Returning 10 result(s) out of 4,783 in 0.027 second(s)

  • 218.22.23.72:6066 (tcp/http) - last seen on 2024-11-07 at 05:16:37 UTC

    • IP
      218.22.23.72
      Network
      218.22.0.0/15
      Domain(s)
      cndata.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://218.22.23.72:6066/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      72.23.22.218.broad.static.hf.ah.cndata.com
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      OpenResty OpenResty
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c1544517de65d9fe2899fddd78cb7c80
      HTTP Header MD5
      dc680f052fb6dfed79e30eb9f2291b11
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Server: openresty
      Date: Thu, 07 Nov 2024 05:16:37 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:16:37.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "dc680f052fb6dfed79e30eb9f2291b11",
               "headermmh3" : -108553610,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 401
         },
         "asn" : "AS4134",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: openresty\r\nDate: Thu, 07 Nov 2024 05:16:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "c1544517de65d9fe2899fddd78cb7c80",
         "datammh3" : 1098694201,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cndata.com"
         ],
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-AH",
            "organization" : "CHINANET Anhui province network",
            "subnet" : "218.22.0.0/15"
         },
         "host" : [
            72
         ],
         "hostname" : [
            "72.23.22.218.broad.static.hf.ah.cndata.com"
         ],
         "ip" : "218.22.23.72",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 6066,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "72.23.22.218.broad.static.hf.ah.cndata.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "218.broad.static.hf.ah.cndata.com",
            "hf.ah.cndata.com",
            "broad.static.hf.ah.cndata.com",
            "static.hf.ah.cndata.com",
            "ah.cndata.com",
            "22.218.broad.static.hf.ah.cndata.com",
            "23.22.218.broad.static.hf.ah.cndata.com"
         ],
         "subnet" : "218.22.0.0/15",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 111.170.45.40:6066 (tcp/http) - last seen on 2024-11-07 at 05:15:28 UTC

    • IP
      111.170.45.40
      Network
      111.170.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://111.170.45.40:6066/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      OpenResty OpenResty
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c1544517de65d9fe2899fddd78cb7c80
      HTTP Header MD5
      dc680f052fb6dfed79e30eb9f2291b11
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Server: openresty
      Date: Thu, 07 Nov 2024 05:15:28 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:15:28.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "dc680f052fb6dfed79e30eb9f2291b11",
               "headermmh3" : -763796126,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 401
         },
         "asn" : "AS4134",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: openresty\r\nDate: Thu, 07 Nov 2024 05:15:28 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "c1544517de65d9fe2899fddd78cb7c80",
         "datammh3" : 1098694201,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "189.cn",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-HB",
            "organization" : "CHINANET HUBEI PROVINCE NETWORK",
            "subnet" : "111.170.0.0/16"
         },
         "ip" : "111.170.45.40",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 6066,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "111.170.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 59.39.0.162:6066 (tcp/http) - last seen on 2024-11-07 at 04:59:06 UTC

    • IP
      59.39.0.162
      Network
      59.32.0.0/13
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://59.39.0.162:6066/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      OpenResty OpenResty
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c1544517de65d9fe2899fddd78cb7c80
      HTTP Header MD5
      dc680f052fb6dfed79e30eb9f2291b11
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Server: openresty
      Date: Thu, 07 Nov 2024 04:59:06 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:59:06.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "dc680f052fb6dfed79e30eb9f2291b11",
               "headermmh3" : -1501150991,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 401
         },
         "asn" : "AS4134",
         "city" : "Dongguan",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: openresty\r\nDate: Thu, 07 Nov 2024 04:59:06 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "c1544517de65d9fe2899fddd78cb7c80",
         "datammh3" : 1098694201,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "163data.com.cn",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-GD",
            "organization" : "CHINANET Guangdong province network",
            "subnet" : "59.32.0.0/13"
         },
         "ip" : "59.39.0.162",
         "ipv6" : "false",
         "latitude" : "23.0177",
         "location" : "23.0177,113.7506",
         "longitude" : "113.7506",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 6066,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "59.32.0.0/13",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 121.12.168.45:6066 (tcp/http) - last seen on 2024-11-07 at 04:50:22 UTC

    • IP
      121.12.168.45
      Network
      121.8.0.0/13
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://121.12.168.45:6066/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      OpenResty OpenResty
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c1544517de65d9fe2899fddd78cb7c80
      HTTP Header MD5
      dc680f052fb6dfed79e30eb9f2291b11
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Server: openresty
      Date: Thu, 07 Nov 2024 04:50:21 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:50:22.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "dc680f052fb6dfed79e30eb9f2291b11",
               "headermmh3" : -2014772149,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 401
         },
         "asn" : "AS4134",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: openresty\r\nDate: Thu, 07 Nov 2024 04:50:21 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "c1544517de65d9fe2899fddd78cb7c80",
         "datammh3" : 1098694201,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-GD",
            "organization" : "CHINANET Guangdong province network",
            "subnet" : "121.12.128.0/18"
         },
         "ip" : "121.12.168.45",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 6066,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "121.8.0.0/13",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 121.32.243.216:6066 (tcp/http) - last seen on 2024-11-07 at 04:49:32 UTC

    • IP
      121.32.243.216
      Network
      121.32.0.0/14
      Device

      <enterprise field>: device.class

      URL

      http://121.32.243.216:6066/ 404

      HTTP Title
      404 Not Found
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      22b98692b27eea466648cecbf73a950c
      HTTP Header MD5
      00afbdb090e13190dca91cb2779d3048
      HTTP Body MD5
      6573f780f2874cd35a9b6c2dd96c8cfe
    • HTTP/1.1 404 Not Found
      Date: Thu, 07 Nov 2024 04:49:27 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      WZWS-RAY: 1249-1730983767.388-waf03fst
      
      184
      <!DOCTYPE html>
      <html>
      <head>
      	<title>404 Not Found</title>
      	<meta charset="utf-8" />
      	<meta name="viewport" content="width=device-width, initial-scale=1">
      </head>
      <body bgcolor="white">
      	<center style="margin-top: 100px;"><h1>404 Not Found</h1></center>
      	<hr>
      	<center>Client IP: <srcip></center>
      	<center>eventID: 1249-1730983767.388-waf03fst reason:</center>
      </body>
      </html>
      
      
      
      
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:49:32.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "6573f780f2874cd35a9b6c2dd96c8cfe",
               "bodymmh3" : -939820781,
               "headermd5" : "00afbdb090e13190dca91cb2779d3048",
               "headermmh3" : 25347807,
               "title" : "404 Not Found"
            },
            "length" : 584
         },
         "asn" : "AS4134",
         "city" : "Foshan",
         "country" : "CN",
         "data" : "HTTP/1.1 404 Not Found\r\nDate: Thu, 07 Nov 2024 04:49:27 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nWZWS-RAY: 1249-1730983767.388-waf03fst\r\n\r\n184\r\n<!DOCTYPE html>\n<html>\n<head>\n\t<title>404 Not Found</title>\n\t<meta charset=\"utf-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n</head>\n<body bgcolor=\"white\">\n\t<center style=\"margin-top: 100px;\"><h1>404 Not Found</h1></center>\n\t<hr>\n\t<center>Client IP: <srcip></center>\n\t<center>eventID: 1249-1730983767.388-waf03fst reason:</center>\n</body>\n</html>\n\n\n\n\n\r\n0\r\n\r\n",
         "datamd5" : "22b98692b27eea466648cecbf73a950c",
         "datammh3" : 1838625121,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-GD",
            "organization" : "CHINANET Guangdong province network",
            "subnet" : "121.32.128.0/17"
         },
         "ip" : "121.32.243.216",
         "ipv6" : "false",
         "latitude" : "23.0261",
         "location" : "23.0261,113.1371",
         "longitude" : "113.1371",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "port" : 6066,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Not Found",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 404,
         "subnet" : "121.32.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 121.226.30.36:6066 (tcp/vnc) - last seen on 2024-11-07 at 04:40:04 UTC

    • IP
      121.226.30.36
      Network
      121.226.0.0/17
      Device

      <enterprise field>: device.class

      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      vnc
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      cd53c84c8ad8bf2a9cdb0d7d627ac811
    • RFB 005.000
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:40:04.000Z",
         "app" : {
            "length" : 12
         },
         "asn" : "AS4134",
         "city" : "Nantong",
         "country" : "CN",
         "data" : "RFB 005.000\n",
         "datamd5" : "cd53c84c8ad8bf2a9cdb0d7d627ac811",
         "datammh3" : 1163213955,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-JS",
            "organization" : "CHINANET jiangsu province network",
            "subnet" : "121.226.0.0/17"
         },
         "ip" : "121.226.30.36",
         "ipv6" : "false",
         "latitude" : "32.0264",
         "location" : "32.0264,120.8647",
         "longitude" : "120.8647",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "port" : 6066,
         "protocol" : "vnc",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "subnet" : "121.226.0.0/17",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 61.147.213.48:6066 (tcp/http) - last seen on 2024-11-07 at 04:40:04 UTC

    • IP
      61.147.213.48
      Network
      61.147.208.0/21
      Device

      <enterprise field>: device.class

      URL

      http://61.147.213.48:6066/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e1ca5198d8a66c9ede292ffbfd96c9e7
      HTTP Header MD5
      d87aadeb1ac6646b68abff12f2bb92c5
      HTTP Body MD5
      801d9fc070f3bd64150c68f0c6bfa99a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 04:40:04 GMT
      Content-Type: text/html
      Content-Length: 2425
      Connection: close
      x-ws-request-id: 672c44a4_PS-NTG-014eQ157_27726-29194
      
      <!DOCTYPE html>
      <html>
      	<head>
      		<meta charset="utf-8">
      		<meta http-equiv="X-UA-Compatible" content="IE=edge">
      		<meta name="viewport" content="width=device-width, initial-scale=1">
      		<title>400 Bad Request</title>
      		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
      	</head>
      	<body>
      		<div id="p" class="P">
      			<div class="K">400</div>
      			<div class="O I">Bad Request</div>
      			<p class="J A L">Error Times: Thu, 07 Nov 2024 04:40:04 GMT
      				<br>
      				<span class="F">IP: <srcip></span>Node information: PS-NTG-014eQ157
      				<br>URL: http://<ip>:6066/
      				<br>Request-Id: 672c44a4_PS-NTG-014eQ157_27726-29194
      				<br>
      				<br>Check:
      				<span class="C G" onclick="s(0)">Details</span></p>
      		</div>
      		<div id="d" class="hide_me P H">
      			<div class="K">ERROR</div>
      			<p class="O I">"The Requested URL could not be retrieved</p>
      			<div class="O">
      				<div>While trying to retrieve the URL:</div>
      				<pre class="B G">http://<ip>:6066/</pre></div>
      			<div class="M">
      				<span>The following error was encountered:</span>
      				<ul class="E">
      					<li class="D G">Invalid Request</li></ul>
      			</div>
      			<div class="M">
      				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
      				<ul class="E G">
      					<li class="D">Missing or unknown request method</li>
      					<li class="D">Missing URL</li>
      					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
      					<li class="D">Request is too large</li>
      					<li class="D">Content-Length missing for POST or PUT requests</li>
      					<li class="D">Illegal character in hostname;underscores are not allowed</li>
      					<li class="D">Range Invalid</li></ul>
      			</div>
      			<a class="N C" href="#" onclick="s(1)">return</a></div>
      		<script type="text/javascript">function e(i) {
      				return document.getElementById(i);
      			}
      			function d(i, t) {
      				e(i).style.display = (t ? 'block': 'none');
      			}
      			function s(e) {
      				d('p', e);
      				d('d', !e);
      			}</script>
      	</body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:40:04.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "801d9fc070f3bd64150c68f0c6bfa99a",
               "bodymmh3" : 65327801,
               "headermd5" : "d87aadeb1ac6646b68abff12f2bb92c5",
               "headermmh3" : -1859439769,
               "title" : "400 Bad Request"
            },
            "length" : 2602
         },
         "asn" : "AS4134",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 04:40:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 2425\r\nConnection: close\r\nx-ws-request-id: 672c44a4_PS-NTG-014eQ157_27726-29194\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 04:40:04 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-NTG-014eQ157\n\t\t\t\t<br>URL: http://<ip>:6066/\n\t\t\t\t<br>Request-Id: 672c44a4_PS-NTG-014eQ157_27726-29194\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:6066/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
         "datamd5" : "e1ca5198d8a66c9ede292ffbfd96c9e7",
         "datammh3" : 480631823,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-JS",
            "organization" : "CHINANET jiangsu province network",
            "subnet" : "61.147.208.0/21"
         },
         "ip" : "61.147.213.48",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "port" : 6066,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "61.147.208.0/21",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 180.121.77.208:6066 (tcp/vnc) - last seen on 2024-11-07 at 04:14:12 UTC

    • IP
      180.121.77.208
      Network
      180.121.64.0/20
      Device

      <enterprise field>: device.class

      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      vnc
      Source
      datascan
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      cd53c84c8ad8bf2a9cdb0d7d627ac811
    • RFB 005.000
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:14:12.000Z",
         "app" : {
            "length" : 12
         },
         "asn" : "AS4134",
         "country" : "CN",
         "data" : "RFB 005.000\n",
         "datamd5" : "cd53c84c8ad8bf2a9cdb0d7d627ac811",
         "datammh3" : 1163213955,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163.com",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-JS",
            "organization" : "Chinanet Jiangsu Province Network",
            "subnet" : "180.121.64.0/20"
         },
         "ip" : "180.121.77.208",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "port" : 6066,
         "protocol" : "vnc",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "subnet" : "180.121.64.0/20",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp"
      }
      
  • 222.246.139.177:6066 (tcp/http) - last seen on 2024-11-07 at 04:14:09 UTC

    • IP
      222.246.139.177
      Network
      222.246.136.0/22
      Device

      <enterprise field>: device.class

      URL

      http://222.246.139.177:6066/ 400

      HTTP Title
      400 Bad Request
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      52ee0a8160cd2516a727b8d8e6d2c494
      HTTP Header MD5
      d926f9fd11f6d8bc32835832bb3bf896
      HTTP Body MD5
      2ca49b5f0abc81f7faff1e0bef6d5d9b
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 04:14:09 GMT
      Content-Type: text/html
      Content-Length: 2428
      Connection: close
      x-ws-request-id: 672c3e91_PS-CSX-01CvJ183_6867-37479
      
      <!DOCTYPE html>
      <html>
      	<head>
      		<meta charset="utf-8">
      		<meta http-equiv="X-UA-Compatible" content="IE=edge">
      		<meta name="viewport" content="width=device-width, initial-scale=1">
      		<title>400 Bad Request</title>
      		<style type="text/css">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>
      	</head>
      	<body>
      		<div id="p" class="P">
      			<div class="K">400</div>
      			<div class="O I">Bad Request</div>
      			<p class="J A L">Error Times: Thu, 07 Nov 2024 04:14:09 GMT
      				<br>
      				<span class="F">IP: <srcip></span>Node information: PS-CSX-01CvJ183
      				<br>URL: http://<ip>:6066/
      				<br>Request-Id: 672c3e91_PS-CSX-01CvJ183_6867-37479
      				<br>
      				<br>Check:
      				<span class="C G" onclick="s(0)">Details</span></p>
      		</div>
      		<div id="d" class="hide_me P H">
      			<div class="K">ERROR</div>
      			<p class="O I">"The Requested URL could not be retrieved</p>
      			<div class="O">
      				<div>While trying to retrieve the URL:</div>
      				<pre class="B G">http://<ip>:6066/</pre></div>
      			<div class="M">
      				<span>The following error was encountered:</span>
      				<ul class="E">
      					<li class="D G">Invalid Request</li></ul>
      			</div>
      			<div class="M">
      				<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>
      				<ul class="E G">
      					<li class="D">Missing or unknown request method</li>
      					<li class="D">Missing URL</li>
      					<li class="D">Missing HTTP Identifier (HTTP/1.0)</li>
      					<li class="D">Request is too large</li>
      					<li class="D">Content-Length missing for POST or PUT requests</li>
      					<li class="D">Illegal character in hostname;underscores are not allowed</li>
      					<li class="D">Range Invalid</li></ul>
      			</div>
      			<a class="N C" href="#" onclick="s(1)">return</a></div>
      		<script type="text/javascript">function e(i) {
      				return document.getElementById(i);
      			}
      			function d(i, t) {
      				e(i).style.display = (t ? 'block': 'none');
      			}
      			function s(e) {
      				d('p', e);
      				d('d', !e);
      			}</script>
      	</body>
      </html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:14:09.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "2ca49b5f0abc81f7faff1e0bef6d5d9b",
               "bodymmh3" : 1894952272,
               "headermd5" : "d926f9fd11f6d8bc32835832bb3bf896",
               "headermmh3" : -2060687950,
               "title" : "400 Bad Request"
            },
            "length" : 2600
         },
         "asn" : "AS4134",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 04:14:09 GMT\r\nContent-Type: text/html\r\nContent-Length: 2428\r\nConnection: close\r\nx-ws-request-id: 672c3e91_PS-CSX-01CvJ183_6867-37479\r\n\r\n<!DOCTYPE html>\n<html>\n\t<head>\n\t\t<meta charset=\"utf-8\">\n\t\t<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\">\n\t\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n\t\t<title>400 Bad Request</title>\n\t\t<style type=\"text/css\">body{margin:5% auto 0 auto;padding:0 18px}.P{margin:0 22%}.O{margin-top:20px}.N{margin-top:10px}.M{margin:10px 0 30px 0}.L{margin-bottom:60px}.K{font-size:25px;color:#F90}.J{font-size:14px}.I{font-size:20px}.H{font-size:18px}.G{font-size:16px}.F{width:230px;float:left}.E{margin-top:5px}.D{margin:8px 0 0 -20px}.C{color:#3CF;cursor:pointer}.B{color:#909090;margin-top:15px}.A{line-height:30px}.hide_me{display:none}</style>\n\t</head>\n\t<body>\n\t\t<div id=\"p\" class=\"P\">\n\t\t\t<div class=\"K\">400</div>\n\t\t\t<div class=\"O I\">Bad Request</div>\n\t\t\t<p class=\"J A L\">Error Times: Thu, 07 Nov 2024 04:14:09 GMT\n\t\t\t\t<br>\n\t\t\t\t<span class=\"F\">IP: <srcip></span>Node information: PS-CSX-01CvJ183\n\t\t\t\t<br>URL: http://<ip>:6066/\n\t\t\t\t<br>Request-Id: 672c3e91_PS-CSX-01CvJ183_6867-37479\n\t\t\t\t<br>\n\t\t\t\t<br>Check:\n\t\t\t\t<span class=\"C G\" onclick=\"s(0)\">Details</span></p>\n\t\t</div>\n\t\t<div id=\"d\" class=\"hide_me P H\">\n\t\t\t<div class=\"K\">ERROR</div>\n\t\t\t<p class=\"O I\">\"The Requested URL could not be retrieved</p>\n\t\t\t<div class=\"O\">\n\t\t\t\t<div>While trying to retrieve the URL:</div>\n\t\t\t\t<pre class=\"B G\">http://<ip>:6066/</pre></div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>The following error was encountered:</span>\n\t\t\t\t<ul class=\"E\">\n\t\t\t\t\t<li class=\"D G\">Invalid Request</li></ul>\n\t\t\t</div>\n\t\t\t<div class=\"M\">\n\t\t\t\t<span>This request could not be forwarded to the origin server or to any higher level cache servers. The most likely cause for this error is that:</span>\n\t\t\t\t<ul class=\"E G\">\n\t\t\t\t\t<li class=\"D\">Missing or unknown request method</li>\n\t\t\t\t\t<li class=\"D\">Missing URL</li>\n\t\t\t\t\t<li class=\"D\">Missing HTTP Identifier (HTTP/1.0)</li>\n\t\t\t\t\t<li class=\"D\">Request is too large</li>\n\t\t\t\t\t<li class=\"D\">Content-Length missing for POST or PUT requests</li>\n\t\t\t\t\t<li class=\"D\">Illegal character in hostname;underscores are not allowed</li>\n\t\t\t\t\t<li class=\"D\">Range Invalid</li></ul>\n\t\t\t</div>\n\t\t\t<a class=\"N C\" href=\"#\" onclick=\"s(1)\">return</a></div>\n\t\t<script type=\"text/javascript\">function e(i) {\n\t\t\t\treturn document.getElementById(i);\n\t\t\t}\n\t\t\tfunction d(i, t) {\n\t\t\t\te(i).style.display = (t ? 'block': 'none');\n\t\t\t}\n\t\t\tfunction s(e) {\n\t\t\t\td('p', e);\n\t\t\t\td('d', !e);\n\t\t\t}</script>\n\t</body>\n</html>",
         "datamd5" : "52ee0a8160cd2516a727b8d8e6d2c494",
         "datammh3" : -1823699245,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "189.cn",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-HN",
            "organization" : "CHINANET Hunan province network",
            "subnet" : "222.246.136.0/22"
         },
         "ip" : "222.246.139.177",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "port" : 6066,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "222.246.136.0/22",
         "tag" : "<enterprise field>: tag",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 123.184.55.28:6066 (tcp/http) - last seen on 2024-11-07 at 04:05:48 UTC

    • IP
      123.184.55.28
      Network
      123.184.0.0/17
      Domain(s)
      163data.com.cn
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://123.184.55.28:6066/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      28.55.184.123.broad.sy.ln.dynamic.163data.com.cn
      ASN
      AS4134
      Organization
      Chinanet
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      OpenResty OpenResty
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c1544517de65d9fe2899fddd78cb7c80
      HTTP Header MD5
      dc680f052fb6dfed79e30eb9f2291b11
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Server: openresty
      Date: Thu, 07 Nov 2024 04:05:48 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T04:05:48.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "dc680f052fb6dfed79e30eb9f2291b11",
               "headermmh3" : -947609117,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 401
         },
         "asn" : "AS4134",
         "country" : "CN",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: openresty\r\nDate: Thu, 07 Nov 2024 04:05:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "c1544517de65d9fe2899fddd78cb7c80",
         "datammh3" : 1098694201,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "163data.com.cn"
         ],
         "geolocus" : {
            "asn" : "AS4134",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "163data.com.cn",
               "chinatelecom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "CHINANET-LN",
            "organization" : "CHINANET liaoning province network",
            "subnet" : "123.184.0.0/17"
         },
         "host" : [
            28
         ],
         "hostname" : [
            "28.55.184.123.broad.sy.ln.dynamic.163data.com.cn"
         ],
         "ip" : "123.184.55.28",
         "ipv6" : "false",
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Chinanet",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 6066,
         "product" : "OpenResty",
         "productvendor" : "OpenResty",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "28.55.184.123.broad.sy.ln.dynamic.163data.com.cn"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "broad.sy.ln.dynamic.163data.com.cn",
            "184.123.broad.sy.ln.dynamic.163data.com.cn",
            "123.broad.sy.ln.dynamic.163data.com.cn",
            "ln.dynamic.163data.com.cn",
            "55.184.123.broad.sy.ln.dynamic.163data.com.cn",
            "sy.ln.dynamic.163data.com.cn",
            "dynamic.163data.com.cn"
         ],
         "subnet" : "123.184.0.0/17",
         "tld" : [
            "com.cn"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }