Cyber Defense Search Engine

IP
103.80.210.237

Network
103.80.210.0/23

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://103.80.210.237:4190/ 400

ASN
AS17882

Organization
UNIVISION LLC

Protocol
http

Source
datascan
Operating System
Microsoft Windows

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
bd933a926de9d9a8dd8992a468aa4b06

HTTP Header MD5
c97a40b207b58a030b7e6218ddc027ab

HTTP Body MD5
00bd1919cd6e866a50f1172fcabdddd0

HTTP/1.1 400 
Content-Type: text/plain;charset=UTF-8
Connection: close

Bad Request
This combination of host and port requires TLS.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:37:36.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "00bd1919cd6e866a50f1172fcabdddd0",
         "bodymmh3" : -360672119,
         "headermd5" : "c97a40b207b58a030b7e6218ddc027ab",
         "headermmh3" : 305679542
      },
      "length" : 138
   },
   "asn" : "AS17882",
   "city" : "Ulan Bator",
   "country" : "MN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 \r\nContent-Type: text/plain;charset=UTF-8\r\nConnection: close\r\n\r\nBad Request\r\nThis combination of host and port requires TLS.\r\n",
   "datamd5" : "bd933a926de9d9a8dd8992a468aa4b06",
   "datammh3" : -285421530,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS17882",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "MN",
      "countryname" : "Mongolia",
      "domain" : [
         "unidish.mn",
         "unitel.mn"
      ],
      "isineu" : "false",
      "latitude" : "46.862496",
      "location" : "46.862496,103.846656",
      "longitude" : "103.846656",
      "netname" : "UNIDISH",
      "organization" : "Unidish LLC",
      "subnet" : "103.80.210.224/28"
   },
   "ip" : "103.80.210.237",
   "ipv6" : "false",
   "latitude" : "47.9094",
   "location" : "47.9094,106.8819",
   "longitude" : "106.8819",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "UNIVISION LLC",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 4190,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "103.80.210.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
94.105.120.211

Network
94.105.96.0/19

Domain(s)
edpnet.net

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://94.105.120.211:4190/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
94.105.120.211.dyn.edpnet.net

ASN
AS9031

Organization
EDPNET Belgium BV

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.26.2

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
7bcd23e0d9831217bef4de1d48e5bd37

HTTP Header MD5
223075225ba7d68583af5fcc28948c3f

HTTP Body MD5
c9abfd6216253e6f652566d960897d6a

HTTP/1.1 400 Bad Request
Server: nginx/1.26.2
Date: Thu, 07 Nov 2024 05:36:20 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.26.2</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:36:20.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "c9abfd6216253e6f652566d960897d6a",
         "bodymmh3" : 2070515777,
         "headermd5" : "223075225ba7d68583af5fcc28948c3f",
         "headermmh3" : 1783439309,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 471
   },
   "asn" : "AS9031",
   "city" : "Brussels",
   "country" : "BE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.26.2\r\nDate: Thu, 07 Nov 2024 05:36:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.26.2</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "7bcd23e0d9831217bef4de1d48e5bd37",
   "datammh3" : -1952859068,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "edpnet.net"
   ],
   "geolocus" : {
      "asn" : "AS9031",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "BE",
      "countryname" : "Belgium",
      "domain" : [
         "edpnet.com",
         "edpnet.net"
      ],
      "isineu" : "true",
      "latitude" : "50.503887",
      "location" : "50.503887,4.469936",
      "longitude" : "4.469936",
      "netname" : "Edpnet",
      "organization" : "Edpnet",
      "subnet" : "94.105.96.0/19"
   },
   "host" : [
      94
   ],
   "hostname" : [
      "94.105.120.211.dyn.edpnet.net"
   ],
   "ip" : "94.105.120.211",
   "ipv6" : "false",
   "latitude" : "50.8534",
   "location" : "50.8534,4.3470",
   "longitude" : "4.3470",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "EDPNET Belgium BV",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4190,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.26.2",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "94.105.120.211.dyn.edpnet.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "105.120.211.dyn.edpnet.net",
      "120.211.dyn.edpnet.net",
      "211.dyn.edpnet.net",
      "dyn.edpnet.net"
   ],
   "subnet" : "94.105.96.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
45.115.238.226

Network
45.115.236.0/22

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://45.115.238.226:4190/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS132883

Organization
TOPWAY GLOBAL LIMITED

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
F5 Nginx 1.17.6

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
023c8c5e51d9ce9369af8e1f921f5e3f

HTTP Header MD5
f4eaba8998b0e515f84d95c1ad5ea5c7

HTTP Body MD5
a2b4897849c71fbcb21dd632d3506361

HTTP/1.1 400 Bad Request
Server: nginx/1.17.6
Date: Thu, 07 Nov 2024 05:20:00 GMT
Content-Type: text/html
Content-Length: 255
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.17.6</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:20:00.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "a2b4897849c71fbcb21dd632d3506361",
         "bodymmh3" : -2063426561,
         "headermd5" : "f4eaba8998b0e515f84d95c1ad5ea5c7",
         "headermmh3" : -1882909185,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS132883",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 05:20:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.6</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "023c8c5e51d9ce9369af8e1f921f5e3f",
   "datammh3" : 457427036,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS132883",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "cnaaa.com",
         "cnnic.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "cnaaa",
      "organization" : "Jiangsu Sanai network science and technology co ,LTD",
      "subnet" : "45.115.238.0/24"
   },
   "ip" : "45.115.238.226",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "TOPWAY GLOBAL LIMITED",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 4190,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.17.6",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "45.115.236.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
134.122.189.69

Network
134.122.176.0/20

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://134.122.189.69:4190/ 400

ASN
AS152194

Organization
CTG Server Limited

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
7ec6fc76f1262fda24211ad1f325a0f1

HTTP Header MD5
e1ac934a33d282a0f9203d1f38959cd4

HTTP Body MD5
b634668f41ef53ef6d608dc70c4e0dcb

HTTP/1.0 400 Bad Request

Client sent an HTTP request to an HTTPS server.

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:01:43.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b634668f41ef53ef6d608dc70c4e0dcb",
         "bodymmh3" : 759042204,
         "headermd5" : "e1ac934a33d282a0f9203d1f38959cd4",
         "headermmh3" : 247729568
      },
      "length" : 76
   },
   "asn" : "AS152194",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 400 Bad Request\r\n\r\nClient sent an HTTP request to an HTTPS server.\n",
   "datamd5" : "7ec6fc76f1262fda24211ad1f325a0f1",
   "datammh3" : 785411303,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS64050",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "ctgserver.com",
         "rackip.com"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "BGP191-JP",
      "organization" : "RACKIP CONSULTANCY PTE. LTD.",
      "subnet" : "134.122.184.0/21"
   },
   "ip" : "134.122.189.69",
   "ipv6" : "false",
   "latitude" : "1.3673",
   "location" : "1.3673,103.8014",
   "longitude" : "103.8014",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CTG Server Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4190,
   "protocol" : "http",
   "protocolversion" : "1.0",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "134.122.176.0/20",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
103.137.189.11

Network
103.137.188.0/23

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://103.137.189.11:4190/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS9341

Organization
PT INDONESIA COMNETS PLUS

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 04:53:47 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:53:47.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : 1723721673,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS9341",
   "country" : "ID",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 04:53:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS9341",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "ID",
      "countryname" : "Indonesia",
      "domain" : [
         "iconpln.net.id",
         "komunikasibuana.net"
      ],
      "isineu" : "false",
      "latitude" : "-0.789275",
      "location" : "-0.789275,113.921327",
      "longitude" : "113.921327",
      "netname" : "IDNIC-KOMUNIKASIBUANA-ID",
      "organization" : "Route Object of PT INDONESIA COMNETS PLUS",
      "subnet" : "103.137.188.0/23"
   },
   "ip" : "103.137.189.11",
   "ipv6" : "false",
   "latitude" : "-6.1728",
   "location" : "-6.1728,106.8272",
   "longitude" : "106.8272",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "PT INDONESIA COMNETS PLUS",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 4190,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "103.137.188.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
194.153.182.96

Network
194.153.176.0/21

Domain(s)
qlnet.ch

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://194.153.182.96:4190/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
96-182-153-194.dyn.cable.qlnet.ch

ASN
AS15600

Organization
Quickline AG

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 04:45:05 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:45:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : 2072743700,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS15600",
   "city" : "Zug",
   "country" : "CH",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 04:45:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "qlnet.ch"
   ],
   "geolocus" : {
      "asn" : "AS15600",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "CH",
      "countryname" : "Switzerland",
      "domain" : [
         "qlgroup.ch"
      ],
      "isineu" : "false",
      "latitude" : "46.818188",
      "location" : "46.818188,8.227512",
      "longitude" : "8.227512",
      "netname" : "EWFLIMS-NET",
      "organization" : "Flims Electric AG",
      "subnet" : "194.153.176.0/21"
   },
   "host" : [
      "96-182-153-194"
   ],
   "hostname" : [
      "96-182-153-194.dyn.cable.qlnet.ch"
   ],
   "ip" : "194.153.182.96",
   "ipv6" : "false",
   "latitude" : "47.1685",
   "location" : "47.1685,8.5035",
   "longitude" : "8.5035",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Quickline AG",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4190,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "96-182-153-194.dyn.cable.qlnet.ch"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "cable.qlnet.ch",
      "dyn.cable.qlnet.ch"
   ],
   "subnet" : "194.153.176.0/21",
   "tld" : [
      "ch"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP

<access denied by policy>

Network

<access denied by policy>

Operating System

<access denied by policy> <access denied by policy>

ASN

<access denied by policy>

Organization

<access denied by policy>

Protocol

<access denied by policy>

Source

<access denied by policy>
Operating System

<access denied by policy> <access denied by policy>

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5

<access denied by policy>
```
<access denied by policy>
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:35:15.000Z",
   "app" : "<enterprise field>: app",
   "asn" : "<access denied by policy>",
   "city" : "<access denied by policy>",
   "country" : "<access denied by policy>",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<access denied by policy>",
   "datamd5" : "<access denied by policy>",
   "datammh3" : "<access denied by policy>",
   "device" : "<enterprise field>: device",
   "geolocus" : "<enterprise field>: geolocus",
   "ip" : "<access denied by policy>",
   "ipv6" : "<access denied by policy>",
   "latitude" : "<access denied by policy>",
   "location" : "<access denied by policy>",
   "longitude" : "<access denied by policy>",
   "node" : "<enterprise field>: node",
   "organization" : "<access denied by policy>",
   "os" : "<access denied by policy>",
   "osvendor" : "<access denied by policy>",
   "port" : "<access denied by policy>",
   "protocol" : "<access denied by policy>",
   "protocolversion" : "<access denied by policy>",
   "reason" : "<access denied by policy>",
   "seen_date" : "<access denied by policy>",
   "source" : "<access denied by policy>",
   "status" : "<access denied by policy>",
   "subnet" : "<access denied by policy>",
   "tag" : "<enterprise field>: tag",
   "tls" : "<access denied by policy>",
   "transport" : "<access denied by policy>",
   "url" : "<access denied by policy>"
}

IP
82.156.194.105

Network
82.156.0.0/15

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://82.156.194.105:4190/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS45090

Organization
Shenzhen Tencent Computer Systems Company Limited

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.23.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8f4262e9d39fce1d46cbd86caba71bc9

HTTP Header MD5
c3aa27ed3b42ce6989c1a3b3b1fda80b

HTTP Body MD5
04672d0a98ffcd457c06e5be0e5ee243

HTTP/1.1 400 Bad Request
Server: nginx/1.23.3
Date: Thu, 07 Nov 2024 03:25:28 GMT
Content-Type: text/html
Content-Length: 255
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.23.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:25:28.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "04672d0a98ffcd457c06e5be0e5ee243",
         "bodymmh3" : -1165575734,
         "headermd5" : "c3aa27ed3b42ce6989c1a3b3b1fda80b",
         "headermmh3" : 754940740,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS45090",
   "city" : "Beijing",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.23.3\r\nDate: Thu, 07 Nov 2024 03:25:28 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.23.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "8f4262e9d39fce1d46cbd86caba71bc9",
   "datammh3" : -938381467,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS45090",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "tencent.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "TENCENT-CN",
      "organization" : "Tencent Cloud Computing (Beijing) Co., Ltd",
      "subnet" : "82.156.0.0/15"
   },
   "ip" : "82.156.194.105",
   "ipv6" : "false",
   "latitude" : "39.9110",
   "location" : "39.9110,116.3950",
   "longitude" : "116.3950",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Shenzhen Tencent Computer Systems Company Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4190,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.23.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "82.156.0.0/15",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
103.56.19.203

Network
103.56.16.0/22

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

URL

http://103.56.19.203:4190/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS132883

Organization
TOPWAY GLOBAL LIMITED

Protocol
http

Source
datascan
Operating System
Microsoft Windows

Product
F5 Nginx 1.17.6

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
e9ec5b63c403eac10679207dd379a96d

HTTP Header MD5
65724132eb979551eb011fb214abae46

HTTP Body MD5
a2b4897849c71fbcb21dd632d3506361

HTTP/1.1 400 Bad Request
Server: nginx/1.17.6
Date: Thu, 07 Nov 2024 03:10:37 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.17.6</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:10:47.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "a2b4897849c71fbcb21dd632d3506361",
         "bodymmh3" : -2063426561,
         "headermd5" : "65724132eb979551eb011fb214abae46",
         "headermmh3" : 1599762814,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 471
   },
   "asn" : "AS132883",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.17.6\r\nDate: Thu, 07 Nov 2024 03:10:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.6</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e9ec5b63c403eac10679207dd379a96d",
   "datammh3" : -747749574,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS132883",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "cnaaa.com",
         "cnnic.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "cnaaa",
      "organization" : "Jiangsu Sanai network science and technology co ,LTD",
      "subnet" : "103.56.16.0/22"
   },
   "ip" : "103.56.19.203",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "TOPWAY GLOBAL LIMITED",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 4190,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.17.6",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "103.56.16.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
103.14.92.153

Network
103.14.92.0/23

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://103.14.92.153:4190/ 400

ASN
AS38136

Organization
Akari Networks

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
50d6943142c6465f4e1a31374c136610

HTTP Header MD5
9753e563526e6b3a8b4d526dc7c73696

HTTP Body MD5
e5e0dc6f2dd185116e149816aa5edeb6

HTTP/1.1 400 Bad Request
Transfer-Encoding: chunked
X-MSEdge-Ref: 0Qy8sZwAAAABHjvaUbjg1TrZkX9JQ769FU0lOMzBFREdFMDExMwBFZGdl
Date: Thu, 07 Nov 2024 03:08:51 GMT
Connection: close

c2
<h2>Our services aren't available right now</h2><p>We're working to restore all services as soon as possible. Please check back soon.</p>0Qy8sZwAAAABHjvaUbjg1TrZkX9JQ769FU0lOMzBFREdFMDExMwBFZGdl
0

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:08:51.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "e5e0dc6f2dd185116e149816aa5edeb6",
         "bodymmh3" : 1926190765,
         "headermd5" : "9753e563526e6b3a8b4d526dc7c73696",
         "headermmh3" : 247444903
      },
      "length" : 390
   },
   "asn" : "AS38136",
   "city" : "Singapore",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nTransfer-Encoding: chunked\r\nX-MSEdge-Ref: 0Qy8sZwAAAABHjvaUbjg1TrZkX9JQ769FU0lOMzBFREdFMDExMwBFZGdl\r\nDate: Thu, 07 Nov 2024 03:08:51 GMT\r\nConnection: close\r\n\r\nc2\r\n<h2>Our services aren't available right now</h2><p>We're working to restore all services as soon as possible. Please check back soon.</p>0Qy8sZwAAAABHjvaUbjg1TrZkX9JQ769FU0lOMzBFREdFMDExMwBFZGdl\r\n0\r\n\r\n",
   "datamd5" : "50d6943142c6465f4e1a31374c136610",
   "datammh3" : 1706619386,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS38136",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "dodorama.com"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "AUK-NETWORK",
      "organization" : "AUK NETWORK",
      "subnet" : "103.14.92.0/23"
   },
   "ip" : "103.14.92.153",
   "ipv6" : "false",
   "latitude" : "1.2868",
   "location" : "1.2868,103.8503",
   "longitude" : "103.8503",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Akari Networks",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4190,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "103.14.92.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 1,970 in 0.226 second(s)

103.80.210.237:4190 (tcp/http) - last seen on 2024-11-07 at 05:37:36 UTC

94.105.120.211:4190 (tcp/http) - last seen on 2024-11-07 at 05:36:20 UTC

45.115.238.226:4190 (tcp/http) - last seen on 2024-11-07 at 05:20:00 UTC

134.122.189.69:4190 (tcp/http) - last seen on 2024-11-07 at 05:01:43 UTC

103.137.189.11:4190 (tcp/http) - last seen on 2024-11-07 at 04:53:47 UTC

194.153.182.96:4190 (tcp/http) - last seen on 2024-11-07 at 04:45:05 UTC

<access denied by policy>:<access denied by policy> (<access denied by policy>/<access denied by policy>) - last seen on 2024-11-07 at 04:35:15 UTC

82.156.194.105:4190 (tcp/http) - last seen on 2024-11-07 at 03:25:28 UTC

103.56.19.203:4190 (tcp/http) - last seen on 2024-11-07 at 03:10:47 UTC

103.14.92.153:4190 (tcp/http) - last seen on 2024-11-07 at 03:08:51 UTC