8.141.15.227
As of: Jul 09, 2025 10:23pm UTC |
Latest
{
"ip": "8.141.15.227",
"services": [
{
"_decoded": "ftp",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\r\n220-You are user number 1 of 50 allowed.\r\n220-Local time is now 03:31. Server port: 21.\r\n220-This is a private system - No anonymous login\r\n220-IPv6 connections are also welcome on this server.\r\n220 You will be disconnected after 15 minutes of inactivity.\r\n",
"banner_hashes": [
"sha256:e73bcefe04b247fb3afa790ef54f7b489fa9905d8077cf5eb275d914bc0e3275"
],
"banner_hex": "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",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "FTP",
"ftp": {
"_encoding": {
"banner": "DISPLAY_UTF8",
"auth_tls_response": "DISPLAY_UTF8"
},
"banner": "220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------\r\n220-You are user number 1 of 50 allowed.\r\n220-Local time is now 03:31. Server port: 21.\r\n220-This is a private system - No anonymous login\r\n220-IPv6 connections are also welcome on this server.\r\n220 You will be disconnected after 15 minutes of inactivity.\r\n",
"auth_tls_response": "234 AUTH TLS OK.\r\n",
"status_code": 220,
"status_meaning": "Service ready for new user.",
"implicit_tls": false
},
"labels": [
"file-sharing"
],
"observed_at": "2025-07-09T19:31:19.703066694Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 21,
"service_name": "FTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:pureftpd:pure\\-ftpd:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "PureFTPd",
"product": "Pure-FTPd",
"other": {
"family": "Pure-FTPd"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"product": "pureftpd",
"other": {
"config": "[privsep] [TLS"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.138.180",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "ssh",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11",
"banner_hashes": [
"sha256:2bf2033dbf501c6d1f063e64b737f30c2ab11dd1fb2e65a7dd4b2a88c71f23e5"
],
"banner_hex": "5353482d322e302d4f70656e5353485f382e327031205562756e74752d347562756e7475302e3131",
"discovery_method": "PREDICTIVE_METHOD_12",
"extended_service_name": "SSH",
"labels": [
"remote-access"
],
"observed_at": "2025-07-09T19:36:16.021813540Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 22,
"service_name": "SSH",
"software": [
{
"product": "openssh",
"other": {
"comment": "Ubuntu-4ubuntu0.11"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
"part": "o",
"product": "linux",
"source": "OSI_TRANSPORT_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Ubuntu",
"product": "Linux",
"version": "20.04",
"other": {
"family": "Linux"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:a:openbsd:openssh:8.2:p1:*:*:*:*:*:*",
"part": "a",
"vendor": "OpenBSD",
"product": "OpenSSH",
"version": "8.2",
"update": "p1",
"other": {
"family": "OpenSSH"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "167.94.138.174",
"ssh": {
"endpoint_id": {
"_encoding": {
"raw": "DISPLAY_UTF8"
},
"raw": "SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11",
"protocol_version": "2.0",
"software_version": "OpenSSH_8.2p1",
"comment": "Ubuntu-4ubuntu0.11"
},
"kex_init_message": {
"kex_algorithms": [
"curve25519-sha256",
"[email protected]",
"ecdh-sha2-nistp256",
"ecdh-sha2-nistp384",
"ecdh-sha2-nistp521",
"diffie-hellman-group-exchange-sha256",
"diffie-hellman-group16-sha512",
"diffie-hellman-group18-sha512",
"diffie-hellman-group14-sha256",
"[email protected]"
],
"host_key_algorithms": [
"rsa-sha2-512",
"rsa-sha2-256",
"ssh-rsa",
"ecdsa-sha2-nistp256",
"ssh-ed25519"
],
"client_to_server_ciphers": [
"[email protected]",
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"[email protected]",
"[email protected]"
],
"server_to_client_ciphers": [
"[email protected]",
"aes128-ctr",
"aes192-ctr",
"aes256-ctr",
"[email protected]",
"[email protected]"
],
"client_to_server_macs": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"hmac-sha2-256",
"hmac-sha2-512",
"hmac-sha1"
],
"server_to_client_macs": [
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"[email protected]",
"hmac-sha2-256",
"hmac-sha2-512",
"hmac-sha1"
],
"client_to_server_compression": [
"none",
"[email protected]"
],
"server_to_client_compression": [
"none",
"[email protected]"
],
"first_kex_follows": false
},
"algorithm_selection": {
"kex_algorithm": "[email protected]",
"host_key_algorithm": "ecdsa-sha2-nistp256",
"client_to_server_alg_group": {
"cipher": "aes128-ctr",
"mac": "hmac-sha2-256",
"compression": "none"
},
"server_to_client_alg_group": {
"cipher": "aes128-ctr",
"mac": "hmac-sha2-256",
"compression": "none"
}
},
"server_host_key": {
"fingerprint_sha256": "1424a5e194dbf02fba5471cb04a7c1544ce8df28316cc80b4962bf66059224d9",
"ecdsa_public_key": {
"_encoding": {
"b": "DISPLAY_BASE64",
"gx": "DISPLAY_BASE64",
"gy": "DISPLAY_BASE64",
"n": "DISPLAY_BASE64",
"p": "DISPLAY_BASE64",
"x": "DISPLAY_BASE64",
"y": "DISPLAY_BASE64"
},
"b": "WsY12Ko6k+ez671VdpiGvGUdBrDMU7D2O848PifSYEs=",
"curve": "P-256",
"gx": "axfR8uEsQkf4vOblY6RA8ncDfYEt6zOg9KE5RdiYwpY=",
"gy": "T+NC4v4af5uO5+tKfA+eFivOM1drMV7Oy7ZAaDe/UfU=",
"length": 256,
"n": "/////wAAAAD//////////7zm+q2nF56E87nKwvxjJVE=",
"p": "/////wAAAAEAAAAAAAAAAAAAAAD///////////////8=",
"x": "0QSy5hOthlhWNRO7DCJ1OPQYe79RZZxC41p9iNxFadE=",
"y": "cwVipBNSmZqHnYgE+9jk57793UBlEN9s7yGcLhQi9iU="
}
},
"hassh_fingerprint": "779664e66160bf75999f091fce5edb5a"
},
"transport_fingerprint": {
"id": 262,
"os": "CentOS",
"raw": "65160,64,true,MSTNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 138\r\nLast-Modified: Tue, 26 Nov 2024 12:56:08 GMT\r\nConnection: keep-alive\r\nETag: \"6745c568-8a\"\r\nAccept-Ranges: bytes\r\n",
"banner_hashes": [
"sha256:042b4d161aff1b5462f70d40e6553fd4154dd01106e5da1c3f753f207f88a134"
],
"banner_hex": "485454502f312e3120323030204f4b0d0a5365727665723a206e67696e780d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203133380d0a4c6173742d4d6f6469666965643a205475652c203236204e6f7620323032342031323a35363a303820474d540d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a455461673a202236373435633536382d3861220d0a4163636570742d52616e6765733a2062797465730d0a",
"discovery_method": "PREDICTIVE_METHOD_15",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://8.141.15.227/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"Server": [
"nginx"
],
"_encoding": {
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Accept_Ranges": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8",
"Date": "DISPLAY_UTF8",
"ETag": "DISPLAY_UTF8",
"Last_Modified": "DISPLAY_UTF8"
},
"Content_Length": [
"138"
],
"Content_Type": [
"text/html"
],
"Accept_Ranges": [
"bytes"
],
"Connection": [
"keep-alive"
],
"Date": [
"<REDACTED>"
],
"ETag": [
"\"6745c568-8a\""
],
"Last_Modified": [
"Tue, 26 Nov 2024 12:56:08 GMT"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>404 Not Found</title>"
],
"body_size": 138,
"body": "<html>\n<head><title>404 Not Found</title></head>\n<body>\n<center><h1>404 Not Found</h1></center>\n<hr><center>nginx</center>\n</body>\n</html>",
"body_hashes": [
"sha256:301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f",
"sha1:8d2a4760aa0b47984d11cd1a66448719177fb791",
"tlsh:d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9"
],
"body_hash": "sha1:8d2a4760aa0b47984d11cd1a66448719177fb791",
"html_title": "404 Not Found"
},
"supports_http2": false
},
"observed_at": "2025-07-09T20:40:58.430579303Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 80,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "nginx",
"product": "nginx",
"other": {
"family": "nginx"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "162.142.125.45",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n",
"banner_hashes": [
"sha256:2584d2702600e977a52d8a5828ac2451807e731013082395adce056fc53b2efa"
],
"banner_hex": "485454502f312e312034303320466f7262696464656e0d0a5365727665723a206e67696e780d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203134360d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://8.141.15.227:888/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 403,
"status_reason": "Forbidden",
"headers": {
"Date": [
"<REDACTED>"
],
"_encoding": {
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8"
},
"Server": [
"nginx"
],
"Content_Length": [
"146"
],
"Content_Type": [
"text/html"
],
"Connection": [
"keep-alive"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>403 Forbidden</title>"
],
"body_size": 146,
"body": "<html>\r\n<head><title>403 Forbidden</title></head>\r\n<body>\r\n<center><h1>403 Forbidden</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
"body_hashes": [
"sha256:32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864",
"sha1:4d7b3cb41e90618358d0ee066c45c76227a13747",
"tlsh:2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315"
],
"body_hash": "sha1:4d7b3cb41e90618358d0ee066c45c76227a13747",
"html_title": "403 Forbidden"
},
"supports_http2": false
},
"observed_at": "2025-07-09T21:49:44.038733172Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 888,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "nginx",
"product": "nginx",
"other": {
"family": "nginx"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "206.168.34.91",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 404 Not Found\r\nDate: <REDACTED>\r\nContent-Length: 9\r\nContent-Type: text/plain; charset=utf-8\r\n",
"banner_hashes": [
"sha256:bcf29989f11bd7c2e8712c3d66f4f6ad68d4643a917e9dffd46321c49002f52e"
],
"banner_hex": "485454502f312e3120343034204e6f7420466f756e640d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a20390d0a436f6e74656e742d547970653a20746578742f706c61696e3b20636861727365743d7574662d380d0a",
"discovery_method": "PREDICTIVE_METHOD_27",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://8.141.15.227:1234/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 404,
"status_reason": "Not Found",
"headers": {
"Date": [
"<REDACTED>"
],
"_encoding": {
"Date": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8"
},
"Content_Length": [
"9"
],
"Content_Type": [
"text/plain; charset=utf-8"
]
},
"body_size": 9,
"_encoding": {
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8"
},
"body": "Not found",
"body_hashes": [
"sha256:e3ebaa16dd9d9b9fc107c42183fb6cf9d22927e1af03dbbdfa0ccc38e4e4ac31",
"sha1:475c848673a3f79fa778f01c2bd5a721d4c41707"
],
"body_hash": "sha1:475c848673a3f79fa778f01c2bd5a721d4c41707"
},
"supports_http2": false
},
"observed_at": "2025-07-09T14:06:30.638480765Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 1234,
"service_name": "HTTP",
"source_ip": "167.94.138.184",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 200 OK\r\ndate: <REDACTED>\r\nserver: uvicorn\r\ncontent-type: text/html; charset=utf-8\r\naccept-ranges: bytes\r\ncontent-length: 7254\r\nlast-modified: Sat, 08 Mar 2025 18:16:31 GMT\r\netag: \"4d25154ed904f53590e18bfa6eff49d6\"\r\nx-process-time: 0\r\n",
"banner_hashes": [
"sha256:05f31bef859ac35511fa3aae8719614cd8e6d81f45a6bddbd8dcd524b1a24ef8"
],
"banner_hex": "485454502f312e3120323030204f4b0d0a646174653a20203c52454441435445443e0d0a7365727665723a20757669636f726e0d0a636f6e74656e742d747970653a20746578742f68746d6c3b20636861727365743d7574662d380d0a6163636570742d72616e6765733a2062797465730d0a636f6e74656e742d6c656e6774683a20373235340d0a6c6173742d6d6f6469666965643a205361742c203038204d617220323032352031383a31363a333120474d540d0a657461673a20223464323531353465643930346635333539306531386266613665666634396436220d0a782d70726f636573732d74696d653a20300d0a",
"discovery_method": "PREDICTIVE_METHOD_20",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://8.141.15.227:3000/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 200,
"status_reason": "OK",
"headers": {
"date": [
"<REDACTED>"
],
"_encoding": {
"date": "DISPLAY_UTF8",
"last_modified": "DISPLAY_UTF8",
"content_type": "DISPLAY_UTF8",
"etag": "DISPLAY_UTF8",
"x_process_time": "DISPLAY_UTF8",
"accept_ranges": "DISPLAY_UTF8",
"content_length": "DISPLAY_UTF8",
"server": "DISPLAY_UTF8"
},
"last_modified": [
"Sat, 08 Mar 2025 18:16:31 GMT"
],
"content_type": [
"text/html; charset=utf-8"
],
"etag": [
"\"4d25154ed904f53590e18bfa6eff49d6\""
],
"x_process_time": [
"0"
],
"accept_ranges": [
"bytes"
],
"content_length": [
"7254"
],
"server": [
"uvicorn"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>Open WebUI</title>",
"<meta charset=\"utf-8\" />",
"<meta name=\"apple-mobile-web-app-title\" content=\"Open WebUI\" />",
"<meta name=\"theme-color\" content=\"#171717\" />",
"<meta name=\"robots\" content=\"noindex,nofollow\" />",
"<meta name=\"description\" content=\"Open WebUI\" />"
],
"body_size": 7254,
"body": "<!doctype html>\n<html lang=\"en\">\n\t<head>\n\t\t<meta charset=\"utf-8\" />\n\t\t<link rel=\"icon\" type=\"image/png\" href=\"/static/favicon.png\" />\n\t\t<link rel=\"icon\" type=\"image/png\" href=\"/static/favicon-96x96.png\" sizes=\"96x96\" />\n\t\t<link rel=\"icon\" type=\"image/svg+xml\" href=\"/static/favicon.svg\" />\n\t\t<link rel=\"shortcut icon\" href=\"/static/favicon.ico\" />\n\t\t<link rel=\"apple-touch-icon\" sizes=\"180x180\" href=\"/static/apple-touch-icon.png\" />\n\t\t<meta name=\"apple-mobile-web-app-title\" content=\"Open WebUI\" />\n\n\t\t<link rel=\"manifest\" href=\"/manifest.json\" />\n\t\t<meta\n\t\t\tname=\"viewport\"\n\t\t\tcontent=\"width=device-width, initial-scale=1, maximum-scale=1, viewport-fit=cover\"\n\t\t/>\n\t\t<meta name=\"theme-color\" content=\"#171717\" />\n\t\t<meta name=\"robots\" content=\"noindex,nofollow\" />\n\t\t<meta name=\"description\" content=\"Open WebUI\" />\n\t\t<link\n\t\t\trel=\"search\"\n\t\t\ttype=\"application/opensearchdescription+xml\"\n\t\t\ttitle=\"Open WebUI\"\n\t\t\thref=\"/opensearch.xml\"\n\t\t/>\n\t\t<script src=\"/static/loader.js\" defer></script>\n\n\t\t<script>\n\t\t\tfunction resizeIframe(obj) {\n\t\t\t\tobj.style.height = obj.contentWindow.document.documentElement.scrollHeight + 'px';\n\t\t\t}\n\t\t</script>\n\n\t\t<script>\n\t\t\t// On page load or when changing themes, best to add inline in `head` to avoid FOUC\n\t\t\t(() => {\n\t\t\t\tconst metaThemeColorTag = document.querySelector('meta[name=\"theme-color\"]');\n\t\t\t\tconst prefersDarkTheme = window.matchMedia('(prefers-color-scheme: dark)').matches;\n\n\t\t\t\tif (!localStorage?.theme) {\n\t\t\t\t\tlocalStorage.theme = 'system';\n\t\t\t\t}\n\n\t\t\t\tif (localStorage.theme === 'system') {\n\t\t\t\t\tdocument.documentElement.classList.add(prefersDarkTheme ? 'dark' : 'light');\n\t\t\t\t\tmetaThemeColorTag.setAttribute('content', prefersDarkTheme ? '#171717' : '#ffffff');\n\t\t\t\t} else if (localStorage.theme === 'oled-dark') {\n\t\t\t\t\tdocument.documentElement.style.setProperty('--color-gray-800', '#101010');\n\t\t\t\t\tdocument.documentElement.style.setProperty('--color-gray-850', '#050505');\n\t\t\t\t\tdocument.documentElement.style.setProperty('--color-gray-900', '#000000');\n\t\t\t\t\tdocument.documentElement.style.setProperty('--color-gray-950', '#000000');\n\t\t\t\t\tdocument.documentElement.classList.add('dark');\n\t\t\t\t\tmetaThemeColorTag.setAttribute('content', '#000000');\n\t\t\t\t} else if (localStorage.theme === 'light') {\n\t\t\t\t\tdocument.documentElement.classList.add('light');\n\t\t\t\t\tmetaThemeColorTag.setAttribute('content', '#ffffff');\n\t\t\t\t} else if (localStorage.theme === 'her') {\n\t\t\t\t\tdocument.documentElement.classList.add('dark');\n\t\t\t\t\tdocument.documentElement.classList.add('her');\n\t\t\t\t\tmetaThemeColorTag.setAttribute('content', '#983724');\n\t\t\t\t} else {\n\t\t\t\t\tdocument.documentElement.classList.add('dark');\n\t\t\t\t\tmetaThemeColorTag.setAttribute('content', '#171717');\n\t\t\t\t}\n\n\t\t\t\twindow.matchMedia('(prefers-color-scheme: dark)').addListener((e) => {\n\t\t\t\t\tif (localStorage.theme === 'system') {\n\t\t\t\t\t\tif (e.matches) {\n\t\t\t\t\t\t\tdocument.documentElement.classList.add('dark');\n\t\t\t\t\t\t\tdocument.documentElement.classList.remove('light');\n\t\t\t\t\t\t\tmetaThemeColorTag.setAttribute('content', '#171717');\n\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\tdocument.documentElement.classList.add('light');\n\t\t\t\t\t\t\tdocument.documentElement.classList.remove('dark');\n\t\t\t\t\t\t\tmetaThemeColorTag.setAttribute('content', '#ffffff');\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t});\n\n\t\t\t\tfunction setSplashImage() {\n\t\t\t\t\tconst logo = document.getElementById('logo');\n\t\t\t\t\tconst isDarkMode = document.documentElement.classList.contains('dark');\n\n\t\t\t\t\tif (isDarkMode) {\n\t\t\t\t\t\tconst darkImage = new Image();\n\t\t\t\t\t\tdarkImage.src = '/static/splash-dark.png';\n\n\t\t\t\t\t\tdarkImage.onload = () => {\n\t\t\t\t\t\t\tlogo.src = '/static/splash-dark.png';\n\t\t\t\t\t\t\tlogo.style.filter = ''; // Ensure no inversion is applied if splash-dark.png exists\n\t\t\t\t\t\t};\n\n\t\t\t\t\t\tdarkImage.onerror = () => {\n\t\t\t\t\t\t\tlogo.style.filter = 'invert(1)'; // Invert image if splash-dark.png is missing\n\t\t\t\t\t\t};\n\t\t\t\t\t}\n\t\t\t\t}\n\n\t\t\t\t// Runs after classes are assigned\n\t\t\t\twindow.onload = setSplashImage;\n\t\t\t})();\n\t\t</script>\n\n\t\t<title>Open WebUI</title>\n\n\t\t\n\t\t<link rel=\"modulepreload\" href=\"/_app/immutable/entry/start.DGQ-PK4v.js\">\n\t\t<link rel=\"modulepreload\" href=\"/_app/immutable/chunks/entry.8qUuxI4K.js\">\n\t\t<link rel=\"modulepreload\" href=\"/_app/immutable/chunks/scheduler.COi8bgmk.js\">\n\t\t<link rel=\"modulepreload\" href=\"/_app/immutable/chunks/index.CQwy_pUe.js\">\n\t\t<link rel=\"modulepreload\" href=\"/_app/immutable/entry/app.9wUdDHHM.js\">\n\t\t<link rel=\"modulepreload\" href=\"/_app/immutable/chunks/preload-helper.C1FmrZbK.js\">\n\t\t<link rel=\"modulepreload\" href=\"/_app/immutable/chunks/index.Bs8QJi7D.js\">\n\t</head>\n\n\t<body data-sveltekit-preload-data=\"hover\">\n\t\t<div style=\"display: contents\">\n\t\t\t<script>\n\t\t\t\t{\n\t\t\t\t\t__sveltekit_5ytqer = {\n\t\t\t\t\t\tbase: \"\"\n\t\t\t\t\t};\n\n\t\t\t\t\tconst element = document.currentScript.parentElement;\n\n\t\t\t\t\tPromise.all([\n\t\t\t\t\t\timport(\"/_app/immutable/entry/start.DGQ-PK4v.js\"),\n\t\t\t\t\t\timport(\"/_app/immutable/entry/app.9wUdDHHM.js\")\n\t\t\t\t\t]).then(([kit, app]) => {\n\t\t\t\t\t\tkit.start(app, element);\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t</script>\n\t\t</div>\n\n\t\t<div\n\t\t\tid=\"splash-screen\"\n\t\t\tstyle=\"position: fixed; z-index: 100; top: 0; left: 0; width: 100%; height: 100%\"\n\t\t>\n\t\t\t<style type=\"text/css\" nonce=\"\">\n\t\t\t\thtml {\n\t\t\t\t\toverflow-y: scroll !important;\n\t\t\t\t}\n\t\t\t</style>\n\n\t\t\t<img\n\t\t\t\tid=\"logo\"\n\t\t\t\tstyle=\"\n\t\t\t\t\tposition: absolute;\n\t\t\t\t\twidth: auto;\n\t\t\t\t\theight: 6rem;\n\t\t\t\t\ttop: 44%;\n\t\t\t\t\tleft: 50%;\n\t\t\t\t\ttransform: translateX(-50%);\n\t\t\t\t\"\n\t\t\t\tsrc=\"/static/splash.png\"\n\t\t\t/>\n\n\t\t\t<div\n\t\t\t\tstyle=\"\n\t\t\t\t\tposition: absolute;\n\t\t\t\t\ttop: 33%;\n\t\t\t\t\tleft: 50%;\n\n\t\t\t\t\twidth: 24rem;\n\t\t\t\t\ttransform: translateX(-50%);\n\n\t\t\t\t\tdisplay: flex;\n\t\t\t\t\tflex-direction: column;\n\t\t\t\t\talign-items: center;\n\t\t\t\t\"\n\t\t\t>\n\t\t\t\t<img\n\t\t\t\t\tid=\"logo-her\"\n\t\t\t\t\tstyle=\"width: auto; height: 13rem\"\n\t\t\t\t\tsrc=\"/static/splash.png\"\n\t\t\t\t\tclass=\"animate-pulse-fast\"\n\t\t\t\t/>\n\n\t\t\t\t<div style=\"position: relative; width: 24rem; margin-top: 0.5rem\">\n\t\t\t\t\t<div\n\t\t\t\t\t\tid=\"progress-background\"\n\t\t\t\t\t\tstyle=\"\n\t\t\t\t\t\t\tposition: absolute;\n\t\t\t\t\t\t\twidth: 100%;\n\t\t\t\t\t\t\theight: 0.75rem;\n\n\t\t\t\t\t\t\tborder-radius: 9999px;\n\t\t\t\t\t\t\tbackground-color: #fafafa9a;\n\t\t\t\t\t\t\"\n\t\t\t\t\t></div>\n\n\t\t\t\t\t<div\n\t\t\t\t\t\tid=\"progress-bar\"\n\t\t\t\t\t\tstyle=\"\n\t\t\t\t\t\t\tposition: absolute;\n\t\t\t\t\t\t\twidth: 0%;\n\t\t\t\t\t\t\theight: 0.75rem;\n\t\t\t\t\t\t\tborder-radius: 9999px;\n\t\t\t\t\t\t\tbackground-color: #fff;\n\t\t\t\t\t\t\"\n\t\t\t\t\t\tclass=\"bg-white\"\n\t\t\t\t\t></div>\n\t\t\t\t</div>\n\t\t\t</div>\n\n\t\t\t<!-- <span style=\"position: absolute; bottom: 32px; left: 50%; margin: -36px 0 0 -36px\">\n\t\t\t\tFooter content\n\t\t\t</span> -->\n\t\t</div>\n\t</body>\n</html>\n\n<style type=\"text/css\" nonce=\"\">\n\thtml {\n\t\toverflow-y: hidden !important;\n\t}\n\n\t#splash-screen {\n\t\tbackground: #fff;\n\t}\n\n\thtml.dark #splash-screen {\n\t\tbackground: #000;\n\t}\n\n\thtml.her #splash-screen {\n\t\tbackground: #983724;\n\t}\n\n\t#logo-her {\n\t\tdisplay: none;\n\t}\n\n\t#progress-background {\n\t\tdisplay: none;\n\t}\n\n\t#progress-bar {\n\t\tdisplay: none;\n\t}\n\n\thtml.her #logo {\n\t\tdisplay: none;\n\t}\n\n\thtml.her #logo-her {\n\t\tdisplay: block;\n\t\tfilter: invert(1);\n\t}\n\n\thtml.her #progress-background {\n\t\tdisplay: block;\n\t}\n\n\thtml.her #progress-bar {\n\t\tdisplay: block;\n\t}\n\n\t@media (max-width: 24rem) {\n\t\thtml.her #progress-background {\n\t\t\tdisplay: none;\n\t\t}\n\n\t\thtml.her #progress-bar {\n\t\t\tdisplay: none;\n\t\t}\n\t}\n\n\t@keyframes pulse {\n\t\t50% {\n\t\t\topacity: 0.65;\n\t\t}\n\t}\n\n\t.animate-pulse-fast {\n\t\tanimation: pulse 1.5s cubic-bezier(0.4, 0, 0.6, 1) infinite;\n\t}\n</style>\n",
"favicons": [
{
"size": 10655,
"name": "http://8.141.15.227:3000/static/favicon.png",
"md5_hash": "695141cd310680d927618640f1645b1d",
"hashes": [
"md5:695141cd310680d927618640f1645b1d",
"sha256:443e444984c0df30efa5d649cc9c1bc73a81aa01b9ec8e75f1c22dd245c89732"
],
"shodan_hash": 1239683376
},
{
"size": 3826,
"name": "http://8.141.15.227:3000/static/favicon-96x96.png",
"md5_hash": "fec6dee6c2b0608fe6a5a9813e3dc5a8",
"hashes": [
"md5:fec6dee6c2b0608fe6a5a9813e3dc5a8",
"sha256:159e33435208b49d10a7a54ba01539314b026d61469e4d6c3caf31ca9a0cc95c"
],
"shodan_hash": 1732684922
},
{
"size": 14615,
"name": "http://8.141.15.227:3000/static/favicon.svg",
"md5_hash": "46b9cc414bd1b88c223b56f7247b409e",
"hashes": [
"md5:46b9cc414bd1b88c223b56f7247b409e",
"sha256:d6a1e5af2bfc77a3fe21ed2653f2fd9469c7fdd5e7fd97f9bffedcf98644b773"
],
"shodan_hash": 310709743
},
{
"size": 15086,
"name": "http://8.141.15.227:3000/static/favicon.ico",
"md5_hash": "48c34cbc9023e65ff2bddf9cfa64091b",
"hashes": [
"md5:48c34cbc9023e65ff2bddf9cfa64091b",
"sha256:4858e81f7867347aca521fc491672a613caa24327712defa0c4a8d44fc05f928"
],
"shodan_hash": 387809057
}
],
"body_hashes": [
"sha256:d25d1378c909533663d18bed86c9dc303ecdd4d60895801e1bb8cd1a7ecd016a",
"sha1:48f50037f3e897439dd966d0c8eab11cb8e61a1b",
"tlsh:24e1d8b1970c690f862a515fb8a173dc293e6435fa611debfc6ef03561c0fd802299e2"
],
"body_hash": "sha1:48f50037f3e897439dd966d0c8eab11cb8e61a1b",
"html_title": "Open WebUI"
},
"supports_http2": false
},
"observed_at": "2025-07-09T20:59:25.043022730Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 3000,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:encode:uvicorn:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Encode",
"product": "uvicorn",
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "206.168.34.198",
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "mysql",
"discovery_method": "IPV4_WALK_FULL_PRIORITY_1",
"extended_service_name": "MYSQL",
"labels": [
"database"
],
"mysql": {
"error_code": 1130,
"error_id": "ER_HOST_NOT_PRIVILEGED",
"error_message": "Host '167.94.146.56' is not allowed to connect to this MySQL server",
"protocol_version": 0,
"connection_id": 0,
"character_set": 0
},
"observed_at": "2025-07-09T22:23:34.841035941Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 3306,
"service_name": "MYSQL",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "Oracle",
"product": "MySQL",
"other": {
"family": "MySQL"
},
"source": "OSI_APPLICATION_LAYER"
},
{
"uniform_resource_identifier": "cpe:2.3:o:*:linux:*:*:*:*:*:*:*:*",
"part": "o",
"product": "linux",
"source": "OSI_TRANSPORT_LAYER"
}
],
"source_ip": "167.94.146.56",
"transport_fingerprint": {
"id": 262,
"os": "CentOS",
"raw": "65160,64,true,MSTNW,1460,false,false"
},
"transport_protocol": "TCP",
"truncated": false
},
{
"_decoded": "http",
"_encoding": {
"banner": "DISPLAY_UTF8",
"banner_hex": "DISPLAY_HEX"
},
"banner": "HTTP/1.1 502 Bad Gateway\r\nServer: nginx\r\nDate: <REDACTED>\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: keep-alive\r\n",
"banner_hashes": [
"sha256:a2239790f971ca1f10e4415f112b367f03e55d37976a1ac2df5ed596a73f0577"
],
"banner_hex": "485454502f312e31203530322042616420476174657761790d0a5365727665723a206e67696e780d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d547970653a20746578742f68746d6c0d0a436f6e74656e742d4c656e6774683a203135300d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a",
"discovery_method": "PREDICTIVE_METHOD_12",
"extended_service_name": "HTTP",
"http": {
"request": {
"method": "GET",
"uri": "http://8.141.15.227:12345/",
"headers": {
"User_Agent": [
"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
],
"_encoding": {
"User_Agent": "DISPLAY_UTF8",
"Accept": "DISPLAY_UTF8"
},
"Accept": [
"*/*"
]
}
},
"response": {
"protocol": "HTTP/1.1",
"status_code": 502,
"status_reason": "Bad Gateway",
"headers": {
"Date": [
"<REDACTED>"
],
"_encoding": {
"Date": "DISPLAY_UTF8",
"Server": "DISPLAY_UTF8",
"Content_Length": "DISPLAY_UTF8",
"Content_Type": "DISPLAY_UTF8",
"Connection": "DISPLAY_UTF8"
},
"Server": [
"nginx"
],
"Content_Length": [
"150"
],
"Content_Type": [
"text/html"
],
"Connection": [
"keep-alive"
]
},
"_encoding": {
"html_tags": "DISPLAY_UTF8",
"body": "DISPLAY_UTF8",
"body_hash": "DISPLAY_UTF8",
"html_title": "DISPLAY_UTF8"
},
"html_tags": [
"<title>502 Bad Gateway</title>"
],
"body_size": 150,
"body": "<html>\r\n<head><title>502 Bad Gateway</title></head>\r\n<body>\r\n<center><h1>502 Bad Gateway</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
"body_hashes": [
"sha256:61b30d408583991fd69f3dec694e154cb652471e663328ad9c8482c9021ab5db",
"sha1:56174f4e4b971b7b25f06b65f6c299d028ec3f14",
"tlsh:21c04c75a6523c1ce4f7767d54c36250d2a5d561075819020044895775c75998eca392"
],
"body_hash": "sha1:56174f4e4b971b7b25f06b65f6c299d028ec3f14",
"html_title": "502 Bad Gateway"
},
"supports_http2": false
},
"observed_at": "2025-07-09T20:02:58.885161033Z",
"perspective_id": "PERSPECTIVE_UNKNOWN",
"port": 12345,
"service_name": "HTTP",
"software": [
{
"uniform_resource_identifier": "cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*",
"part": "a",
"vendor": "nginx",
"product": "nginx",
"other": {
"family": "nginx"
},
"source": "OSI_APPLICATION_LAYER"
}
],
"source_ip": "206.168.34.52",
"transport_protocol": "TCP",
"truncated": false
}
],
"location": {
"continent": "Asia",
"country": "China",
"country_code": "CN",
"city": "Beijing",
"postal_code": "100000",
"timezone": "Asia/Shanghai",
"province": "Beijing",
"coordinates": {
"latitude": 39.9075,
"longitude": 116.39723
}
},
"location_updated_at": "2025-07-04T20:33:14.752637710Z",
"autonomous_system": {
"asn": 37963,
"description": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.",
"bgp_prefix": "8.140.0.0/15",
"name": "ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.",
"country_code": "CN"
},
"autonomous_system_updated_at": "2025-07-04T20:33:14.752703750Z",
"whois": {
"network": {
"handle": "ALICLOUD",
"name": "Aliyun Computing Co.LTD",
"cidrs": [
"8.128.0.0/11"
],
"updated": "2021-04-14T00:00:00Z"
}
},
"operating_system": {
"uniform_resource_identifier": "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:*:*:*:*",
"part": "o",
"vendor": "Ubuntu",
"product": "Linux",
"version": "20.04",
"other": {
"family": "Linux"
}
},
"dns": {},
"last_updated_at": "2025-07-09T22:23:37.292Z",
"labels": [
"database",
"file-sharing",
"remote-access"
]
}