Returning 10 result(s) out of 238,315 in 1.790 second(s)

  • 174.35.56.201:4343 (tcp/http) - last seen on 2024-11-21 at 08:53:58 UTC

    • IP
      174.35.56.201
      Network
      174.35.56.0/22
      Device

      <enterprise field>: device.class

      URL

      http://174.35.56.201:4343/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS54994
      Organization
      ML-1432-54994
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a5b021108181bbd69d7356dbb7818197
      HTTP Header MD5
      7faf2c3362dd02917836507cd9d29a12
      HTTP Body MD5
      5fae4cc9c75941e10b3fc560dd24f4ed
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 08:53:58 GMT
      Content-Type: text/html
      Content-Length: 2422
      Connection: close
      x-ws-request-id: 673ef526_PS-LAX-04X6B23_28056-38647
      
      <!DOCTYPE html>
      <html>
      	<head>
      		<meta charset="utf-8">
      		<meta http-equiv="X-UA-Compatible" content="IE=edge">
      		<meta name="viewport" content="width=device-width, initial-scale=1">
      		<title>400 Bad Request</title>
      		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
      	</head>
      	<body>
      		<div id="p" class="P">
      			<div class="K">400</div>
      			<div class="O I">Bad Request</div>
      			<p class="J A L">Error Times: Thu, 21 Nov 2024 08:53:58 GMT
      				<br>
      				<span class="F">IP: <srcip></span>Node information: PS-LAX-04X6B23
      				<br>URL: http://<ip>:4343/
      				<br>Request-Id: 673ef526_PS-LAX-04X6B23_28056-38647
      				<br>
      				<br>Check:
      				<span class="C G" onclick="s(0)">Details</span></p>
      		</div>
      		<div id="d" class="hide_me P H">
      			<div class="K">ERROR</div>
      			<p class="O I">"The Requested URL could not be retrieved</p>
      			<div class="O">
      				<div>While trying to retrieve the URL:</div>
      				<pre class="B G">http://<ip>:4343/</pre></div>
      			<div class="M">
      				<span>The following error was encountered:</span>
      				<ul class="E">
      					<li class="D G">Invalid Request</li></ul>
      			</div>
      			<div class="M">
      				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
      				<ul class="E G">
      					<li class="D">Missing or unknown request method</li>
      					<li class="D">Missing URL</li>
      					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
      					<li class="D">Request is too large</li>
      					<li class="D">Content-Length missing for POST or PUT requests</li>
      					<li class="D">Illegal character in hostname;underscores are not allowed</li>
      					<li class="D">Range Invalid</li></ul>
      			</div>
      			<a class="N C" href="#" onclick="s(1)">return</a></div>
      		<script type="text/javascript">function e(i) {
      				return document.getElementById(i);
      			}
      			function d(i, t) {
      				e(i).style.display = (t ? 'block': 'none');
      			}
      			function s(e) {
      				d('p', e);
      				d('d', !e);
      			}</script>
      	</body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:58.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "5fae4cc9c75941e10b3fc560dd24f4ed",
               "bodymmh3" : -1631885328,
               "headermd5" : "7faf2c3362dd02917836507cd9d29a12",
               "headermmh3" : -1891768804,
               "title" : "400 Bad Request"
            },
            "length" : 2599
         },
         "asn" : "AS54994",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:53:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 2422\r\nConnection: close\r\nx-ws-request-id: 673ef526_PS-LAX-04X6B23_28056-38647\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 21 Nov 2024 08:53:58 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-LAX-04X6B23\n\t\t\t\t<br>URL: http://<ip>:4343/\n\t\t\t\t<br>Request-Id: 673ef526_PS-LAX-04X6B23_28056-38647\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:4343/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
         "datamd5" : "a5b021108181bbd69d7356dbb7818197",
         "datammh3" : 1759419338,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS54994",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "cdnetworks.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "CDNET-USA-1",
            "organization" : "CDNetworks Inc.",
            "subnet" : "174.35.56.0/24"
         },
         "ip" : "174.35.56.201",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ML-1432-54994",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "174.35.56.0/22",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 177.148.251.145:4343 (tcp/http) - last seen on 2024-11-21 at 08:53:55 UTC

    • IP
      177.148.251.145
      Network
      177.148.0.0/14
      Domain(s)
      timbrasil.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://177.148.251.145:4343/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      145.251.148.177.isp.timbrasil.com.br
      ASN
      AS26615
      Organization
      TIM SA
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b1d04896c703757d96de81222b65e24c
      HTTP Header MD5
      a23d459f6df25deeaf6d1de4dcac2312
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 08:53:55 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      X-Frame-Options: sameorigin
      x-xss-protection: 1; mode=block
      X-Content-Type-Options: nosniff
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:55.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
               "headermmh3" : -942206153,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 488
         },
         "asn" : "AS26615",
         "city" : "Salvador",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:53:55 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "b1d04896c703757d96de81222b65e24c",
         "datammh3" : 1607515384,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "timbrasil.com.br"
         ],
         "geolocus" : {
            "asn" : "AS26615",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "dnlegal.com.br",
               "timbrasil.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.421.421/0117-41",
            "organization" : "TIM S/A",
            "subnet" : "177.148.0.0/14"
         },
         "host" : [
            145
         ],
         "hostname" : [
            "145.251.148.177.isp.timbrasil.com.br"
         ],
         "ip" : "177.148.251.145",
         "ipv6" : "false",
         "latitude" : "-12.8671",
         "location" : "-12.8671,-38.4807",
         "longitude" : "-38.4807",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TIM SA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "145.251.148.177.isp.timbrasil.com.br"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "177.isp.timbrasil.com.br",
            "isp.timbrasil.com.br",
            "251.148.177.isp.timbrasil.com.br",
            "148.177.isp.timbrasil.com.br"
         ],
         "subnet" : "177.148.0.0/14",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 77.70.134.133:4343 (tcp/http) - last seen on 2024-11-21 at 08:53:35 UTC

    • IP
      77.70.134.133
      Alternative IP(s)
      84.11.50.58
      Network
      77.70.128.0/19
      Domain(s)
      sepocye.com
      Device

      <enterprise field>: device.class

      URL

      http://77.70.134.133:4343/ 400

      HTTP Title
      400 Bad Request
      Reverse DNS
      cpu-fw.sepocye.com cpumail.sepocye.com
      ASN
      AS5377
      Organization
      Marlink AS
      Protocol
      http
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      886d1aae0503d86807399acbee8bd5e2
      HTTP Header MD5
      e3860b18831077853883b8d1ea56fe48
      HTTP Body MD5
      6efda5878ab25f4f28a89bbb3f9fa41c
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 08:57:31 GMT
      Server: xxxx
      X-Frame-Options: SAMEORIGIN
      Strict-Transport-Security: max-age=31536000
      X-Content-Type-Options: nosniff
      Content-Length: 362
      Connection: close
      Content-Type: text/html; charset=iso-8859-1
      
      <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
      <html><head>
      <title>400 Bad Request</title>
      </head><body>
      <h1>Bad Request</h1>
      <p>Your browser sent a request that this server could not understand.<br />
      Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
       Instead use the HTTPS scheme to access this URL, please.<br />
      </p>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:35.000Z",
         "alternativeip" : [
            "84.11.50.58"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "6efda5878ab25f4f28a89bbb3f9fa41c",
               "bodymmh3" : -645452522,
               "headermd5" : "e3860b18831077853883b8d1ea56fe48",
               "headermmh3" : -1385462342,
               "title" : "400 Bad Request"
            },
            "length" : 633
         },
         "asn" : "AS5377",
         "country" : "NO",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 08:57:31 GMT\r\nServer: xxxx\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nContent-Length: 362\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>400 Bad Request</title>\n</head><body>\n<h1>Bad Request</h1>\n<p>Your browser sent a request that this server could not understand.<br />\nReason: You're speaking plain HTTP to an SSL-enabled server port.<br />\n Instead use the HTTPS scheme to access this URL, please.<br />\n</p>\n</body></html>\n",
         "datamd5" : "886d1aae0503d86807399acbee8bd5e2",
         "datammh3" : -472977912,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "sepocye.com"
         ],
         "host" : [
            "cpu-fw",
            "cpumail"
         ],
         "hostname" : [
            "cpu-fw.sepocye.com",
            "cpumail.sepocye.com"
         ],
         "ip" : "77.70.134.133",
         "ipv6" : "false",
         "latitude" : "59.9452",
         "location" : "59.9452,10.7559",
         "longitude" : "10.7559",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Marlink AS",
         "port" : 4343,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "cpu-fw.sepocye.com",
            "cpumail.sepocye.com"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "77.70.128.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 191.135.173.213:4343 (tcp/unknown) - last seen on 2024-11-21 at 08:53:35 UTC

    • IP
      191.135.173.213
      Network
      191.128.0.0/12
      Domain(s)
      timbrasil.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      Reverse DNS
      213.173.135.191.isp.timbrasil.com.br
      ASN
      AS26615
      Organization
      TIM SA
      Protocol
      unknown
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      61ea727ffcd84c3bdfb7ec984712f343
    • \x15\x00\x00\x00\x02\x02
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:35.000Z",
         "app" : {
            "length" : 7
         },
         "asn" : "AS26615",
         "city" : "Salvador",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "\\x15\\x00\\x00\\x00\\x02\\x02\n",
         "datamd5" : "61ea727ffcd84c3bdfb7ec984712f343",
         "datammh3" : -962737174,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "timbrasil.com.br"
         ],
         "geolocus" : {
            "asn" : "AS26615",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "dnlegal.com.br",
               "timbrasil.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.421.421/0117-41",
            "organization" : "TIM S/A",
            "subnet" : "191.128.0.0/12"
         },
         "host" : [
            213
         ],
         "hostname" : [
            "213.173.135.191.isp.timbrasil.com.br"
         ],
         "ip" : "191.135.173.213",
         "ipv6" : "false",
         "latitude" : "-12.8671",
         "location" : "-12.8671,-38.4807",
         "longitude" : "-38.4807",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TIM SA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "protocol" : "unknown",
         "reverse" : [
            "213.173.135.191.isp.timbrasil.com.br"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "subdomains" : [
            "135.191.isp.timbrasil.com.br",
            "191.isp.timbrasil.com.br",
            "173.135.191.isp.timbrasil.com.br",
            "isp.timbrasil.com.br"
         ],
         "subnet" : "191.128.0.0/12",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 179.251.171.240:4343 (tcp/http) - last seen on 2024-11-21 at 08:53:33 UTC

    • IP
      179.251.171.240
      Network
      179.248.0.0/14
      Domain(s)
      timbrasil.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://179.251.171.240:4343/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      240.171.251.179.isp.timbrasil.com.br
      ASN
      AS26615
      Organization
      TIM SA
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b1d04896c703757d96de81222b65e24c
      HTTP Header MD5
      a23d459f6df25deeaf6d1de4dcac2312
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 08:53:33 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      X-Frame-Options: sameorigin
      x-xss-protection: 1; mode=block
      X-Content-Type-Options: nosniff
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:33.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
               "headermmh3" : 22169485,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 488
         },
         "asn" : "AS26615",
         "city" : "Goi\u00e2nia",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:53:33 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "b1d04896c703757d96de81222b65e24c",
         "datammh3" : 1607515384,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "timbrasil.com.br"
         ],
         "geolocus" : {
            "asn" : "AS26615",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "dnlegal.com.br",
               "timbrasil.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.421.421/0117-41",
            "organization" : "TIM S/A",
            "subnet" : "179.248.0.0/14"
         },
         "host" : [
            240
         ],
         "hostname" : [
            "240.171.251.179.isp.timbrasil.com.br"
         ],
         "ip" : "179.251.171.240",
         "ipv6" : "false",
         "latitude" : "-16.5610",
         "location" : "-16.5610,-49.2063",
         "longitude" : "-49.2063",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TIM SA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "240.171.251.179.isp.timbrasil.com.br"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "171.251.179.isp.timbrasil.com.br",
            "179.isp.timbrasil.com.br",
            "251.179.isp.timbrasil.com.br",
            "isp.timbrasil.com.br"
         ],
         "subnet" : "179.248.0.0/14",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 186.235.226.78:4343 (tcp/http) - last seen on 2024-11-21 at 08:53:32 UTC

    • IP
      186.235.226.78
      Network
      186.235.224.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://186.235.226.78:4343/ 200

      ASN
      AS53205
      Organization
      IBSOL TELECOM LTDA
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a7d780f1db4f34e387fbbe262153dd9a
      HTTP Header MD5
      c629f515f563f1d1ee53b888eb8a0fdf
      HTTP Body MD5
      02bc7bb469d11fd9bd5fba037f28ec3f
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 08:53:32 GMT
      Content-Length: 115
      Content-Type: text/plain; charset=utf-8
      Connection: close
      
      {
        "Statuses": null,
        "Help": "To access Storagenode services, please use DRPC protocol!",
        "AllHealthy": true
      }
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:32.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "02bc7bb469d11fd9bd5fba037f28ec3f",
               "bodymmh3" : -1472865302,
               "headermd5" : "c629f515f563f1d1ee53b888eb8a0fdf",
               "headermmh3" : -950134699
            },
            "length" : 252
         },
         "asn" : "AS53205",
         "city" : "Andara\u00ed",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 08:53:32 GMT\r\nContent-Length: 115\r\nContent-Type: text/plain; charset=utf-8\r\nConnection: close\r\n\r\n{\n  \"Statuses\": null,\n  \"Help\": \"To access Storagenode services, please use DRPC protocol!\",\n  \"AllHealthy\": true\n}",
         "datamd5" : "a7d780f1db4f34e387fbbe262153dd9a",
         "datammh3" : 1031139897,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS53205",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "ibsolhost.com.br",
               "ibsoltelecom.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "08.894.504/0001-04",
            "organization" : "IBSOL TELECOM LTDA",
            "subnet" : "186.235.224.0/21"
         },
         "ip" : "186.235.226.78",
         "ipv6" : "false",
         "latitude" : "-12.8417",
         "location" : "-12.8417,-41.2768",
         "longitude" : "-41.2768",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "IBSOL TELECOM LTDA",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 4343,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "186.235.224.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 179.251.110.180:4343 (tcp/http) - last seen on 2024-11-21 at 08:53:31 UTC

    • IP
      179.251.110.180
      Network
      179.248.0.0/14
      Domain(s)
      timbrasil.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://179.251.110.180:4343/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      180.110.251.179.isp.timbrasil.com.br
      ASN
      AS26615
      Organization
      TIM SA
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b1d04896c703757d96de81222b65e24c
      HTTP Header MD5
      a23d459f6df25deeaf6d1de4dcac2312
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 08:53:30 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      X-Frame-Options: sameorigin
      x-xss-protection: 1; mode=block
      X-Content-Type-Options: nosniff
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
               "headermmh3" : 2134471248,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 488
         },
         "asn" : "AS26615",
         "city" : "Belo Horizonte",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:53:30 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "b1d04896c703757d96de81222b65e24c",
         "datammh3" : 1607515384,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "timbrasil.com.br"
         ],
         "geolocus" : {
            "asn" : "AS26615",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "dnlegal.com.br",
               "timbrasil.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.421.421/0117-41",
            "organization" : "TIM S/A",
            "subnet" : "179.248.0.0/14"
         },
         "host" : [
            180
         ],
         "hostname" : [
            "180.110.251.179.isp.timbrasil.com.br"
         ],
         "ip" : "179.251.110.180",
         "ipv6" : "false",
         "latitude" : "-19.9029",
         "location" : "-19.9029,-43.9572",
         "longitude" : "-43.9572",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TIM SA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "180.110.251.179.isp.timbrasil.com.br"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "110.251.179.isp.timbrasil.com.br",
            "isp.timbrasil.com.br",
            "251.179.isp.timbrasil.com.br",
            "179.isp.timbrasil.com.br"
         ],
         "subnet" : "179.248.0.0/14",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 187.99.76.224:4343 (tcp/http) - last seen on 2024-11-21 at 08:53:25 UTC

    • IP
      187.99.76.224
      Network
      187.96.0.0/14
      Domain(s)
      timbrasil.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://187.99.76.224:4343/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      224.76.99.187.isp.timbrasil.com.br
      ASN
      AS26615
      Organization
      TIM SA
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b1d04896c703757d96de81222b65e24c
      HTTP Header MD5
      a23d459f6df25deeaf6d1de4dcac2312
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 08:53:25 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      X-Frame-Options: sameorigin
      x-xss-protection: 1; mode=block
      X-Content-Type-Options: nosniff
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:25.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
               "headermmh3" : -884568922,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 488
         },
         "asn" : "AS26615",
         "city" : "Goi\u00e2nia",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:53:25 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "b1d04896c703757d96de81222b65e24c",
         "datammh3" : 1607515384,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "timbrasil.com.br"
         ],
         "geolocus" : {
            "asn" : "AS26615",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "dnlegal.com.br",
               "timbrasil.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.421.421/0117-41",
            "organization" : "TIM S/A",
            "subnet" : "187.96.0.0/14"
         },
         "host" : [
            224
         ],
         "hostname" : [
            "224.76.99.187.isp.timbrasil.com.br"
         ],
         "ip" : "187.99.76.224",
         "ipv6" : "false",
         "latitude" : "-16.5610",
         "location" : "-16.5610,-49.2063",
         "longitude" : "-49.2063",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TIM SA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "224.76.99.187.isp.timbrasil.com.br"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "isp.timbrasil.com.br",
            "99.187.isp.timbrasil.com.br",
            "76.99.187.isp.timbrasil.com.br",
            "187.isp.timbrasil.com.br"
         ],
         "subnet" : "187.96.0.0/14",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 211.83.8.232:4343 (tcp/http) - last seen on 2024-11-21 at 08:53:23 UTC

    • IP
      211.83.8.232
      Network
      211.80.0.0/13
      Device

      <enterprise field>: device.class

      URL

      http://211.83.8.232:4343/ 200

      ASN
      AS4538
      Organization
      China Education and Research Network Center
      Protocol
      http
      Source
      datascan
    • Product
      Apache HTTP Server
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      9ffe32cb8005701531c92bcf5823dbe1
      HTTP Header MD5
      97eb73c41d2d1f332d0a4ddd4c85c3de
      HTTP Body MD5
      00f908fffddaf2003b40941b246f11c1
    • HTTP/1.1 200 ok
      Server: Apache
      Content-Length:  221
      Cache-Control: no-cache
      Connection: close
      
      <script>top.self.location.href='http://211.83.41.225/eportal/index.jsp?wlanuserip=<srcip>&wlanacname=NAS&ssid=Ruijie&nasip=10.100.100.114&mac=000000000000&t=wireless-v2-plain&url=http://<ip>:4343/'</script>
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:23.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "211.83.41.225",
                  "10.100.100.114"
               ],
               "url" : [
                  "http://211.83.41.225/eportal/index.jsp?wlanuserip="
               ]
            },
            "http" : {
               "bodymd5" : "00f908fffddaf2003b40941b246f11c1",
               "bodymmh3" : 1178991002,
               "headermd5" : "97eb73c41d2d1f332d0a4ddd4c85c3de",
               "headermmh3" : -1664957083
            },
            "length" : 311
         },
         "asn" : "AS4538",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 ok\r\nServer: Apache\r\nContent-Length:  221\r\nCache-Control: no-cache\r\nConnection: close\r\n\r\n<script>top.self.location.href='http://211.83.41.225/eportal/index.jsp?wlanuserip=<srcip>&wlanacname=NAS&ssid=Ruijie&nasip=10.100.100.114&mac=000000000000&t=wireless-v2-plain&url=http://<ip>:4343/'</script>\r\n\r\n",
         "datamd5" : "9ffe32cb8005701531c92bcf5823dbe1",
         "datammh3" : -1824936408,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4538",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "211.in-addr.arpa",
               "apnic.net",
               "cernet.edu.cn",
               "scut.edu.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CERNET",
            "organization" : "China Education and Research Network",
            "subnet" : "211.80.0.0/13"
         },
         "ip" : "211.83.8.232",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Education and Research Network Center",
         "port" : 4343,
         "product" : "HTTP Server",
         "productvendor" : "Apache",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "ok",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "211.80.0.0/13",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 186.229.202.1:4343 (tcp/http) - last seen on 2024-11-21 at 08:53:22 UTC

    • IP
      186.229.202.1
      Network
      186.228.0.0/14
      Domain(s)
      intelignet.com.br
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://186.229.202.1:4343/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      186-229-202-1.ded.intelignet.com.br
      ASN
      AS26615
      Organization
      TIM SA
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b1d04896c703757d96de81222b65e24c
      HTTP Header MD5
      a23d459f6df25deeaf6d1de4dcac2312
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 21 Nov 2024 08:53:22 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      X-Frame-Options: sameorigin
      x-xss-protection: 1; mode=block
      X-Content-Type-Options: nosniff
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:53:22.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a23d459f6df25deeaf6d1de4dcac2312",
               "headermmh3" : -909961708,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 488
         },
         "asn" : "AS26615",
         "city" : "Francisco Morato",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:53:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nX-Frame-Options: sameorigin\r\nx-xss-protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "b1d04896c703757d96de81222b65e24c",
         "datammh3" : 1607515384,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "intelignet.com.br"
         ],
         "geolocus" : {
            "asn" : "AS26615",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "dnlegal.com.br",
               "intelignet.com.br",
               "timbrasil.com.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "02.421.421/0001-11",
            "organization" : "TIM S.A.",
            "subnet" : "186.228.0.0/15"
         },
         "host" : [
            "186-229-202-1"
         ],
         "hostname" : [
            "186-229-202-1.ded.intelignet.com.br"
         ],
         "ip" : "186.229.202.1",
         "ipv6" : "false",
         "latitude" : "-23.2683",
         "location" : "-23.2683,-46.7092",
         "longitude" : "-46.7092",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TIM SA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 4343,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "186-229-202-1.ded.intelignet.com.br"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "ded.intelignet.com.br"
         ],
         "subnet" : "186.228.0.0/14",
         "tld" : [
            "com.br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }