Cyber Defense Search Engine

IP
134.147.49.2

Network
134.147.0.0/16

Domain(s)
ruhr-uni-bochum.de

Device

<enterprise field>: device.class

URL

http://rackstation.aept.ruhr-uni-bochum.de:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
rackstation.aept.ruhr-uni-bochum.de

ASN
AS29484

Organization
Ruhr-Universitaet Bochum

Protocol
http

Source
urlscan::redirect
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:32:08 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:32:09.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -1154759289,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS29484",
   "city" : "Bochum",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:32:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ruhr-uni-bochum.de"
   ],
   "forward" : "rackstation.aept.ruhr-uni-bochum.de",
   "host" : [
      "rackstation"
   ],
   "hostname" : [
      "rackstation.aept.ruhr-uni-bochum.de"
   ],
   "ip" : "134.147.49.2",
   "ipv6" : "false",
   "latitude" : "51.4827",
   "location" : "51.4827,7.1871",
   "longitude" : "7.1871",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Ruhr-Universitaet Bochum",
   "port" : 5001,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "rackstation.aept.ruhr-uni-bochum.de"
   ],
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 400,
   "subdomains" : [
      "aept.ruhr-uni-bochum.de"
   ],
   "subnet" : "134.147.0.0/16",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "de"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
213.170.136.2

Network
213.170.136.0/22

Domain(s)
atlasbiz.com

Device

<enterprise field>: device.class

URL

http://sip.atlasbiz.com:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
sip.atlasbiz.com

ASN
AS13005

Organization
Atlas Business Group of Companies Ltd

Protocol
http

Source
urlscan
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:31:32 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:31:33.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -1241219483,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS13005",
   "country" : "GB",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:31:32 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "atlasbiz.com"
   ],
   "forward" : "sip.atlasbiz.com",
   "host" : [
      "sip"
   ],
   "hostname" : [
      "sip.atlasbiz.com"
   ],
   "ip" : "213.170.136.2",
   "ipv6" : "false",
   "latitude" : "51.4964",
   "location" : "51.4964,-0.1224",
   "longitude" : "-0.1224",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Atlas Business Group of Companies Ltd",
   "port" : 5001,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "sip.atlasbiz.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "urlscan",
   "status" : 400,
   "subnet" : "213.170.136.0/22",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
140.128.118.75

Network
140.128.0.0/16

Device

<enterprise field>: device.class

URL

http://140.128.118.75:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS1659

Organization
Taiwan Academic Network TANet Information Center

Protocol
http

Source
urlscan::redirect
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:22:12 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:22:14.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -968188135,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS1659",
   "city" : "Taichung",
   "country" : "TW",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:22:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "forward" : "140.128.118.75",
   "geolocus" : {
      "asn" : "AS1659",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TW",
      "countryname" : "Taiwan",
      "domain" : [
         "moe.gov.tw",
         "tcrc.edu.tw",
         "twnic.net",
         "twnic.net.tw"
      ],
      "isineu" : "false",
      "latitude" : "23.69781",
      "location" : "23.69781,120.960515",
      "longitude" : "120.960515",
      "netname" : "TANET-BNETA",
      "organization" : "imported inetnum object for MOEC",
      "subnet" : "140.128.0.0/16"
   },
   "hostname" : [
      "140.128.118.75"
   ],
   "ip" : "140.128.118.75",
   "ipv6" : "false",
   "latitude" : "24.1440",
   "location" : "24.1440,120.6844",
   "longitude" : "120.6844",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Taiwan Academic Network TANet Information Center",
   "port" : 5001,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 400,
   "subnet" : "140.128.0.0/16",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
124.61.24.212

Network
124.48.0.0/12

Device

<enterprise field>: device.class

URL

http://124.61.24.212:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS17858

Organization
LG POWERCOMM

Protocol
http

Source
urlscan::redirect

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
ab05bbb103edfb952dbfb226047bb51c

HTTP Header MD5
470a9635da086f31b68019aaddc44c99

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 05:22:12 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:22:13.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "470a9635da086f31b68019aaddc44c99",
         "headermmh3" : 232076978,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 378
   },
   "asn" : "AS17858",
   "city" : "Anyang-si",
   "country" : "KR",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 05:22:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "ab05bbb103edfb952dbfb226047bb51c",
   "datammh3" : -1759355213,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "forward" : "124.61.24.212",
   "geolocus" : {
      "asn" : "AS17858",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "lguplus.co.kr",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "Xpeed",
      "organization" : "Xpeed",
      "subnet" : "124.48.0.0/12"
   },
   "hostname" : [
      "124.61.24.212"
   ],
   "ip" : "124.61.24.212",
   "ipv6" : "false",
   "latitude" : "37.3907",
   "location" : "37.3907,126.9167",
   "longitude" : "126.9167",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "LG POWERCOMM",
   "port" : 5001,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 400,
   "subnet" : "124.48.0.0/12",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
84.197.7.213

Network
84.192.0.0/13

Domain(s)
telenet.be

Device

<enterprise field>: device.class

URL

http://84.197.7.213:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
d54c507d5.access.telenet.be

ASN
AS6848

Organization
Telenet BV

Protocol
http

Source
urlscan::redirect
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:22:10 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:22:11.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -1130560138,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS6848",
   "city" : "Balen",
   "country" : "BE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:22:10 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "telenet.be"
   ],
   "forward" : "84.197.7.213",
   "geolocus" : {
      "asn" : "AS6848",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "BE",
      "countryname" : "Belgium",
      "domain" : [
         "telenet.be",
         "telenetgroup.be"
      ],
      "isineu" : "true",
      "latitude" : "50.503887",
      "location" : "50.503887,4.469936",
      "longitude" : "4.469936",
      "netname" : "TELENET",
      "organization" : "TELENET CUSTOMERS",
      "subnet" : "84.197.0.0/16"
   },
   "host" : [
      "d54c507d5"
   ],
   "hostname" : [
      "84.197.7.213",
      "d54c507d5.access.telenet.be"
   ],
   "ip" : "84.197.7.213",
   "ipv6" : "false",
   "latitude" : "51.1648",
   "location" : "51.1648,5.1593",
   "longitude" : "5.1593",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Telenet BV",
   "port" : 5001,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "d54c507d5.access.telenet.be"
   ],
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 400,
   "subdomains" : [
      "access.telenet.be"
   ],
   "subnet" : "84.192.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "be"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
58.176.248.182

Network
58.176.0.0/16

Domain(s)
ctinets.com

Device

<enterprise field>: device.class

URL

http://58.176.248.182:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
058176248182.ctinets.com

ASN
AS9269

Organization
Hong Kong Broadband Network Ltd.

Protocol
http

Source
urlscan::redirect
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:21:36 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:21:40.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : 284843272,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS9269",
   "country" : "HK",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:21:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ctinets.com"
   ],
   "forward" : "58.176.248.182",
   "geolocus" : {
      "asn" : "AS9269",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "ctinets.com",
         "hkbn.com.hk",
         "hkbn.net"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "HKBN",
      "organization" : "Hong Kong Broadband Network Ltd",
      "subnet" : "58.176.128.0/17"
   },
   "host" : [
      "058176248182"
   ],
   "hostname" : [
      "058176248182.ctinets.com",
      "58.176.248.182"
   ],
   "ip" : "58.176.248.182",
   "ipv6" : "false",
   "latitude" : "22.2908",
   "location" : "22.2908,114.1501",
   "longitude" : "114.1501",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Hong Kong Broadband Network Ltd.",
   "port" : 5001,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "058176248182.ctinets.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 400,
   "subnet" : "58.176.0.0/16",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
210.125.149.212

Network
210.125.144.0/21

Device

<enterprise field>: device.class

URL

http://210.125.149.212:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS18158

Organization
CHUNGBUK NATIONAL UNIVERSITY

Protocol
http

Source
urlscan::redirect
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:21:37 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:21:40.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -1605119731,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS18158",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:21:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "forward" : "210.125.149.212",
   "geolocus" : {
      "asn" : "AS18158",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kren.kr",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KREN",
      "organization" : "Korean Education Network",
      "subnet" : "210.125.144.0/21"
   },
   "hostname" : [
      "210.125.149.212"
   ],
   "ip" : "210.125.149.212",
   "ipv6" : "false",
   "latitude" : "37.5112",
   "location" : "37.5112,126.9741",
   "longitude" : "126.9741",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CHUNGBUK NATIONAL UNIVERSITY",
   "port" : 5001,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 400,
   "subnet" : "210.125.144.0/21",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
163.20.23.3

Network
163.16.0.0/13

Domain(s)
ntpc.edu.tw

Device

<enterprise field>: device.class

URL

http://163.20.23.3:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
ftp.sxhs.ntpc.edu.tw nas.sxhs.ntpc.edu.tw

ASN
AS1659

Organization
Taiwan Academic Network TANet Information Center

Protocol
http

Source
urlscan::redirect
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:21:37 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:21:40.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -1605119731,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS1659",
   "city" : "Sanchong District",
   "country" : "TW",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:21:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "ntpc.edu.tw"
   ],
   "forward" : "163.20.23.3",
   "geolocus" : {
      "asn" : "AS1659",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TW",
      "countryname" : "Taiwan",
      "domain" : [
         "moe.gov.tw",
         "nsysu.edu.tw",
         "twnic.net",
         "twnic.net.tw"
      ],
      "isineu" : "false",
      "latitude" : "23.69781",
      "location" : "23.69781,120.960515",
      "longitude" : "120.960515",
      "netname" : "TANET-B",
      "organization" : "imported inetnum object for MOEC",
      "subnet" : "163.16.0.0/13"
   },
   "host" : [
      "nas",
      "ftp"
   ],
   "hostname" : [
      "163.20.23.3",
      "ftp.sxhs.ntpc.edu.tw",
      "nas.sxhs.ntpc.edu.tw"
   ],
   "ip" : "163.20.23.3",
   "ipv6" : "false",
   "latitude" : "25.0691",
   "location" : "25.0691,121.4878",
   "longitude" : "121.4878",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Taiwan Academic Network TANet Information Center",
   "port" : 5001,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "ftp.sxhs.ntpc.edu.tw",
      "nas.sxhs.ntpc.edu.tw"
   ],
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 400,
   "subdomains" : [
      "sxhs.ntpc.edu.tw"
   ],
   "subnet" : "163.16.0.0/13",
   "tld" : [
      "edu.tw"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
124.64.190.213

Network
124.64.0.0/15

Device

<enterprise field>: device.class

URL

http://124.64.190.213:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS4808

Organization
China Unicom Beijing Province Network

Protocol
http

Source
urlscan::redirect
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:20:45 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:21:39.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -246653179,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS4808",
   "city" : "Beijing",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:20:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "forward" : "124.64.190.213",
   "geolocus" : {
      "asn" : "AS4808",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "bta.net.cn",
         "chinaunicom.cn"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "UNICOM-BJ",
      "organization" : "China Unicom Beijing Province Network",
      "subnet" : "124.64.128.0/17"
   },
   "hostname" : [
      "124.64.190.213"
   ],
   "ip" : "124.64.190.213",
   "ipv6" : "false",
   "latitude" : "39.9110",
   "location" : "39.9110,116.3950",
   "longitude" : "116.3950",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Unicom Beijing Province Network",
   "port" : 5001,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 400,
   "subnet" : "124.64.0.0/15",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
89.79.227.202

Network
89.78.0.0/15

Domain(s)
chello.pl

Device

<enterprise field>: device.class

URL

http://89.79.227.202:5001/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
89-79-227-202.dynamic.chello.pl

ASN
AS6830

Organization
Liberty Global B.V.

Protocol
http

Source
urlscan::redirect
Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 05:21:36 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:21:38.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : 284843272,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS6830",
   "city" : "Wroclaw",
   "country" : "PL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 05:21:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "chello.pl"
   ],
   "forward" : "89.79.227.202",
   "geolocus" : {
      "asn" : "AS6830",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "PL",
      "countryname" : "Poland",
      "domain" : [
         "chello.pl",
         "upc.pl"
      ],
      "isineu" : "true",
      "latitude" : "51.919438",
      "location" : "51.919438,19.145136",
      "longitude" : "19.145136",
      "netname" : "PL-UPC-20060222",
      "organization" : "P4 Sp. z o.o.",
      "subnet" : "89.76.0.0/14"
   },
   "host" : [
      "89-79-227-202"
   ],
   "hostname" : [
      "89-79-227-202.dynamic.chello.pl",
      "89.79.227.202"
   ],
   "ip" : "89.79.227.202",
   "ipv6" : "false",
   "latitude" : "51.1442",
   "location" : "51.1442,17.1294",
   "longitude" : "17.1294",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Liberty Global B.V.",
   "port" : 5001,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "89-79-227-202.dynamic.chello.pl"
   ],
   "seen_date" : "2024-11-07",
   "source" : "urlscan::redirect",
   "status" : 400,
   "subdomains" : [
      "dynamic.chello.pl"
   ],
   "subnet" : "89.78.0.0/15",
   "tld" : [
      "pl"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 331,003 in 0.061 second(s)

134.147.49.2:5001 (tcp/http) - last seen on 2024-11-07 at 05:32:09 UTC

213.170.136.2:5001 (tcp/http) - last seen on 2024-11-07 at 05:31:33 UTC

140.128.118.75:5001 (tcp/http) - last seen on 2024-11-07 at 05:22:14 UTC

124.61.24.212:5001 (tcp/http) - last seen on 2024-11-07 at 05:22:13 UTC

84.197.7.213:5001 (tcp/http) - last seen on 2024-11-07 at 05:22:11 UTC

58.176.248.182:5001 (tcp/http) - last seen on 2024-11-07 at 05:21:40 UTC

210.125.149.212:5001 (tcp/http) - last seen on 2024-11-07 at 05:21:40 UTC

163.20.23.3:5001 (tcp/http) - last seen on 2024-11-07 at 05:21:40 UTC

124.64.190.213:5001 (tcp/http) - last seen on 2024-11-07 at 05:21:39 UTC

89.79.227.202:5001 (tcp/http) - last seen on 2024-11-07 at 05:21:38 UTC