Returning 10 result(s) out of 3,400 in 0.122 second(s)

  • 149.154.157.17:18245 (tcp/http) - last seen on 2024-11-07 at 05:16:15 UTC

    • IP
      149.154.157.17
      Network
      149.154.157.0/24
      Domain(s)
      149.in-addr.arpa
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Ubuntu
      URL

      http://149.154.157.17:18245/ 400

      HTTP Title
      ERROR: The requested URL could not be retrieved
      Reverse DNS
      17.157.154.149.in-addr.arpa
      ASN
      AS9009
      Organization
      M247 Europe SRL
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Ubuntu
      Product
      squid-cache Squid 4.7
      HTTP Component(s)
      squid-cache Squid
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      de42ba758a101de7adb3a967be5e04da
      HTTP Header MD5
      0be63d73f144f0c0117ed1c6b827488f
      HTTP Body MD5
      7230c64062e78a95d0a409b23bfab96e
    • HTTP/1.1 400 Bad Request
      Server: squid/4.7
      Mime-Version: 1.0
      Date: Thu, 07 Nov 2024 05:16:15 GMT
      Content-Type: text/html;charset=utf-8
      Content-Length: 4080
      X-Squid-Error: ERR_INVALID_URL 0
      Vary: Accept-Language
      Content-Language: en
      X-Cache: MISS from proxy.wakoopa.com
      Via: 1.1 proxy.wakoopa.com (squid/4.7)
      Connection: close
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
      <html><head>
      <meta type="copyright" content="Copyright (C) 1996-2019 The Squid Software Foundation and contributors">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      <title>ERROR: The requested URL could not be retrieved</title>
      <style type="text/css"><!-- 
       /* Normalize */
      /*! normalize.css v7.0.0 | MIT License | github.com/necolas/normalize.css */html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,main{display:block}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent;-webkit-text-decoration-skip:objects}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}dfn{font-style:italic}mark{background-color:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}audio,video{display:inline-block}audio:not([controls]){display:none;height:0}img{border-style:none}svg:not(:root){overflow:hidden}button,input,optgroup,select,textarea{font-family:sans-serif;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{display:inline-block;vertical-align:baseline}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}details,menu{display:block}summary{display:list-item}canvas{display:inline-block}template{display:none}[hidden]{display:none}/*# sourceMappingURL=normalize.min.css.map */
      
      /* Custom CSS */
      html,body{
        font-family: -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Oxygen-Sans,Ubuntu,Cantarell,"Helvetica Neue",sans-serif;
        font-size: 18px;
        line-height: 1.45;
        background: #fff;
      }
      body{ padding: 1em; }
      #content, #titles, hr{ max-width: 40em; margin: 1em auto; }
      blockquote{ background-color: #f4f4f4; padding: 1em; margin: 0; line-height: 1; border-radius: 4px }
      hr{border-top: 1px solid #f4f4f4;}
      :lang(fa), :lang(he) { direction: rtl; }
      
      
      body
      :lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }
      :lang(he) { direction: rtl; }
       --></style>
      </head><body id=ERR_INVALID_URL>
      <div id="titles">
      <h1>ERROR</h1>
      <h2>The requested URL could not be retrieved</h2>
      </div>
      <hr>
      
      <div id="content">
      <p>The following error was encountered while trying to retrieve the URL: <a href="/">/</a></p>
      
      <blockquote id="error">
      <p><b>Invalid URL</b></p>
      </blockquote>
      
      <p>Some aspect of the requested URL is incorrect.</p>
      
      <p>Some possible problems are:</p>
      <ul>
      <li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li>
      <li><p>Missing hostname</p></li>
      <li><p>Illegal double-escape in the URL-Path</p></li>
      <li><p>Illegal character in hostname; underscores are not allowed.</p></li>
      </ul>
      
