Returning 10 result(s) out of 18 in 0.049 second(s)

  • 119.160.107.164:3260 (tcp/http) - last seen on 2024-11-07 at 03:25:28 UTC

    • IP
      119.160.107.164
      Network
      119.160.107.0/24
      Domain(s)
      jazz.com.pk
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://119.160.107.164:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      164.107.160.119.jazz.com.pk
      ASN
      AS58470
      Organization
      IX Peering for Mobilink and Link Direct International.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 03:25:29 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:25:28.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 490937526,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS58470",
         "city" : "Landi Kotal",
         "country" : "PK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:25:29 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "jazz.com.pk"
         ],
         "geolocus" : {
            "asn" : "AS58470",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "PK",
            "countryname" : "Pakistan",
            "domain" : [
               "jazz.com.pk"
            ],
            "isineu" : "false",
            "latitude" : "30.375321",
            "location" : "30.375321,69.345116",
            "longitude" : "69.345116",
            "netname" : "Jazz-North",
            "organization" : "Mobilink GSM, Pakistan Mobile Communication Ltd.",
            "subnet" : "119.160.107.0/24"
         },
         "host" : [
            164
         ],
         "hostname" : [
            "164.107.160.119.jazz.com.pk"
         ],
         "ip" : "119.160.107.164",
         "ipv6" : "false",
         "latitude" : "34.0987",
         "location" : "34.0987,71.1521",
         "longitude" : "71.1521",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "IX Peering for Mobilink and Link Direct International.",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "164.107.160.119.jazz.com.pk"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "160.119.jazz.com.pk",
            "119.jazz.com.pk",
            "107.160.119.jazz.com.pk"
         ],
         "subnet" : "119.160.107.0/24",
         "tld" : [
            "com.pk"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 118.200.33.181:3260 (tcp/http) - last seen on 2024-11-06 at 08:19:17 UTC

    • IP
      118.200.33.181
      Network
      118.200.0.0/17
      Domain(s)
      singnet.com.sg
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://118.200.33.181:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      bb118-200-33-181.singnet.com.sg
      ASN
      AS9506
      Organization
      Singtel Fibre Broadband
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Wed, 06 Nov 2024 08:19:16 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-06T08:19:17.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -592904299,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS9506",
         "city" : "Singapore",
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Wed, 06 Nov 2024 08:19:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "singnet.com.sg"
         ],
         "geolocus" : {
            "asn" : "AS9506",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "SG",
            "countryname" : "Singapore",
            "domain" : [
               "singnet.com.sg"
            ],
            "isineu" : "false",
            "latitude" : "1.352083",
            "location" : "1.352083,103.819836",
            "longitude" : "103.819836",
            "netname" : "SINGNET-SG",
            "organization" : "SingNet Pte Ltd",
            "subnet" : "118.200.0.0/17"
         },
         "host" : [
            "bb118-200-33-181"
         ],
         "hostname" : [
            "bb118-200-33-181.singnet.com.sg"
         ],
         "ip" : "118.200.33.181",
         "ipv6" : "false",
         "latitude" : "1.3248",
         "location" : "1.3248,103.7799",
         "longitude" : "103.7799",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Singtel Fibre Broadband",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "bb118-200-33-181.singnet.com.sg"
         ],
         "seen_date" : "2024-11-06",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "118.200.0.0/17",
         "tld" : [
            "com.sg"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 151.234.118.114:3260 (tcp/http) - last seen on 2024-11-05 at 08:06:51 UTC

    • IP
      151.234.118.114
      Network
      151.234.0.0/17
      Device

      <enterprise field>: device.class

      URL

      http://151.234.118.114:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS58224
      Organization
      Iran Telecommunication Company PJS
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Tue, 05 Nov 2024 11:36:50 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-05T08:06:51.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 158667167,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS58224",
         "country" : "IR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Tue, 05 Nov 2024 11:36:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS58224",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "IR",
            "countryname" : "Iran",
            "domain" : [
               "tci.ir"
            ],
            "isineu" : "false",
            "latitude" : "32.427908",
            "location" : "32.427908,53.688046",
            "longitude" : "53.688046",
            "netname" : "IR-T-10-20120813",
            "organization" : "Iran Telecommunication Company PJS",
            "subnet" : "151.232.0.0/14"
         },
         "ip" : "151.234.118.114",
         "ipv6" : "false",
         "latitude" : "35.6980",
         "location" : "35.6980,51.4115",
         "longitude" : "51.4115",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Iran Telecommunication Company PJS",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-05",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "151.234.0.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 103.156.68.155:3260 (tcp/http) - last seen on 2024-11-04 at 08:49:03 UTC

    • IP
      103.156.68.155
      Network
      103.156.68.0/23
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://103.156.68.155:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4812
      Organization
      China Telecom Group
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Mon, 04 Nov 2024 08:49:03 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-04T08:49:03.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -1835760452,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS4812",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Mon, 04 Nov 2024 08:49:03 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4812",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "bestidc.cn",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "RuguInfo",
            "organization" : "Shanghai Rugu Info&Tech Co.,Ltd.",
            "subnet" : "103.156.68.0/23"
         },
         "ip" : "103.156.68.155",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "China Telecom Group",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-04",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "103.156.68.0/23",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 110.54.127.21:3260 (tcp/http) - last seen on 2024-11-01 at 21:19:16 UTC

    • IP
      110.54.127.21
      Network
      110.54.0.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://110.54.127.21:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS7679
      Organization
      QTnet,Inc.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Fri, 01 Nov 2024 21:19:15 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-01T21:19:16.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 434046151,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS7679",
         "city" : "Iikura",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Fri, 01 Nov 2024 21:19:15 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS7679",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "bbiq.jp",
               "nic.ad.jp",
               "qtnet.ad.jp"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "QTNet",
            "organization" : "QTnet,Inc.",
            "subnet" : "110.54.0.0/17"
         },
         "ip" : "110.54.127.21",
         "ipv6" : "false",
         "latitude" : "33.5648",
         "location" : "33.5648,130.3462",
         "longitude" : "130.3462",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "QTnet,Inc.",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-01",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "110.54.0.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 185.95.224.126:3260 (tcp/http) - last seen on 2024-11-01 at 16:47:34 UTC

    • IP
      185.95.224.126
      Network
      185.95.224.0/22
      Domain(s)
      fastcon.it
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://185.95.224.126:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      customer72-126.fastcon.it
      ASN
      AS198399
      Organization
      FASTCON srl
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Fri, 01 Nov 2024 16:47:34 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-01T16:47:34.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -1061082045,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS198399",
         "city" : "Milan",
         "country" : "IT",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Fri, 01 Nov 2024 16:47:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "fastcon.it"
         ],
         "host" : [
            "customer72-126"
         ],
         "hostname" : [
            "customer72-126.fastcon.it"
         ],
         "ip" : "185.95.224.126",
         "ipv6" : "false",
         "latitude" : "45.4722",
         "location" : "45.4722,9.1922",
         "longitude" : "9.1922",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "FASTCON srl",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "customer72-126.fastcon.it"
         ],
         "seen_date" : "2024-11-01",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "185.95.224.0/22",
         "tld" : [
            "it"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 213.149.167.50:3260 (tcp/http) - last seen on 2024-11-01 at 14:15:31 UTC

    • IP
      213.149.167.50
      Network
      213.149.160.0/19
      Domain(s)
      cytanet.com.cy
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://213.149.167.50:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      213-167-50.netrunp.cytanet.com.cy
      ASN
      AS6866
      Organization
      Cyprus Telecommunications Authority
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Fri, 01 Nov 2024 14:15:30 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-01T14:15:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 1145526924,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS6866",
         "city" : "Limassol",
         "country" : "CY",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Fri, 01 Nov 2024 14:15:30 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cytanet.com.cy"
         ],
         "geolocus" : {
            "asn" : "AS6866",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "CY",
            "countryname" : "Cyprus",
            "domain" : [
               "cytanet.com.cy"
            ],
            "isineu" : "true",
            "latitude" : "35.126413",
            "location" : "35.126413,33.429859",
            "longitude" : "33.429859",
            "netname" : "CYTANET",
            "organization" : "CYTANET - Cyprus Telecommunications Authority",
            "subnet" : "213.149.167.0/24"
         },
         "host" : [
            "213-167-50"
         ],
         "hostname" : [
            "213-167-50.netrunp.cytanet.com.cy"
         ],
         "ip" : "213.149.167.50",
         "ipv6" : "false",
         "latitude" : "34.6874",
         "location" : "34.6874,33.0366",
         "longitude" : "33.0366",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Cyprus Telecommunications Authority",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "213-167-50.netrunp.cytanet.com.cy"
         ],
         "seen_date" : "2024-11-01",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "netrunp.cytanet.com.cy"
         ],
         "subnet" : "213.149.160.0/19",
         "tld" : [
            "com.cy"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 212.172.8.254:3260 (tcp/http) - last seen on 2024-10-25 at 21:15:49 UTC

    • IP
      212.172.8.254
      Network
      212.172.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://212.172.8.254:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS12312
      Organization
      ecotel communication ag
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Fri, 25 Oct 2024 21:15:49 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-25T21:15:49.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 712624052,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS12312",
         "city" : "Essen",
         "country" : "DE",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Fri, 25 Oct 2024 21:15:49 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS12312",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "DE",
            "countryname" : "Germany",
            "domain" : [
               "ecotel.net"
            ],
            "isineu" : "true",
            "latitude" : "51.165691",
            "location" : "51.165691,10.451526",
            "longitude" : "10.451526",
            "netname" : "ECO-D113201-NET",
            "organization" : "ecotel communication ag",
            "subnet" : "212.172.0.0/17"
         },
         "ip" : "212.172.8.254",
         "ipv6" : "false",
         "latitude" : "51.4423",
         "location" : "51.4423,6.9784",
         "longitude" : "6.9784",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ecotel communication ag",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-10-25",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "212.172.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 151.234.118.114:3260 (tcp/http) - last seen on 2024-10-24 at 23:58:31 UTC

    • IP
      151.234.118.114
      Network
      151.234.0.0/17
      Device

      <enterprise field>: device.class

      URL

      http://151.234.118.114:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS58224
      Organization
      Iran Telecommunication Company PJS
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Fri, 25 Oct 2024 03:28:28 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-24T23:58:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -161745600,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS58224",
         "country" : "IR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Fri, 25 Oct 2024 03:28:28 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS58224",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "IR",
            "countryname" : "Iran",
            "domain" : [
               "tci.ir"
            ],
            "isineu" : "false",
            "latitude" : "32.427908",
            "location" : "32.427908,53.688046",
            "longitude" : "53.688046",
            "netname" : "IR-T-10-20120813",
            "organization" : "Iran Telecommunication Company PJS",
            "subnet" : "151.232.0.0/14"
         },
         "ip" : "151.234.118.114",
         "ipv6" : "false",
         "latitude" : "35.6980",
         "location" : "35.6980,51.4115",
         "longitude" : "51.4115",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Iran Telecommunication Company PJS",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-10-24",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "151.234.0.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 185.95.224.126:3260 (tcp/http) - last seen on 2024-10-24 at 22:05:05 UTC

    • IP
      185.95.224.126
      Network
      185.95.224.0/22
      Domain(s)
      fastcon.it
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://185.95.224.126:3260/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      customer72-126.fastcon.it
      ASN
      AS198399
      Organization
      FASTCON srl
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3768245d18923b85ff9fbd3823b817e
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 24 Oct 2024 22:05:05 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-24T22:05:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 1836636450,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS198399",
         "city" : "Capralba",
         "country" : "IT",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 24 Oct 2024 22:05:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "a3768245d18923b85ff9fbd3823b817e",
         "datammh3" : 227797036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "fastcon.it"
         ],
         "host" : [
            "customer72-126"
         ],
         "hostname" : [
            "customer72-126.fastcon.it"
         ],
         "ip" : "185.95.224.126",
         "ipv6" : "false",
         "latitude" : "45.4420",
         "location" : "45.4420,9.6489",
         "longitude" : "9.6489",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "FASTCON srl",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3260,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "customer72-126.fastcon.it"
         ],
         "seen_date" : "2024-10-24",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "185.95.224.0/22",
         "tld" : [
            "it"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }