Returning 10 result(s) out of 43 in 0.025 second(s)

  • 50.197.112.245:464 (tcp/http) - last seen on 2024-11-07 at 03:25:57 UTC

    • IP
      50.197.112.245
      Network
      50.192.0.0/13
      Domain(s)
      comcastbusiness.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://50.197.112.245:464/ 302

      HTTP Title
      Policy Jump
      Reverse DNS
      50-197-112-245-static.hfc.comcastbusiness.net
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c115b1f71524942996ba332003ec1534
      HTTP Header MD5
      c13683ef60ac012f796d4aae37715b31
      HTTP Body MD5
      3a8a101a88d17f122a99dd4027dce67b
    • HTTP/1.0 302 Found
      Content-type: text/html
      Location: http://50.197.112.241/dynPolLoginRedirect.html
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head>
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="http://50.197.112.241/dynPolLoginRedirect.html">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T03:25:57.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "50.197.112.241"
               ],
               "url" : [
                  "http://50.197.112.241/dynPolLoginRedirect.html"
               ]
            },
            "http" : {
               "bodymd5" : "3a8a101a88d17f122a99dd4027dce67b",
               "bodymmh3" : 1231235323,
               "component" : [
                  {
                     "productvendor" : "SonicWall",
                     "product" : "SonicWall"
                  }
               ],
               "headermd5" : "c13683ef60ac012f796d4aae37715b31",
               "headermmh3" : 276566885,
               "title" : "Policy Jump"
            },
            "length" : 419
         },
         "asn" : "AS7922",
         "city" : "Dearborn",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nLocation: http://50.197.112.241/dynPolLoginRedirect.html\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head>\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"http://50.197.112.241/dynPolLoginRedirect.html\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "c115b1f71524942996ba332003ec1534",
         "datammh3" : 248086971,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "comcastbusiness.net"
         ],
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net",
               "comcastbusiness.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "LLEWELYNSCHL",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "50.192.0.0/13"
         },
         "host" : [
            "50-197-112-245-static"
         ],
         "hostname" : [
            "50-197-112-245-static.hfc.comcastbusiness.net"
         ],
         "ip" : "50.197.112.245",
         "ipv6" : "false",
         "latitude" : "42.3212",
         "location" : "42.3212,-83.2660",
         "longitude" : "-83.2660",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 464,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "reverse" : [
            "50-197-112-245-static.hfc.comcastbusiness.net"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 302,
         "subdomains" : [
            "hfc.comcastbusiness.net"
         ],
         "subnet" : "50.192.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 50.232.27.58:464 (tcp/http) - last seen on 2024-11-05 at 17:44:09 UTC

    • IP
      50.232.27.58
      Network
      50.232.26.0/23
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://50.232.27.58:464/ 403

      HTTP Title
      Access Denied
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0b908042e666282397fa2dfef15eb6af
      HTTP Header MD5
      dc2eec64c8acd6383b8322cc7b3ba772
      HTTP Body MD5
      8778a0e89f35e4013c880af760a8f47c
    • HTTP/1.1 403 Forbidden
      Connection: close
      Content-Length: 504
      Content-Type: text/html; charset=UTF-8
      
      <!DOCTYPE html>
      <html><head>
      <meta http-equiv="content-type" content="text/html; charset=UTF-8" />
      <title>Access Denied</title>
      <style type="text/css">body {margin:0;font-family:verdana,sans-serif;} h1 {margin:0;padding:12px 25px;background-color:#343434;color:#ddd} p {margin:12px 25px;} strong {color:#E0042D;}</style>
      </head>
      <body>
      <h1>Access Denied</h1>
      <p>
      <strong>You are attempting to access a forbidden site.</strong><br/><br/>
      Consult your system administrator for details.
      </p>
      </body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-05T17:44:09.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "8778a0e89f35e4013c880af760a8f47c",
               "bodymmh3" : 425805347,
               "headermd5" : "dc2eec64c8acd6383b8322cc7b3ba772",
               "headermmh3" : 1476166221,
               "title" : "Access Denied"
            },
            "length" : 605
         },
         "asn" : "AS7922",
         "city" : "Miami",
         "country" : "US",
         "data" : "HTTP/1.1 403 Forbidden\nConnection: close\nContent-Length: 504\nContent-Type: text/html; charset=UTF-8\n\n<!DOCTYPE html>\n<html><head>\n<meta http-equiv=\"content-type\" content=\"text/html; charset=UTF-8\" />\n<title>Access Denied</title>\n<style type=\"text/css\">body {margin:0;font-family:verdana,sans-serif;} h1 {margin:0;padding:12px 25px;background-color:#343434;color:#ddd} p {margin:12px 25px;} strong {color:#E0042D;}</style>\n</head>\n<body>\n<h1>Access Denied</h1>\n<p>\n<strong>You are attempting to access a forbidden site.</strong><br/><br/>\nConsult your system administrator for details.\n</p>\n</body>\n</html>",
         "datamd5" : "0b908042e666282397fa2dfef15eb6af",
         "datammh3" : -2080672021,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net",
               "comcastbusiness.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "CCCH3-4",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "50.232.26.0/23"
         },
         "ip" : "50.232.27.58",
         "ipv6" : "false",
         "latitude" : "25.6639",
         "location" : "25.6639,-80.4372",
         "longitude" : "-80.4372",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 464,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Forbidden",
         "seen_date" : "2024-11-05",
         "source" : "datascan",
         "status" : 403,
         "subnet" : "50.232.26.0/23",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 50.239.254.194:464 (tcp/http) - last seen on 2024-11-04 at 03:30:55 UTC

    • IP
      50.239.254.194
      Network
      50.239.240.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Ubuntu
      URL

      http://50.239.254.194:464/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Ubuntu
      Product
      F5 Nginx 1.18.0
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0f607a794922d0e529ea46b57721417d
      HTTP Header MD5
      73b5b39070f21c93f1b94a75281c1ce0
      HTTP Body MD5
      e2c7b0e1a897b6683f3a2814cb2f67cd
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.18.0 (Ubuntu)
      Date: Mon, 04 Nov 2024 03:31:00 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.18.0 (Ubuntu)</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-04T03:30:55.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "e2c7b0e1a897b6683f3a2814cb2f67cd",
               "bodymmh3" : -1741231556,
               "headermd5" : "73b5b39070f21c93f1b94a75281c1ce0",
               "headermmh3" : -997557164,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 425
         },
         "asn" : "AS7922",
         "city" : "Philadelphia",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 04 Nov 2024 03:31:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.18.0 (Ubuntu)</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0f607a794922d0e529ea46b57721417d",
         "datammh3" : 907783723,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "CCCH3-4",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "50.239.240.0/20"
         },
         "ip" : "50.239.254.194",
         "ipv6" : "false",
         "latitude" : "40.0345",
         "location" : "40.0345,-75.1193",
         "longitude" : "-75.1193",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "Linux",
         "osdistribution" : "Ubuntu",
         "osvendor" : "Linux",
         "port" : 464,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.18.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-04",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "50.239.240.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 96.83.69.117:464 (tcp/http) - last seen on 2024-11-03 at 12:09:05 UTC

    • IP
      96.83.69.117
      Network
      96.64.0.0/11
      Device

      <enterprise field>: device.class

      URL

      http://96.83.69.117:464/ 401

      HTTP Title
      Protected Object
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Product
      allegrosoft RomPager 3.10
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a27c695f5d7f5fc6d9a2f0fa093cf75c
      HTTP Header MD5
      8274bda2392bcdb66fbd654ef5f59745
      HTTP Body MD5
      31e5ee2976545373aefa7f66f1892cad
    • HTTP/1.1 401 Unauthorized
      WWW-Authenticate: Digest realm="Realm1", nonce="fb55db39d9f40022aecc6e0aeb0b1caa", qop=auth
      Content-Type: text/html
      Transfer-Encoding: chunked
      Server: Allegro-Software-RomPager/3.10
      Connection: close
      
      125
      <HTML>
      <HEAD>
      <TITLE>Protected Object</TITLE>
      </HEAD>
      <BODY>
      <H1>Unauthorized</H1>
      Correct authorization is required for this area. Either your browser does not perform authorization, or your authorization has failed. RomPager server.<P>
      Return to <A HREF="">last page</A><P>
      
      </BODY>
      </HTML>
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-03T12:09:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "31e5ee2976545373aefa7f66f1892cad",
               "bodymmh3" : -1122886803,
               "headermd5" : "8274bda2392bcdb66fbd654ef5f59745",
               "headermmh3" : -1644153786,
               "realm" : "Realm1",
               "title" : "Protected Object"
            },
            "length" : 539
         },
         "asn" : "AS7922",
         "city" : "Ellicott City",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 401 Unauthorized\r\nWWW-Authenticate: Digest realm=\"Realm1\", nonce=\"fb55db39d9f40022aecc6e0aeb0b1caa\", qop=auth\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nServer: Allegro-Software-RomPager/3.10\r\nConnection: close\r\n\r\n125\r\n<HTML>\n<HEAD>\n<TITLE>Protected Object</TITLE>\n</HEAD>\n<BODY>\n<H1>Unauthorized</H1>\nCorrect authorization is required for this area. Either your browser does not perform authorization, or your authorization has failed. RomPager server.<P>\nReturn to <A HREF=\"\">last page</A><P>\n\n</BODY>\n</HTML>\n\r\n0\r\n\r\n",
         "datamd5" : "a27c695f5d7f5fc6d9a2f0fa093cf75c",
         "datammh3" : -41231851,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net",
               "comcastbusiness.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "BAWA-CCCS-35",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "96.83.64.0/18"
         },
         "ip" : "96.83.69.117",
         "ipv6" : "false",
         "latitude" : "39.2514",
         "location" : "39.2514,-76.7979",
         "longitude" : "-76.7979",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "port" : 464,
         "product" : "RomPager",
         "productvendor" : "allegrosoft",
         "productversion" : "3.10",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Unauthorized",
         "seen_date" : "2024-11-03",
         "source" : "datascan",
         "status" : 401,
         "subnet" : "96.64.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 50.243.157.218:464 (tcp/http) - last seen on 2024-11-02 at 20:46:10 UTC

    • IP
      50.243.157.218
      Network
      50.240.0.0/12
      Domain(s)
      comcastbusiness.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://50.243.157.218:464/ 200

      HTTP Title
      IIS Windows Server
      Reverse DNS
      50-243-157-218-static.hfc.comcastbusiness.net
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft IIS 10.0
      HTTP Component(s)
      Microsoft IIS
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d3c70b874df396e653649599c44b5633
      HTTP Header MD5
      498aa3fde37c67fc39d713f9b02f652c
      HTTP Body MD5
      654ae82705924352d2363b1d797997ce
    • HTTP/1.1 200 OK
      Content-Type: text/html
      Last-Modified: Wed, 18 Jan 2017 21:42:10 GMT
      Accept-Ranges: bytes
      ETag: "9d781db9d371d21:0"
      Server: Microsoft-IIS/10.0
      Date: Sat, 02 Nov 2024 20:46:09 GMT
      Connection: close
      Content-Length: 703
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml">
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
      <title>IIS Windows Server</title>
      <style type="text/css">
      <!--
      body {
      	color:#000000;
      	background-color:#0072C6;
      	margin:0;
      }
      
      #container {
      	margin-left:auto;
      	margin-right:auto;
      	text-align:center;
      	}
      
      a img {
      	border:none;
      }
      
      -->
      </style>
      </head>
      <body>
      <div id="container">
      <a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iisstart.png" alt="IIS" width="960" height="600" /></a>
      </div>
      </body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-02T20:46:10.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "microsoft.com",
                  "w3.org"
               ],
               "hostname" : [
                  "go.microsoft.com",
                  "www.w3.org"
               ],
               "url" : [
                  "http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409",
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "654ae82705924352d2363b1d797997ce",
               "bodymmh3" : 703707298,
               "component" : [
                  {
                     "product" : "IIS",
                     "productvendor" : "Microsoft"
                  }
               ],
               "header" : [
                  {
                     "value" : "Wed, 18 Jan 2017 21:42:10 GMT",
                     "name" : "Last-Modified"
                  },
                  {
                     "value" : "9d781db9d371d21:0",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "498aa3fde37c67fc39d713f9b02f652c",
               "headermmh3" : -287847971,
               "title" : "IIS Windows Server"
            },
            "length" : 947
         },
         "asn" : "AS7922",
         "city" : "Denver",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nLast-Modified: Wed, 18 Jan 2017 21:42:10 GMT\r\nAccept-Ranges: bytes\r\nETag: \"9d781db9d371d21:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Sat, 02 Nov 2024 20:46:09 GMT\r\nConnection: close\r\nContent-Length: 703\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />\r\n<title>IIS Windows Server</title>\r\n<style type=\"text/css\">\r\n<!--\r\nbody {\r\n\tcolor:#000000;\r\n\tbackground-color:#0072C6;\r\n\tmargin:0;\r\n}\r\n\r\n#container {\r\n\tmargin-left:auto;\r\n\tmargin-right:auto;\r\n\ttext-align:center;\r\n\t}\r\n\r\na img {\r\n\tborder:none;\r\n}\r\n\r\n-->\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"container\">\r\n<a href=\"http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409\"><img src=\"iisstart.png\" alt=\"IIS\" width=\"960\" height=\"600\" /></a>\r\n</div>\r\n</body>\r\n</html>",
         "datamd5" : "d3c70b874df396e653649599c44b5633",
         "datammh3" : -1129506387,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "comcastbusiness.net"
         ],
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net",
               "helpmembers.org"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "NORTHGULF-CCCS-4",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "50.240.0.0/12"
         },
         "host" : [
            "50-243-157-218-static"
         ],
         "hostname" : [
            "50-243-157-218-static.hfc.comcastbusiness.net"
         ],
         "ip" : "50.243.157.218",
         "ipv6" : "false",
         "latitude" : "39.7593",
         "location" : "39.7593,-104.9651",
         "longitude" : "-104.9651",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "osversion" : [
            "Server 2016",
            10
         ],
         "port" : 464,
         "product" : "IIS",
         "productvendor" : "Microsoft",
         "productversion" : "10.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "50-243-157-218-static.hfc.comcastbusiness.net"
         ],
         "seen_date" : "2024-11-02",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "hfc.comcastbusiness.net"
         ],
         "subnet" : "50.240.0.0/12",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 67.180.144.101:464 (tcp/http) - last seen on 2024-11-02 at 17:43:31 UTC

    • IP
      67.180.144.101
      Network
      67.180.0.0/16
      Domain(s)
      comcast.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://67.180.144.101:464/ 401

      HTTP Title
      Unauthorized
      Reverse DNS
      c-67-180-144-101.hsd1.ca.comcast.net
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      HTTP Component(s)
      Plex Media Server
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2de861031040181ee2188040cc83180e
      HTTP Header MD5
      9ca01530123920eac6307b32e7d89d3b
      HTTP Body MD5
      58839c8a9d6616ca62adc7b6e3610676
    • HTTP/1.1 401 Unauthorized
      X-Plex-Protocol: 1.0
      Content-Length: 193
      Content-Type: text/html
      Connection: close
      Cache-Control: no-cache
      Date: Sat, 02 Nov 2024 17:43:30 GMT
      
      <html><head><script>window.location = window.location.href.match(/(^.+\/)[^\/]*$/)[1] + 'web/index.html';</script><title>Unauthorized</title></head><body><h1>401 Unauthorized</h1></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-02T17:43:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "58839c8a9d6616ca62adc7b6e3610676",
               "bodymmh3" : 1524593440,
               "component" : [
                  {
                     "productvendor" : "Plex",
                     "product" : "Media Server"
                  }
               ],
               "headermd5" : "9ca01530123920eac6307b32e7d89d3b",
               "headermmh3" : -1040289600,
               "title" : "Unauthorized"
            },
            "length" : 371
         },
         "asn" : "AS7922",
         "city" : "South San Francisco",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 401 Unauthorized\r\nX-Plex-Protocol: 1.0\r\nContent-Length: 193\r\nContent-Type: text/html\r\nConnection: close\r\nCache-Control: no-cache\r\nDate: Sat, 02 Nov 2024 17:43:30 GMT\r\n\r\n<html><head><script>window.location = window.location.href.match(/(^.+\\/)[^\\/]*$/)[1] + 'web/index.html';</script><title>Unauthorized</title></head><body><h1>401 Unauthorized</h1></body></html>",
         "datamd5" : "2de861031040181ee2188040cc83180e",
         "datammh3" : -1584694499,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "comcast.net"
         ],
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "BAYAREA-13",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "67.180.128.0/17"
         },
         "host" : [
            "c-67-180-144-101"
         ],
         "hostname" : [
            "c-67-180-144-101.hsd1.ca.comcast.net"
         ],
         "ip" : "67.180.144.101",
         "ipv6" : "false",
         "latitude" : "37.6538",
         "location" : "37.6538,-122.4257",
         "longitude" : "-122.4257",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 464,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Unauthorized",
         "reverse" : [
            "c-67-180-144-101.hsd1.ca.comcast.net"
         ],
         "seen_date" : "2024-11-02",
         "source" : "datascan",
         "status" : 401,
         "subdomains" : [
            "ca.comcast.net",
            "hsd1.ca.comcast.net"
         ],
         "subnet" : "67.180.0.0/16",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 174.173.37.2:464 (tcp/http) - last seen on 2024-11-02 at 16:15:13 UTC

    • IP
      174.173.37.2
      Network
      174.168.0.0/13
      Domain(s)
      comcast.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://174.173.37.2:464/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      c-174-173-37-2.hsd1.pa.comcast.net
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Sat, 02 Nov 2024 16:15:12 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-02T16:15:13.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -2059895765,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS7922",
         "city" : "Wallingford",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Sat, 02 Nov 2024 16:15:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "comcast.net"
         ],
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "COMCAST-VOIP-4",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "174.160.0.0/11"
         },
         "host" : [
            "c-174-173-37-2"
         ],
         "hostname" : [
            "c-174-173-37-2.hsd1.pa.comcast.net"
         ],
         "ip" : "174.173.37.2",
         "ipv6" : "false",
         "latitude" : "39.8924",
         "location" : "39.8924,-75.3585",
         "longitude" : "-75.3585",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 464,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "c-174-173-37-2.hsd1.pa.comcast.net"
         ],
         "seen_date" : "2024-11-02",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "hsd1.pa.comcast.net",
            "pa.comcast.net"
         ],
         "subnet" : "174.168.0.0/13",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 50.245.237.198:464 (tcp/http) - last seen on 2024-11-01 at 12:42:17 UTC

    • IP
      50.245.237.198
      Network
      50.240.0.0/12
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      Operating System
      SonicWall SonicOS
      URL

      http://50.245.237.198:464/ 302

      HTTP Title
      Policy Jump
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Operating System
      SonicWall SonicOS
      HTTP Component(s)
      SonicWall SonicWall
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      909647112505bcee3e50a81a7b200baf
      HTTP Header MD5
      abacb902cd555996ea7c81367d39d2cf
      HTTP Body MD5
      cc75dd48a0d2cff4f4de04cea34bb259
    • HTTP/1.0 302 Found
      Content-type: text/html
      X-Content-Type-Options: nosniff
      Location: http://50.245.237.193:8080/dynPolLoginRedirect.html?cid=0
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
      <html>
      <head><meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      
      	<title>Policy Jump</title>
      	<meta name="id" content="policyJump" >
      	<meta http-equiv="Expires" content="0">
      </head>
      <BODY>This document has moved <A href="http://50.245.237.193:8080/dynPolLoginRedirect.html?cid=0">here</A></BODY>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-01T12:42:17.000Z",
         "app" : {
            "extract" : {
               "ip" : [
                  "50.245.237.193"
               ],
               "url" : [
                  "http://50.245.237.193:8080/dynPolLoginRedirect.html?cid=0"
               ]
            },
            "http" : {
               "bodymd5" : "cc75dd48a0d2cff4f4de04cea34bb259",
               "bodymmh3" : 241969292,
               "component" : [
                  {
                     "productvendor" : "SonicWall",
                     "product" : "SonicWall"
                  }
               ],
               "headermd5" : "abacb902cd555996ea7c81367d39d2cf",
               "headermmh3" : -2007902377,
               "title" : "Policy Jump"
            },
            "length" : 543
         },
         "asn" : "AS7922",
         "city" : "Richmond",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 302 Found\r\nContent-type: text/html\r\nX-Content-Type-Options: nosniff\r\nLocation: http://50.245.237.193:8080/dynPolLoginRedirect.html?cid=0\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.0 Transitional//EN\">\r\n<html>\r\n<head><meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\">\r\n\r\n\t<title>Policy Jump</title>\r\n\t<meta name=\"id\" content=\"policyJump\" >\r\n\t<meta http-equiv=\"Expires\" content=\"0\">\r\n</head>\r\n<BODY>This document has moved <A href=\"http://50.245.237.193:8080/dynPolLoginRedirect.html?cid=0\">here</A></BODY>\r\n</html>\r\n",
         "datamd5" : "909647112505bcee3e50a81a7b200baf",
         "datammh3" : 320268453,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net",
               "helpmembers.org"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "NORTHGULF-CCCS-4",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "50.240.0.0/12"
         },
         "ip" : "50.245.237.198",
         "ipv6" : "false",
         "latitude" : "37.4728",
         "location" : "37.4728,-77.5906",
         "longitude" : "-77.5906",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "SonicOS",
         "osvendor" : "SonicWall",
         "port" : 464,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "Found",
         "seen_date" : "2024-11-01",
         "source" : "datascan",
         "status" : 302,
         "subnet" : "50.240.0.0/12",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 50.243.157.221:464 (tcp/http) - last seen on 2024-11-01 at 03:26:59 UTC

    • IP
      50.243.157.221
      Network
      50.240.0.0/12
      Domain(s)
      comcastbusiness.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://50.243.157.221:464/ 200

      HTTP Title
      IIS Windows Server
      Reverse DNS
      50-243-157-221-static.hfc.comcastbusiness.net
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft IIS 10.0
      HTTP Component(s)
      Microsoft IIS
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d3c70b874df396e653649599c44b5633
      HTTP Header MD5
      498aa3fde37c67fc39d713f9b02f652c
      HTTP Body MD5
      654ae82705924352d2363b1d797997ce
    • HTTP/1.1 200 OK
      Content-Type: text/html
      Last-Modified: Wed, 18 Jan 2017 21:42:10 GMT
      Accept-Ranges: bytes
      ETag: "9d781db9d371d21:0"
      Server: Microsoft-IIS/10.0
      Date: Fri, 01 Nov 2024 03:26:58 GMT
      Connection: close
      Content-Length: 703
      
      <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
      <html xmlns="http://www.w3.org/1999/xhtml">
      <head>
      <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
      <title>IIS Windows Server</title>
      <style type="text/css">
      <!--
      body {
      	color:#000000;
      	background-color:#0072C6;
      	margin:0;
      }
      
      #container {
      	margin-left:auto;
      	margin-right:auto;
      	text-align:center;
      	}
      
      a img {
      	border:none;
      }
      
      -->
      </style>
      </head>
      <body>
      <div id="container">
      <a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iisstart.png" alt="IIS" width="960" height="600" /></a>
      </div>
      </body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-01T03:26:59.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "microsoft.com",
                  "w3.org"
               ],
               "hostname" : [
                  "go.microsoft.com",
                  "www.w3.org"
               ],
               "url" : [
                  "http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409",
                  "http://www.w3.org/1999/xhtml",
                  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "654ae82705924352d2363b1d797997ce",
               "bodymmh3" : 703707298,
               "component" : [
                  {
                     "product" : "IIS",
                     "productvendor" : "Microsoft"
                  }
               ],
               "header" : [
                  {
                     "value" : "Wed, 18 Jan 2017 21:42:10 GMT",
                     "name" : "Last-Modified"
                  },
                  {
                     "name" : "ETag",
                     "value" : "9d781db9d371d21:0"
                  }
               ],
               "headermd5" : "498aa3fde37c67fc39d713f9b02f652c",
               "headermmh3" : 1595880234,
               "title" : "IIS Windows Server"
            },
            "length" : 947
         },
         "asn" : "AS7922",
         "city" : "Denver",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nContent-Type: text/html\r\nLast-Modified: Wed, 18 Jan 2017 21:42:10 GMT\r\nAccept-Ranges: bytes\r\nETag: \"9d781db9d371d21:0\"\r\nServer: Microsoft-IIS/10.0\r\nDate: Fri, 01 Nov 2024 03:26:58 GMT\r\nConnection: close\r\nContent-Length: 703\r\n\r\n<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />\r\n<title>IIS Windows Server</title>\r\n<style type=\"text/css\">\r\n<!--\r\nbody {\r\n\tcolor:#000000;\r\n\tbackground-color:#0072C6;\r\n\tmargin:0;\r\n}\r\n\r\n#container {\r\n\tmargin-left:auto;\r\n\tmargin-right:auto;\r\n\ttext-align:center;\r\n\t}\r\n\r\na img {\r\n\tborder:none;\r\n}\r\n\r\n-->\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"container\">\r\n<a href=\"http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409\"><img src=\"iisstart.png\" alt=\"IIS\" width=\"960\" height=\"600\" /></a>\r\n</div>\r\n</body>\r\n</html>",
         "datamd5" : "d3c70b874df396e653649599c44b5633",
         "datammh3" : -1129506387,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "comcastbusiness.net"
         ],
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net",
               "helpmembers.org"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "NORTHGULF-CCCS-4",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "50.240.0.0/12"
         },
         "host" : [
            "50-243-157-221-static"
         ],
         "hostname" : [
            "50-243-157-221-static.hfc.comcastbusiness.net"
         ],
         "ip" : "50.243.157.221",
         "ipv6" : "false",
         "latitude" : "39.7593",
         "location" : "39.7593,-104.9651",
         "longitude" : "-104.9651",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "osversion" : [
            "Server 2016",
            10
         ],
         "port" : 464,
         "product" : "IIS",
         "productvendor" : "Microsoft",
         "productversion" : "10.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "reverse" : [
            "50-243-157-221-static.hfc.comcastbusiness.net"
         ],
         "seen_date" : "2024-11-01",
         "source" : "datascan",
         "status" : 200,
         "subdomains" : [
            "hfc.comcastbusiness.net"
         ],
         "subnet" : "50.240.0.0/12",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 174.53.93.201:464 (tcp/http) - last seen on 2024-10-29 at 10:09:47 UTC

    • IP
      174.53.93.201
      Network
      174.52.0.0/14
      Domain(s)
      comcast.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://174.53.93.201:464/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      c-174-53-93-201.hsd1.va.comcast.net
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Tue, 29 Oct 2024 10:09:47 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-10-29T10:09:47.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -2065725149,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS7922",
         "city" : "Sperryville",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Tue, 29 Oct 2024 10:09:47 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "comcast.net"
         ],
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MIAMI-20",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "174.48.0.0/12"
         },
         "host" : [
            "c-174-53-93-201"
         ],
         "hostname" : [
            "c-174-53-93-201.hsd1.va.comcast.net"
         ],
         "ip" : "174.53.93.201",
         "ipv6" : "false",
         "latitude" : "38.6203",
         "location" : "38.6203,-78.2466",
         "longitude" : "-78.2466",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 464,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "c-174-53-93-201.hsd1.va.comcast.net"
         ],
         "seen_date" : "2024-10-29",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "hsd1.va.comcast.net",
            "va.comcast.net"
         ],
         "subnet" : "174.52.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }