Cyber Defense Search Engine

IP
179.54.97.123

Network
179.54.0.0/15

Domain(s)
timbrasil.com.br

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

Reverse DNS
123.97.54.179.isp.timbrasil.com.br

ASN
AS26615

Organization
TIM SA

Protocol
unknown

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
61ea727ffcd84c3bdfb7ec984712f343
```
\x15\x00\x00\x00\x02\x02
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:38:00.000Z",
   "app" : {
      "length" : 7
   },
   "asn" : "AS26615",
   "city" : "Feira de Santana",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x15\\x00\\x00\\x00\\x02\\x02\n",
   "datamd5" : "61ea727ffcd84c3bdfb7ec984712f343",
   "datammh3" : -962737174,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "timbrasil.com.br"
   ],
   "geolocus" : {
      "asn" : "AS26615",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "cert.br",
         "dnlegal.com.br",
         "timbrasil.com.br"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "02.421.421/0117-41",
      "organization" : "TIM S/A",
      "subnet" : "179.54.0.0/15"
   },
   "host" : [
      123
   ],
   "hostname" : [
      "123.97.54.179.isp.timbrasil.com.br"
   ],
   "ip" : "179.54.97.123",
   "ipv6" : "false",
   "latitude" : "-12.2337",
   "location" : "-12.2337,-39.0656",
   "longitude" : "-39.0656",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "TIM SA",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4343,
   "protocol" : "unknown",
   "reverse" : [
      "123.97.54.179.isp.timbrasil.com.br"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subdomains" : [
      "isp.timbrasil.com.br",
      "54.179.isp.timbrasil.com.br",
      "179.isp.timbrasil.com.br",
      "97.54.179.isp.timbrasil.com.br"
   ],
   "subnet" : "179.54.0.0/15",
   "tld" : [
      "com.br"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
189.45.115.183

Network
189.45.64.0/18

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://189.45.115.183:4343/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS28270

Organization
Videomar Rede Nordeste SA

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
b1d04896c703757d96de81222b65e24c

HTTP Header MD5
a23d459f6df25deeaf6d1de4dcac2312

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:37:36 GMT
Content-Type: text/html
Content-Length: 248
Connection: close
X-Frame-Options: sameorigin
x-xss-protection: 1; mode=block
X-Content-Type-Options: nosniff

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:36.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
         "headermmh3" : 356672013,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 488
   },
   "asn" : "AS28270",
   "city" : "Fortaleza",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:37:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "b1d04896c703757d96de81222b65e24c",
   "datammh3" : 1607515384,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS28270",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "alaresinternet.com.br",
         "cabotelecom.com.br",
         "cert.br"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "63.356.042/0001-80",
      "organization" : "Videomar Rede Nordeste S/A",
      "subnet" : "189.45.64.0/18"
   },
   "ip" : "189.45.115.183",
   "ipv6" : "false",
   "latitude" : "-3.7138",
   "location" : "-3.7138,-38.5285",
   "longitude" : "-38.5285",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Videomar Rede Nordeste SA",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4343,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "189.45.64.0/18",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
179.251.140.88

Network
179.248.0.0/14

Domain(s)
timbrasil.com.br

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

Reverse DNS
88.140.251.179.isp.timbrasil.com.br

ASN
AS26615

Organization
TIM SA

Protocol
unknown

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
61ea727ffcd84c3bdfb7ec984712f343
```
\x15\x00\x00\x00\x02\x02
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:36.000Z",
   "app" : {
      "length" : 7
   },
   "asn" : "AS26615",
   "city" : "Manaus",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "\\x15\\x00\\x00\\x00\\x02\\x02\n",
   "datamd5" : "61ea727ffcd84c3bdfb7ec984712f343",
   "datammh3" : -962737174,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "timbrasil.com.br"
   ],
   "geolocus" : {
      "asn" : "AS26615",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "cert.br",
         "dnlegal.com.br",
         "timbrasil.com.br"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "02.421.421/0117-41",
      "organization" : "TIM S/A",
      "subnet" : "179.248.0.0/14"
   },
   "host" : [
      88
   ],
   "hostname" : [
      "88.140.251.179.isp.timbrasil.com.br"
   ],
   "ip" : "179.251.140.88",
   "ipv6" : "false",
   "latitude" : "-3.1032",
   "location" : "-3.1032,-60.0288",
   "longitude" : "-60.0288",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "TIM SA",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4343,
   "protocol" : "unknown",
   "reverse" : [
      "88.140.251.179.isp.timbrasil.com.br"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subdomains" : [
      "179.isp.timbrasil.com.br",
      "140.251.179.isp.timbrasil.com.br",
      "isp.timbrasil.com.br",
      "251.179.isp.timbrasil.com.br"
   ],
   "subnet" : "179.248.0.0/14",
   "tld" : [
      "com.br"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

<access denied by policy>

Network

<access denied by policy>

Domain(s)

Operating System

<access denied by policy> <access denied by policy>

Reverse DNS

<access denied by policy>

ASN

<access denied by policy>

Organization

<access denied by policy>

Protocol

<access denied by policy>

Source

<access denied by policy>
Operating System

<access denied by policy> <access denied by policy>

Product

<access denied by policy> <access denied by policy> <access denied by policy>

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5

<access denied by policy>
```
<access denied by policy>
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:36.000Z",
   "app" : "<enterprise field>: app",
   "asn" : "<access denied by policy>",
   "city" : "<access denied by policy>",
   "country" : "<access denied by policy>",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<access denied by policy>",
   "datamd5" : "<access denied by policy>",
   "datammh3" : "<access denied by policy>",
   "device" : "<enterprise field>: device",
   "domain" : "<access denied by policy>",
   "geolocus" : "<enterprise field>: geolocus",
   "host" : "<access denied by policy>",
   "hostname" : "<access denied by policy>",
   "ip" : "<access denied by policy>",
   "ipv6" : "<access denied by policy>",
   "latitude" : "<access denied by policy>",
   "location" : "<access denied by policy>",
   "longitude" : "<access denied by policy>",
   "node" : "<enterprise field>: node",
   "organization" : "<access denied by policy>",
   "os" : "<access denied by policy>",
   "osvendor" : "<access denied by policy>",
   "port" : "<access denied by policy>",
   "product" : "<access denied by policy>",
   "productvendor" : "<access denied by policy>",
   "productversion" : "<access denied by policy>",
   "protocol" : "<access denied by policy>",
   "protocolversion" : "<access denied by policy>",
   "reverse" : "<access denied by policy>",
   "seen_date" : "<access denied by policy>",
   "source" : "<access denied by policy>",
   "subnet" : "<access denied by policy>",
   "tag" : "<enterprise field>: tag",
   "tld" : "<access denied by policy>",
   "tls" : "<access denied by policy>",
   "transport" : "<access denied by policy>",
   "url" : "<access denied by policy>"
}

IP
177.121.6.166

Network
177.120.0.0/14

Domain(s)
timbrasil.com.br

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://177.121.6.166:4343/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
166.6.121.177.isp.timbrasil.com.br

ASN
AS26615

Organization
TIM SA

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
b1d04896c703757d96de81222b65e24c

HTTP Header MD5
a23d459f6df25deeaf6d1de4dcac2312

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:37:36 GMT
Content-Type: text/html
Content-Length: 248
Connection: close
X-Frame-Options: sameorigin
x-xss-protection: 1; mode=block
X-Content-Type-Options: nosniff

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:36.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
         "headermmh3" : 356672013,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 488
   },
   "asn" : "AS26615",
   "city" : "S\u00e3o Paulo",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:37:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "b1d04896c703757d96de81222b65e24c",
   "datammh3" : 1607515384,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "timbrasil.com.br"
   ],
   "geolocus" : {
      "asn" : "AS25799",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "cert.br",
         "dnlegal.com.br",
         "timbrasil.com.br"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "02.421.421/0117-41",
      "organization" : "TIM S/A",
      "subnet" : "177.120.0.0/15"
   },
   "host" : [
      166
   ],
   "hostname" : [
      "166.6.121.177.isp.timbrasil.com.br"
   ],
   "ip" : "177.121.6.166",
   "ipv6" : "false",
   "latitude" : "-23.6283",
   "location" : "-23.6283,-46.6409",
   "longitude" : "-46.6409",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "TIM SA",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4343,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "166.6.121.177.isp.timbrasil.com.br"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "177.isp.timbrasil.com.br",
      "6.121.177.isp.timbrasil.com.br",
      "121.177.isp.timbrasil.com.br",
      "isp.timbrasil.com.br"
   ],
   "subnet" : "177.120.0.0/14",
   "tld" : [
      "com.br"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
189.45.93.25

Network
189.45.64.0/18

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://189.45.93.25:4343/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS28270

Organization
Videomar Rede Nordeste SA

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
b1d04896c703757d96de81222b65e24c

HTTP Header MD5
a23d459f6df25deeaf6d1de4dcac2312

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:37:08 GMT
Content-Type: text/html
Content-Length: 248
Connection: close
X-Frame-Options: sameorigin
x-xss-protection: 1; mode=block
X-Content-Type-Options: nosniff

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:08.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
         "headermmh3" : -1542328200,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 488
   },
   "asn" : "AS28270",
   "city" : "Fortaleza",
   "country" : "BR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:37:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "b1d04896c703757d96de81222b65e24c",
   "datammh3" : 1607515384,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS28270",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "BR",
      "countryname" : "Brazil",
      "domain" : [
         "alaresinternet.com.br",
         "cabotelecom.com.br",
         "cert.br"
      ],
      "isineu" : "false",
      "latitude" : "-14.235004",
      "location" : "-14.235004,-51.92528",
      "longitude" : "-51.92528",
      "netname" : "63.356.042/0001-80",
      "organization" : "Videomar Rede Nordeste S/A",
      "subnet" : "189.45.64.0/18"
   },
   "ip" : "189.45.93.25",
   "ipv6" : "false",
   "latitude" : "-3.7138",
   "location" : "-3.7138,-38.5285",
   "longitude" : "-38.5285",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Videomar Rede Nordeste SA",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4343,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "189.45.64.0/18",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
211.43.154.144

Network
211.43.152.0/22

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://211.43.154.144:4343/ 400

HTTP Title
400 Bad Request

ASN
AS54994

Organization
ML-1432-54994

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
4b7886e25b3182eea3cd9aafe266d945

HTTP Header MD5
cadfaf4b41d762d47f1c097806afbdcc

HTTP Body MD5
42ce8a61875546011e1e67a38d5ca0df

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:36:44 GMT
Content-Type: text/html
Content-Length: 2423
Connection: close
x-ws-request-id: 672c51ec_VM-KUL-016oX73_2427-15489

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 05:36:44 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: VM-KUL-016oX73
				<br>URL: http://<ip>:4343/
				<br>Request-Id: 672c51ec_VM-KUL-016oX73_2427-15489
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G">http://<ip>:4343/</pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:36:44.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "42ce8a61875546011e1e67a38d5ca0df",
         "bodymmh3" : -470562207,
         "headermd5" : "cadfaf4b41d762d47f1c097806afbdcc",
         "headermmh3" : -1512547809,
         "title" : "400 Bad Request"
      },
      "length" : 2597
   },
   "asn" : "AS54994",
   "city" : "San Jose",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:36:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 2423\r\nConnection: close\r\nx-ws-request-id: 672c51ec_VM-KUL-016oX73_2427-15489\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 05:36:44 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: VM-KUL-016oX73\n\t\t\t\t<br>URL: http://<ip>:4343/\n\t\t\t\t<br>Request-Id: 672c51ec_VM-KUL-016oX73_2427-15489\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:4343/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "4b7886e25b3182eea3cd9aafe266d945",
   "datammh3" : 682679799,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS54994",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "cdnetworks.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "CDNETWORKS",
      "organization" : "CDNetworks",
      "subnet" : "211.43.152.0/21"
   },
   "ip" : "211.43.154.144",
   "ipv6" : "false",
   "latitude" : "37.1835",
   "location" : "37.1835,-121.7714",
   "longitude" : "-121.7714",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ML-1432-54994",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4343,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "211.43.152.0/22",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
114.230.204.211

Network
114.230.204.0/22

Device

<enterprise field>: device.class

URL

http://114.230.204.211:4343/ 400

HTTP Title
400 Bad Request

ASN
AS137697

Organization
CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhouJiangsu Province, P.R.China.

Protocol
http

Source
datascan
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
436d38ed682e23cd1a99b41e4b2416e7

HTTP Header MD5
781069f32861e85668567878058730c8

HTTP Body MD5
83de7e4b58fba3ff80f58891e018f62b

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:36:20 GMT
Content-Type: text/html
Content-Length: 2426
Connection: close
x-ws-request-id: 672c51d4_PS-000-01EMc89_18065-28295

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 05:36:20 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: PS-000-01EMc89
				<br>URL: http://<ip>:4343/
				<br>Request-Id: 672c51d4_PS-000-01EMc89_18065-28295
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G">http://<ip>:4343/</pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:36:20.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "83de7e4b58fba3ff80f58891e018f62b",
         "bodymmh3" : 325199070,
         "headermd5" : "781069f32861e85668567878058730c8",
         "headermmh3" : -1845188418,
         "title" : "400 Bad Request"
      },
      "length" : 2599
   },
   "asn" : "AS137697",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:36:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 2426\r\nConnection: close\r\nx-ws-request-id: 672c51d4_PS-000-01EMc89_18065-28295\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 05:36:20 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-000-01EMc89\n\t\t\t\t<br>URL: http://<ip>:4343/\n\t\t\t\t<br>Request-Id: 672c51d4_PS-000-01EMc89_18065-28295\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:4343/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "436d38ed682e23cd1a99b41e4b2416e7",
   "datammh3" : -23230801,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS137697",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "163.com",
         "chinatelecom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-JS",
      "organization" : "Chinanet Jiangsu Province Network",
      "subnet" : "114.230.204.0/22"
   },
   "ip" : "114.230.204.211",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CHINATELECOM JiangSu YangZhou IDC networkdescr: YangZhouJiangsu Province, P.R.China.",
   "port" : 4343,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "114.230.204.0/22",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
217.207.132.150

Network
217.207.0.0/16

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://217.207.132.150:4343/ 307

HTTP Title
307 Temporary Redirect

ASN
AS3257

Organization
GTT Communications Inc.

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
d4faf4f95c85360d1303174e6b5984ba

HTTP Header MD5
6832603e41c9a374e15bdc682b5ada51

HTTP Body MD5
22be4e1cb9f87fa925f73aae7ecc8576

HTTP/1.1 307 Temporary Redirect
Date: Thu, 07 Nov 2024 05:30:47 GMT
Content-Type: text/html
Content-Length: 152
Connection: close
Location: https://<ip>:4343/
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'
X-Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'
X-Webkit-CSP: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'

<html>
<head><title>307 Temporary Redirect</title></head>
<body bgcolor="white">
<center><h1>307 Temporary Redirect</h1></center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:30:47.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "22be4e1cb9f87fa925f73aae7ecc8576",
         "bodymmh3" : -540162627,
         "headermd5" : "6832603e41c9a374e15bdc682b5ada51",
         "headermmh3" : 690604940,
         "title" : "307 Temporary Redirect"
      },
      "length" : 1176
   },
   "asn" : "AS3257",
   "city" : "Greenwich",
   "country" : "GB",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 307 Temporary Redirect\r\nDate: Thu, 07 Nov 2024 05:30:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 152\r\nConnection: close\r\nLocation: https://<ip>:4343/\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'\r\nX-Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'\r\nX-Webkit-CSP: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; font-src 'self'; object-src 'self'; media-src 'self'; child-src 'self'\r\n\r\n<html>\r\n<head><title>307 Temporary Redirect</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>307 Temporary Redirect</h1></center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "d4faf4f95c85360d1303174e6b5984ba",
   "datammh3" : -1180294228,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS3257",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "GB",
      "countryname" : "United Kingdom",
      "domain" : [
         "easynet.net",
         "gtt.net"
      ],
      "isineu" : "false",
      "latitude" : "55.378051",
      "location" : "55.378051,-3.435973",
      "longitude" : "-3.435973",
      "netname" : "KINETIC",
      "organization" : "GTT",
      "subnet" : "217.207.0.0/16"
   },
   "ip" : "217.207.132.150",
   "ipv6" : "false",
   "latitude" : "51.4805",
   "location" : "51.4805,-0.0113",
   "longitude" : "-0.0113",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "GTT Communications Inc.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4343,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Temporary Redirect",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 307,
   "subnet" : "217.207.0.0/16",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
194.107.19.150

Network
194.107.19.0/24

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://194.107.19.150:4343/ 400

HTTP Title
400 Bad Request

ASN
AS54994

Organization
ML-1432-54994

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
a924627d8f3605782d1504cf6ce8a32a

HTTP Header MD5
0aecdf3d3372339ddbf681d3f68e6076

HTTP Body MD5
0f43d130ad0597aee6224a54a52e0d91

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:30:04 GMT
Content-Type: text/html
Content-Length: 2422
Connection: close
x-ws-request-id: 672c505c_PS-FRA-01xEP97_9871-1137

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 05:30:04 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: PS-FRA-01xEP97
				<br>URL: http://<ip>:4343/
				<br>Request-Id: 672c505c_PS-FRA-01xEP97_9871-1137
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G">http://<ip>:4343/</pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:30:04.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "0f43d130ad0597aee6224a54a52e0d91",
         "bodymmh3" : 2086988197,
         "headermd5" : "0aecdf3d3372339ddbf681d3f68e6076",
         "headermmh3" : -1287316025,
         "title" : "400 Bad Request"
      },
      "length" : 2595
   },
   "asn" : "AS54994",
   "city" : "Frankfurt am Main",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:30:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 2422\r\nConnection: close\r\nx-ws-request-id: 672c505c_PS-FRA-01xEP97_9871-1137\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 05:30:04 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-FRA-01xEP97\n\t\t\t\t<br>URL: http://<ip>:4343/\n\t\t\t\t<br>Request-Id: 672c505c_PS-FRA-01xEP97_9871-1137\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:4343/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "a924627d8f3605782d1504cf6ce8a32a",
   "datammh3" : -1745066147,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS54994",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "FR",
      "countryname" : "France",
      "domain" : [
         "cdnetworks.co.kr",
         "cdnetworks.com"
      ],
      "isineu" : "true",
      "latitude" : "46.227638",
      "location" : "46.227638,2.213749",
      "longitude" : "2.213749",
      "netname" : "CDNetworks",
      "organization" : "CDNetworks Inc",
      "subnet" : "194.107.19.0/24"
   },
   "ip" : "194.107.19.150",
   "ipv6" : "false",
   "latitude" : "50.1187",
   "location" : "50.1187,8.6842",
   "longitude" : "8.6842",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ML-1432-54994",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4343,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "194.107.19.0/24",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 254,743 in 0.209 second(s)

179.54.97.123:4343 (tcp/unknown) - last seen on 2024-11-07 at 05:38:00 UTC

189.45.115.183:4343 (tcp/http) - last seen on 2024-11-07 at 05:37:36 UTC

179.251.140.88:4343 (tcp/unknown) - last seen on 2024-11-07 at 05:37:36 UTC

<access denied by policy>:<access denied by policy> (<access denied by policy>/<access denied by policy>) - last seen on 2024-11-07 at 05:37:36 UTC

177.121.6.166:4343 (tcp/http) - last seen on 2024-11-07 at 05:37:36 UTC

189.45.93.25:4343 (tcp/http) - last seen on 2024-11-07 at 05:37:08 UTC

211.43.154.144:4343 (tcp/http) - last seen on 2024-11-07 at 05:36:44 UTC

114.230.204.211:4343 (tcp/http) - last seen on 2024-11-07 at 05:36:20 UTC

217.207.132.150:4343 (tcp/http) - last seen on 2024-11-07 at 05:30:47 UTC

194.107.19.150:4343 (tcp/http) - last seen on 2024-11-07 at 05:30:04 UTC