ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 10 result(s) out of 338 in 0.122 second(s)

  • 206.119.102.140:4570 (tcp/http) - last seen on 2024-11-07 at 05:20:27 UTC

    • IP
      206.119.102.140
      Network
      206.119.96.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://206.119.102.140:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS140224
      Organization
      STARCLOUD GLOBAL PTE., LTD.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 05:20:27 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:20:27.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : 1158695771,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS140224",
   "city" : "Hong Kong",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 05:20:27 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS140224",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "cogentco.com",
         "scgp.ltd"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "STARCLOUDGLOBAL-HK",
      "organization" : "STARCLOUD GLOBAL PTE. LTD.",
      "subnet" : "206.119.96.0/19"
   },
   "ip" : "206.119.102.140",
   "ipv6" : "false",
   "latitude" : "22.2842",
   "location" : "22.2842,114.1759",
   "longitude" : "114.1759",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "STARCLOUD GLOBAL PTE., LTD.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "206.119.96.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 23.224.252.8:4570 (tcp/http) - last seen on 2024-11-07 at 04:45:05 UTC

    • IP
      23.224.252.8
      Network
      23.224.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://23.224.252.8:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS40065
      Organization
      CNSERVERS
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 04:45:05 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:45:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : -1023683109,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS40065",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 04:45:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS40065",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "ceranetworks.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "DATA-CENTRE-LA",
      "organization" : "CloudRadium L.L.C",
      "subnet" : "23.224.240.0/20"
   },
   "ip" : "23.224.252.8",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CNSERVERS",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "23.224.0.0/16",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 154.86.29.218:4570 (tcp/http) - last seen on 2024-11-07 at 04:45:05 UTC

    • IP
      154.86.29.218
      Network
      154.86.16.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://154.86.29.218:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS140227
      Organization
      Hong Kong Communications International Co., Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 04:45:05 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:45:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : -1023683109,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS140227",
   "country" : "SC",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 04:45:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS140227",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "cloudinnovation.org"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "HONG_KONG_COMMUNICATIONS_INTERNATIONAL_COLIMITED",
      "organization" : "HONG KONG COMMUNICATIONS INTERNATIONAL CO.,LIMITED",
      "subnet" : "154.86.28.0/22"
   },
   "ip" : "154.86.29.218",
   "ipv6" : "false",
   "latitude" : "-4.5833",
   "location" : "-4.5833,55.6667",
   "longitude" : "55.6667",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Hong Kong Communications International Co., Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "154.86.16.0/20",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 206.119.102.80:4570 (tcp/http) - last seen on 2024-11-07 at 04:37:49 UTC

    • IP
      206.119.102.80
      Network
      206.119.96.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://206.119.102.80:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS140224
      Organization
      STARCLOUD GLOBAL PTE., LTD.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 04:37:49 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:37:49.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : 1856488473,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS140224",
   "city" : "Hong Kong",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 04:37:49 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS140224",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "cogentco.com",
         "scgp.ltd"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "STARCLOUDGLOBAL-HK",
      "organization" : "STARCLOUD GLOBAL PTE. LTD.",
      "subnet" : "206.119.96.0/19"
   },
   "ip" : "206.119.102.80",
   "ipv6" : "false",
   "latitude" : "22.2842",
   "location" : "22.2842,114.1759",
   "longitude" : "114.1759",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "STARCLOUD GLOBAL PTE., LTD.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "206.119.96.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 156.234.132.79:4570 (tcp/http) - last seen on 2024-11-07 at 04:18:48 UTC

    • IP
      156.234.132.79
      Network
      156.234.132.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://156.234.132.79:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS138415
      Organization
      Yancy Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 04:18:47 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:18:48.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : 2143066224,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS138415",
   "city" : "Hong Kong",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 04:18:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS138415",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "cloudinnovation.org"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "ICIDC_Limited",
      "organization" : "ICIDC Limited",
      "subnet" : "156.234.128.0/21"
   },
   "ip" : "156.234.132.79",
   "ipv6" : "false",
   "latitude" : "22.2842",
   "location" : "22.2842,114.1759",
   "longitude" : "114.1759",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Yancy Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "156.234.132.0/24",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 117.18.1.172:4570 (tcp/http) - last seen on 2024-11-07 at 03:45:44 UTC

    • IP
      117.18.1.172
      Network
      117.18.0.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://117.18.1.172:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS152194
      Organization
      CTG Server Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 03:45:44 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:45:44.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : -1056651230,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS152194",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 03:45:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS64050",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "worldmailhk.com"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "MEGA-II",
      "organization" : "MEGA-II IDC",
      "subnet" : "117.18.0.0/20"
   },
   "ip" : "117.18.1.172",
   "ipv6" : "false",
   "latitude" : "22.2578",
   "location" : "22.2578,114.1657",
   "longitude" : "114.1657",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CTG Server Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "117.18.0.0/20",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 172.247.188.16:4570 (tcp/http) - last seen on 2024-11-07 at 03:45:42 UTC

    • IP
      172.247.188.16
      Network
      172.247.176.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://172.247.188.16:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS40065
      Organization
      CNSERVERS
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 03:45:42 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:45:42.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : -2106345072,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS40065",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 03:45:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS40065",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "ceranetworks.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "GDI-INVEST-03",
      "organization" : "CloudRadium L.L.C",
      "subnet" : "172.247.188.0/22"
   },
   "ip" : "172.247.188.16",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CNSERVERS",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "172.247.176.0/20",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 149.30.245.72:4570 (tcp/http) - last seen on 2024-11-07 at 02:52:30 UTC

    • IP
      149.30.245.72
      Network
      149.30.224.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://149.30.245.72:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 02:52:30 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:52:30.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : -1610656186,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS133199",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 02:52:30 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS133199",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "cogentco.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "COGENT-149-30-16",
      "organization" : "PSINet, Inc.",
      "subnet" : "149.30.224.0/19"
   },
   "ip" : "149.30.245.72",
   "ipv6" : "false",
   "latitude" : "37.7510",
   "location" : "37.7510,-97.8220",
   "longitude" : "-97.8220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "SonderCloud Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "149.30.224.0/19",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 156.234.132.230:4570 (tcp/http) - last seen on 2024-11-07 at 02:35:27 UTC

    • IP
      156.234.132.230
      Network
      156.234.132.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://156.234.132.230:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS138415
      Organization
      Yancy Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 02:35:27 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:35:27.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : -954802678,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS138415",
   "city" : "Hong Kong",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 02:35:27 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS138415",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "cloudinnovation.org"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "ICIDC_Limited",
      "organization" : "ICIDC Limited",
      "subnet" : "156.234.128.0/21"
   },
   "ip" : "156.234.132.230",
   "ipv6" : "false",
   "latitude" : "22.2842",
   "location" : "22.2842,114.1759",
   "longitude" : "114.1759",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Yancy Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "156.234.132.0/24",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 66.203.159.225:4570 (tcp/http) - last seen on 2024-11-07 at 02:25:05 UTC

    • IP
      66.203.159.225
      Network
      66.203.144.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://66.203.159.225:4570/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS59371
      Organization
      Dimension Network & Communication Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e494f023e1c8d6be0d19e4860ef7ef91
      HTTP Header MD5
      1b7e17413ba01a704c5b8b43d2ad6ec5
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e 
    • HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 02:25:05 GMT
Content-Type: text/html
Content-Length: 252
Connection: close
Server: qq.com

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>openresty</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T02:25:05.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
         "bodymmh3" : 1280153115,
         "headermd5" : "1b7e17413ba01a704c5b8b43d2ad6ec5",
         "headermmh3" : 1344287267,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 398
   },
   "asn" : "AS59371",
   "city" : "Hong Kong",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 02:25:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: qq.com\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "e494f023e1c8d6be0d19e4860ef7ef91",
   "datammh3" : 1940704360,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS59371",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "layerlinks.com"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "LL",
      "organization" : "LL",
      "subnet" : "66.203.144.0/20"
   },
   "ip" : "66.203.159.225",
   "ipv6" : "false",
   "latitude" : "22.2842",
   "location" : "22.2842,114.1759",
   "longitude" : "114.1759",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Dimension Network & Communication Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 4570,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "66.203.144.0/20",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}