Returning 10 result(s) out of 4,288 in 0.143 second(s)

  • 175.140.31.88:3392 (tcp/http) - last seen on 2024-11-21 at 10:27:44 UTC

    • IP
      175.140.31.88
      Network
      175.136.0.0/13
      Device

      <enterprise field>: device.class

      HTTP Title
      400 Bad Request
      ASN
      AS4788
      Organization
      TM TECHNOLOGY SERVICES SDN. BHD.
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      28715c6ec3fd38b6ed232e3e37959e9c
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      16444d0bf46608253d591db62f41e7c3
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 10:27:43 GMT
      Content-Type: text/html
      Content-Length: 150
      Connection: close
      
      <html>
      <head><title>400 Bad Request</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:27:44.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "16444d0bf46608253d591db62f41e7c3",
               "bodymmh3" : -534304446,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 1826762727,
               "title" : "400 Bad Request"
            },
            "length" : 295
         },
         "asn" : "AS4788",
         "city" : "Shah Alam",
         "country" : "MY",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 10:27:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "28715c6ec3fd38b6ed232e3e37959e9c",
         "datammh3" : -1512152686,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4788",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "MY",
            "countryname" : "Malaysia",
            "domain" : [
               "tm.com.my",
               "tm.net.my"
            ],
            "isineu" : "false",
            "latitude" : "4.210484",
            "location" : "4.210484,101.975766",
            "longitude" : "101.975766",
            "netname" : "ADSL-STREAMYX",
            "organization" : "TM TECHNOLOGY SERVICES SDN BHD",
            "subnet" : "175.140.30.0/23"
         },
         "ip" : "175.140.31.88",
         "ipv6" : "false",
         "latitude" : "3.0838",
         "location" : "3.0838,101.5326",
         "longitude" : "101.5326",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TM TECHNOLOGY SERVICES SDN. BHD.",
         "port" : 3392,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "175.136.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 103.56.17.80:3392 (tcp/http) - last seen on 2024-11-21 at 10:13:56 UTC

    • IP
      103.56.17.80
      Network
      103.56.16.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      400 Bad Request
      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      55cf5de3b3a32a0ee5313aa230307980
      HTTP Header MD5
      f4eaba8998b0e515f84d95c1ad5ea5c7
      HTTP Body MD5
      2565895531633a7521636ee7375b43ca
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.17.6
      Date: Thu, 21 Nov 2024 10:13:00 GMT
      Content-Type: text/html
      Content-Length: 157
      Connection: close
      
      <html>
      <head><title>400 Bad Request</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <hr><center>nginx/1.17.6</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:13:56.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "2565895531633a7521636ee7375b43ca",
               "bodymmh3" : -1057385949,
               "headermd5" : "f4eaba8998b0e515f84d95c1ad5ea5c7",
               "headermmh3" : 1528390010,
               "title" : "400 Bad Request"
            },
            "length" : 309
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.17.6\r\nDate: Thu, 21 Nov 2024 10:13:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 157\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>nginx/1.17.6</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "55cf5de3b3a32a0ee5313aa230307980",
         "datammh3" : -1227591593,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "103.56.16.0/22"
         },
         "ip" : "103.56.17.80",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 3392,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "103.56.16.0/22",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 103.242.69.3:3392 (tcp/http) - last seen on 2024-11-21 at 10:07:58 UTC

    • IP
      103.242.69.3
      Network
      103.242.68.0/22
      Domain(s)
      telesmart.co.nz
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      HTTP Title
      400 Bad Request
      Reverse DNS
      103-242-69-3.broadband.telesmart.co.nz
      ASN
      AS133075
      Organization
      Telesmart Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      09eeae1c3719450f384223ebee91dfcb
      HTTP Header MD5
      359e25d68970a837df848b4d796433ae
      HTTP Body MD5
      19a68970fcfc5729c9bde08abe04eb2b
    • HTTP/1.0 400 Bad Request
      Date: Thu, 21 Nov 2024 10:14:02 GMT
      Accept-Ranges: bytes
      Connection: close
      Content-Type: text/html; charset=ISO-8859-1
      
      <HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>
      <BODY><H1>400 Bad Request</H1>
      Your client has issued a malformed or illegal request.
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:07:58.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "19a68970fcfc5729c9bde08abe04eb2b",
               "bodymmh3" : -1901441560,
               "headermd5" : "359e25d68970a837df848b4d796433ae",
               "headermmh3" : 1080827726,
               "title" : "400 Bad Request"
            },
            "length" : 302
         },
         "asn" : "AS133075",
         "city" : "Wellington",
         "country" : "NZ",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 400 Bad Request\r\nDate: Thu, 21 Nov 2024 10:14:02 GMT\r\nAccept-Ranges: bytes\r\nConnection: close\r\nContent-Type: text/html; charset=ISO-8859-1\r\n\r\n<HTML><HEAD><TITLE>400 Bad Request</TITLE></HEAD>\n<BODY><H1>400 Bad Request</H1>\nYour client has issued a malformed or illegal request.\n</BODY></HTML>\n",
         "datamd5" : "09eeae1c3719450f384223ebee91dfcb",
         "datammh3" : -635698499,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "telesmart.co.nz"
         ],
         "geolocus" : {
            "asn" : "AS133075",
            "continent" : "OC",
            "continentname" : "Oceania",
            "country" : "NZ",
            "countryname" : "New Zealand",
            "domain" : [
               "initech.co.nz",
               "telesmart.co.nz"
            ],
            "isineu" : "false",
            "latitude" : "-40.900557",
            "location" : "-40.900557,174.885971",
            "longitude" : "174.885971",
            "netname" : "TELESMART-NZ-AUCKLAND",
            "organization" : "Telesmart Limited",
            "subnet" : "103.242.68.0/22"
         },
         "host" : [
            "103-242-69-3"
         ],
         "hostname" : [
            "103-242-69-3.broadband.telesmart.co.nz"
         ],
         "ip" : "103.242.69.3",
         "ipv6" : "false",
         "latitude" : "-41.2971",
         "location" : "-41.2971,174.7932",
         "longitude" : "174.7932",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Telesmart Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3392,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Bad Request",
         "reverse" : [
            "103-242-69-3.broadband.telesmart.co.nz"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "broadband.telesmart.co.nz"
         ],
         "subnet" : "103.242.68.0/22",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "co.nz"
         ],
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 156.225.88.134:3392 (tcp/http) - last seen on 2024-11-21 at 10:07:30 UTC

    • IP
      156.225.88.134
      Network
      156.225.80.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      HTTP Title
      400 Bad Request
      ASN
      AS140869
      Organization
      Turing Group Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      28715c6ec3fd38b6ed232e3e37959e9c
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      16444d0bf46608253d591db62f41e7c3
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 10:07:30 GMT
      Content-Type: text/html
      Content-Length: 150
      Connection: close
      
      <html>
      <head><title>400 Bad Request</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:07:30.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "16444d0bf46608253d591db62f41e7c3",
               "bodymmh3" : -534304446,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 1254760288,
               "title" : "400 Bad Request"
            },
            "length" : 295
         },
         "asn" : "AS140869",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 10:07:30 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "28715c6ec3fd38b6ed232e3e37959e9c",
         "datammh3" : -1512152686,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS140869",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "cloudinnovation.org"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "TURING_GROUP_LIMITED",
            "organization" : "TURING GROUP LIMITED",
            "subnet" : "156.225.80.0/20"
         },
         "ip" : "156.225.88.134",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Turing Group Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3392,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "156.225.80.0/20",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 27.116.48.245:3392 (tcp/http) - last seen on 2024-11-21 at 10:04:31 UTC

    • IP
      27.116.48.245
      Network
      27.116.48.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      HTTP Status 400 – Bad Request
      ASN
      AS45916
      Organization
      Gujarat Telelink Pvt Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c2866383b6ca83dbe88bca8bdd99b518
      HTTP Header MD5
      2b5c86ce14b90af3aacccc8878708f52
      HTTP Body MD5
      817be02e4fee2931728ba2a9bcc338db
    • HTTP/1.1 400 
      Content-Type: text/html;charset=utf-8
      Content-Language: en
      Content-Length: 2074
      Date: Thu, 21 Nov 2024 10:04:31 GMT
      Connection: close
      
      <!doctype html><html lang="en"><head><title>HTTP Status 400 – Bad Request</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 – Bad Request</h1><hr class="line" /><p><b>Type</b> Exception Report</p><p><b>Message</b> Invalid character found in method name [0x030x000x000x130x0e0xe00x000x000x000x000x000x010x000x080x000x0b0x000x000x00...]. HTTP method names must be tokens</p><p><b>Description</b> The server cannot or will not process the request due to something that is perceived to be a client error (e.g., malformed request syntax, invalid request message framing, or deceptive request routing).</p><p><b>Exception</b></p><pre>java.lang.IllegalArgumentException: Invalid character found in method name [0x030x000x000x130x0e0xe00x000x000x000x000x000x010x000x080x000x0b0x000x000x00...]. HTTP method names must be tokens
      	org.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:407)
      	org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:263)
      	org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
      	org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:928)
      	org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1794)
      	org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
      	org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
      	org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
      	org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
      	java.lang.Thread.run(Thread.java:748)
      </pre><p><b>Note</b> The full stack trace of the root cause is available in the server logs.</p><hr class="line" /><h3>Apache Tomcat/9.0.85</h3></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:04:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "817be02e4fee2931728ba2a9bcc338db",
               "bodymmh3" : -1723993176,
               "headermd5" : "2b5c86ce14b90af3aacccc8878708f52",
               "headermmh3" : 842530065,
               "title" : "HTTP Status 400 \u2013 Bad Request"
            },
            "length" : 2230
         },
         "asn" : "AS45916",
         "country" : "IN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 \r\nContent-Type: text/html;charset=utf-8\r\nContent-Language: en\r\nContent-Length: 2074\r\nDate: Thu, 21 Nov 2024 10:04:31 GMT\r\nConnection: close\r\n\r\n<!doctype html><html lang=\"en\"><head><title>HTTP Status 400 \u2013 Bad Request</title><style type=\"text/css\">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 400 \u2013 Bad Request</h1><hr class=\"line\" /><p><b>Type</b> Exception Report</p><p><b>Message</b> Invalid character found in method name [0x030x000x000x130x0e0xe00x000x000x000x000x000x010x000x080x000x0b0x000x000x00...]. HTTP method names must be tokens</p><p><b>Description</b> The server cannot or will not process the request due to something that is perceived to be a client error (e.g., malformed request syntax, invalid request message framing, or deceptive request routing).</p><p><b>Exception</b></p><pre>java.lang.IllegalArgumentException: Invalid character found in method name [0x030x000x000x130x0e0xe00x000x000x000x000x000x010x000x080x000x0b0x000x000x00...]. HTTP method names must be tokens\r\n\torg.apache.coyote.http11.Http11InputBuffer.parseRequestLine(Http11InputBuffer.java:407)\r\n\torg.apache.coyote.http11.Http11Processor.service(Http11Processor.java:263)\r\n\torg.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)\r\n\torg.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:928)\r\n\torg.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1794)\r\n\torg.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)\r\n\torg.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)\r\n\torg.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)\r\n\torg.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)\r\n\tjava.lang.Thread.run(Thread.java:748)\r\n</pre><p><b>Note</b> The full stack trace of the root cause is available in the server logs.</p><hr class=\"line\" /><h3>Apache Tomcat/9.0.85</h3></body></html>",
         "datamd5" : "c2866383b6ca83dbe88bca8bdd99b518",
         "datammh3" : 1672281690,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS45916",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "IN",
            "countryname" : "India",
            "domain" : [
               "gtpl.net"
            ],
            "isineu" : "false",
            "latitude" : "20.593684",
            "location" : "20.593684,78.96288",
            "longitude" : "78.96288",
            "netname" : "GTPL-AS-AP",
            "organization" : "Gujarat Telelik Pvt Ltd",
            "subnet" : "27.116.48.0/21"
         },
         "ip" : "27.116.48.245",
         "ipv6" : "false",
         "latitude" : "21.9974",
         "location" : "21.9974,79.0011",
         "longitude" : "79.0011",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Gujarat Telelink Pvt Ltd",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 3392,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "27.116.48.0/21",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 27.38.233.244:3392 (tcp/http) - last seen on 2024-11-21 at 10:03:22 UTC

    • IP
      27.38.233.244
      Network
      27.38.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      HTTP Title
      400 Bad Request
      ASN
      AS17623
      Organization
      China Unicom Shenzen network
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      4564d72ef78132816b201be0acff68c0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      9153d2261be6f9ec2d9bb38cadfd005d
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 10:03:22 GMT
      Content-Type: text/html
      Content-Length: 187
      Connection: close
      
      <html>
      <head><title>400 Bad Request</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <hr><center>p2324040103180</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:03:22.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "9153d2261be6f9ec2d9bb38cadfd005d",
               "bodymmh3" : -1822283523,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -1312964199,
               "title" : "400 Bad Request"
            },
            "length" : 332
         },
         "asn" : "AS17623",
         "city" : "Shenzhen",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 10:03:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 187\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>p2324040103180</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "4564d72ef78132816b201be0acff68c0",
         "datammh3" : -562216593,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17623",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "chinaunicom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "UNICOM-GDSZ",
            "organization" : "China Unicom Guangdong Province Network",
            "subnet" : "27.38.0.0/16"
         },
         "ip" : "27.38.233.244",
         "ipv6" : "false",
         "latitude" : "22.5559",
         "location" : "22.5559,114.0577",
         "longitude" : "114.0577",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Unicom Shenzen network",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3392,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "27.38.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 47.110.175.77:3392 (tcp/http) - last seen on 2024-11-21 at 10:03:09 UTC

    • IP
      47.110.175.77
      Network
      47.96.0.0/12
      Device

      <enterprise field>: device.class

      HTTP Title
      400 Bad Request
      ASN
      AS37963
      Organization
      Hangzhou Alibaba Advertising Co.,Ltd.
      Protocol
      http
      Source
      datascan
    • Product
      Taobao Tengine
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c930b41d3a1799ac1eb01e3825a55c8
      HTTP Header MD5
      21eee2fc4259e3c5998052d3c83cd900
      HTTP Body MD5
      c7a3a0283d7eab90dd22b23e12868d29
    • HTTP/1.1 400 Bad Request
      Server: Tengine
      Date: Thu, 21 Nov 2024 10:03:08 GMT
      Content-Type: text/html
      Connection: close
      
      <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
      <html>
      <head><title>400 Bad Request</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <hr/>Powered by Tengine<hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:03:09.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "c7a3a0283d7eab90dd22b23e12868d29",
               "bodymmh3" : -106954995,
               "headermd5" : "21eee2fc4259e3c5998052d3c83cd900",
               "headermmh3" : 261786900,
               "title" : "400 Bad Request"
            },
            "length" : 351
         },
         "asn" : "AS37963",
         "city" : "Hangzhou",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: Tengine\r\nDate: Thu, 21 Nov 2024 10:03:08 GMT\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr/>Powered by Tengine<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "2c930b41d3a1799ac1eb01e3825a55c8",
         "datammh3" : -1896149615,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS37963",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "alibaba-inc.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "ALISOFT",
            "organization" : "Hangzhou Alibaba Advertising Co.,Ltd.",
            "subnet" : "47.104.0.0/13"
         },
         "ip" : "47.110.175.77",
         "ipv6" : "false",
         "latitude" : "30.2994",
         "location" : "30.2994,120.1612",
         "longitude" : "120.1612",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Hangzhou Alibaba Advertising Co.,Ltd.",
         "port" : 3392,
         "product" : "Tengine",
         "productvendor" : "Taobao",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "47.96.0.0/12",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 116.162.201.124:3392 (tcp/http) - last seen on 2024-11-21 at 09:58:58 UTC

    • IP
      116.162.201.124
      Network
      116.162.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      HTTP Title
      400 Bad Request
      ASN
      AS4837
      Organization
      CHINA UNICOM China169 Backbone
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      OpenResty OpenResty
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      8d4a25d5ceebc641d7cf66a8a375639d
      HTTP Header MD5
      95c1102a26f927a6d27aa9e7eb6e1c57
      HTTP Body MD5
      fe7bef4d04e5d3f79d908d8447cc621a
    • HTTP/1.1 400 Bad Request
      Server: openresty
      Date: Thu, 21 Nov 2024 09:58:57 GMT
      Content-Type: text/html
      Content-Length: 154
      Connection: close
      Request-Id: c97c673f046174a245c9d37cc4ae604e
      
      <html>
      <head><title>400 Bad Request</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:58:58.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "fe7bef4d04e5d3f79d908d8447cc621a",
               "bodymmh3" : 232769354,
               "headermd5" : "95c1102a26f927a6d27aa9e7eb6e1c57",
               "headermmh3" : -41473962,
               "title" : "400 Bad Request"
            },
            "length" : 349
         },
         "asn" : "AS4837",
         "city" : "Loudi",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: openresty\r\nDate: Thu, 21 Nov 2024 09:58:57 GMT\r\nContent-Type: text/html\r\nContent-Length: 154\r\nConnection: close\r\nRequest-Id: c97c673f046174a245c9d37cc4ae604e\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "8d4a25d5ceebc641d7cf66a8a375639d",
         "datammh3" : 1018490436,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4837",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "chinaunicom.cn",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "UNICOM",
            "organization" : "China Unicom CHINA169 Network",
            "subnet" : "116.162.0.0/16"
         },
         "ip" : "116.162.201.124",
         "ipv6" : "false",
         "latitude" : "27.7279",
         "location" : "27.7279,111.9992",
         "longitude" : "111.9992",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CHINA UNICOM China169 Backbone",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3392,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "116.162.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 163.44.167.8:3392 (tcp/http) - last seen on 2024-11-21 at 09:54:10 UTC

    • IP
      163.44.167.8
      Alternative IP(s)
      2400:8500:1302:811:163:44:167:8
      Network
      163.44.160.0/19
      Domain(s)
      cnode.io
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Ubuntu
      HTTP Title
      400 Bad Request
      Reverse DNS
      v163-44-167-8.a064.g.tyo1.static.cnode.io
      ASN
      AS7506
      Organization
      GMO Internet,Inc
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Ubuntu
      Product
      F5 Nginx 1.14.0
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a5c509101b5f879b6e08c8ebf626320b
      HTTP Header MD5
      62df4e371b9166f214e2f0d5b1bb9e93
      HTTP Body MD5
      d64b0184bd231464e603c3f736b3d85d
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.14.0 (Ubuntu)
      Date: Thu, 21 Nov 2024 09:54:09 GMT
      Content-Type: text/html
      Content-Length: 182
      Connection: close
      
      <html>
      <head><title>400 Bad Request</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <hr><center>nginx/1.14.0 (Ubuntu)</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:54:10.000Z",
         "alternativeip" : [
            "2400:8500:1302:811:163:44:167:8"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "d64b0184bd231464e603c3f736b3d85d",
               "bodymmh3" : -179766712,
               "headermd5" : "62df4e371b9166f214e2f0d5b1bb9e93",
               "headermmh3" : -1755783810,
               "title" : "400 Bad Request"
            },
            "length" : 343
         },
         "asn" : "AS7506",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.14.0 (Ubuntu)\r\nDate: Thu, 21 Nov 2024 09:54:09 GMT\r\nContent-Type: text/html\r\nContent-Length: 182\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>nginx/1.14.0 (Ubuntu)</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a5c509101b5f879b6e08c8ebf626320b",
         "datammh3" : -2104091638,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cnode.io"
         ],
         "geolocus" : {
            "asn" : "AS7506",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "cnode.io",
               "gmo.jp",
               "nic.ad.jp"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "interQ",
            "organization" : "GMO Internet Group, Inc.",
            "subnet" : "163.44.160.0/19"
         },
         "host" : [
            "v163-44-167-8"
         ],
         "hostname" : [
            "v163-44-167-8.a064.g.tyo1.static.cnode.io"
         ],
         "ip" : "163.44.167.8",
         "ipv6" : "false",
         "latitude" : "35.6897",
         "location" : "35.6897,139.6895",
         "longitude" : "139.6895",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "GMO Internet,Inc",
         "os" : "Linux",
         "osdistribution" : "Ubuntu",
         "osvendor" : "Linux",
         "port" : 3392,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.14.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "v163-44-167-8.a064.g.tyo1.static.cnode.io"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "a064.g.tyo1.static.cnode.io",
            "g.tyo1.static.cnode.io",
            "static.cnode.io",
            "tyo1.static.cnode.io"
         ],
         "subnet" : "163.44.160.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "io"
         ],
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 45.115.238.244:3392 (tcp/http) - last seen on 2024-11-21 at 09:52:36 UTC

    • IP
      45.115.238.244
      Network
      45.115.236.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      400 Bad Request
      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      55cf5de3b3a32a0ee5313aa230307980
      HTTP Header MD5
      f4eaba8998b0e515f84d95c1ad5ea5c7
      HTTP Body MD5
      2565895531633a7521636ee7375b43ca
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.17.6
      Date: Thu, 21 Nov 2024 09:52:36 GMT
      Content-Type: text/html
      Content-Length: 157
      Connection: close
      
      <html>
      <head><title>400 Bad Request</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <hr><center>nginx/1.17.6</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:52:36.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "2565895531633a7521636ee7375b43ca",
               "bodymmh3" : -1057385949,
               "headermd5" : "f4eaba8998b0e515f84d95c1ad5ea5c7",
               "headermmh3" : -1055376433,
               "title" : "400 Bad Request"
            },
            "length" : 309
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.17.6\r\nDate: Thu, 21 Nov 2024 09:52:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 157\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>nginx/1.17.6</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "55cf5de3b3a32a0ee5313aa230307980",
         "datammh3" : -1227591593,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "45.115.238.0/24"
         },
         "ip" : "45.115.238.244",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 3392,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "45.115.236.0/22",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }