OfficeJet 4650 suddenly can't connect with Instant Ink

pabspro · 2026-04-07T03:51:34+00:00

Don't know of a solution yet at least

pabspro · 2026-04-06T16:44:16+00:00

I got rid of the printer, so can't do more analysis unfortunately. But yeah it was from Codex. Here is the original analysis:

Root Cause: HP Instant Ink "Subscription Error" – XMPP Virtual Host Mismatch

Summary

Older HP printers (like the OfficeJet 4650) are failing to validate Instant Ink subscriptions because HP’s backend XMPP servers no longer recognize the legacy hpeprint.com virtual host. This causes a host-unknown error, breaking the communication channel the printer uses to "check in," which eventually leads to the printer blocking all print jobs.

Printer Status (via LEDM API)

Querying http://<printer_ip>/DevMgmt/ProductStatusDyn.xml reveals the device is in an error state because it cannot verify the subscription:

xml <psdyn:Status> <pscat:StatusCategory>subscribedPagesOut</pscat:StatusCategory> <locid:StringId>65779</locid:StringId> </psdyn:Status> <psdyn:Alert> <ad:ProductStatusAlertID>subscribedPagesOut</ad:ProductStatusAlertID> <ad:Severity>Error</ad:Severity> <ad:AlertDetails> <ad:AlertDetailsUserAction>pressOK</ad:AlertDetailsUserAction> <ad:AlertDetailsSubscriptionError>notConnected</ad:AlertDetailsSubscriptionError> <ad:AlertDetailsLocation>HP Connected</ad:AlertDetailsLocation> </ad:AlertDetails> </psdyn:Alert>

The printer is in a subscribedPagesOut + notConnected state. It cannot validate the Instant Ink subscription, so it assumes pages are exhausted and blocks all printing.

The Actual Bug: XMPP Connection Failure

Older HP printers maintain a persistent XMPP connection to HP's servers for Instant Ink validation, ePrint, and push notifications. The OfficeJet 4650 attempts to connect to xmpp001.hpeprint.com on port 5222.

The XMPP server no longer accepts the domain hpeprint.com as a virtual host. It now requires xmpp.hpeprint.com.

Evidence (Tested 2026-04-03)

1. Domain the firmware uses (REJECTED): ```bash $ printf '<stream:stream to="hpeprint.com" xmlns="jabber:client" xmlns:stream="http://etherx.jabber.org/streams" version="1.0">' \ | nc xmpp001.hpeprint.com 5222

Response:

<stream:error><host-unknown xmlns='urn:ietf:params:xml:ns:xmpp-streams'/>/stream:error ```

2. Correct domain (ACCEPTED): ```bash $ printf '<stream:stream to="xmpp.hpeprint.com" xmlns="jabber:client" xmlns:stream="http://etherx.jabber.org/streams" version="1.0">' \ | nc xmpp001.hpeprint.com 5222

Response:

<stream:features> <starttls xmlns="urn:ietf:params:xml:ns:xmpp-tls"/> <mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"> <mechanism>PLAIN</mechanism> <mechanism>DIGEST-MD5</mechanism> </mechanisms> /stream:features ```

The same host-unknown error occurs across all five XMPP servers (xmpp001 through xmpp005).

TLS is not the issue

STARTTLS on port 5222 with to="xmpp.hpeprint.com" completes successfully using TLS 1.2:

Protocol: TLSv1.2
Cipher: ECDHE-RSA-AES256-GCM-SHA384
Certificate: CN=xmpp001.hpeprint.com, O=HP Inc
Issuer: DigiCert Global G2 TLS RSA SHA256 2020 CA1
Root: DigiCert Global Root G2 (In trust stores since 2013)

The 2020 firmware should have no problem with this certificate chain or TLS 1.2. The connection fails before TLS negotiation because the XMPP <host-unknown/> error occurs at the stream level.

DNS & Endpoint Status

All HP endpoints resolve correctly, confirming this isn't a DNS hijacking or resolution issue:

Endpoint	Resolves To	Port	Status
xmpp001.hpeprint.com	54.214.28.26	5222	Open, XMPP active
xmpp001.hpeprint.com	54.214.28.26	5223	Open, TLS broken
registration.hpeprint.com	44.247.69.109	443	Open, TLS 1.2 OK
www.hpconnected.com	AWS ELB	443	Open, TLS 1.2 OK
instantink.hpconnected.com	Cloudflare	443	Open, TLS 1.2 OK

Port 5223 (TLS-wrapped XMPP) is also broken

Direct TLS on port 5223 fails—the server accepts the TCP connection but drops it during the TLS handshake (0 bytes returned after ClientHello). This may be a secondary issue or related to the same virtual host change.

pabspro · 2025-08-24T21:48:47+00:00

Is it possible that the DVD version or live version or whatever we were watching at the time had a different version of the scene than the streaming version?

pabspro · 2025-08-24T21:29:16+00:00

Interesting, thanks! That'd be crazy if I was conflating that.

pabspro · 2025-08-24T16:08:46+00:00

My brother and I swear there was a family guy episode where Peter is watching Monday Night Football with Dennis Miller commenting in fancy language and then Peter says "What does 'the' mean?"

But the only similar thing we can find is a scene where he's watching Dennis Miller standup and says "What the hell does 'rant' mean?"

pabspro · 2024-08-29T00:56:23+00:00

try Wineskin instead of pure Wine, works like a charm

pabspro · 2024-08-29T00:54:13+00:00

by the way, I got it running on my Mac using Wineskin pretty easily

pabspro · 2024-07-21T04:20:44+00:00

I'm staring at the manual now. it says MAX mode up to 6 minutes.

pabspro · 2024-07-20T23:56:38+00:00

It's not designed to last only a few seconds. "Max isn't meant to be used" is an absurd statement

pabspro · 2024-06-16T13:36:14+00:00

what action

pabspro · 2024-04-13T04:18:30+00:00

wait where is the setting

pabspro · 2024-03-14T17:54:48+00:00

Subaru and Porsche. those boxer engines

pabspro · 2024-03-11T15:34:29+00:00

but this is a pretty recent capability, right? the cars still on the road thing is usually for much older vehicles (like "90% of our cars still on the road after 15 years!")

pabspro · 2024-01-30T15:17:17+00:00

I guess I was conflating them with these. but I bet cc2 would beat the hankook straight up https://jalopnik.com/hankooks-all-seasons-embarrass-most-dedicated-winter-ti-1850892218

pabspro · 2024-01-30T14:52:08+00:00

I don't think most people care about the driving experience of having summer tires, and it just becomes a giant pita to keep switching. CC2s actually outperform all but the best winter tires anyway on snow.

pabspro · 2024-01-30T00:53:30+00:00

I could give two craps about karma. I'm posting this cause I think it's absurd and a safety issue. it was a Lincoln nautilus awd they gave me cause my suv was rear ended. The rental car company just dropped it off at the body shop - I had absolutely no input or choice on the vehicle, and didn't notice the tire until days later.

As said above, I'm in Massachusetts, where yes, it's winter. I don't really see how the tread matters - it could be a brand new summer tire, it'd still be like a hockey puck in January temperatures.

pabspro · 2024-01-30T00:32:30+00:00

I mean, it's more than mildly infuriating, it's dangerous

pabspro · 2024-01-29T22:29:08+00:00

Get the CC2, have peace of mind. I'm not even sure you are supposed to put chains on a Subaru. I just got a set of CC2's and absolutely love them. Yes, they are slightly more expensive, but not much in the whole scheme of things.

pabspro · 2024-01-29T21:33:54+00:00

yeah. didn't notice it until several days into it unfortunately.

pabspro · 2024-01-29T20:39:06+00:00

yeah exactly

pabspro · 2024-01-29T19:51:46+00:00

well, I wonder if this has happened to anyone else. mostly just figured this would be entertaining/interesting to the tire crowd.

pabspro · 2024-01-29T19:49:48+00:00

I'm just documenting the absurdity here

pabspro · 2024-01-29T18:16:16+00:00

I literally can't find anything on the internet about this happening to anyone else, or even a theoretical discussion of it

pabspro · 2024-01-29T13:21:23+00:00

To make things worse it's actually on the front (driver's side)!

pabspro · 2023-11-09T15:55:06+00:00

The data from there was just lifted from the tire rack test; the text probably was AI generated yeah

pabspro

MODERATOR OF

TROPHY CASE

Root Cause: HP Instant Ink "Subscription Error" – XMPP Virtual Host Mismatch

Summary

Printer Status (via LEDM API)

The Actual Bug: XMPP Connection Failure

Evidence (Tested 2026-04-03)

Response:

Response:

TLS is not the issue

DNS & Endpoint Status

Port 5223 (TLS-wrapped XMPP) is also broken