Returning 10 result(s) out of 2,619 in 0.131 second(s)

  • 194.41.59.23:3269 (tcp/http) - last seen on 2024-11-07 at 05:36:20 UTC

    • IP
      194.41.59.23
      Network
      194.41.58.0/23
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://194.41.59.23:3269/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Thu, 07 Nov 2024 05:36:20 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:36:20.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : 1153563904,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS133199",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Thu, 07 Nov 2024 05:36:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "194.41.59.23",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SonderCloud Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3269,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "194.41.58.0/23",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 125.253.15.233:3269 (tcp/http) - last seen on 2024-11-07 at 05:28:22 UTC

    • IP
      125.253.15.233
      Network
      125.253.0.0/19
      Domain(s)
      superloop.au
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://125.253.15.233:3269/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      125-253-15-233.ip4.superloop.au
      ASN
      AS38195
      Organization
      Superloop
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      f09b84fda2db97207d616c18ff1c2a8f
      HTTP Header MD5
      fbfc9d8079d4b06aefb13e1f3508f91b
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 05:05:31 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:28:22.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "fbfc9d8079d4b06aefb13e1f3508f91b",
               "headermmh3" : 242314674,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 466
         },
         "asn" : "AS38195",
         "city" : "Melbourne",
         "country" : "AU",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:05:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "f09b84fda2db97207d616c18ff1c2a8f",
         "datammh3" : 1462904323,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "superloop.au"
         ],
         "geolocus" : {
            "asn" : "AS38195",
            "continent" : "OC",
            "continentname" : "Oceania",
            "country" : "AU",
            "countryname" : "Australia",
            "domain" : [
               "superloop.au",
               "superloop.com"
            ],
            "isineu" : "false",
            "latitude" : "-25.274398",
            "location" : "-25.274398,133.775136",
            "longitude" : "133.775136",
            "netname" : "SUPERLOOP-AU",
            "organization" : "SUPERLOOP (AUSTRALIA) PTY LTD",
            "subnet" : "125.253.12.0/22"
         },
         "host" : [
            "125-253-15-233"
         ],
         "hostname" : [
            "125-253-15-233.ip4.superloop.au"
         ],
         "ip" : "125.253.15.233",
         "ipv6" : "false",
         "latitude" : "-37.8159",
         "location" : "-37.8159,144.9669",
         "longitude" : "144.9669",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Superloop",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3269,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "125-253-15-233.ip4.superloop.au"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "ip4.superloop.au"
         ],
         "subnet" : "125.253.0.0/19",
         "tld" : [
            "au"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 31.31.168.14:3269 (tcp/http) - last seen on 2024-11-07 at 05:17:53 UTC

    • IP
      31.31.168.14
      Alternative IP(s)
      195.210.8.252
      Network
      31.31.168.0/21
      Domain(s)
      dwl.by
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://31.31.168.14:3269/ 400

      HTTP Title
      ERROR: The requested URL could not be retrieved
      Reverse DNS
      mail.dwl.by
      ASN
      AS20853
      Organization
      eTOP sp. z o.o.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      squid-cache Squid 4.10
      HTTP Component(s)
      squid-cache Squid
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e7bad991599f0330b86760f6e51645cb
      HTTP Header MD5
      44e8bc7e5264812d1852cfa3e031fb06
      HTTP Body MD5
      94cc86d94e563843d96c43292c39ec4e
    • HTTP/1.1 400 Bad Request
      Server: squid/4.10
      Mime-Version: 1.0
      Date: Thu, 07 Nov 2024 05:17:53 GMT
      Content-Type: text/html;charset=utf-8
      Content-Length: 3497
      X-Squid-Error: ERR_INVALID_URL 0
      Vary: Accept-Language
      Content-Language: en
      X-Cache: MISS from artem
      X-Cache-Lookup: NONE from artem:3980
      Connection: close
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
      <html><head>
      <meta type="copyright" content="Copyright (C) 1996-2019 The Squid Software Foundation and contributors">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      <title>ERROR: The requested URL could not be retrieved</title>
      <style type="text/css"><!-- 
       /*
       * Copyright (C) 1996-2020 The Squid Software Foundation and contributors
       *
       * Squid software is distributed under GPLv2+ license and includes
       * contributions from numerous individuals and organizations.
       * Please see the COPYING and CONTRIBUTORS files for details.
       */
      
      /*
       Stylesheet for Squid Error pages
       Adapted from design by Free CSS Templates
       http://www.freecsstemplates.org
       Released for free under a Creative Commons Attribution 2.5 License
      */
      
      /* Page basics */
      * {
      	font-family: verdana, sans-serif;
      }
      
      html body {
      	margin: 0;
      	padding: 0;
      	background: #efefef;
      	font-size: 12px;
      	color: #1e1e1e;
      }
      
      /* Page displayed title area */
      #titles {
      	margin-left: 15px;
      	padding: 10px;
      	padding-left: 100px;
      	background: url('/squid-internal-static/icons/SN.png') no-repeat left;
      }
      
      /* initial title */
      #titles h1 {
      	color: #000000;
      }
      #titles h2 {
      	color: #000000;
      }
      
      /* special event: FTP success page titles */
      #titles ftpsuccess {
      	background-color:#00ff00;
      	width:100%;
      }
      
      /* Page displayed body content area */
      #content {
      	padding: 10px;
      	background: #ffffff;
      }
      
      /* General text */
      p {
      }
      
      /* error brief description */
      #error p {
      }
      
      /* some data which may have caused the problem */
      #data {
      }
      
      /* the error message received from the system or other software */
      #sysmsg {
      }
      
      pre {
      }
      
      /* special event: FTP / Gopher directory listing */
      #dirmsg {
          font-family: courier, monospace;
          color: black;
          font-size: 10pt;
      }
      #dirlisting {
          margin-left: 2%;
          margin-right: 2%;
      }
      #dirlisting tr.entry td.icon,td.filename,td.size,td.date {
          border-bottom: groove;
      }
      #dirlisting td.size {
          width: 50px;
          text-align: right;
          padding-right: 5px;
      }
      
      /* horizontal lines */
      hr {
      	margin: 0;
      }
      
      /* page displayed footer area */
      #footer {
      	font-size: 9px;
      	padding-left: 10px;
      }
      
      
      body
      :lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }
      :lang(he) { direction: rtl; }
       --></style>
      </head><body id=ERR_INVALID_URL>
      <div id="titles">
      <h1>ERROR</h1>
      <h2>The requested URL could not be retrieved</h2>
      </div>
      <hr>
      
      <div id="content">
      <p>The following error was encountered while trying to retrieve the URL: <a href="/">/</a></p>
      
      <blockquote id="error">
      <p><b>Invalid URL</b></p>
      </blockquote>
      
      <p>Some aspect of the requested URL is incorrect.</p>
      
      <p>Some possible problems are:</p>
      <ul>
      <li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li>
      <li><p>Missing hostname</p></li>
      <li><p>Illegal double-escape in the URL-Path</p></li>
      <li><p>Illegal character in hostname; underscores are not allowed.</p></li>
      </ul>
      
      <p>Your cache administrator is <a href="mailto:webmaster?subject=CacheErrorInfo%20-%20ERR_INVALID_URL&amp;body=CacheHost%3A%20artem%0D%0AErrPage%3A%20ERR_INVALID_URL%0D%0AErr%3A%20%5Bnone%5D%0D%0ATimeStamp%3A%20Thu,%2007%20Nov%202024%2005%3A17%3A53%20GMT%0D%0A%0D%0AClientIP%3A%20<srcip>%0D%0A%0D%0AHTTP%20Request%3A%0D%0A%0D%0A%0D%0A">webmaster</a>.</p>
      <br>
      </div>
      
      <hr>
      <div id="footer">
      <p>Generated Thu, 07 Nov 2024 05:17:53 GMT by artem (squid/4.10)</p>
      <!-- ERR_INVALID_URL -->
      </div>
      </body></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:17:53.000Z",
         "alternativeip" : [
            "195.210.8.252"
         ],
         "app" : {
            "extract" : {
               "domain" : [
                  "freecsstemplates.org",
                  "w3.org"
               ],
               "hostname" : [
                  "www.freecsstemplates.org",
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.freecsstemplates.org",
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "94cc86d94e563843d96c43292c39ec4e",
               "bodymmh3" : 1360632225,
               "component" : [
                  {
                     "product" : "Squid",
                     "productvendor" : "squid-cache"
                  }
               ],
               "headermd5" : "44e8bc7e5264812d1852cfa3e031fb06",
               "headermmh3" : 1482806330,
               "title" : "ERROR: The requested URL could not be retrieved"
            },
            "length" : 3819
         },
         "asn" : "AS20853",
         "city" : "Warsaw",
         "country" : "PL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: squid/4.10\r\nMime-Version: 1.0\r\nDate: Thu, 07 Nov 2024 05:17:53 GMT\r\nContent-Type: text/html;charset=utf-8\r\nContent-Length: 3497\r\nX-Squid-Error: ERR_INVALID_URL 0\r\nVary: Accept-Language\r\nContent-Language: en\r\nX-Cache: MISS from artem\r\nX-Cache-Lookup: NONE from artem:3980\r\nConnection: close\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01//EN\" \"http://www.w3.org/TR/html4/strict.dtd\">\n<html><head>\n<meta type=\"copyright\" content=\"Copyright (C) 1996-2019 The Squid Software Foundation and contributors\">\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\n<title>ERROR: The requested URL could not be retrieved</title>\n<style type=\"text/css\"><!-- \n /*\n * Copyright (C) 1996-2020 The Squid Software Foundation and contributors\n *\n * Squid software is distributed under GPLv2+ license and includes\n * contributions from numerous individuals and organizations.\n * Please see the COPYING and CONTRIBUTORS files for details.\n */\n\n/*\n Stylesheet for Squid Error pages\n Adapted from design by Free CSS Templates\n http://www.freecsstemplates.org\n Released for free under a Creative Commons Attribution 2.5 License\n*/\n\n/* Page basics */\n* {\n\tfont-family: verdana, sans-serif;\n}\n\nhtml body {\n\tmargin: 0;\n\tpadding: 0;\n\tbackground: #efefef;\n\tfont-size: 12px;\n\tcolor: #1e1e1e;\n}\n\n/* Page displayed title area */\n#titles {\n\tmargin-left: 15px;\n\tpadding: 10px;\n\tpadding-left: 100px;\n\tbackground: url('/squid-internal-static/icons/SN.png') no-repeat left;\n}\n\n/* initial title */\n#titles h1 {\n\tcolor: #000000;\n}\n#titles h2 {\n\tcolor: #000000;\n}\n\n/* special event: FTP success page titles */\n#titles ftpsuccess {\n\tbackground-color:#00ff00;\n\twidth:100%;\n}\n\n/* Page displayed body content area */\n#content {\n\tpadding: 10px;\n\tbackground: #ffffff;\n}\n\n/* General text */\np {\n}\n\n/* error brief description */\n#error p {\n}\n\n/* some data which may have caused the problem */\n#data {\n}\n\n/* the error message received from the system or other software */\n#sysmsg {\n}\n\npre {\n}\n\n/* special event: FTP / Gopher directory listing */\n#dirmsg {\n    font-family: courier, monospace;\n    color: black;\n    font-size: 10pt;\n}\n#dirlisting {\n    margin-left: 2%;\n    margin-right: 2%;\n}\n#dirlisting tr.entry td.icon,td.filename,td.size,td.date {\n    border-bottom: groove;\n}\n#dirlisting td.size {\n    width: 50px;\n    text-align: right;\n    padding-right: 5px;\n}\n\n/* horizontal lines */\nhr {\n\tmargin: 0;\n}\n\n/* page displayed footer area */\n#footer {\n\tfont-size: 9px;\n\tpadding-left: 10px;\n}\n\n\nbody\n:lang(fa) { direction: rtl; font-size: 100%; font-family: Tahoma, Roya, sans-serif; float: right; }\n:lang(he) { direction: rtl; }\n --></style>\n</head><body id=ERR_INVALID_URL>\n<div id=\"titles\">\n<h1>ERROR</h1>\n<h2>The requested URL could not be retrieved</h2>\n</div>\n<hr>\n\n<div id=\"content\">\n<p>The following error was encountered while trying to retrieve the URL: <a href=\"/\">/</a></p>\n\n<blockquote id=\"error\">\n<p><b>Invalid URL</b></p>\n</blockquote>\n\n<p>Some aspect of the requested URL is incorrect.</p>\n\n<p>Some possible problems are:</p>\n<ul>\n<li><p>Missing or incorrect access protocol (should be <q>http://</q> or similar)</p></li>\n<li><p>Missing hostname</p></li>\n<li><p>Illegal double-escape in the URL-Path</p></li>\n<li><p>Illegal character in hostname; underscores are not allowed.</p></li>\n</ul>\n\n<p>Your cache administrator is <a href=\"mailto:webmaster?subject=CacheErrorInfo%20-%20ERR_INVALID_URL&amp;body=CacheHost%3A%20artem%0D%0AErrPage%3A%20ERR_INVALID_URL%0D%0AErr%3A%20%5Bnone%5D%0D%0ATimeStamp%3A%20Thu,%2007%20Nov%202024%2005%3A17%3A53%20GMT%0D%0A%0D%0AClientIP%3A%20<srcip>%0D%0A%0D%0AHTTP%20Request%3A%0D%0A%0D%0A%0D%0A\">webmaster</a>.</p>\n<br>\n</div>\n\n<hr>\n<div id=\"footer\">\n<p>Generated Thu, 07 Nov 2024 05:17:53 GMT by artem (squid/4.10)</p>\n<!-- ERR_INVALID_URL -->\n</div>\n</body></html>\n",
         "datamd5" : "e7bad991599f0330b86760f6e51645cb",
         "datammh3" : -818859845,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "dwl.by"
         ],
         "host" : [
            "mail"
         ],
         "hostname" : [
            "mail.dwl.by"
         ],
         "ip" : "31.31.168.14",
         "ipv6" : "false",
         "latitude" : "52.2296",
         "location" : "52.2296,21.0067",
         "longitude" : "21.0067",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "eTOP sp. z o.o.",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3269,
         "product" : "Squid",
         "productvendor" : "squid-cache",
         "productversion" : "4.10",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "mail.dwl.by"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "31.31.168.0/21",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "by"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 185.234.66.65:3269 (tcp/http) - last seen on 2024-11-07 at 05:10:26 UTC

    • IP
      185.234.66.65
      Network
      185.234.64.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Ubuntu
      URL

      http://185.234.66.65:3269/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS44477
      Organization
      Stark Industries Solutions Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Ubuntu
      Product
      F5 Nginx 1.18.0
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0f607a794922d0e529ea46b57721417d
      HTTP Header MD5
      73b5b39070f21c93f1b94a75281c1ce0
      HTTP Body MD5
      e2c7b0e1a897b6683f3a2814cb2f67cd
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.18.0 (Ubuntu)
      Date: Thu, 07 Nov 2024 05:10:26 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.18.0 (Ubuntu)</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:10:26.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "e2c7b0e1a897b6683f3a2814cb2f67cd",
               "bodymmh3" : -1741231556,
               "headermd5" : "73b5b39070f21c93f1b94a75281c1ce0",
               "headermmh3" : -869263622,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 425
         },
         "asn" : "AS44477",
         "country" : "MD",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 07 Nov 2024 05:10:26 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.18.0 (Ubuntu)</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0f607a794922d0e529ea46b57721417d",
         "datammh3" : 907783723,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS44477",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "TR",
            "countryname" : "Turkey",
            "domain" : [
               "stark-industries.solutions"
            ],
            "isineu" : "false",
            "latitude" : "38.963745",
            "location" : "38.963745,35.243322",
            "longitude" : "35.243322",
            "netname" : "STARK",
            "organization" : "STARK INDUSTRIES SOLUTIONS LTD.",
            "subnet" : "185.234.66.0/24"
         },
         "ip" : "185.234.66.65",
         "ipv6" : "false",
         "latitude" : "47.0188",
         "location" : "47.0188,28.8128",
         "longitude" : "28.8128",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Stark Industries Solutions Ltd",
         "os" : "Linux",
         "osdistribution" : "Ubuntu",
         "osvendor" : "Linux",
         "port" : 3269,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.18.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "185.234.64.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 154.85.8.59:3269 (tcp/http) - last seen on 2024-11-07 at 05:10:18 UTC

    • IP
      154.85.8.59
      Network
      154.85.8.0/22
      Device

      <enterprise field>: device.class

      URL

      http://154.85.8.59:3269/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS209242
      Organization
      Cloudflare London, LLC
      Protocol
      http
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1550f60aea20c6f28ffe1512d9378c73
      HTTP Header MD5
      87f3e48a3bc7d54241527e87773372b9
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Date: Thu, 07 Nov 2024 05:10:18 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      Server: cdn-ddos-cc
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:10:18.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "87f3e48a3bc7d54241527e87773372b9",
               "headermmh3" : -1332582857,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 403
         },
         "asn" : "AS209242",
         "city" : "Tokyo",
         "country" : "JP",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 05:10:18 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: cdn-ddos-cc\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "1550f60aea20c6f28ffe1512d9378c73",
         "datammh3" : 1309920415,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS209242",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "cloudinnovation.org"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "Dream_Cloud_Limited",
            "organization" : "Dream Cloud Limited",
            "subnet" : "154.85.8.0/23"
         },
         "ip" : "154.85.8.59",
         "ipv6" : "false",
         "latitude" : "35.6893",
         "location" : "35.6893,139.6899",
         "longitude" : "139.6899",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Cloudflare London, LLC",
         "port" : 3269,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "154.85.8.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 45.115.238.229:3269 (tcp/http) - last seen on 2024-11-07 at 04:45:10 UTC

    • IP
      45.115.238.229
      Network
      45.115.236.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://45.115.238.229:3269/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS132883
      Organization
      TOPWAY GLOBAL LIMITED
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      023c8c5e51d9ce9369af8e1f921f5e3f
      HTTP Header MD5
      f4eaba8998b0e515f84d95c1ad5ea5c7
      HTTP Body MD5
      a2b4897849c71fbcb21dd632d3506361
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 04:45:10 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.17.6</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:45:10.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "a2b4897849c71fbcb21dd632d3506361",
               "bodymmh3" : -2063426561,
               "headermd5" : "f4eaba8998b0e515f84d95c1ad5ea5c7",
               "headermmh3" : 1722413233,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS132883",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 04:45:10 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.6</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "023c8c5e51d9ce9369af8e1f921f5e3f",
         "datammh3" : 457427036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS132883",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "cnaaa.com",
               "cnnic.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "cnaaa",
            "organization" : "Jiangsu Sanai network science and technology co ,LTD",
            "subnet" : "45.115.238.0/24"
         },
         "ip" : "45.115.238.229",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TOPWAY GLOBAL LIMITED",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 3269,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "45.115.236.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 156.251.180.30:3269 (tcp/http) - last seen on 2024-11-07 at 04:36:59 UTC

    • IP
      156.251.180.30
      Network
      156.251.128.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://156.251.180.30:3269/ 400

      ASN
      AS40065
      Organization
      CNSERVERS
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2a8e9c2d8a8c3f8171b9d3ab53104d2f
      HTTP Header MD5
      1e0ecc6afd85ee2b224c58942ad0694f
      HTTP Body MD5
      3975e60f0c61e93a6d0a9f1def435eac
    • HTTP/1.1 400 Bad Request
      Content-Type: text/plain; charset=utf-8
      Sec-Websocket-Version: 13
      X-Content-Type-Options: nosniff
      Date: Thu, 07 Nov 2024 04:36:59 GMT
      Content-Length: 12
      Connection: close
      
      Bad Request
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:36:59.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "3975e60f0c61e93a6d0a9f1def435eac",
               "bodymmh3" : 788357656,
               "headermd5" : "1e0ecc6afd85ee2b224c58942ad0694f",
               "headermmh3" : 843285283
            },
            "length" : 217
         },
         "asn" : "AS40065",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/plain; charset=utf-8\r\nSec-Websocket-Version: 13\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 07 Nov 2024 04:36:59 GMT\r\nContent-Length: 12\r\nConnection: close\r\n\r\nBad Request\n",
         "datamd5" : "2a8e9c2d8a8c3f8171b9d3ab53104d2f",
         "datammh3" : -416475727,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS40065",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "cloudinnovation.org"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "GLOBALDATA_INVESTMENTS_INC",
            "organization" : "CenturyNetworks LTD",
            "subnet" : "156.251.180.0/22"
         },
         "ip" : "156.251.180.30",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CNSERVERS",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3269,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "156.251.128.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 13.78.85.30:3269 (tcp/http) - last seen on 2024-11-07 at 04:01:39 UTC

    • IP
      13.78.85.30
      Network
      13.64.0.0/11
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://13.78.85.30:3269/ 400

      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2a8e9c2d8a8c3f8171b9d3ab53104d2f
      HTTP Header MD5
      1e0ecc6afd85ee2b224c58942ad0694f
      HTTP Body MD5
      3975e60f0c61e93a6d0a9f1def435eac
    • HTTP/1.1 400 Bad Request
      Content-Type: text/plain; charset=utf-8
      Sec-Websocket-Version: 13
      X-Content-Type-Options: nosniff
      Date: Thu, 07 Nov 2024 04:01:39 GMT
      Content-Length: 12
      Connection: close
      
      Bad Request
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:01:39.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "3975e60f0c61e93a6d0a9f1def435eac",
               "bodymmh3" : 788357656,
               "headermd5" : "1e0ecc6afd85ee2b224c58942ad0694f",
               "headermmh3" : 2109724626
            },
            "length" : 217
         },
         "asn" : "AS8075",
         "city" : "Tokyo",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/plain; charset=utf-8\r\nSec-Websocket-Version: 13\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 07 Nov 2024 04:01:39 GMT\r\nContent-Length: 12\r\nConnection: close\r\n\r\nBad Request\n",
         "datamd5" : "2a8e9c2d8a8c3f8171b9d3ab53104d2f",
         "datammh3" : -416475727,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "13.78.0.0/17"
         },
         "ip" : "13.78.85.30",
         "ipv6" : "false",
         "latitude" : "35.6893",
         "location" : "35.6893,139.6899",
         "longitude" : "139.6899",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3269,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "13.64.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 69.160.173.145:3269 (tcp/http) - last seen on 2024-11-07 at 03:35:01 UTC

    • IP
      69.160.173.145
      Network
      69.160.168.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://69.160.173.145:3269/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS59371
      Organization
      Dimension Network & Communication Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.17.6
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      023c8c5e51d9ce9369af8e1f921f5e3f
      HTTP Header MD5
      f4eaba8998b0e515f84d95c1ad5ea5c7
      HTTP Body MD5
      a2b4897849c71fbcb21dd632d3506361
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.17.6
      Date: Thu, 07 Nov 2024 03:35:01 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.17.6</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:35:01.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "a2b4897849c71fbcb21dd632d3506361",
               "bodymmh3" : -2063426561,
               "headermd5" : "f4eaba8998b0e515f84d95c1ad5ea5c7",
               "headermmh3" : -59091987,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS59371",
         "city" : "Hong Kong",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 03:35:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.6</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "023c8c5e51d9ce9369af8e1f921f5e3f",
         "datammh3" : 457427036,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS59371",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "dimensionet.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "DNC-HK",
            "organization" : "DNC-HK",
            "subnet" : "69.160.168.0/21"
         },
         "ip" : "69.160.173.145",
         "ipv6" : "false",
         "latitude" : "22.2842",
         "location" : "22.2842,114.1759",
         "longitude" : "114.1759",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Dimension Network & Communication Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3269,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.17.6",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "69.160.168.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • <access denied by policy>:<access denied by policy> (<access denied by policy>/<access denied by policy>) - last seen on 2024-11-07 at 03:18:12 UTC

    • IP

      <access denied by policy>

      Network

      <access denied by policy>

      Domain(s)
      Operating System

      <access denied by policy> <access denied by policy>

      Reverse DNS

      <access denied by policy>

      ASN

      <access denied by policy>

      Organization

      <access denied by policy>

      Protocol

      <access denied by policy>

      Source

      <access denied by policy>

    • Operating System

      <access denied by policy> <access denied by policy>

      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5

      <access denied by policy>

    • <access denied by policy>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:18:12.000Z",
         "app" : "<enterprise field>: app",
         "asn" : "<access denied by policy>",
         "city" : "<access denied by policy>",
         "country" : "<access denied by policy>",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "<access denied by policy>",
         "datamd5" : "<access denied by policy>",
         "datammh3" : "<access denied by policy>",
         "device" : "<enterprise field>: device",
         "domain" : "<access denied by policy>",
         "geolocus" : "<enterprise field>: geolocus",
         "host" : "<access denied by policy>",
         "hostname" : "<access denied by policy>",
         "ip" : "<access denied by policy>",
         "ipv6" : "<access denied by policy>",
         "latitude" : "<access denied by policy>",
         "location" : "<access denied by policy>",
         "longitude" : "<access denied by policy>",
         "node" : "<enterprise field>: node",
         "organization" : "<access denied by policy>",
         "os" : "<access denied by policy>",
         "osvendor" : "<access denied by policy>",
         "port" : "<access denied by policy>",
         "protocol" : "<access denied by policy>",
         "protocolversion" : "<access denied by policy>",
         "reason" : "<access denied by policy>",
         "reverse" : "<access denied by policy>",
         "seen_date" : "<access denied by policy>",
         "source" : "<access denied by policy>",
         "status" : "<access denied by policy>",
         "subnet" : "<access denied by policy>",
         "tag" : "<enterprise field>: tag",
         "tld" : "<access denied by policy>",
         "tls" : "<access denied by policy>",
         "transport" : "<access denied by policy>",
         "url" : "<access denied by policy>"
      }