      <br>
      </div>
      
      <hr>
      <div id="footer">
      <!-- ERR_INVALID_URL -->
      </div>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:16:15.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "7230c64062e78a95d0a409b23bfab96e",
               "bodymmh3" : -1038092265,
               "component" : [
                  {
                     "productvendor" : "squid-cache",
                     "product" : "Squid"
                  }
               ],
               "headermd5" : "0be63d73f144f0c0117ed1c6b827488f",
               "headermmh3" : 1558695460,
               "title" : "ERROR: The requested URL could not be retrieved"
            },
            "length" : 4420
         },
         "asn" : "AS9009",
         "city" : "Milan",
         "country" : "IT",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: squid/4.7\r\nMime-Version: 1.0\r\nDate: Thu, 07 Nov 2024 05:16:15 GMT\r\nContent-Type: text/html;charset=utf-8\r\nContent-Length: 4080\r\nX-Squid-Error: ERR_INVALID_URL 0\r\nVary: Accept-Language\r\nContent-Language: en\r\nX-Cache: MISS from proxy.wakoopa.com\r\nVia: 1.1 proxy.wakoopa.com (squid/4.7)\r\nConnection: close\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<meta type=\"copyright\" content=\"Copyright (C) 1996-2019 The Squid Software Foundation and contributors\">\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\n<title>ERROR: The requested URL could not be retrieved</title>\n<style type=\"text/css\"><!-- \n /* Normalize */\n/*! normalize.css v7.0.0 | MIT License | github.com/necolas/normalize.css */html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,main{display:block}figure{margin:1em 40px}hr{box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent;-webkit-text-decoration-skip:objects}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:inherit}b,strong{font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}dfn{font-style:italic}mark{background-color:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}audio,video{display:inline-block}audio:not([controls]){display:none;height:0}img{border-style:none}svg:not(:root){overflow:hidden}button,input,optgroup,select,textarea{font-family:sans-serif;font-size:100%;line-height:1.15;margin:0}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-webkit-appearance:button}[type=button]::-moz-focus-inner,[type=reset]::-moz-focus-inner,[type=submit]::-moz-focus-inner,button::-moz-focus-inner{border-style:none;padding:0}[type=button]:-moz-focusring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}progress{display:inline-block;vertical-align:baseline}textarea{overflow:auto}[type=checkbox],[type=radio]{box-sizing:border-box;padding:0}[type=number]::-webkit-inner-spin-button,[type=number]::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}[type=search]::-webkit-search-cancel-button,[type=search]::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}details,menu{display:block}summary{display:list-item}canvas{display:inline-block}template{display:none}[hidden]{display:none}/*# sourceMappingURL=normalize.min.css.map */\n\n/* Custom CSS */\nhtml,body{\n  font-family: -apple-system,BlinkMacSystemFont,\"Segoe UI\",Roboto,Oxygen-Sans,Ubuntu,Cantarell,\"Helvetica Neue\",sans-serif;\n  font-size: 18px;\n  line-height: 1.45;\n  background: #fff;\n}\nbody{ padding: 1em; }\n#content, #titles, hr{ max-width: 40em; margin: 1em auto; }\nblockquote{ background-color: #f4f4f4; padding: 1em; margin: 0; line-height: 1; border-radius: 4px }\nhr{border-top: 1px solid #f4f4f4;}\n:lang(fa), :lang(he) { direction: rtl; }\n\n\nbody\n:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }\n:lang(he) { direction: rtl; }\n --></style>\n</head><body id=ERR_INVALID_URL>\n<div id=\"titles\">\n<h1>ERROR</h1>\n<h2>The requested URL could not be retrieved</h2>\n</div>\n<hr>\n\n<div id=\"content\">\n<p>The following error was encountered while trying to retrieve the URL: <a href=\"/\">/</a></p>\n\n<blockquote id=\"error\">\n<p><b>Invalid URL</b></p>\n</blockquote>\n\n<p>Some aspect of the requested URL is incorrect.</p>\n\n<p>Some possible problems are:</p>\n<ul>\n<li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li>\n<li><p>Missing hostname</p></li>\n<li><p>Illegal double-escape in the URL-Path</p></li>\n<li><p>Illegal character in hostname; underscores are not allowed.</p></li>\n</ul>\n\n<br>\n</div>\n\n<hr>\n<div id=\"footer\">\n<!-- ERR_INVALID_URL -->\n</div>\n</body></html>\n",
         "datamd5" : "de42ba758a101de7adb3a967be5e04da",
         "datammh3" : 2131449257,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "149.in-addr.arpa"
         ],
         "geolocus" : {
            "asn" : "AS9009",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "IT",
            "countryname" : "Italy",
            "domain" : [
               "edis.at"
            ],
            "isineu" : "true",
            "latitude" : "41.87194",
            "location" : "41.87194,12.56738",
            "longitude" : "12.56738",
            "netname" : "EDIS-IT-NET",
            "organization" : "EDIS GmbH",
            "subnet" : "149.154.157.0/24"
         },
         "host" : [
            17
         ],
         "hostname" : [
            "17.157.154.149.in-addr.arpa"
         ],
         "ip" : "149.154.157.17",
         "ipv6" : "false",
         "latitude" : "45.4722",
         "location" : "45.4722,9.1922",
         "longitude" : "9.1922",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "M247 Europe SRL",
         "os" : "Linux",
         "osdistribution" : "Ubuntu",
         "osvendor" : "Linux",
         "port" : 18245,
         "product" : "Squid",
         "productvendor" : "squid-cache",
         "productversion" : "4.7",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "17.157.154.149.in-addr.arpa"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "154.149.in-addr.arpa",
            "157.154.149.in-addr.arpa"
         ],
         "subnet" : "149.154.157.0/24",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "in-addr.arpa"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 43.155.109.184:18245 (tcp/http) - last seen on 2024-11-07 at 04:59:37 UTC

    • IP
      43.155.109.184
      Network
      43.154.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://43.155.109.184:18245/ 400

      HTTP Title
      ERROR: The request could not be satisfied
      ASN
      AS132203
      Organization
      Tencent Building, Kejizhongyi Avenue
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      CloudFlare CloudFront
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      504ffd43c3047379e9a8c5f624a19a99
      HTTP Header MD5
      1ac77dd2f387f8628b7b55c5bd49a345
      HTTP Body MD5
      66451d4c3ee0b732cab5a1ec023ae101
    • HTTP/1.1 400 Bad Request
      Server: CloudFront
      Date: Thu, 07 Nov 2024 04:59:27 GMT
      Content-Type: text/html
      Content-Length: 915
      Connection: close
      X-Cache: Error from cloudfront
      Via: 1.1 48870f7aa4d92d870c176f257241c13e.cloudfront.net (CloudFront)
      X-Amz-Cf-Pop: HKG62-C2
      X-Amz-Cf-Id: ShAEAYvxTX_Rgflv93ZD5AqkUACT0GQ7pxVsKdHwX2a4lmrV0nlLAA==
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
      <HTML><HEAD><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
      <TITLE>ERROR: The request could not be satisfied</TITLE>
      </HEAD><BODY>
      <H1>400 ERROR</H1>
      <H2>The request could not be satisfied.</H2>
      <HR noshade size="1px">
      Bad request.
      We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
      <BR clear="all">
      If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
      <BR clear="all">
      <HR noshade size="1px">
      <PRE>
      Generated by cloudfront (CloudFront)
      Request ID: ShAEAYvxTX_Rgflv93ZD5AqkUACT0GQ7pxVsKdHwX2a4lmrV0nlLAA==
      </PRE>
      <ADDRESS>
      </ADDRESS>
      </BODY></HTML>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:59:37.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/loose.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "66451d4c3ee0b732cab5a1ec023ae101",
               "bodymmh3" : 219665944,
               "headermd5" : "1ac77dd2f387f8628b7b55c5bd49a345",
               "headermmh3" : 1545917875,
               "title" : "ERROR: The request could not be satisfied"
            },
            "length" : 1263
         },
         "asn" : "AS132203",
         "city" : "Hong Kong",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: CloudFront\r\nDate: Thu, 07 Nov 2024 04:59:27 GMT\r\nContent-Type: text/html\r\nContent-Length: 915\r\nConnection: close\r\nX-Cache: Error from cloudfront\r\nVia: 1.1 48870f7aa4d92d870c176f257241c13e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: HKG62-C2\r\nX-Amz-Cf-Id: ShAEAYvxTX_Rgflv93ZD5AqkUACT0GQ7pxVsKdHwX2a4lmrV0nlLAA==\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01 Transitional//EN\" \"http://www.w3.org/TR/html4/loose.dtd\">\n<HTML><HEAD><META HTTP-EQUIV=\"Content-Type\" CONTENT=\"text/html; charset=iso-8859-1\">\n<TITLE>ERROR: The request could not be satisfied</TITLE>\n</HEAD><BODY>\n<H1>400 ERROR</H1>\n<H2>The request could not be satisfied.</H2>\n<HR noshade size=\"1px\">\nBad request.\nWe can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.\n<BR clear=\"all\">\nIf you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.\n<BR clear=\"all\">\n<HR noshade size=\"1px\">\n<PRE>\nGenerated by cloudfront (CloudFront)\nRequest ID: ShAEAYvxTX_Rgflv93ZD5AqkUACT0GQ7pxVsKdHwX2a4lmrV0nlLAA==\n</PRE>\n<ADDRESS>\n</ADDRESS>\n</BODY></HTML>",
         "datamd5" : "504ffd43c3047379e9a8c5f624a19a99",
         "datammh3" : -203529655,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS132203",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "ACEVILLEPTELTD-SG",
            "organization" : "ACEVILLE PTE.LTD.",
            "subnet" : "43.155.0.0/17"
         },
         "ip" : "43.155.109.184",
         "ipv6" : "false",
         "latitude" : "22.2842",
         "location" : "22.2842,114.1759",
         "longitude" : "114.1759",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Tencent Building, Kejizhongyi Avenue",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 18245,
         "product" : "CloudFront",
         "productvendor" : "CloudFlare",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "43.154.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 95.82.55.120:18245 (tcp/http) - last seen on 2024-11-07 at 04:50:37 UTC

    • IP
      95.82.55.120
      Network
      95.82.48.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://95.82.55.120:18245/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS134729
      Organization
      JOINT POWER TECHNOLOGY LIMITED
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      OpenResty OpenResty
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c1544517de65d9fe2899fddd78cb7c80
      HTTP Header MD5
      dc680f052fb6dfed79e30eb9f2291b11
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Server: openresty
      Date: Thu, 07 Nov 2024 04:50:37 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:50:37.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "dc680f052fb6dfed79e30eb9f2291b11",
               "headermmh3" : -220989117,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 401
         },
         "asn" : "AS134729",
         "country" : "AU",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: openresty\r\nDate: Thu, 07 Nov 2024 04:50:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "c1544517de65d9fe2899fddd78cb7c80",
         "datammh3" : 1098694201,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "95.82.55.120",
         "ipv6" : "false",
         "latitude" : "-33.4940",
         "location" : "-33.4940,143.2104",
         "longitude" : "143.2104",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "JOINT POWER TECHNOLOGY LIMITED",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 18245,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "95.82.48.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 103.56.17.75:18245 (tcp/http) - last seen on 2024-11-07 at 04:49:54 UTC

    • IP
      103.56.17.75
      Network
      103.56.16.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://103.56.17.75:18245/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      023c8c5e51d9ce9369af8e1f921f5e3f
      HTTP Header MD5
      f4eaba8998b0e515f84d95c1ad5ea5c7
      HTTP Body MD5
      a2b4897849c71fbcb21dd632d3506361
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 04:49:10 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.17.6</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:49:54.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "a2b4897849c71fbcb21dd632d3506361",
               "bodymmh3" : -2063426561,
               "headermd5" : "f4eaba8998b0e515f84d95c1ad5ea5c7",
               "headermmh3" : -725731774,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 04:49:10 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.6</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "023c8c5e51d9ce9369af8e1f921f5e3f",
         "datammh3" : 457427036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "103.56.16.0/22"
         },
         "ip" : "103.56.17.75",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 18245,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "103.56.16.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 121.142.137.147:18245 (tcp/http) - last seen on 2024-11-07 at 03:40:34 UTC

    • IP
      121.142.137.147
      Network
      121.142.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://121.142.137.147:18245/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Cloudflare Cloudflare
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3b0f355ec4ce5ce4ea5dae7d9cee5d2d
      HTTP Header MD5
      097373322636f0df0f25036e8929da18
      HTTP Body MD5
      564272709059833391ce2bbb5778fd94
    • HTTP/1.1 400 Bad Request
      Server: cloudflare
      Date: Thu, 07 Nov 2024 03:40:34 GMT
      Content-Type: text/html
      Content-Length: 253
      Connection: close
      CF-RAY: -
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>cloudflare</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:40:34.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "564272709059833391ce2bbb5778fd94",
               "bodymmh3" : -499730594,
               "headermd5" : "097373322636f0df0f25036e8929da18",
               "headermmh3" : 945374650,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 414
         },
         "asn" : "AS4766",
         "city" : "Namdong-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: cloudflare\r\nDate: Thu, 07 Nov 2024 03:40:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 253\r\nConnection: close\r\nCF-RAY: -\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>cloudflare</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3b0f355ec4ce5ce4ea5dae7d9cee5d2d",
         "datammh3" : -990819611,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "121.142.0.0/15"
         },
         "ip" : "121.142.137.147",
         "ipv6" : "false",
         "latitude" : "37.4585",
         "location" : "37.4585,126.7015",
         "longitude" : "126.7015",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 18245,
         "product" : "Cloudflare",
         "productvendor" : "Cloudflare",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "121.142.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 190.98.242.148:18245 (tcp/http) - last seen on 2024-11-07 at 03:40:33 UTC

    • IP
      190.98.242.148
      Network
      190.98.240.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://190.98.242.148:18245/ 400

      HTTP Title
      Bad Request
      ASN
      AS14259
      Organization
      Gtd Internet S.A.
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1e3da087cece0c04e321b39f7db77842
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      112a99975e327b76e1a2242ca34a4c3f
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 03:40:34 GMT
      Connection: close
      Content-Length: 334
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Hostname</h2>
      <hr><p>HTTP Error 400. The request hostname is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:40:33.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "112a99975e327b76e1a2242ca34a4c3f",
               "bodymmh3" : 2139917292,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : 1269289523,
               "title" : "Bad Request"
            },
            "length" : 513
         },
         "asn" : "AS14259",
         "city" : "Santiago",
         "country" : "CL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 03:40:34 GMT\r\nConnection: close\r\nContent-Length: 334\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Hostname</h2>\r\n<hr><p>HTTP Error 400. The request hostname is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "1e3da087cece0c04e321b39f7db77842",
         "datammh3" : 1555438320,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS14259",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "CL",
            "countryname" : "Chile",
            "domain" : [
               "grupogtd.com",
               "gtdinternet.com"
            ],
            "isineu" : "false",
            "latitude" : "-35.675147",
            "location" : "-35.675147,-71.542969",
            "longitude" : "-71.542969",
            "netname" : "CL-BAGM-LACNIC",
            "organization" : "BANDA ANCHA GTD MANQUEHUE",
            "subnet" : "190.98.240.0/20"
         },
         "ip" : "190.98.242.148",
         "ipv6" : "false",
         "latitude" : "-33.4521",
         "location" : "-33.4521,-70.6536",
         "longitude" : "-70.6536",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Gtd Internet S.A.",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 18245,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "190.98.240.0/21",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 51.235.129.63:18245 (tcp/http) - last seen on 2024-11-07 at 03:24:31 UTC

    • IP
      51.235.129.63
      Network
      51.235.128.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://51.235.129.63:18245/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS25019
      Organization
      Saudi Telecom Company JSC
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b2f9b30f053e7cdf3aed7516911c958d
      HTTP Header MD5
      72c5e1684b07cf8f00f892238a2fa7e1
      HTTP Body MD5
      6efda5878ab25f4f28a89bbb3f9fa41c
    • HTTP/1.1 400 Bad Request
      Date: Thu, 07 Nov 2024 03:24:31 GMT
      Server: xxxx
      X-Frame-Options: SAMEORIGIN
      Strict-Transport-Security: max-age=31536000
      X-Content-Type-Options: nosniff
      Referrer-Policy: strict-origin-when-cross-origin
      Content-Length: 362
      Connection: close
      Content-Type: text/html; charset=iso-8859-1
      
      <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
      <html><head>
      <title>400 Bad Request</title>
      </head><body>
      <h1>Bad Request</h1>
      <p>Your browser sent a request that this server could not understand.<br />
      Reason: You're speaking plain HTTP to an SSL-enabled server port.<br />
       Instead use the HTTPS scheme to access this URL, please.<br />
      </p>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:24:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "6efda5878ab25f4f28a89bbb3f9fa41c",
               "bodymmh3" : -645452522,
               "headermd5" : "72c5e1684b07cf8f00f892238a2fa7e1",
               "headermmh3" : 82397479,
               "title" : "400 Bad Request"
            },
            "length" : 683
         },
         "asn" : "AS25019",
         "city" : "Riyadh",
         "country" : "SA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 03:24:31 GMT\r\nServer: xxxx\r\nX-Frame-Options: SAMEORIGIN\r\nStrict-Transport-Security: max-age=31536000\r\nX-Content-Type-Options: nosniff\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nContent-Length: 362\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML 2.0//EN\">\n<html><head>\n<title>400 Bad Request</title>\n</head><body>\n<h1>Bad Request</h1>\n<p>Your browser sent a request that this server could not understand.<br />\nReason: You're speaking plain HTTP to an SSL-enabled server port.<br />\n Instead use the HTTPS scheme to access this URL, please.<br />\n</p>\n</body></html>\n",
         "datamd5" : "b2f9b30f053e7cdf3aed7516911c958d",
         "datammh3" : 1856647350,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "51.235.129.63",
         "ipv6" : "false",
         "latitude" : "24.6869",
         "location" : "24.6869,46.7224",
         "longitude" : "46.7224",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Saudi Telecom Company JSC",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 18245,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "51.235.128.0/19",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 121.54.202.199:18245 (tcp/http) - last seen on 2024-11-07 at 02:48:13 UTC

    • IP
      121.54.202.199
      Network
      121.54.200.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://121.54.202.199:18245/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS17577
      Organization
      LG HelloVision Corp.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      Cloudflare Cloudflare
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3b0f355ec4ce5ce4ea5dae7d9cee5d2d
      HTTP Header MD5
      097373322636f0df0f25036e8929da18
      HTTP Body MD5
      564272709059833391ce2bbb5778fd94
    • HTTP/1.1 400 Bad Request
      Server: cloudflare
      Date: Thu, 07 Nov 2024 02:48:13 GMT
      Content-Type: text/html
      Content-Length: 253
      Connection: close
      CF-RAY: -
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>cloudflare</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:48:13.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "564272709059833391ce2bbb5778fd94",
               "bodymmh3" : -499730594,
               "headermd5" : "097373322636f0df0f25036e8929da18",
               "headermmh3" : 1950699225,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 414
         },
         "asn" : "AS17577",
         "city" : "Andong",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: cloudflare\r\nDate: Thu, 07 Nov 2024 02:48:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 253\r\nConnection: close\r\nCF-RAY: -\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>cloudflare</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3b0f355ec4ce5ce4ea5dae7d9cee5d2d",
         "datammh3" : -990819611,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17577",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "nic.or.kr",
               "onmicrosoft.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "LG-HELLOVISION",
            "organization" : "LG HELLOVISION CORP.",
            "subnet" : "121.54.200.0/21"
         },
         "ip" : "121.54.202.199",
         "ipv6" : "false",
         "latitude" : "36.5742",
         "location" : "36.5742,128.7133",
         "longitude" : "128.7133",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LG HelloVision Corp.",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 18245,
         "product" : "Cloudflare",
         "productvendor" : "Cloudflare",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "121.54.200.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 95.82.55.10:18245 (tcp/http) - last seen on 2024-11-07 at 02:40:17 UTC

    • IP
      95.82.55.10
      Network
      95.82.48.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://95.82.55.10:18245/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS134729
      Organization
      JOINT POWER TECHNOLOGY LIMITED
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      OpenResty OpenResty
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c1544517de65d9fe2899fddd78cb7c80
      HTTP Header MD5
      dc680f052fb6dfed79e30eb9f2291b11
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Server: openresty
      Date: Thu, 07 Nov 2024 02:40:16 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:40:17.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "dc680f052fb6dfed79e30eb9f2291b11",
               "headermmh3" : -1367347022,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 401
         },
         "asn" : "AS134729",
         "country" : "AU",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: openresty\r\nDate: Thu, 07 Nov 2024 02:40:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "c1544517de65d9fe2899fddd78cb7c80",
         "datammh3" : 1098694201,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "95.82.55.10",
         "ipv6" : "false",
         "latitude" : "-33.4940",
         "location" : "-33.4940,143.2104",
         "longitude" : "143.2104",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "JOINT POWER TECHNOLOGY LIMITED",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 18245,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "95.82.48.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 65.181.153.218:18245 (tcp/http) - last seen on 2024-11-07 at 02:39:25 UTC

    • IP
      65.181.153.218
      Network
      65.181.128.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://65.181.153.218:18245/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS134729
      Organization
      JOINT POWER TECHNOLOGY LIMITED
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      OpenResty OpenResty
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c1544517de65d9fe2899fddd78cb7c80
      HTTP Header MD5
      dc680f052fb6dfed79e30eb9f2291b11
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Server: openresty
      Date: Thu, 07 Nov 2024 02:39:25 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T02:39:25.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "dc680f052fb6dfed79e30eb9f2291b11",
               "headermmh3" : 1414109240,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 401
         },
         "asn" : "AS134729",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: openresty\r\nDate: Thu, 07 Nov 2024 02:39:25 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "c1544517de65d9fe2899fddd78cb7c80",
         "datammh3" : 1098694201,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS134729",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "ipxo.com",
               "pair.com",
               "pairnetworks.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "IXPO-65-181-128-0-19-REALLOCATION",
            "organization" : "IPXO LLC",
            "subnet" : "65.181.152.0/22"
         },
         "ip" : "65.181.153.218",
         "ipv6" : "false",
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "JOINT POWER TECHNOLOGY LIMITED",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 18245,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "65.181.128.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }