Cyber Defense Search Engine

datascan ctl threatlist sniffer vulnscan riskscan

1
2
3
4
...
next >

IP
117.185.84.186

Network
117.185.64.0/19

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

ASN
AS24400

Organization
Shanghai Mobile Communications Co.,Ltd.

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
Mortbay Jetty 9.4.6

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
cdebd9bcf426cc2b154e2aac3a5a00b9

HTTP Header MD5
c2832da0017e1f186352a8a31957dd78

HTTP Body MD5
6fc82a81b409407319f21be3e2a63dd1

HTTP/1.1 400 Illegal character 0x0
Content-Type: text/html;charset=iso-8859-1
Content-Length: 64
Connection: close
Server: Jetty(9.4.6.v20170531)

<h1>Bad Message 400</h1><pre>reason: Illegal character 0x0</pre>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:18:09.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6fc82a81b409407319f21be3e2a63dd1",
         "bodymmh3" : -172166021,
         "headermd5" : "c2832da0017e1f186352a8a31957dd78",
         "headermmh3" : -2035787076
      },
      "length" : 217
   },
   "asn" : "AS24400",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Illegal character 0x0\r\nContent-Type: text/html;charset=iso-8859-1\r\nContent-Length: 64\r\nConnection: close\r\nServer: Jetty(9.4.6.v20170531)\r\n\r\n<h1>Bad Message 400</h1><pre>reason: Illegal character 0x0</pre>",
   "datamd5" : "cdebd9bcf426cc2b154e2aac3a5a00b9",
   "datammh3" : 292354526,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS24400",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinamobile.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CMNET",
      "organization" : "China Mobile",
      "subnet" : "117.185.64.0/19"
   },
   "ip" : "117.185.84.186",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Shanghai Mobile Communications Co.,Ltd.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 61616,
   "product" : "Jetty",
   "productvendor" : "Mortbay",
   "productversion" : "9.4.6",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Illegal character 0x0",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "117.185.64.0/19",
   "tls" : "false",
   "transport" : "tcp"
}

IP
123.187.47.242

Network
123.187.0.0/16

Domain(s)
163data.com.cn

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

Reverse DNS
242.47.187.123.broad.jz.ln.dynamic.163data.com.cn

ASN
AS4134

Organization
Chinanet

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
Mortbay Jetty 9.4.6

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
cdebd9bcf426cc2b154e2aac3a5a00b9

HTTP Header MD5
c2832da0017e1f186352a8a31957dd78

HTTP Body MD5
6fc82a81b409407319f21be3e2a63dd1

HTTP/1.1 400 Illegal character 0x0
Content-Type: text/html;charset=iso-8859-1
Content-Length: 64
Connection: close
Server: Jetty(9.4.6.v20170531)

<h1>Bad Message 400</h1><pre>reason: Illegal character 0x0</pre>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:17:13.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6fc82a81b409407319f21be3e2a63dd1",
         "bodymmh3" : -172166021,
         "headermd5" : "c2832da0017e1f186352a8a31957dd78",
         "headermmh3" : -2035787076
      },
      "length" : 217
   },
   "asn" : "AS4134",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Illegal character 0x0\r\nContent-Type: text/html;charset=iso-8859-1\r\nContent-Length: 64\r\nConnection: close\r\nServer: Jetty(9.4.6.v20170531)\r\n\r\n<h1>Bad Message 400</h1><pre>reason: Illegal character 0x0</pre>",
   "datamd5" : "cdebd9bcf426cc2b154e2aac3a5a00b9",
   "datammh3" : 292354526,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "163data.com.cn"
   ],
   "geolocus" : {
      "asn" : "AS4134",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "163data.com.cn",
         "chinatelecom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-LN",
      "organization" : "CHINANET liaoning province network",
      "subnet" : "123.186.0.0/15"
   },
   "host" : [
      242
   ],
   "hostname" : [
      "242.47.187.123.broad.jz.ln.dynamic.163data.com.cn"
   ],
   "ip" : "123.187.47.242",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Chinanet",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 61616,
   "product" : "Jetty",
   "productvendor" : "Mortbay",
   "productversion" : "9.4.6",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Illegal character 0x0",
   "reverse" : [
      "242.47.187.123.broad.jz.ln.dynamic.163data.com.cn"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "123.broad.jz.ln.dynamic.163data.com.cn",
      "47.187.123.broad.jz.ln.dynamic.163data.com.cn",
      "ln.dynamic.163data.com.cn",
      "jz.ln.dynamic.163data.com.cn",
      "dynamic.163data.com.cn",
      "broad.jz.ln.dynamic.163data.com.cn",
      "187.123.broad.jz.ln.dynamic.163data.com.cn"
   ],
   "subnet" : "123.187.0.0/16",
   "tld" : [
      "com.cn"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
180.122.201.241

Network
180.122.0.0/15

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

ASN
AS4134

Organization
Chinanet

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
Mortbay Jetty 9.4.6

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
cdebd9bcf426cc2b154e2aac3a5a00b9

HTTP Header MD5
c2832da0017e1f186352a8a31957dd78

HTTP Body MD5
6fc82a81b409407319f21be3e2a63dd1

HTTP/1.1 400 Illegal character 0x0
Content-Type: text/html;charset=iso-8859-1
Content-Length: 64
Connection: close
Server: Jetty(9.4.6.v20170531)

<h1>Bad Message 400</h1><pre>reason: Illegal character 0x0</pre>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:17:08.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6fc82a81b409407319f21be3e2a63dd1",
         "bodymmh3" : -172166021,
         "headermd5" : "c2832da0017e1f186352a8a31957dd78",
         "headermmh3" : -2035787076
      },
      "length" : 217
   },
   "asn" : "AS4134",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Illegal character 0x0\r\nContent-Type: text/html;charset=iso-8859-1\r\nContent-Length: 64\r\nConnection: close\r\nServer: Jetty(9.4.6.v20170531)\r\n\r\n<h1>Bad Message 400</h1><pre>reason: Illegal character 0x0</pre>",
   "datamd5" : "cdebd9bcf426cc2b154e2aac3a5a00b9",
   "datammh3" : 292354526,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4134",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "163.com",
         "chinatelecom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-JS",
      "organization" : "Chinanet Jiangsu Province Network",
      "subnet" : "180.122.0.0/15"
   },
   "ip" : "180.122.201.241",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Chinanet",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 61616,
   "product" : "Jetty",
   "productvendor" : "Mortbay",
   "productversion" : "9.4.6",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Illegal character 0x0",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "180.122.0.0/15",
   "tls" : "false",
   "transport" : "tcp"
}

IP
138.113.215.27

Network
138.113.192.0/19

Device

<enterprise field>: device.class

HTTP Title
400 Bad Request

ASN
AS54994

Organization
ML-1432-54994

Protocol
http

Source
datascan
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
c200fa42004ace8ed7c98a34aa0fe021

HTTP Header MD5
e8f5445c0484d4c2c7615567aa8072d1

HTTP Body MD5
052923979c789012227d4713f6b77a57

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 02:16:50 GMT
Content-Type: text/html
Content-Length: 2370
Connection: close
x-ws-request-id: 672c2312_PSxjpSin5bk159_25566-5503

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 02:16:50 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: PSxjpSin5bk159
				<br>URL: 
				<br>Request-Id: 672c2312_PSxjpSin5bk159_25566-5503
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G"></pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:16:51.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "052923979c789012227d4713f6b77a57",
         "bodymmh3" : -1313923150,
         "headermd5" : "e8f5445c0484d4c2c7615567aa8072d1",
         "headermmh3" : 775391055,
         "title" : "400 Bad Request"
      },
      "length" : 2563
   },
   "asn" : "AS54994",
   "country" : "CA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 02:16:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 2370\r\nConnection: close\r\nx-ws-request-id: 672c2312_PSxjpSin5bk159_25566-5503\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 02:16:50 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PSxjpSin5bk159\n\t\t\t\t<br>URL: \n\t\t\t\t<br>Request-Id: 672c2312_PSxjpSin5bk159_25566-5503\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\"></pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "c200fa42004ace8ed7c98a34aa0fe021",
   "datammh3" : -1176755005,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS54994",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "domain" : [
         "meteversecloud.com"
      ],
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "METEVERSE-NETWORKS",
      "organization" : "Meteverse Limited.",
      "subnet" : "138.113.215.0/24"
   },
   "ip" : "138.113.215.27",
   "ipv6" : "false",
   "latitude" : "43.6319",
   "location" : "43.6319,-79.3716",
   "longitude" : "-79.3716",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ML-1432-54994",
   "port" : 61616,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "138.113.192.0/19",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
213.199.33.102

Network
213.199.32.0/19

Domain(s)
contaboserver.net

Device

<enterprise field>: device.class

Operating System
FreeBSD FreeBSD

Reverse DNS
vmi2127536.contaboserver.net

ASN
AS51167

Organization
Contabo GmbH

Protocol
unknown

Source
datascan
Operating System
FreeBSD FreeBSD

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
147c276731e242b480affd43c7f24d65
```
\x15\x03\x03\x00\x02\x02
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:16:44.000Z",
   "app" : {
      "length" : 7
   },
   "asn" : "AS51167",
   "city" : "D\u00fcsseldorf",
   "country" : "DE",
   "data" : "\\x15\\x03\\x03\\x00\\x02\\x02\n",
   "datamd5" : "147c276731e242b480affd43c7f24d65",
   "datammh3" : -2007783223,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contaboserver.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "DE",
      "countryname" : "Germany",
      "domain" : [
         "contabo.com",
         "contabo.de"
      ],
      "isineu" : "true",
      "latitude" : "51.165691",
      "location" : "51.165691,10.451526",
      "longitude" : "10.451526",
      "netname" : "TT-20240306",
      "organization" : "Contabo GmbH",
      "subnet" : "213.199.32.0/20"
   },
   "host" : [
      "vmi2127536"
   ],
   "hostname" : [
      "vmi2127536.contaboserver.net"
   ],
   "ip" : "213.199.33.102",
   "ipv6" : "false",
   "latitude" : "51.1878",
   "location" : "51.1878,6.8607",
   "longitude" : "6.8607",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "FreeBSD",
   "osvendor" : "FreeBSD",
   "port" : 61616,
   "protocol" : "unknown",
   "reverse" : [
      "vmi2127536.contaboserver.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "213.199.32.0/19",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
180.107.125.50

Network
180.107.124.0/22

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

ASN
AS140292

Organization
CHINATELECOM Jiangsu province Suzhou 5G network

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
Mortbay Jetty 9.4.6

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
cdebd9bcf426cc2b154e2aac3a5a00b9

HTTP Header MD5
c2832da0017e1f186352a8a31957dd78

HTTP Body MD5
6fc82a81b409407319f21be3e2a63dd1

HTTP/1.1 400 Illegal character 0x0
Content-Type: text/html;charset=iso-8859-1
Content-Length: 64
Connection: close
Server: Jetty(9.4.6.v20170531)

<h1>Bad Message 400</h1><pre>reason: Illegal character 0x0</pre>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:15:53.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6fc82a81b409407319f21be3e2a63dd1",
         "bodymmh3" : -172166021,
         "headermd5" : "c2832da0017e1f186352a8a31957dd78",
         "headermmh3" : -2035787076
      },
      "length" : 217
   },
   "asn" : "AS140292",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Illegal character 0x0\r\nContent-Type: text/html;charset=iso-8859-1\r\nContent-Length: 64\r\nConnection: close\r\nServer: Jetty(9.4.6.v20170531)\r\n\r\n<h1>Bad Message 400</h1><pre>reason: Illegal character 0x0</pre>",
   "datamd5" : "cdebd9bcf426cc2b154e2aac3a5a00b9",
   "datammh3" : 292354526,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS140292",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "163.com",
         "chinatelecom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CHINANET-JS",
      "organization" : "Chinanet Jiangsu Province Network",
      "subnet" : "180.107.124.0/22"
   },
   "ip" : "180.107.125.50",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CHINATELECOM Jiangsu province Suzhou 5G network",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 61616,
   "product" : "Jetty",
   "productvendor" : "Mortbay",
   "productversion" : "9.4.6",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Illegal character 0x0",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "180.107.124.0/22",
   "tls" : "false",
   "transport" : "tcp"
}

IP
138.113.43.140

Network
138.113.43.0/24

Device

<enterprise field>: device.class

HTTP Title
400 Bad Request

ASN
AS54994

Organization
ML-1432-54994

Protocol
http

Source
datascan
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
38ec0eace5c7d41e6d600809b31ab73b

HTTP Header MD5
46de6061e133d2939085e610458c94f9

HTTP Body MD5
c52adb55666faeb8266a27b55639e4f7

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 02:15:46 GMT
Content-Type: text/html
Content-Length: 2371
Connection: close
x-ws-request-id: 672c22d2_PS-HND-049qr29_17563-37744

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 02:15:46 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: PS-HND-049qr29
				<br>URL: 
				<br>Request-Id: 672c22d2_PS-HND-049qr29_17563-37744
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G"></pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:15:48.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "c52adb55666faeb8266a27b55639e4f7",
         "bodymmh3" : 890952623,
         "headermd5" : "46de6061e133d2939085e610458c94f9",
         "headermmh3" : -2118315333,
         "title" : "400 Bad Request"
      },
      "length" : 2565
   },
   "asn" : "AS54994",
   "country" : "CA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 02:15:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 2371\r\nConnection: close\r\nx-ws-request-id: 672c22d2_PS-HND-049qr29_17563-37744\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 02:15:46 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-HND-049qr29\n\t\t\t\t<br>URL: \n\t\t\t\t<br>Request-Id: 672c22d2_PS-HND-049qr29_17563-37744\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\"></pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "38ec0eace5c7d41e6d600809b31ab73b",
   "datammh3" : -944236097,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS54994",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "CA",
      "countryname" : "Canada",
      "domain" : [
         "meteversecloud.com"
      ],
      "isineu" : "false",
      "latitude" : "56.130366",
      "location" : "56.130366,-106.346771",
      "longitude" : "-106.346771",
      "netname" : "METEVERSE-NETWORKS",
      "organization" : "Meteverse Limited.",
      "subnet" : "138.113.43.0/24"
   },
   "ip" : "138.113.43.140",
   "ipv6" : "false",
   "latitude" : "43.6319",
   "location" : "43.6319,-79.3716",
   "longitude" : "-79.3716",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ML-1432-54994",
   "port" : 61616,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "138.113.43.0/24",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
123.6.81.191

Network
123.4.0.0/14

Domain(s)
ny.adsl

Device

<enterprise field>: device.class

HTTP Title
400 Bad Request

Reverse DNS
hn.kd.ny.adsl

ASN
AS4837

Organization
CHINA UNICOM China169 Backbone

Protocol
http

Source
datascan

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
7f21fc3e53b0432285ee11b34c5626d9

HTTP Header MD5
4943b007f22306fad2b17290a4e2a43c

HTTP Body MD5
4709ee63f5bb67e20aca02c6909d1d5f

HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 02:15:39 GMT
Content-Type: text/html
Content-Length: 153
Connection: close
WZWS-RAY: 1249-1730974539.176-s8zzuc

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>CWAP-waf</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:15:41.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "4709ee63f5bb67e20aca02c6909d1d5f",
         "bodymmh3" : 938866121,
         "headermd5" : "4943b007f22306fad2b17290a4e2a43c",
         "headermmh3" : 146812318,
         "title" : "400 Bad Request"
      },
      "length" : 321
   },
   "asn" : "AS4837",
   "country" : "CN",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 02:15:39 GMT\r\nContent-Type: text/html\r\nContent-Length: 153\r\nConnection: close\r\nWZWS-RAY: 1249-1730974539.176-s8zzuc\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>CWAP-waf</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "7f21fc3e53b0432285ee11b34c5626d9",
   "datammh3" : -1058126769,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ny.adsl"
   ],
   "geolocus" : {
      "asn" : "AS4837",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinaunicom.cn",
         "ny.adsl",
         "zz.ha.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "UNICOM-HA",
      "organization" : "CNC Group CHINA169 Henan Province Network",
      "subnet" : "123.6.0.0/15"
   },
   "host" : [
      "hn"
   ],
   "hostname" : [
      "hn.kd.ny.adsl"
   ],
   "ip" : "123.6.81.191",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CHINA UNICOM China169 Backbone",
   "port" : 61616,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "hn.kd.ny.adsl"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "kd.ny.adsl"
   ],
   "subnet" : "123.4.0.0/14",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "adsl"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
210.210.172.61

Alternative IP(s)
1.2.3.4

Network
210.210.128.0/18

Domain(s)
cbn.net.id

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

HTTP Title
400 Bad Request

Reverse DNS
210.210.172.61.cbn.net.id

ASN
AS4787

Organization
PT Cyberindo Aditama

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
e902de1dd2776118862a6f6f683ecd25

HTTP Header MD5
5f4b8ccd75851bf996666163c43def08

HTTP Body MD5
f552ba6f98d421deb8a43b93275a2c3b

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 02:15:16 GMT
Content-Type: text/html
Content-Length: 2369
Connection: close
x-ws-request-id: 672c22b4_VM-CGK-01AFm2_30069-18074

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 02:15:16 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: VM-CGK-01AFm2
				<br>URL: 
				<br>Request-Id: 672c22b4_VM-CGK-01AFm2_30069-18074
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G"></pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:15:17.000Z",
   "alternativeip" : [
      "1.2.3.4"
   ],
   "app" : {
      "http" : {
         "bodymd5" : "f552ba6f98d421deb8a43b93275a2c3b",
         "bodymmh3" : -1020456223,
         "headermd5" : "5f4b8ccd75851bf996666163c43def08",
         "headermmh3" : 703319715,
         "title" : "400 Bad Request"
      },
      "length" : 2562
   },
   "asn" : "AS4787",
   "city" : "Jakarta",
   "country" : "ID",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 02:15:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 2369\r\nConnection: close\r\nx-ws-request-id: 672c22b4_VM-CGK-01AFm2_30069-18074\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 02:15:16 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: VM-CGK-01AFm2\n\t\t\t\t<br>URL: \n\t\t\t\t<br>Request-Id: 672c22b4_VM-CGK-01AFm2_30069-18074\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\"></pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "e902de1dd2776118862a6f6f683ecd25",
   "datammh3" : -1158734006,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "cbn.net.id"
   ],
   "geolocus" : {
      "asn" : "AS4787",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "ID",
      "countryname" : "Indonesia",
      "domain" : [
         "cbn.net.id",
         "idnic.net"
      ],
      "isineu" : "false",
      "latitude" : "-0.789275",
      "location" : "-0.789275,113.921327",
      "longitude" : "113.921327",
      "netname" : "CBN-IPv4-APJII-ID-NETBLOCK",
      "organization" : "Route Object for CBN",
      "subnet" : "210.210.128.0/18"
   },
   "host" : [
      210
   ],
   "hostname" : [
      "210.210.172.61.cbn.net.id"
   ],
   "ip" : "210.210.172.61",
   "ipv6" : "false",
   "latitude" : "-6.2114",
   "location" : "-6.2114,106.8446",
   "longitude" : "106.8446",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "PT Cyberindo Aditama",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 61616,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "210.210.172.61.cbn.net.id"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "172.61.cbn.net.id",
      "210.172.61.cbn.net.id",
      "61.cbn.net.id"
   ],
   "subnet" : "210.210.128.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net.id"
   ],
   "tls" : "false",
   "transport" : "tcp"
}

IP
163.171.131.87

Network
163.171.128.0/21

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

HTTP Title
400 Bad Request

ASN
AS54994

Organization
ML-1432-54994

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
fffc46cc561b0f1a719c3e75f57c843c

HTTP Header MD5
1404f7dc12d255f6915b1c43b336f9df

HTTP Body MD5
32604c7da699834edc296fffd69e89dc

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 02:15:15 GMT
Content-Type: text/html
Content-Length: 2350
Connection: close
x-ws-request-id: 672c22b3_bl21_23667-8439

<!DOCTYPE html>
<html>
	<head>
		<meta charset="utf-8">
		<meta http-equiv="X-UA-Compatible" content="IE=edge">
		<meta name="viewport" content="width=device-width, initial-scale=1">
		<title>400 Bad Request</title>
		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
	</head>
	<body>
		<div id="p" class="P">
			<div class="K">400</div>
			<div class="O I">Bad Request</div>
			<p class="J A L">Error Times: Thu, 07 Nov 2024 02:15:15 GMT
				<br>
				<span class="F">IP: <srcip></span>Node information: bl21
				<br>URL: 
				<br>Request-Id: 672c22b3_bl21_23667-8439
				<br>
				<br>Check:
				<span class="C G" onclick="s(0)">Details</span></p>
		</div>
		<div id="d" class="hide_me P H">
			<div class="K">ERROR</div>
			<p class="O I">"The Requested URL could not be retrieved</p>
			<div class="O">
				<div>While trying to retrieve the URL:</div>
				<pre class="B G"></pre></div>
			<div class="M">
				<span>The following error was encountered:</span>
				<ul class="E">
					<li class="D G">Invalid Request</li></ul>
			</div>
			<div class="M">
				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
				<ul class="E G">
					<li class="D">Missing or unknown request method</li>
					<li class="D">Missing URL</li>
					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
					<li class="D">Request is too large</li>
					<li class="D">Content-Length missing for POST or PUT requests</li>
					<li class="D">Illegal character in hostname;underscores are not allowed</li>
					<li class="D">Range Invalid</li></ul>
			</div>
			<a class="N C" href="#" onclick="s(1)">return</a></div>
		<script type="text/javascript">function e(i) {
				return document.getElementById(i);
			}
			function d(i, t) {
				e(i).style.display = (t ? 'block': 'none');
			}
			function s(e) {
				d('p', e);
				d('d', !e);
			}</script>
	</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:15:16.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "32604c7da699834edc296fffd69e89dc",
         "bodymmh3" : -365809955,
         "headermd5" : "1404f7dc12d255f6915b1c43b336f9df",
         "headermmh3" : -1453635999,
         "title" : "400 Bad Request"
      },
      "length" : 2533
   },
   "asn" : "AS54994",
   "city" : "Paris",
   "country" : "FR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 02:15:15 GMT\r\nContent-Type: text/html\r\nContent-Length: 2350\r\nConnection: close\r\nx-ws-request-id: 672c22b3_bl21_23667-8439\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 02:15:15 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: bl21\n\t\t\t\t<br>URL: \n\t\t\t\t<br>Request-Id: 672c22b3_bl21_23667-8439\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\"></pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
   "datamd5" : "fffc46cc561b0f1a719c3e75f57c843c",
   "datammh3" : 1050902668,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS17816",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "AU",
      "countryname" : "Australia",
      "domain" : [
         "apnic.net"
      ],
      "isineu" : "false",
      "latitude" : "-25.274398",
      "location" : "-25.274398,133.775136",
      "longitude" : "133.775136",
      "netname" : "ERX-NETBLOCK",
      "organization" : "Early registration addresses",
      "subnet" : "163.0.0.0/8"
   },
   "ip" : "163.171.131.87",
   "ipv6" : "false",
   "latitude" : "48.8323",
   "location" : "48.8323,2.4075",
   "longitude" : "2.4075",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ML-1432-54994",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 61616,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "163.171.128.0/21",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

Returning 10 result(s) out of 18,261 in 0.058 second(s)

117.185.84.186:61616 (tcp/http) - last seen on 2024-11-07 at 02:18:09 UTC

123.187.47.242:61616 (tcp/http) - last seen on 2024-11-07 at 02:17:13 UTC

180.122.201.241:61616 (tcp/http) - last seen on 2024-11-07 at 02:17:08 UTC

138.113.215.27:61616 (tcp/http) - last seen on 2024-11-07 at 02:16:51 UTC

213.199.33.102:61616 (tcp/unknown) - last seen on 2024-11-07 at 02:16:44 UTC

180.107.125.50:61616 (tcp/http) - last seen on 2024-11-07 at 02:15:53 UTC

138.113.43.140:61616 (tcp/http) - last seen on 2024-11-07 at 02:15:48 UTC

123.6.81.191:61616 (tcp/http) - last seen on 2024-11-07 at 02:15:41 UTC

210.210.172.61:61616 (tcp/http) - last seen on 2024-11-07 at 02:15:17 UTC

163.171.131.87:61616 (tcp/http) - last seen on 2024-11-07 at 02:15:16 UTC