.055z M65.902,1797.86c0.656-0.729,1.337-1.682,1.894-2.903h1.843\n        C68.656,1796.208,67.376,1797.213,65.902,1797.86z M70.804,1793.057h-2.324c0.251-0.918,0.417-1.954,0.481-3.1h2.702\n        C71.553,1791.056,71.251,1792.097,70.804,1793.057z\"/>\n          </svg>\n<select name=\"$PropertySelection\" alt=\"Select language\" role=\"listbox\" id=\"language\" aria-label=\"Select language\">\n<option value=\"en\" selected=\"selected\">English</option>\n<option value=\"ca\">catal&#224;</option>\n<option value=\"zh_CN\">&#20013;&#25991; (&#20013;&#22269;)</option>\n<option value=\"zh_HK\">&#20013;&#25991; (&#39321;&#28207;)</option>\n<option value=\"zh_TW\">&#20013;&#25991; (&#21488;&#28771;)</option>\n<option value=\"hr\">hrvatski</option>\n<option value=\"cs\">&#269;e&#353;tina</option>\n<option value=\"da\">Dansk</option>\n<option value=\"nl\">Nederlands</option>\n<option value=\"fi\">suomi</option>\n<option value=\"fr\">fran&#231;ais</option>\n<option value=\"de\">Deutsch</option>\n<option value=\"iw\">&#1506;&#1489;&#1512;&#1497;&#1514;</option>\n<option value=\"hu\">magyar</option>\n<option value=\"it\">italiano</option>\n<option value=\"ja\">&#26085;&#26412;&#35486;</option>\n<option value=\"ko\">&#54620;&#44397;&#50612;</option>\n<option value=\"lv\">Latvie&#353;u</option>\n<option value=\"lt\">Lietuvi&#371;</option>\n<option value=\"no\">norsk</option>\n<option value=\"pl\">polski</option>\n<option value=\"pt\">portugu&#234;s (Brasil)</option>\n<option value=\"pt_PT\">portugu&#234;s (Portugal)</option>\n<option value=\"ru\">&#1088;&#1091;&#1089;&#1089;&#1082;&#1080;&#1081;</option>\n<option value=\"sr\">&#1057;&#1088;&#1087;&#1089;&#1082;&#1080;</option>\n<option value=\"sk\">Sloven&#269;ina</option>\n<option value=\"sl\">Sloven&#353;&#269;ina</option>\n<option value=\"es\">espa&#241;ol</option>\n<option value=\"es_ES\">espa&#241;ol (Espa&#241;a)</option>\n<option value=\"sv\">svenska</option>\n<option value=\"th_TH\">&#3652;&#3607;&#3618; (&#3611;&#3619;&#3632;&#3648;&#3607;&#3624;&#3652;&#3607;&#3618;)</option>\n<option value=\"tr\">T&#252;rk&#231;e</option>\n<option value=\"cy_GB\">Welsh (United Kingdom)</option>\n</select> </div>\n <script>\n            let languageOptions = document.getElementById(\"language\").children;\n            for (let languageOption of languageOptions)\n            {\n                let lang = languageOption.getAttribute(\"value\");\n                if (lang.includes(\"_\")) lang = lang.substr(0, lang.indexOf(\"_\")); // to remove region if specified\n                languageOption.setAttribute(\"lang\", lang);\n            }\n        </script>\n<span data-background-uri=\"/images/login-bg.jpg?66961papercut-mf\" data-background-selection=\"COLOR\" data-background-color=\"#FFFFFF\" id=\"loginCustomization\" data-button-color=\"#01B256\" data-forgot-link-text=\"\"></span> <!-- The license has expired!  -->\n </div>\n</form>\n\n <div id=\"footer\" style=\"position:absolute; bottom: 0px; left: 0px; right: 0px; width: 100%;\">\n <div class=\"product-details\">\n    <div class=\"logo\"><img src=\"/images/footer-logo2.png?66961papercut-mf\" border=\"0\"/></div>\n\n    <div class=\"text\">\n<span class=\"product\"><a href=\"https://www.papercut.com/products/mf/?clicked=app-footer\">PaperCut MF</a></span>\n\n <div>\nPrint Management Software</div>\n <!-- analytic purpose -->\n<span class=\"analytic-license-expiry-date\" style=\"display:none\"></span>\n<span class=\"analytic-product-build-number\" style=\"display:none\">66961</span>\n<span class=\"analytic-product-version\" style=\"display:none\">22.1.3</span>\n<span class=\"analytic-product\" style=\"display:none\">PaperCut MF</span>\n<span class=\"analytic-product-edition\" style=\"display:none\">MF</span> <div class=\"copyright\">\n        &copy; Copyright 1999-2023. PaperCut Software Pty Ltd. All rights reserved. </div>\n    </div>\n  </div>\n </div>\n </div>\n  <script language=\"JavaScript\" type=\"text/javascript\">\n  var oldonload = window.onload;\n  if (typeof window.onload != 'function') {\n    window.onload = applyLoginCustomization;\n  } else {\n    window.onload = function () {\n      if (oldonload) {\n        oldonload();\n      }\n        applyLoginCustomization();\n    }\n  }\n\n  /*\n   Apply login customization\n   */\n  function applyLoginCustomization() {\n      var loginCustomization = $(\"#loginCustomization\");\n      if (loginCustomization.attr(\"data-background-selection\") == 'IMAGE') {\n          loadBackground(loginCustomization.attr(\"data-background-uri\"));\n      } else {\n          $('#loginBody').find('.wrap').css('background-color', loginCustomization.attr(\"data-background-color\"))\n                  .css('background-image', 'none');\n      }\n      if (loginCustomization.attr(\"data-button-color\") != \"\") {\n          $('#loginBody input[type=\"submit\"].loginSubmit').removeClass('loginSubmit')\n                  .css('background-color', loginCustomization.attr(\"data-button-color\"))\n                  .css('border-color', loginCustomization.attr(\"data-button-color\"));\n      }\n      if (loginCustomization.attr(\"data-forgot-link-text\") != \"\") {\n          $('a#forgot-link').text(loginCustomization.attr(\"data-forgot-link-text\"));\n      }\n  }\n\n  function recordLocale() {\n      var languageElement = document.getElementById(\"language\");\n      if (languageElement) {\n          document.cookie = \"ui.locale=\" + languageElement.value;\n      }\n  }\n  </script>\n</body>\n</html>\n<!-- Render time: ~ 20 ms -->\n\n\n",
   "datamd5" : "6602a320a278b26f544c1f7e9b11bbae",
   "datammh3" : 1404482669,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "AT-88-Z",
      "organization" : "Amazon Technologies Inc.",
      "subnet" : "34.208.0.0/12"
   },
   "host" : [
      "ec2-34-220-149-231"
   ],
   "hostname" : [
      "ec2-34-220-149-231.us-west-2.compute.amazonaws.com"
   ],
   "ip" : "34.220.149.231",
   "ipv6" : "false",
   "latitude" : "45.8491",
   "location" : "45.8491,-119.7143",
   "longitude" : "-119.7143",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-34-220-149-231.us-west-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "compute.amazonaws.com",
      "us-west-2.compute.amazonaws.com"
   ],
   "subnet" : "34.208.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 223.111.198.95:50070 (tcp/http) - last seen on 2024-11-07 at 05:04:12 UTC

    • IP
      223.111.198.95
      Network
      223.111.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://223.111.198.95:50070/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS56046
      Organization
      China Mobile communications corporation
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b306ca94e0ad30e36e4fa407835e2e0c
      HTTP Header MD5
      d0dbb084225d5a616c274793dc0b097e
      HTTP Body MD5
      a96d4bd0d73675ea4f2117d0a9dc393d 
    • HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:04:10 GMT
Content-Type: text/html
Content-Length: 2427
Connection: close
x-ws-request-id: 672c4a4a_PS-LYG-01lw075_27520-40919

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 05:04:10 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: PS-LYG-01lw075
				<br>URL: http://<ip>:50070/
				<br>Request-Id: 672c4a4a_PS-LYG-01lw075_27520-40919
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G">http://<ip>:50070/</pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:04:12.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "a96d4bd0d73675ea4f2117d0a9dc393d",
         "bodymmh3" : -1819376186,
         "headermd5" : "d0dbb084225d5a616c274793dc0b097e",
         "headermmh3" : 1671067935,
         "title" : "400 Bad Request"
      },
      "length" : 2601
   },
   "asn" : "AS56046",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:04:10 GMT\r\nContent-Type: text/html\r\nContent-Length: 2427\r\nConnection: close\r\nx-ws-request-id: 672c4a4a_PS-LYG-01lw075_27520-40919\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 05:04:10 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-LYG-01lw075\n\t\t\t\t<br>URL: http://<ip>:50070/\n\t\t\t\t<br>Request-Id: 672c4a4a_PS-LYG-01lw075_27520-40919\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:50070/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "b306ca94e0ad30e36e4fa407835e2e0c",
   "datammh3" : 1369450294,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS56046",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinamobile.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CMNET",
      "organization" : "China Mobile",
      "subnet" : "223.111.0.0/16"
   },
   "ip" : "223.111.198.95",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Mobile communications corporation",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "223.111.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 3.96.159.53:50070 (tcp/http) - last seen on 2024-11-07 at 05:03:40 UTC

    • IP
      3.96.159.53
      Network
      3.96.0.0/14
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://3.96.159.53:50070/ 200

      HTTP Title
      Download Master
      Reverse DNS
      ec2-3-96-159-53.ca-central-1.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a52ae731c45deec6fcf5b3934ee55e00
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      18ccd80dc0943311ea6b6014e12a985c 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 07 Nov 2024 05:03:39 GMT
Server: nginx
Content-Length: 1767
Content-Type: text/html

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<html xmlns:v>
<head>
<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="Expires" content="-1" />
<meta HTTP-EQUIV="Cache-Control" CONTENT="no-cache">
<meta http-equiv="Pragma" content="no-cache" />
<title>Download Master</title>
<script type="text/javascript" src="jquery.js"></script>
</head>
<body>
<script>
var httpTag = 'https:' == document.location.protocol ? false : true;
        if(( navigator.userAgent.match(/iPhone/i)) ||
            ( navigator.userAgent.match(/iPod/i))   ||
                ( navigator.userAgent.match(/windows ce/i)) ||
                ( navigator.userAgent.match(/windows phone/i)) ||
                ( navigator.userAgent.match(/Android/i)) &&
                ( navigator.userAgent.match(/Mobile/i)))
                {
                if(httpTag)
                        self.location = "http://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                else
                        self.location = "https://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                }
        else{
                if(httpTag)
                        self.location = "http://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                else
                        self.location = "https://"+ location.host.split(":")[0] +":"+ location.host.split(":")[1] +"/downloadmaster/index.asp";
                }

</script>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:03:40.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "w3.org"
         ],
         "hostname" : [
            "www.w3.org"
         ],
         "url" : [
            "http://www.w3.org/1999/xhtml",
            "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"
         ]
      },
      "http" : {
         "bodymd5" : "18ccd80dc0943311ea6b6014e12a985c",
         "bodymmh3" : 559765034,
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : -668746380,
         "title" : "Download Master"
      },
      "length" : 1904
   },
   "asn" : "AS16509",
   "city" : "Montreal",
   "country" : "CA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:03:39 GMT\r\nServer: nginx\r\nContent-Length: 1767\r\nContent-Type: text/html\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Transitional//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd\">\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\n<html xmlns:v>\n<head>\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=EmulateIE8\" />\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta http-equiv=\"Expires\" content=\"-1\" />\n<meta HTTP-EQUIV=\"Cache-Control\" CONTENT=\"no-cache\">\n<meta http-equiv=\"Pragma\" content=\"no-cache\" />\n<title>Download Master</title>\n<script type=\"text/javascript\" src=\"jquery.js\"></script>\n</head>\n<body>\n<script>\nvar httpTag = 'https:' == document.location.protocol ? false : true;\n        if(( navigator.userAgent.match(/iPhone/i)) ||\n            ( navigator.userAgent.match(/iPod/i))   ||\n                ( navigator.userAgent.match(/windows ce/i)) ||\n                ( navigator.userAgent.match(/windows phone/i)) ||\n                ( navigator.userAgent.match(/Android/i)) &&\n                ( navigator.userAgent.match(/Mobile/i)))\n                {\n                if(httpTag)\n                        self.location = \"http://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                else\n                        self.location = \"https://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                }\n        else{\n                if(httpTag)\n                        self.location = \"http://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                else\n                        self.location = \"https://\"+ location.host.split(\":\")[0] +\":\"+ location.host.split(\":\")[1] +\"/downloadmaster/index.asp\";\n                }\n\n</script>\n</body>\n</html>\n",
   "datamd5" : "a52ae731c45deec6fcf5b3934ee55e00",
   "datammh3" : -434684070,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "AMAZON-YUL",
      "organization" : "Amazon Data Services Canada",
      "subnet" : "3.96.0.0/14"
   },
   "host" : [
      "ec2-3-96-159-53"
   ],
   "hostname" : [
      "ec2-3-96-159-53.ca-central-1.compute.amazonaws.com"
   ],
   "ip" : "3.96.159.53",
   "ipv6" : "false",
   "latitude" : "45.5075",
   "location" : "45.5075,-73.5887",
   "longitude" : "-73.5887",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-3-96-159-53.ca-central-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "ca-central-1.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "3.96.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 58.144.227.227:50070 (tcp/http) - last seen on 2024-11-07 at 05:03:16 UTC

    • IP
      58.144.227.227
      Network
      58.144.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://58.144.227.227:50070/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS4837
      Organization
      CHINA UNICOM China169 Backbone
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      586f775637e14705dde73540ca1a2665
      HTTP Header MD5
      633f51d1d7e42bb9a79d9524d8631793
      HTTP Body MD5
      3590806615fb00e87a7f3e25252f0b8f 
    • HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:03:15 GMT
Content-Type: text/html
Content-Length: 2427
Connection: close
x-ws-request-id: 672c4a13_PS-CKG-01iTc50_51980-43792

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 05:03:15 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: PS-CKG-01iTc50
				<br>URL: http://<ip>:50070/
				<br>Request-Id: 672c4a13_PS-CKG-01iTc50_51980-43792
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G">http://<ip>:50070/</pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:03:16.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "3590806615fb00e87a7f3e25252f0b8f",
         "bodymmh3" : 189583602,
         "headermd5" : "633f51d1d7e42bb9a79d9524d8631793",
         "headermmh3" : -576828054,
         "title" : "400 Bad Request"
      },
      "length" : 2601
   },
   "asn" : "AS4837",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:03:15 GMT\r\nContent-Type: text/html\r\nContent-Length: 2427\r\nConnection: close\r\nx-ws-request-id: 672c4a13_PS-CKG-01iTc50_51980-43792\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 05:03:15 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-CKG-01iTc50\n\t\t\t\t<br>URL: http://<ip>:50070/\n\t\t\t\t<br>Request-Id: 672c4a13_PS-CKG-01iTc50_51980-43792\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:50070/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "586f775637e14705dde73540ca1a2665",
   "datammh3" : -1259952168,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4837",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinaunicom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "UNICOM-CQ",
      "organization" : "CNC Group CHINA169 Chongqing Province Network",
      "subnet" : "58.144.0.0/16"
   },
   "ip" : "58.144.227.227",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CHINA UNICOM China169 Backbone",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "58.144.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 111.31.115.162:50070 (tcp/http) - last seen on 2024-11-07 at 05:02:44 UTC

    • IP
      111.31.115.162
      Network
      111.31.112.0/21
      Device

      <enterprise field>: device.class

      URL

      http://111.31.115.162:50070/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS9808
      Organization
      China Mobile Communications Group Co., Ltd.
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2f9c85cdf0e8c682fd12639475fa76b8
      HTTP Header MD5
      f4109ae6fd6c8a21c2fe95e87f1f7db4
      HTTP Body MD5
      3640287597c827a5cfef8eb74fa9bc77 
    • HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:02:43 GMT
Content-Type: text/html
Content-Length: 2427
Connection: close
x-ws-request-id: 672c49f3_PS-TSN-01w9s57_13141-43381

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 05:02:43 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: PS-TSN-01w9s57
				<br>URL: http://<ip>:50070/
				<br>Request-Id: 672c49f3_PS-TSN-01w9s57_13141-43381
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G">http://<ip>:50070/</pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:02:44.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "3640287597c827a5cfef8eb74fa9bc77",
         "bodymmh3" : -1552208259,
         "headermd5" : "f4109ae6fd6c8a21c2fe95e87f1f7db4",
         "headermmh3" : 169491246,
         "title" : "400 Bad Request"
      },
      "length" : 2601
   },
   "asn" : "AS9808",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:02:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 2427\r\nConnection: close\r\nx-ws-request-id: 672c49f3_PS-TSN-01w9s57_13141-43381\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 05:02:43 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-TSN-01w9s57\n\t\t\t\t<br>URL: http://<ip>:50070/\n\t\t\t\t<br>Request-Id: 672c49f3_PS-TSN-01w9s57_13141-43381\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:50070/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "2f9c85cdf0e8c682fd12639475fa76b8",
   "datammh3" : -1956280205,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS9808",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinamobile.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CMNET",
      "organization" : "China Mobile",
      "subnet" : "111.31.112.0/21"
   },
   "ip" : "111.31.115.162",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Mobile Communications Group Co., Ltd.",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "111.31.112.0/21",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 3.26.13.118:50070 (tcp/http) - last seen on 2024-11-07 at 05:02:43 UTC

    • IP
      3.26.13.118
      Network
      3.16.0.0/12
      Domain(s)
      amazonaws.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://3.26.13.118:50070/ 200

      Reverse DNS
      ec2-3-26-13-118.ap-southeast-2.compute.amazonaws.com
      ASN
      AS16509
      Organization
      AMAZON-02
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f192c778ba9971cccb2fcec90e21e379
      HTTP Header MD5
      9f060a9cb1b31c417a3a68e629ae97e3
      HTTP Body MD5
      852141068209c03fdeb5dacc5a9c52e3 
    • HTTP/1.1 200 OK
Connection: close
Date: Thu, 07 Nov 2024 05:02:42 GMT
Server: nginx
Content-Length: 69
Content-Type: text/html

<html><body><script>top.location='/p/login/';</script></body></html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:02:43.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "852141068209c03fdeb5dacc5a9c52e3",
         "bodymmh3" : -1124668290,
         "headermd5" : "9f060a9cb1b31c417a3a68e629ae97e3",
         "headermmh3" : -1382238711
      },
      "length" : 204
   },
   "asn" : "AS16509",
   "city" : "Sydney",
   "country" : "AU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nConnection: close\r\nDate: Thu, 07 Nov 2024 05:02:42 GMT\r\nServer: nginx\r\nContent-Length: 69\r\nContent-Type: text/html\r\n\r\n<html><body><script>top.location='/p/login/';</script></body></html>\n",
   "datamd5" : "f192c778ba9971cccb2fcec90e21e379",
   "datammh3" : -1092385355,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "amazonaws.com"
   ],
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "domain" : [
         "amazon.com",
         "amazonaws.com"
      ],
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "AMAZO-SYD",
      "organization" : "Amazon Corporate Services Pty Ltd",
      "subnet" : "3.24.0.0/14"
   },
   "host" : [
      "ec2-3-26-13-118"
   ],
   "hostname" : [
      "ec2-3-26-13-118.ap-southeast-2.compute.amazonaws.com"
   ],
   "ip" : "3.26.13.118",
   "ipv6" : "false",
   "latitude" : "-33.8715",
   "location" : "-33.8715,151.2006",
   "longitude" : "151.2006",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "ec2-3-26-13-118.ap-southeast-2.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "ap-southeast-2.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subnet" : "3.16.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 88.132.110.79:50070 (tcp/http) - last seen on 2024-11-07 at 05:02:15 UTC

    • IP
      88.132.110.79
      Network
      88.132.0.0/17
      Domain(s)
      prtelecom.hu
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      Linux Linux Kernel
      URL

      http://88.132.110.79:50070/ 200

      HTTP Title
      SynNAS&nbsp;-&nbsp;Synology&nbsp;DiskStation
      HTTP Description
      DiskStation provides a full-featured network attached storage (NAS) solution to help you manage, backup and share data among Windows, Mac and Linux easily.
      HTTP Keyword(s)
      multitasking personal cloud web application
      Reverse DNS
      host-88-132-110-79.prtelecom.hu
      ASN
      AS35311
      Organization
      PR-TELECOM ZRt.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0f59200ea2713b6daffc42db68cc44ec
      HTTP Header MD5
      7d15660c867ed37be145a9c82ea9cf32
      HTTP Body MD5
      84c85a749e032df481b1707227d04c4a 
    • HTTP/1.1 200 OK
Server: nginx
Date: Thu, 07 Nov 2024 05:02:17 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: base-uri 'self';  connect-src data: ws: wss: http: https:; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' data: blob: https://*.synology.com https://*.synology.cn; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com https://global.download.synology.com; media-src 'self' data: about: https://*.synology.com https://help.synology.cn;  script-src 'self' 'unsafe-eval' data: blob: https://maps.google.com https://ajax.googleapis.com https://help.synology.com https://help.synology.cn; style-src 'self' 'unsafe-inline' https://*.googleapis.com;

bca
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=11" />
<meta name="msapplication-TileImage" content="resources/images/icon_tile.png?v=4398" />
<meta name="application-name" content="SynNAS&nbsp;-&nbsp;Synology&nbsp;DiskStation" />
<meta name="msapplication-TileColor" content="#246BB3"/>
<meta name="description" content="DiskStation provides a full-featured network attached storage (NAS) solution to help you manage, backup and share data among Windows, Mac and Linux easily." />
<meta name="keywords" content="Multitasking,Web Application,Personal Cloud" />

<link rel="apple-touch-icon" href="webman/resources/images/icon_dsm_96.png?v=40438" />
<link rel="mask-icon" href="webman/safari_pin_icon.svg" color="#0086E5" />
<link rel="icon" href="webman/favicon.ico?v=40438" />
<link rel="icon" href="webman/resources/images/icon_dsm_96.png?v=40438" sizes="96x96"/>
<link rel="icon" href="webman/resources/images/icon_dsm_64.png?v=40438" sizes="64x64"/>
<link rel="icon" href="webman/resources/images/icon_dsm_48.png?v=40438" sizes="48x48"/>
<link rel="icon" href="webman/resources/images/icon_dsm_32.png?v=40438" sizes="32x32"/>
<link rel="icon" href="webman/resources/images/icon_dsm_16.png?v=40438" sizes="16x16"/>
<title>SynNAS&nbsp;-&nbsp;Synology&nbsp;DiskStation</title>
<link rel="stylesheet" type="text/css" href="webman/unsupported-browsers/dist/bundle.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="scripts/ext-3.4/resources/css/ext-all.css?v=1650348555" />
<link rel="stylesheet" type="text/css" href="scripts/syno-vue-components/style/syno-vue-components.css?v=1652869476" />
<link rel="stylesheet" type="text/css" href="scripts/scrollbar/flexcroll.css?v=1650348555" />
<link rel="stylesheet" type="text/css" href="scripts/ext-3/ux/ux-all.css?v=1650348555" />
<link rel="stylesheet" type="text/css" href="synoSDSjslib/sds.css?v=1654081517" />
<link rel="stylesheet" type="text/css" href="webman/desktop/dist/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/taskbar/dist/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/login/dist/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/resources/css/desktop.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/DiskMessageHandler/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/DSMNotify/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/PhotoViewer/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/TaskSchedulerUtils/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/OTPWizard/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/SharingManager/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/VideoPla
1000
yer2/style.css?v=1649656611" />
<link rel="stylesheet" type="text/css" href="webman/modules/AdminCenter/style.css?v=1661226912" />
<link rel="stylesheet" type="text/css" href="webman/modules/StorageManager/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/UpdateMaskApp/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/ResourceMonitor/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/PersonalSettings/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/MyDSCenter/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/Widgets/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/Share/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/PkgManApp/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/FileChooserV6/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/ResetAdminApp/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/EnableNewUpdateSetting/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/TinyMCE/style.css?v=1635321605" />
<link rel="stylesheet" type="text/css" href="webman/modules/PollingTask/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/AudioPlayer/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/ClipBoardJS/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/Utils/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/DesktopProgress/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/ActiveInsightUpdateNotify/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/ExternalDevices/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/SecurityScan/style.css?v=1652943644" />
<link rel="stylesheet" type="text/css" href="webman/modules/C3/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/BackgroundTaskMonitor/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/WelcomeApp/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/SupportForm/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/TaskSchedulerWidget/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/SystemInfoApp/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/ConfigBackup/style.css?v=1660704937" />
<link rel="stylesheet" type="text/css" href="webman/modules/LogCenter/style.css?v=1657013615" />
<link rel="stylesheet" type="text/css" href="webman/modules/HelpBrowser/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/HotkeyManager/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/DataDrivenDocuments/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/FileChooser/style.css?v=1661757678" />
<link rel="stylesheet" type="text/css" href="webman/modules/DisableAdminNotification/style.css?v=1661421011" />
<link rel="stylesheet" type="text/css" href="webman/modules/BandwidthControl/style.css?v=1634102886" />
<link rel="stylesheet" type="text/css" href="webman/3rdparty/FileTaskMonitor/style.css?v=1657097197" />
<link rel="stylesheet" type="text/css" href="webman/3rdparty/AntiVirus/style.css?v=1676872996" />
<link rel="stylesheet" type="text/css" href="webman/3rdparty/FileBrowser/style.css?v=1657097204" />
<link rel="stylesheet" type="text/css" href="webman/3rdparty/ActiveInsight/style.css?v=1706865024" />
<link rel="stylesheet" type="text/css" href="webman/3rdparty/VPNCenter/style.css?v=1656648365" />
<link rel="stylesheet" type="te
deb
xt/css" href="webman/3rdparty/SynoFinder/style.css?v=1670389737" />
<link rel="stylesheet" type="text/css" href="webman/3rdparty/OAuthService/style.css?v=1618330423" />
<link rel="stylesheet" type="text/css" href="webman/3rdparty/ScsiTarget/style.css?v=1659958512" />

</head>
<body role="application">
<div id="sds-wallpaper"></div>
<!-- Don't contain any text node to avoid IE insertBefore bug -->
<div id="sds-login-vue"></div>
<div id="framework-attach"></div>
<script type="text/javascript" src="webapi/entry.cgi?api=SYNO.Core.Desktop.SessionData&version=1&method=getjs&SynoToken=&v=1656670912"></script>
<script type="text/javascript" src="scripts/babel-polyfill/polyfill.js?v=1650348555"></script>
<script type="text/javascript" src="scripts/synowebapi.js/synowebapi.min.js?v=1653287912"></script>
<script type="text/javascript" src="scripts/synocredential.js/synocredential.min.js?v=1661507553"></script>
<script type="text/javascript" src="webapi/entry.cgi?api=SYNO.Core.Desktop.Defs&version=1&method=getjs&v=1694356601"></script>
<script type="text/javascript" src="webapi/entry.cgi?api=SYNO.Core.Desktop.JSUIString&version=1&method=getjs&lang=enu&v=1693413655"></script>
<script type="text/javascript" src="webapi/entry.cgi?api=SYNO.Core.Desktop.UIString&version=1&method=getjs&lang=enu&v=1680885152"></script>
<script type="text/javascript" src="webman/unsupported-browsers/dist/bundle.js?v=1661421011"></script>
<script type="text/javascript" src="scripts/ext-3/adapter/ext/ext-base.js?v=1650348555"></script>
<script type="text/javascript" src="scripts/ext-3/ext-all.js?v=1650348555"></script>
<script type="text/javascript" src="scripts/ext-3/ux/ux-all.js?v=1650348555"></script>
<script type="text/javascript" src="scripts/scrollbar/flexcroll.js?v=1650348555"></script>
<script type="text/javascript" src="scripts/noise/noise-c.js?v=1650348555"></script>
<script type="text/javascript" src="scripts/noise/constants.js?v=1650348555"></script>
<script type="text/javascript" src="scripts/noise/index.js?v=1650348555"></script>
<script type="text/javascript" src="scripts/noise/sodium.js?v=1650348555"></script>
<script type="text/javascript" src="scripts/vue/vue.min.js?v=1633587521"></script>
<script type="text/javascript" src="scripts/vuex/vuex.min.js?v=1585722123"></script>
<script type="text/javascript" src="scripts/vue-router/vue-router.min.js?v=1648175353"></script>
<script type="text/javascript" src="scripts/syno-vue-components/syno-vue-components.min.js?v=1652869476"></script>
<script type="text/javascript" src="webman/taskbar/dist/dsm.taskbar.bundle.js?v=1661421011"></script>
<script type="text/javascript" src="synoSDSjslib/vendor.js?v=1654081517"></script>
<script type="text/javascript" src="synoSDSjslib/sds.js?v=1678269761"></script>
<script type="text/javascript" src="webman/sds/dist/dsm.common.bundle.js?v=1661421011"></script>
<script type="text/javascript" src="webman/desktop/dist/dsm.desktop.bundle.js?v=1661421011"></script>
<script type="text/javascript" src="webman/sds/dist/dsm.sds.bundle.js?v=1661421011"></script>
<script type="text/javascript" src="webman/login/dist/dsm.login.bundle.js?v=1661421011"></script>
<script type="text/javascript" src="webman/entry/dist/dsm.entry.bundle.js?v=1661421011"></script>

<div class="pre-load-x-window-br"></div>
</body>
<noscript>
<div class='syno-no-script'>
<div class='title align-center'>This page can't be displayed</div>
<div class='desc align-center'>Please allow your browser to run JavaScript.</div>
<div class='icon align-center'></div>
</div>
</noscript>
</html>

0


    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:02:15.000Z",
   "app" : {
      "extract" : {
         "domain" : [
            "synology.com",
            "googleapis.com",
            "synology.cn",
            "google.com"
         ],
         "hostname" : [
            "ajax.googleapis.com",
            "global.download.synology.com",
            "help.synology.cn",
            "help.synology.com",
            "maps.google.com",
            "www.synology.cn"
         ],
         "url" : [
            "https://ajax.googleapis.com",
            "https://global.download.synology.com",
            "https://help.synology.cn",
            "https://help.synology.cn/;",
            "https://help.synology.com",
            "https://maps.google.com",
            "https://www.synology.cn/"
         ]
      },
      "favicon" : {
         "url" : "/webman/safari_pin_icon.svg"
      },
      "http" : {
         "bodymd5" : "84c85a749e032df481b1707227d04c4a",
         "bodymmh3" : -1501842088,
         "description" : "DiskStation provides a full-featured network attached storage (NAS) solution to help you manage, backup and share data among Windows, Mac and Linux easily.",
         "headermd5" : "7d15660c867ed37be145a9c82ea9cf32",
         "headermmh3" : -712361228,
         "keywords" : [
            "multitasking",
            "personal cloud",
            "web application"
         ],
         "title" : "SynNAS&nbsp;-&nbsp;Synology&nbsp;DiskStation"
      },
      "length" : 11921
   },
   "asn" : "AS35311",
   "city" : "J\u00e1szj\u00e1k\u00f3halma",
   "country" : "HU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:02:17 GMT\r\nContent-Type: text/html; charset=\"UTF-8\"\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nVary: Accept-Encoding\r\nCache-control: no-store\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SAMEORIGIN\r\nP3P: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\nContent-Security-Policy: base-uri 'self';  connect-src data: ws: wss: http: https:; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' data: blob: https://*.synology.com https://*.synology.cn; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com https://global.download.synology.com; media-src 'self' data: about: https://*.synology.com https://help.synology.cn;  script-src 'self' 'unsafe-eval' data: blob: https://maps.google.com https://ajax.googleapis.com https://help.synology.com https://help.synology.cn; style-src 'self' 'unsafe-inline' https://*.googleapis.com;\r\n\r\nbca\r\n<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta http-equiv=\"X-UA-Compatible\" content=\"IE=11\" />\n<meta name=\"msapplication-TileImage\" content=\"resources/images/icon_tile.png?v=4398\" />\n<meta name=\"application-name\" content=\"SynNAS&nbsp;-&nbsp;Synology&nbsp;DiskStation\" />\n<meta name=\"msapplication-TileColor\" content=\"#246BB3\"/>\n<meta name=\"description\" content=\"DiskStation provides a full-featured network attached storage (NAS) solution to help you manage, backup and share data among Windows, Mac and Linux easily.\" />\n<meta name=\"keywords\" content=\"Multitasking,Web Application,Personal Cloud\" />\n\n<link rel=\"apple-touch-icon\" href=\"webman/resources/images/icon_dsm_96.png?v=40438\" />\n<link rel=\"mask-icon\" href=\"webman/safari_pin_icon.svg\" color=\"#0086E5\" />\n<link rel=\"icon\" href=\"webman/favicon.ico?v=40438\" />\n<link rel=\"icon\" href=\"webman/resources/images/icon_dsm_96.png?v=40438\" sizes=\"96x96\"/>\n<link rel=\"icon\" href=\"webman/resources/images/icon_dsm_64.png?v=40438\" sizes=\"64x64\"/>\n<link rel=\"icon\" href=\"webman/resources/images/icon_dsm_48.png?v=40438\" sizes=\"48x48\"/>\n<link rel=\"icon\" href=\"webman/resources/images/icon_dsm_32.png?v=40438\" sizes=\"32x32\"/>\n<link rel=\"icon\" href=\"webman/resources/images/icon_dsm_16.png?v=40438\" sizes=\"16x16\"/>\n<title>SynNAS&nbsp;-&nbsp;Synology&nbsp;DiskStation</title>\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/unsupported-browsers/dist/bundle.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"scripts/ext-3.4/resources/css/ext-all.css?v=1650348555\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"scripts/syno-vue-components/style/syno-vue-components.css?v=1652869476\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"scripts/scrollbar/flexcroll.css?v=1650348555\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"scripts/ext-3/ux/ux-all.css?v=1650348555\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"synoSDSjslib/sds.css?v=1654081517\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/desktop/dist/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/taskbar/dist/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/login/dist/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/resources/css/desktop.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/DiskMessageHandler/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/DSMNotify/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/PhotoViewer/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/TaskSchedulerUtils/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/OTPWizard/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/SharingManager/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/VideoPla\r\n1000\r\nyer2/style.css?v=1649656611\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/AdminCenter/style.css?v=1661226912\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/StorageManager/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/UpdateMaskApp/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/ResourceMonitor/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/PersonalSettings/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/MyDSCenter/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/Widgets/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/Share/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/PkgManApp/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/FileChooserV6/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/ResetAdminApp/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/EnableNewUpdateSetting/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/TinyMCE/style.css?v=1635321605\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/PollingTask/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/AudioPlayer/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/ClipBoardJS/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/Utils/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/DesktopProgress/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/ActiveInsightUpdateNotify/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/ExternalDevices/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/SecurityScan/style.css?v=1652943644\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/C3/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/BackgroundTaskMonitor/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/WelcomeApp/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/SupportForm/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/TaskSchedulerWidget/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/SystemInfoApp/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/ConfigBackup/style.css?v=1660704937\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/LogCenter/style.css?v=1657013615\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/HelpBrowser/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/HotkeyManager/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/DataDrivenDocuments/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/FileChooser/style.css?v=1661757678\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/DisableAdminNotification/style.css?v=1661421011\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/modules/BandwidthControl/style.css?v=1634102886\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/3rdparty/FileTaskMonitor/style.css?v=1657097197\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/3rdparty/AntiVirus/style.css?v=1676872996\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/3rdparty/FileBrowser/style.css?v=1657097204\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/3rdparty/ActiveInsight/style.css?v=1706865024\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/3rdparty/VPNCenter/style.css?v=1656648365\" />\n<link rel=\"stylesheet\" type=\"te\r\ndeb\r\nxt/css\" href=\"webman/3rdparty/SynoFinder/style.css?v=1670389737\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/3rdparty/OAuthService/style.css?v=1618330423\" />\n<link rel=\"stylesheet\" type=\"text/css\" href=\"webman/3rdparty/ScsiTarget/style.css?v=1659958512\" />\n\n</head>\n<body role=\"application\">\n<div id=\"sds-wallpaper\"></div>\n<!-- Don't contain any text node to avoid IE insertBefore bug -->\n<div id=\"sds-login-vue\"></div>\n<div id=\"framework-attach\"></div>\n<script type=\"text/javascript\" src=\"webapi/entry.cgi?api=SYNO.Core.Desktop.SessionData&version=1&method=getjs&SynoToken=&v=1656670912\"></script>\n<script type=\"text/javascript\" src=\"scripts/babel-polyfill/polyfill.js?v=1650348555\"></script>\n<script type=\"text/javascript\" src=\"scripts/synowebapi.js/synowebapi.min.js?v=1653287912\"></script>\n<script type=\"text/javascript\" src=\"scripts/synocredential.js/synocredential.min.js?v=1661507553\"></script>\n<script type=\"text/javascript\" src=\"webapi/entry.cgi?api=SYNO.Core.Desktop.Defs&version=1&method=getjs&v=1694356601\"></script>\n<script type=\"text/javascript\" src=\"webapi/entry.cgi?api=SYNO.Core.Desktop.JSUIString&version=1&method=getjs&lang=enu&v=1693413655\"></script>\n<script type=\"text/javascript\" src=\"webapi/entry.cgi?api=SYNO.Core.Desktop.UIString&version=1&method=getjs&lang=enu&v=1680885152\"></script>\n<script type=\"text/javascript\" src=\"webman/unsupported-browsers/dist/bundle.js?v=1661421011\"></script>\n<script type=\"text/javascript\" src=\"scripts/ext-3/adapter/ext/ext-base.js?v=1650348555\"></script>\n<script type=\"text/javascript\" src=\"scripts/ext-3/ext-all.js?v=1650348555\"></script>\n<script type=\"text/javascript\" src=\"scripts/ext-3/ux/ux-all.js?v=1650348555\"></script>\n<script type=\"text/javascript\" src=\"scripts/scrollbar/flexcroll.js?v=1650348555\"></script>\n<script type=\"text/javascript\" src=\"scripts/noise/noise-c.js?v=1650348555\"></script>\n<script type=\"text/javascript\" src=\"scripts/noise/constants.js?v=1650348555\"></script>\n<script type=\"text/javascript\" src=\"scripts/noise/index.js?v=1650348555\"></script>\n<script type=\"text/javascript\" src=\"scripts/noise/sodium.js?v=1650348555\"></script>\n<script type=\"text/javascript\" src=\"scripts/vue/vue.min.js?v=1633587521\"></script>\n<script type=\"text/javascript\" src=\"scripts/vuex/vuex.min.js?v=1585722123\"></script>\n<script type=\"text/javascript\" src=\"scripts/vue-router/vue-router.min.js?v=1648175353\"></script>\n<script type=\"text/javascript\" src=\"scripts/syno-vue-components/syno-vue-components.min.js?v=1652869476\"></script>\n<script type=\"text/javascript\" src=\"webman/taskbar/dist/dsm.taskbar.bundle.js?v=1661421011\"></script>\n<script type=\"text/javascript\" src=\"synoSDSjslib/vendor.js?v=1654081517\"></script>\n<script type=\"text/javascript\" src=\"synoSDSjslib/sds.js?v=1678269761\"></script>\n<script type=\"text/javascript\" src=\"webman/sds/dist/dsm.common.bundle.js?v=1661421011\"></script>\n<script type=\"text/javascript\" src=\"webman/desktop/dist/dsm.desktop.bundle.js?v=1661421011\"></script>\n<script type=\"text/javascript\" src=\"webman/sds/dist/dsm.sds.bundle.js?v=1661421011\"></script>\n<script type=\"text/javascript\" src=\"webman/login/dist/dsm.login.bundle.js?v=1661421011\"></script>\n<script type=\"text/javascript\" src=\"webman/entry/dist/dsm.entry.bundle.js?v=1661421011\"></script>\n\n<div class=\"pre-load-x-window-br\"></div>\n</body>\n<noscript>\n<div class='syno-no-script'>\n<div class='title align-center'>This page can't be displayed</div>\n<div class='desc align-center'>Please allow your browser to run JavaScript.</div>\n<div class='icon align-center'></div>\n</div>\n</noscript>\n</html>\n\r\n0\r\n\r\n",
   "datamd5" : "0f59200ea2713b6daffc42db68cc44ec",
   "datammh3" : -1450142832,
   "device" : {
      "class" : "<enterprise field>: device.class",
      "product" : "<enterprise field>: device.product",
      "productvendor" : "<enterprise field>: device.productvendor"
   },
   "domain" : [
      "prtelecom.hu"
   ],
   "host" : [
      "host-88-132-110-79"
   ],
   "hostname" : [
      "host-88-132-110-79.prtelecom.hu"
   ],
   "ip" : "88.132.110.79",
   "ipv6" : "false",
   "latitude" : "47.5221",
   "location" : "47.5221,19.9856",
   "longitude" : "19.9856",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "PR-TELECOM ZRt.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "host-88-132-110-79.prtelecom.hu"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "88.132.0.0/17",
   "tld" : [
      "hu"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 223.113.149.56:50070 (tcp/http) - last seen on 2024-11-07 at 05:01:47 UTC

    • IP
      223.113.149.56
      Network
      223.112.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://223.113.149.56:50070/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS56046
      Organization
      China Mobile communications corporation
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9f698877f7dcbe8b0dc32f2a6122abcb
      HTTP Header MD5
      715a10f78e00857b9c538cd7d3c52b56
      HTTP Body MD5
      fc25fbd1584b61c4605faf6a7caf3d81 
    • HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:01:46 GMT
Content-Type: text/html
Content-Length: 2429
Connection: close
x-ws-request-id: 672c49ba_PS-CZX-01udk177_15763-35919

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 05:01:46 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: PS-CZX-01udk177
				<br>URL: http://<ip>:50070/
				<br>Request-Id: 672c49ba_PS-CZX-01udk177_15763-35919
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G">http://<ip>:50070/</pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>
    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:01:47.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "fc25fbd1584b61c4605faf6a7caf3d81",
         "bodymmh3" : 256145093,
         "headermd5" : "715a10f78e00857b9c538cd7d3c52b56",
         "headermmh3" : 810088293,
         "title" : "400 Bad Request"
      },
      "length" : 2604
   },
   "asn" : "AS56046",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:01:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 2429\r\nConnection: close\r\nx-ws-request-id: 672c49ba_PS-CZX-01udk177_15763-35919\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 05:01:46 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-CZX-01udk177\n\t\t\t\t<br>URL: http://<ip>:50070/\n\t\t\t\t<br>Request-Id: 672c49ba_PS-CZX-01udk177_15763-35919\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:50070/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "9f698877f7dcbe8b0dc32f2a6122abcb",
   "datammh3" : -1324061144,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS56046",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinamobile.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CMNET",
      "organization" : "China Mobile",
      "subnet" : "223.112.0.0/15"
   },
   "ip" : "223.113.149.56",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Mobile communications corporation",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 50070,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "223.112.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}