Returning 10 result(s) out of 258,910 in 0.031 second(s)

  • 211.43.155.119:4343 (tcp/http) - last seen on 2024-11-07 at 03:28:19 UTC

    • IP
      211.43.155.119
      Network
      211.43.152.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://211.43.155.119:4343/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      5e763d895ab34545fd85373d7ef7a5c5
      HTTP Header MD5
      c3afc75670176b4b1c24352e1b2274b0
      HTTP Body MD5
      7e883b8fff5ca5b74ee3e52d71630bee
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 03:28:19 GMT
      Content-Type: text/html
      Content-Length: 2425
      Connection: close
      x-ws-request-id: 672c33d3_VM-DAC-01cje112_2533-31012
      
      <!DOCTYPE html>
      <html>
      	<head>
      		<meta charset="utf-8">
      		<meta http-equiv="X-UA-Compatible" content="IE=edge">
      		<meta name="viewport" content="width=device-width, initial-scale=1">
      		<title>400 Bad Request</title>
      		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
      	</head>
      	<body>
      		<div id="p" class="P">
      			<div class="K">400</div>
      			<div class="O I">Bad Request</div>
      			<p class="J A L">Error Times: Thu, 07 Nov 2024 03:28:19 GMT
      				<br>
      				<span class="F">IP: <srcip></span>Node information: VM-DAC-01cje112
      				<br>URL: http://<ip>:4343/
      				<br>Request-Id: 672c33d3_VM-DAC-01cje112_2533-31012
      				<br>
      				<br>Check:
      				<span class="C G" onclick="s(0)">Details</span></p>
      		</div>
      		<div id="d" class="hide_me P H">
      			<div class="K">ERROR</div>
      			<p class="O I">"The Requested URL could not be retrieved</p>
      			<div class="O">
      				<div>While trying to retrieve the URL:</div>
      				<pre class="B G">http://<ip>:4343/</pre></div>
      			<div class="M">
      				<span>The following error was encountered:</span>
      				<ul class="E">
      					<li class="D G">Invalid Request</li></ul>
      			</div>
      			<div class="M">
      				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
      				<ul class="E G">
      					<li class="D">Missing or unknown request method</li>
      					<li class="D">Missing URL</li>
      					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
      					<li class="D">Request is too large</li>
      					<li class="D">Content-Length missing for POST or PUT requests</li>
      					<li class="D">Illegal character in hostname;underscores are not allowed</li>
      					<li class="D">Range Invalid</li></ul>
      			</div>
      			<a class="N C" href="#" onclick="s(1)">return</a></div>
      		<script type="text/javascript">function e(i) {
      				return document.getElementById(i);
      			}
      			function d(i, t) {
      				e(i).style.display = (t ? 'block': 'none');
      			}
      			function s(e) {
      				d('p', e);
      				d('d', !e);
      			}</script>
      	</body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:28:19.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "7e883b8fff5ca5b74ee3e52d71630bee",
               "bodymmh3" : -997844867,
               "headermd5" : "c3afc75670176b4b1c24352e1b2274b0",
               "headermmh3" : -1110413504,
               "title" : "400 Bad Request"
            },
            "length" : 2600
         },
         "asn" : "AS54994",
         "city" : "San Jose",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:28:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 2425\r\nConnection: close\r\nx-ws-request-id: 672c33d3_VM-DAC-01cje112_2533-31012\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 03:28:19 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: VM-DAC-01cje112\n\t\t\t\t<br>URL: http://<ip>:4343/\n\t\t\t\t<br>Request-Id: 672c33d3_VM-DAC-01cje112_2533-31012\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:4343/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
         "datamd5" : "5e763d895ab34545fd85373d7ef7a5c5",
         "datammh3" : 723101470,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "cdnetworks.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "CDNETWORKS",
            "organization" : "CDNetworks",
            "subnet" : "211.43.152.0/21"
         },
         "ip" : "211.43.155.119",
         "ipv6" : "false",
         "latitude" : "37.1835",
         "location" : "37.1835,-121.7714",
         "longitude" : "-121.7714",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "211.43.152.0/22",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 5.9.40.219:4343 (tcp/unknown) - last seen on 2024-11-07 at 03:28:05 UTC

    • IP
      5.9.40.219
      Network
      5.9.0.0/16
      Domain(s)
      your-server.de
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      static.219.40.9.5.clients.your-server.de
      ASN
      AS24940
      Organization
      Hetzner Online GmbH
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0d42c325fa0583caa5e60014e55d77fd
    • \xc1\x10\xd4\x85\x88n\xed=\x87\x82\xa7\xc7N\xdf\x99<%#M7\x07\xf8\xb7X\xb3\x8d\x1dR\xf7\x1a\xc4\xd1\x1f&?'\xa0\x07\xae\x843}St
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:28:05.000Z",
         "app" : {
            "length" : 44
         },
         "asn" : "AS24940",
         "city" : "Falkenstein",
         "country" : "DE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "\\xc1\\x10\\xd4\\x85\\x88n\\xed=\\x87\\x82\\xa7\\xc7N\\xdf\\x99<%#M7\\x07\\xf8\\xb7X\\xb3\\x8d\\x1dR\\xf7\\x1a\\xc4\\xd1\\x1f&?'\\xa0\\x07\\xae\\x843}St",
         "datamd5" : "0d42c325fa0583caa5e60014e55d77fd",
         "datammh3" : 1602644955,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "your-server.de"
         ],
         "geolocus" : {
            "asn" : "AS24940",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "DE",
            "countryname" : "Germany",
            "domain" : [
               "hetzner.com",
               "your-server.de"
            ],
            "isineu" : "true",
            "latitude" : "51.165691",
            "location" : "51.165691,10.451526",
            "longitude" : "10.451526",
            "netname" : "HETZNER-fsn1-dc7",
            "organization" : "HETZNER-RZ-FKS-BLK5",
            "subnet" : "5.9.0.0/17"
         },
         "host" : [
            "static"
         ],
         "hostname" : [
            "static.219.40.9.5.clients.your-server.de"
         ],
         "ip" : "5.9.40.219",
         "ipv6" : "false",
         "latitude" : "50.4777",
         "location" : "50.4777,12.3649",
         "longitude" : "12.3649",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Hetzner Online GmbH",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "protocol" : "unknown",
         "reverse" : [
            "static.219.40.9.5.clients.your-server.de"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "subdomains" : [
            "219.40.9.5.clients.your-server.de",
            "40.9.5.clients.your-server.de",
            "5.clients.your-server.de",
            "9.5.clients.your-server.de",
            "clients.your-server.de"
         ],
         "subnet" : "5.9.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "de"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 187.48.107.129:4343 (tcp/http) - last seen on 2024-11-07 at 03:27:56 UTC

    • IP
      187.48.107.129
      Network
      187.48.0.0/16
      Domain(s)
      intelignet.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://187.48.107.129:4343/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      dial-up-187-48-107-129.intelignet.com.br
      ASN
      AS26615
      Organization
      TIM SA
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 03:27:55 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:56.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 793533826,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS26615",
         "city" : "S\u00e3o Paulo",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:27:55 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "intelignet.com.br"
         ],
         "host" : [
            "dial-up-187-48-107-129"
         ],
         "hostname" : [
            "dial-up-187-48-107-129.intelignet.com.br"
         ],
         "ip" : "187.48.107.129",
         "ipv6" : "false",
         "latitude" : "-23.6283",
         "location" : "-23.6283,-46.6409",
         "longitude" : "-46.6409",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TIM SA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "dial-up-187-48-107-129.intelignet.com.br"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "187.48.0.0/16",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 118.212.225.196:4343 (tcp/http) - last seen on 2024-11-07 at 03:27:56 UTC

    • IP
      118.212.225.196
      Network
      118.212.0.0/16
      Domain(s)
      chinaunicom.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://118.212.225.196:4343/ 400

      HTTP Title
      400 Bad Request
      Reverse DNS
      196.225.212.118.adsl-pool.jx.chinaunicom.com
      ASN
      AS4837
      Organization
      CHINA UNICOM China169 Backbone
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      cdca0b7e9174a9939415a3c4c0081c0f
      HTTP Header MD5
      1414cc8f8f4fdf3fff2ea3dc3e26735b
      HTTP Body MD5
      90552292f4d59904919bf59395112ef6
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 03:27:56 GMT
      Content-Type: text/html
      Content-Length: 2426
      Connection: close
      x-ws-request-id: 672c33bc_PS-KHN-01W4q82_40228-16473
      
      <!DOCTYPE html>
      <html>
      	<head>
      		<meta charset="utf-8">
      		<meta http-equiv="X-UA-Compatible" content="IE=edge">
      		<meta name="viewport" content="width=device-width, initial-scale=1">
      		<title>400 Bad Request</title>
      		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
      	</head>
      	<body>
      		<div id="p" class="P">
      			<div class="K">400</div>
      			<div class="O I">Bad Request</div>
      			<p class="J A L">Error Times: Thu, 07 Nov 2024 03:27:56 GMT
      				<br>
      				<span class="F">IP: <srcip></span>Node information: PS-KHN-01W4q82
      				<br>URL: http://<ip>:4343/
      				<br>Request-Id: 672c33bc_PS-KHN-01W4q82_40228-16473
      				<br>
      				<br>Check:
      				<span class="C G" onclick="s(0)">Details</span></p>
      		</div>
      		<div id="d" class="hide_me P H">
      			<div class="K">ERROR</div>
      			<p class="O I">"The Requested URL could not be retrieved</p>
      			<div class="O">
      				<div>While trying to retrieve the URL:</div>
      				<pre class="B G">http://<ip>:4343/</pre></div>
      			<div class="M">
      				<span>The following error was encountered:</span>
      				<ul class="E">
      					<li class="D G">Invalid Request</li></ul>
      			</div>
      			<div class="M">
      				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
      				<ul class="E G">
      					<li class="D">Missing or unknown request method</li>
      					<li class="D">Missing URL</li>
      					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
      					<li class="D">Request is too large</li>
      					<li class="D">Content-Length missing for POST or PUT requests</li>
      					<li class="D">Illegal character in hostname;underscores are not allowed</li>
      					<li class="D">Range Invalid</li></ul>
      			</div>
      			<a class="N C" href="#" onclick="s(1)">return</a></div>
      		<script type="text/javascript">function e(i) {
      				return document.getElementById(i);
      			}
      			function d(i, t) {
      				e(i).style.display = (t ? 'block': 'none');
      			}
      			function s(e) {
      				d('p', e);
      				d('d', !e);
      			}</script>
      	</body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:56.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "90552292f4d59904919bf59395112ef6",
               "bodymmh3" : -1290213066,
               "headermd5" : "1414cc8f8f4fdf3fff2ea3dc3e26735b",
               "headermmh3" : -882907032,
               "title" : "400 Bad Request"
            },
            "length" : 2599
         },
         "asn" : "AS4837",
         "city" : "Shanghai",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:27:56 GMT\r\nContent-Type: text/html\r\nContent-Length: 2426\r\nConnection: close\r\nx-ws-request-id: 672c33bc_PS-KHN-01W4q82_40228-16473\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 03:27:56 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-KHN-01W4q82\n\t\t\t\t<br>URL: http://<ip>:4343/\n\t\t\t\t<br>Request-Id: 672c33bc_PS-KHN-01W4q82_40228-16473\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:4343/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
         "datamd5" : "cdca0b7e9174a9939415a3c4c0081c0f",
         "datammh3" : 1726878284,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "chinaunicom.com"
         ],
         "geolocus" : {
            "asn" : "AS4837",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "chinaunicom.cn",
               "chinaunicom.com"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "UNICOM-JX",
            "organization" : "CNC Group CHINA169 Jiangxi Province Network",
            "subnet" : "118.212.224.0/19"
         },
         "host" : [
            196
         ],
         "hostname" : [
            "196.225.212.118.adsl-pool.jx.chinaunicom.com"
         ],
         "ip" : "118.212.225.196",
         "ipv6" : "false",
         "latitude" : "31.2222",
         "location" : "31.2222,121.4581",
         "longitude" : "121.4581",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CHINA UNICOM China169 Backbone",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "196.225.212.118.adsl-pool.jx.chinaunicom.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "225.212.118.adsl-pool.jx.chinaunicom.com",
            "118.adsl-pool.jx.chinaunicom.com",
            "212.118.adsl-pool.jx.chinaunicom.com",
            "jx.chinaunicom.com",
            "adsl-pool.jx.chinaunicom.com"
         ],
         "subnet" : "118.212.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 93.240.89.186:4343 (tcp/http) - last seen on 2024-11-07 at 03:27:55 UTC

    • IP
      93.240.89.186
      Network
      93.224.0.0/11
      Domain(s)
      t-ipconnect.de
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://93.240.89.186:4343/ 307

      HTTP Title
      307 Temporary Redirect
      Reverse DNS
      p5df059ba.dip0.t-ipconnect.de
      ASN
      AS3320
      Organization
      Deutsche Telekom AG
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d4faf4f95c85360d1303174e6b5984ba
      HTTP Header MD5
      6832603e41c9a374e15bdc682b5ada51
      HTTP Body MD5
      22be4e1cb9f87fa925f73aae7ecc8576
    • HTTP/1.1 307 Temporary Redirect
      Date: Thu, 07 Nov 2024 03:27:54 GMT
      Content-Type: text/html
      Content-Length: 152
      Connection: close
      Location: https://<ip>:4343/
      X-Frame-Options: SAMEORIGIN
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'
      X-Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'
      X-Webkit-CSP: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'
      
      <html>
      <head><title>307 Temporary Redirect</title></head>
      <body bgcolor="white">
      <center><h1>307 Temporary Redirect</h1></center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:55.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "22be4e1cb9f87fa925f73aae7ecc8576",
               "bodymmh3" : -540162627,
               "headermd5" : "6832603e41c9a374e15bdc682b5ada51",
               "headermmh3" : -2074783806,
               "title" : "307 Temporary Redirect"
            },
            "length" : 1176
         },
         "asn" : "AS3320",
         "country" : "DE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 307 Temporary Redirect\r\nDate: Thu, 07 Nov 2024 03:27:54 GMT\r\nContent-Type: text/html\r\nContent-Length: 152\r\nConnection: close\r\nLocation: https://<ip>:4343/\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'\r\nX-Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'\r\nX-Webkit-CSP: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'\r\n\r\n<html>\r\n<head><title>307 Temporary Redirect</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>307 Temporary Redirect</h1></center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "d4faf4f95c85360d1303174e6b5984ba",
         "datammh3" : -1180294228,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "t-ipconnect.de"
         ],
         "host" : [
            "p5df059ba"
         ],
         "hostname" : [
            "p5df059ba.dip0.t-ipconnect.de"
         ],
         "ip" : "93.240.89.186",
         "ipv6" : "false",
         "latitude" : "48.1663",
         "location" : "48.1663,11.5683",
         "longitude" : "11.5683",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Deutsche Telekom AG",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Temporary Redirect",
         "reverse" : [
            "p5df059ba.dip0.t-ipconnect.de"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 307,
         "subdomains" : [
            "dip0.t-ipconnect.de"
         ],
         "subnet" : "93.224.0.0/11",
         "tld" : [
            "de"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 177.121.215.22:4343 (tcp/http) - last seen on 2024-11-07 at 03:27:32 UTC

    • IP
      177.121.215.22
      Network
      177.120.0.0/14
      Domain(s)
      timbrasil.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://177.121.215.22:4343/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      22.215.121.177.isp.timbrasil.com.br
      ASN
      AS26615
      Organization
      TIM SA
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b1d04896c703757d96de81222b65e24c
      HTTP Header MD5
      a23d459f6df25deeaf6d1de4dcac2312
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 03:27:31 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      X-Frame-Options: sameorigin
      x-xss-protection: 1; mode=block
      X-Content-Type-Options: nosniff
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:32.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
               "headermmh3" : 822134055,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 488
         },
         "asn" : "AS26615",
         "city" : "S\u00e3o Paulo",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:27:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "b1d04896c703757d96de81222b65e24c",
         "datammh3" : 1607515384,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "timbrasil.com.br"
         ],
         "geolocus" : {
            "asn" : "AS25799",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "dnlegal.com.br",
               "timbrasil.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.421.421/0117-41",
            "organization" : "TIM S/A",
            "subnet" : "177.120.0.0/15"
         },
         "host" : [
            22
         ],
         "hostname" : [
            "22.215.121.177.isp.timbrasil.com.br"
         ],
         "ip" : "177.121.215.22",
         "ipv6" : "false",
         "latitude" : "-23.6283",
         "location" : "-23.6283,-46.6409",
         "longitude" : "-46.6409",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TIM SA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "22.215.121.177.isp.timbrasil.com.br"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "121.177.isp.timbrasil.com.br",
            "215.121.177.isp.timbrasil.com.br",
            "isp.timbrasil.com.br",
            "177.isp.timbrasil.com.br"
         ],
         "subnet" : "177.120.0.0/14",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 222.138.8.126:4343 (tcp/http) - last seen on 2024-11-07 at 03:27:32 UTC

    • IP
      222.138.8.126
      Network
      222.136.0.0/13
      Domain(s)
      ny.adsl
      Device

      <enterprise field>: device.class

      URL

      http://222.138.8.126:4343/ 400

      HTTP Title
      400 Bad Request
      Reverse DNS
      hn.kd.ny.adsl
      ASN
      AS4837
      Organization
      CHINA UNICOM China169 Backbone
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a7550b2cb5d6d07cbebb08f50cb0112c
      HTTP Header MD5
      4bb5750e82438de332e59448b02440b3
      HTTP Body MD5
      cddac0ba6c51360bb239932f2e2198bb
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 03:27:32 GMT
      Content-Type: text/html
      Content-Length: 2424
      Connection: close
      x-ws-request-id: 672c33a4_PS-000-01Zz5217_10389-45801
      
      <!DOCTYPE html>
      <html>
      	<head>
      		<meta charset="utf-8">
      		<meta http-equiv="X-UA-Compatible" content="IE=edge">
      		<meta name="viewport" content="width=device-width, initial-scale=1">
      		<title>400 Bad Request</title>
      		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
      	</head>
      	<body>
      		<div id="p" class="P">
      			<div class="K">400</div>
      			<div class="O I">Bad Request</div>
      			<p class="J A L">Error Times: Thu, 07 Nov 2024 03:27:32 GMT
      				<br>
      				<span class="F">IP: <srcip></span>Node information: PS-000-01Zz5217
      				<br>URL: http://<ip>:4343/
      				<br>Request-Id: 672c33a4_PS-000-01Zz5217_10389-45801
      				<br>
      				<br>Check:
      				<span class="C G" onclick="s(0)">Details</span></p>
      		</div>
      		<div id="d" class="hide_me P H">
      			<div class="K">ERROR</div>
      			<p class="O I">"The Requested URL could not be retrieved</p>
      			<div class="O">
      				<div>While trying to retrieve the URL:</div>
      				<pre class="B G">http://<ip>:4343/</pre></div>
      			<div class="M">
      				<span>The following error was encountered:</span>
      				<ul class="E">
      					<li class="D G">Invalid Request</li></ul>
      			</div>
      			<div class="M">
      				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
      				<ul class="E G">
      					<li class="D">Missing or unknown request method</li>
      					<li class="D">Missing URL</li>
      					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
      					<li class="D">Request is too large</li>
      					<li class="D">Content-Length missing for POST or PUT requests</li>
      					<li class="D">Illegal character in hostname;underscores are not allowed</li>
      					<li class="D">Range Invalid</li></ul>
      			</div>
      			<a class="N C" href="#" onclick="s(1)">return</a></div>
      		<script type="text/javascript">function e(i) {
      				return document.getElementById(i);
      			}
      			function d(i, t) {
      				e(i).style.display = (t ? 'block': 'none');
      			}
      			function s(e) {
      				d('p', e);
      				d('d', !e);
      			}</script>
      	</body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:32.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "cddac0ba6c51360bb239932f2e2198bb",
               "bodymmh3" : -2004957276,
               "headermd5" : "4bb5750e82438de332e59448b02440b3",
               "headermmh3" : -585972564,
               "title" : "400 Bad Request"
            },
            "length" : 2602
         },
         "asn" : "AS4837",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:27:32 GMT\r\nContent-Type: text/html\r\nContent-Length: 2424\r\nConnection: close\r\nx-ws-request-id: 672c33a4_PS-000-01Zz5217_10389-45801\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 03:27:32 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-000-01Zz5217\n\t\t\t\t<br>URL: http://<ip>:4343/\n\t\t\t\t<br>Request-Id: 672c33a4_PS-000-01Zz5217_10389-45801\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:4343/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
         "datamd5" : "a7550b2cb5d6d07cbebb08f50cb0112c",
         "datammh3" : -1422845708,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ny.adsl"
         ],
         "geolocus" : {
            "asn" : "AS4837",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "chinaunicom.cn",
               "ny.adsl",
               "zz.ha.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "UNICOM-HA",
            "organization" : "CNC Group CHINA169 Henan Province Network",
            "subnet" : "222.136.0.0/13"
         },
         "host" : [
            "hn"
         ],
         "hostname" : [
            "hn.kd.ny.adsl"
         ],
         "ip" : "222.138.8.126",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CHINA UNICOM China169 Backbone",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "hn.kd.ny.adsl"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "kd.ny.adsl"
         ],
         "subnet" : "222.136.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "adsl"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 187.61.242.220:4343 (tcp/http) - last seen on 2024-11-07 at 03:27:05 UTC

    • IP
      187.61.242.220
      Network
      187.61.128.0/17
      Domain(s)
      cabotelecom.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://187.61.242.220:4343/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      187-61-242-220.cable.cabotelecom.com.br
      ASN
      AS28220
      Organization
      CABO SERVICOS DE TELECOMUNICACOES LTDA
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b1d04896c703757d96de81222b65e24c
      HTTP Header MD5
      a23d459f6df25deeaf6d1de4dcac2312
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 03:27:04 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      X-Frame-Options: sameorigin
      x-xss-protection: 1; mode=block
      X-Content-Type-Options: nosniff
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
               "headermmh3" : -1052549391,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 488
         },
         "asn" : "AS28220",
         "city" : "Natal",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:27:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "b1d04896c703757d96de81222b65e24c",
         "datammh3" : 1607515384,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cabotelecom.com.br"
         ],
         "geolocus" : {
            "asn" : "AS28220",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "alaresinternet.com.br",
               "cabotelecom.com.br",
               "cert.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.952.192/0001-61",
            "organization" : "CABO SERVICOS DE TELECOMUNICACOES LTDA",
            "subnet" : "187.61.128.0/17"
         },
         "host" : [
            "187-61-242-220"
         ],
         "hostname" : [
            "187-61-242-220.cable.cabotelecom.com.br"
         ],
         "ip" : "187.61.242.220",
         "ipv6" : "false",
         "latitude" : "-5.8111",
         "location" : "-5.8111,-35.2235",
         "longitude" : "-35.2235",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CABO SERVICOS DE TELECOMUNICACOES LTDA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "187-61-242-220.cable.cabotelecom.com.br"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "cable.cabotelecom.com.br"
         ],
         "subnet" : "187.61.128.0/17",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 186.236.200.200:4343 (tcp/http) - last seen on 2024-11-07 at 03:27:04 UTC

    • IP
      186.236.200.200
      Network
      186.236.192.0/19
      Domain(s)
      cabotelecom.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://186.236.200.200:4343/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      186-236-200-200.cable.cabotelecom.com.br
      ASN
      AS28220
      Organization
      CABO SERVICOS DE TELECOMUNICACOES LTDA
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b1d04896c703757d96de81222b65e24c
      HTTP Header MD5
      a23d459f6df25deeaf6d1de4dcac2312
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 03:27:03 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      X-Frame-Options: sameorigin
      x-xss-protection: 1; mode=block
      X-Content-Type-Options: nosniff
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:04.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
               "headermmh3" : 1600944233,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 488
         },
         "asn" : "AS28220",
         "city" : "Natal",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:27:03 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "b1d04896c703757d96de81222b65e24c",
         "datammh3" : 1607515384,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cabotelecom.com.br"
         ],
         "geolocus" : {
            "asn" : "AS28220",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "alaresinternet.com.br",
               "cabotelecom.com.br",
               "cert.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.952.192/0001-61",
            "organization" : "CABO SERVICOS DE TELECOMUNICACOES LTDA",
            "subnet" : "186.236.192.0/19"
         },
         "host" : [
            "186-236-200-200"
         ],
         "hostname" : [
            "186-236-200-200.cable.cabotelecom.com.br"
         ],
         "ip" : "186.236.200.200",
         "ipv6" : "false",
         "latitude" : "-5.8111",
         "location" : "-5.8111,-35.2235",
         "longitude" : "-35.2235",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CABO SERVICOS DE TELECOMUNICACOES LTDA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "186-236-200-200.cable.cabotelecom.com.br"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "cable.cabotelecom.com.br"
         ],
         "subnet" : "186.236.192.0/19",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 118.46.244.67:4343 (tcp/http) - last seen on 2024-11-07 at 03:27:04 UTC

    • IP
      118.46.244.67
      Network
      118.46.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://118.46.244.67:4343/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Apache HTTP Server
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      5425329a889d3bc5e6256267695a796e
      HTTP Header MD5
      30e2e9d52d048657d97c3f1f5e464bda
      HTTP Body MD5
      6efda5878ab25f4f28a89bbb3f9fa41c
    • HTTP/1.1 400 Bad Request
      Date: Thu, 07 Nov 2024 13:28:48 GMT
      Server: Apache
      X-Frame-Options: SAMEORIGIN
      X-UA-Compatible: IE=edge;IE=11;IE=10;IE=9
      Content-Length: 362
      Connection: close
      Content-Type: text/html; charset=iso-8859-1
      
      <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
      <html><head>
      <title>400 Bad Request</title>
      </head><body>
      <h1>Bad Request</h1>
      <p>Your browser sent a request that this server could not understand.<br />
      Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
       Instead use the HTTPS scheme to access this URL, please.<br />
      </p>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:27:04.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "6efda5878ab25f4f28a89bbb3f9fa41c",
               "bodymmh3" : -645452522,
               "headermd5" : "30e2e9d52d048657d97c3f1f5e464bda",
               "headermmh3" : -1787490551,
               "title" : "400 Bad Request"
            },
            "length" : 600
         },
         "asn" : "AS4766",
         "city" : "Yangcheon-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 13:28:48 GMT\r\nServer: Apache\r\nX-Frame-Options: SAMEORIGIN\r\nX-UA-Compatible: IE=edge;IE=11;IE=10;IE=9\r\nContent-Length: 362\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>400 Bad Request</title>\n</head><body>\n<h1>Bad Request</h1>\n<p>Your browser sent a request that this server could not understand.<br />\nReason: You're speaking plain HTTP to an SSL-enabled server port.<br />\n Instead use the HTTPS scheme to access this URL, please.<br />\n</p>\n</body></html>\n",
         "datamd5" : "5425329a889d3bc5e6256267695a796e",
         "datammh3" : -207278016,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "118.40.0.0/13"
         },
         "ip" : "118.46.244.67",
         "ipv6" : "false",
         "latitude" : "37.5179",
         "location" : "37.5179,126.8682",
         "longitude" : "126.8682",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "118.46.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }