Cyber Defense Search Engine

IP
134.122.221.215

Network
134.122.192.0/18

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://134.122.221.215:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS152194

Organization
CTG Server Limited

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.17.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
319fe2d86a382384de22f64e99b85097

HTTP Header MD5
73f8d77cffc0c539b1628bc1dd9ca134

HTTP Body MD5
7216499eb7389da1683ff4cdd1548f50

HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 05:38:13 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Server: nginx/1.17.3

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.17.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:38:13.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "7216499eb7389da1683ff4cdd1548f50",
         "bodymmh3" : -894475533,
         "headermd5" : "73f8d77cffc0c539b1628bc1dd9ca134",
         "headermmh3" : -1038786984,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS152194",
   "city" : "Tokyo",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 05:38:13 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nServer: nginx/1.17.3\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "319fe2d86a382384de22f64e99b85097",
   "datammh3" : 150025704,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS152194",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "HK",
      "countryname" : "Hong Kong",
      "domain" : [
         "rackip.com"
      ],
      "isineu" : "false",
      "latitude" : "22.396428",
      "location" : "22.396428,114.109497",
      "longitude" : "114.109497",
      "netname" : "BGP192-JP",
      "organization" : "RACKIP CONSULTANCY PTE. LTD.",
      "subnet" : "134.122.208.0/20"
   },
   "ip" : "134.122.221.215",
   "ipv6" : "false",
   "latitude" : "35.6974",
   "location" : "35.6974,139.7705",
   "longitude" : "139.7705",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CTG Server Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.17.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "134.122.192.0/18",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
196.10.95.144

Network
196.10.94.0/23

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://196.10.95.144:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS24373

Organization
ADC GROUP CO.,LIMITED

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.17.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
319fe2d86a382384de22f64e99b85097

HTTP Header MD5
73f8d77cffc0c539b1628bc1dd9ca134

HTTP Body MD5
7216499eb7389da1683ff4cdd1548f50

HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 05:29:32 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Server: nginx/1.17.3

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.17.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:29:32.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "7216499eb7389da1683ff4cdd1548f50",
         "bodymmh3" : -894475533,
         "headermd5" : "73f8d77cffc0c539b1628bc1dd9ca134",
         "headermmh3" : 1119499698,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS24373",
   "country" : "ZA",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 05:29:32 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nServer: nginx/1.17.3\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "319fe2d86a382384de22f64e99b85097",
   "datammh3" : 150025704,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS24373",
      "continent" : "AF",
      "continentname" : "Africa",
      "country" : "ZA",
      "countryname" : "South Africa",
      "isineu" : "false",
      "latitude" : "-30.559482",
      "location" : "-30.559482,22.937506",
      "longitude" : "22.937506",
      "netname" : "NAM-NET",
      "organization" : "Nampak Management Services",
      "subnet" : "196.10.94.0/23"
   },
   "ip" : "196.10.95.144",
   "ipv6" : "false",
   "latitude" : "-28.9984",
   "location" : "-28.9984,23.9888",
   "longitude" : "23.9888",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ADC GROUP CO.,LIMITED",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.17.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "196.10.94.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
156.238.15.22

Network
156.238.15.0/24

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://156.238.15.22:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS211392

Organization
Dream Cloud Innovation Limited

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.17.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
319fe2d86a382384de22f64e99b85097

HTTP Header MD5
73f8d77cffc0c539b1628bc1dd9ca134

HTTP Body MD5
7216499eb7389da1683ff4cdd1548f50

HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 05:19:53 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Server: nginx/1.17.3

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.17.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:19:53.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "7216499eb7389da1683ff4cdd1548f50",
         "bodymmh3" : -894475533,
         "headermd5" : "73f8d77cffc0c539b1628bc1dd9ca134",
         "headermmh3" : -2049879836,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS211392",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 05:19:53 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nServer: nginx/1.17.3\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "319fe2d86a382384de22f64e99b85097",
   "datammh3" : 150025704,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS211392",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "cloudinnovation.org"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "Dream_Cloud_Limited",
      "organization" : "Dream Cloud Limited",
      "subnet" : "156.238.15.0/24"
   },
   "ip" : "156.238.15.22",
   "ipv6" : "false",
   "latitude" : "35.6897",
   "location" : "35.6897,139.6895",
   "longitude" : "139.6895",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Dream Cloud Innovation Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.17.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "156.238.15.0/24",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
185.234.66.63

Network
185.234.64.0/22

Device

<enterprise field>: device.class

Operating System
Linux Linux Ubuntu

URL

http://185.234.66.63:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS44477

Organization
Stark Industries Solutions Ltd

Protocol
http

Source
datascan
Operating System
Linux Linux Ubuntu

Product
F5 Nginx 1.18.0

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0f607a794922d0e529ea46b57721417d

HTTP Header MD5
73b5b39070f21c93f1b94a75281c1ce0

HTTP Body MD5
e2c7b0e1a897b6683f3a2814cb2f67cd

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 07 Nov 2024 05:10:27 GMT
Content-Type: text/html
Content-Length: 264
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:10:27.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "e2c7b0e1a897b6683f3a2814cb2f67cd",
         "bodymmh3" : -1741231556,
         "headermd5" : "73b5b39070f21c93f1b94a75281c1ce0",
         "headermmh3" : -436203353,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 425
   },
   "asn" : "AS44477",
   "country" : "MD",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 07 Nov 2024 05:10:27 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.18.0 (Ubuntu)</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0f607a794922d0e529ea46b57721417d",
   "datammh3" : 907783723,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS44477",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "TR",
      "countryname" : "Turkey",
      "domain" : [
         "stark-industries.solutions"
      ],
      "isineu" : "false",
      "latitude" : "38.963745",
      "location" : "38.963745,35.243322",
      "longitude" : "35.243322",
      "netname" : "STARK",
      "organization" : "STARK INDUSTRIES SOLUTIONS LTD.",
      "subnet" : "185.234.66.0/24"
   },
   "ip" : "185.234.66.63",
   "ipv6" : "false",
   "latitude" : "47.0188",
   "location" : "47.0188,28.8128",
   "longitude" : "28.8128",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Stark Industries Solutions Ltd",
   "os" : "Linux",
   "osdistribution" : "Ubuntu",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.18.0",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "185.234.64.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
200.68.111.24

Network
200.68.96.0/20

Domain(s)
iplannetworks.net

Device

<enterprise field>: device.class

Operating System
Linux Linux Ubuntu

URL

http://200.68.111.24:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
customer-static-68-111-24.iplannetworks.net

ASN
AS16814

Organization
NSS S.A.

Protocol
http

Source
datascan
Operating System
Linux Linux Ubuntu

Product
F5 Nginx 1.18.0

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0f607a794922d0e529ea46b57721417d

HTTP Header MD5
73b5b39070f21c93f1b94a75281c1ce0

HTTP Body MD5
e2c7b0e1a897b6683f3a2814cb2f67cd

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0 (Ubuntu)
Date: Thu, 07 Nov 2024 05:10:04 GMT
Content-Type: text/html
Content-Length: 264
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.18.0 (Ubuntu)</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:10:04.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "e2c7b0e1a897b6683f3a2814cb2f67cd",
         "bodymmh3" : -1741231556,
         "headermd5" : "73b5b39070f21c93f1b94a75281c1ce0",
         "headermmh3" : 1177357258,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 425
   },
   "asn" : "AS16814",
   "city" : "Buenos Aires",
   "country" : "AR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Thu, 07 Nov 2024 05:10:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.18.0 (Ubuntu)</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0f607a794922d0e529ea46b57721417d",
   "datammh3" : 907783723,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "iplannetworks.net"
   ],
   "geolocus" : {
      "asn" : "AS16814",
      "continent" : "SA",
      "continentname" : "South America",
      "country" : "AR",
      "countryname" : "Argentina",
      "domain" : [
         "iplan.com.ar"
      ],
      "isineu" : "false",
      "latitude" : "-38.416097",
      "location" : "-38.416097,-63.616672",
      "longitude" : "-63.616672",
      "netname" : "AR-SASA106-LACNIC",
      "organization" : "SIF AMERICA S.A.",
      "subnet" : "200.68.96.0/20"
   },
   "host" : [
      "customer-static-68-111-24"
   ],
   "hostname" : [
      "customer-static-68-111-24.iplannetworks.net"
   ],
   "ip" : "200.68.111.24",
   "ipv6" : "false",
   "latitude" : "-34.6049",
   "location" : "-34.6049,-58.4455",
   "longitude" : "-58.4455",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "NSS S.A.",
   "os" : "Linux",
   "osdistribution" : "Ubuntu",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.18.0",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "customer-static-68-111-24.iplannetworks.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "200.68.96.0/20",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
43.138.0.39

Network
43.136.0.0/13

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://43.138.0.39:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS45090

Organization
Shenzhen Tencent Computer Systems Company Limited

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.23.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8f4262e9d39fce1d46cbd86caba71bc9

HTTP Header MD5
c3aa27ed3b42ce6989c1a3b3b1fda80b

HTTP Body MD5
04672d0a98ffcd457c06e5be0e5ee243

HTTP/1.1 400 Bad Request
Server: nginx/1.23.3
Date: Thu, 07 Nov 2024 05:01:17 GMT
Content-Type: text/html
Content-Length: 255
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.23.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:01:18.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "04672d0a98ffcd457c06e5be0e5ee243",
         "bodymmh3" : -1165575734,
         "headermd5" : "c3aa27ed3b42ce6989c1a3b3b1fda80b",
         "headermmh3" : -658699534,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS45090",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.23.3\r\nDate: Thu, 07 Nov 2024 05:01:17 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.23.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "8f4262e9d39fce1d46cbd86caba71bc9",
   "datammh3" : -938381467,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS45090",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "tencent.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "TENCENT-CN",
      "organization" : "Tencent Cloud Computing (Beijing) Co., Ltd",
      "subnet" : "43.138.0.0/15"
   },
   "ip" : "43.138.0.39",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Shenzhen Tencent Computer Systems Company Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.23.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "43.136.0.0/13",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
156.238.15.24

Network
156.238.15.0/24

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://156.238.15.24:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS211392

Organization
Dream Cloud Innovation Limited

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.17.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
319fe2d86a382384de22f64e99b85097

HTTP Header MD5
73f8d77cffc0c539b1628bc1dd9ca134

HTTP Body MD5
7216499eb7389da1683ff4cdd1548f50

HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 04:52:29 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Server: nginx/1.17.3

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.17.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:52:29.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "7216499eb7389da1683ff4cdd1548f50",
         "bodymmh3" : -894475533,
         "headermd5" : "73f8d77cffc0c539b1628bc1dd9ca134",
         "headermmh3" : -760904984,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS211392",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 04:52:29 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nServer: nginx/1.17.3\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "319fe2d86a382384de22f64e99b85097",
   "datammh3" : 150025704,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS211392",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "cloudinnovation.org"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "Dream_Cloud_Limited",
      "organization" : "Dream Cloud Limited",
      "subnet" : "156.238.15.0/24"
   },
   "ip" : "156.238.15.24",
   "ipv6" : "false",
   "latitude" : "35.6897",
   "location" : "35.6897,139.6895",
   "longitude" : "139.6895",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Dream Cloud Innovation Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.17.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "156.238.15.0/24",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
154.83.22.52

Network
154.83.22.0/23

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://154.83.22.52:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS209242

Organization
Cloudflare London, LLC

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.17.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
319fe2d86a382384de22f64e99b85097

HTTP Header MD5
73f8d77cffc0c539b1628bc1dd9ca134

HTTP Body MD5
7216499eb7389da1683ff4cdd1548f50

HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 04:35:42 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Server: nginx/1.17.3

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.17.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:35:42.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "7216499eb7389da1683ff4cdd1548f50",
         "bodymmh3" : -894475533,
         "headermd5" : "73f8d77cffc0c539b1628bc1dd9ca134",
         "headermmh3" : -848405482,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS209242",
   "country" : "SC",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 04:35:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nServer: nginx/1.17.3\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "319fe2d86a382384de22f64e99b85097",
   "datammh3" : 150025704,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS209242",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "cloudinnovation.org"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "Dream_Cloud_Limited",
      "organization" : "Dream Cloud Limited",
      "subnet" : "154.83.22.0/23"
   },
   "ip" : "154.83.22.52",
   "ipv6" : "false",
   "latitude" : "-4.5833",
   "location" : "-4.5833,55.6667",
   "longitude" : "55.6667",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Cloudflare London, LLC",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.17.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "154.83.22.0/23",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
202.61.146.142

Network
202.61.128.0/18

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://202.61.146.142:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS152194

Organization
CTG Server Limited

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.17.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
319fe2d86a382384de22f64e99b85097

HTTP Header MD5
73f8d77cffc0c539b1628bc1dd9ca134

HTTP Body MD5
7216499eb7389da1683ff4cdd1548f50

HTTP/1.1 400 Bad Request
Date: Thu, 07 Nov 2024 04:25:04 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Server: nginx/1.17.3

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.17.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:25:04.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "7216499eb7389da1683ff4cdd1548f50",
         "bodymmh3" : -894475533,
         "headermd5" : "73f8d77cffc0c539b1628bc1dd9ca134",
         "headermmh3" : -40347346,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS152194",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 04:25:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nServer: nginx/1.17.3\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.17.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "319fe2d86a382384de22f64e99b85097",
   "datammh3" : 150025704,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS152194",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "ctgserver.com",
         "rackip.com"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "CTG128-JP",
      "organization" : "RACKIP CONSULTANCY PTE. LTD.",
      "subnet" : "202.61.128.0/18"
   },
   "ip" : "202.61.146.142",
   "ipv6" : "false",
   "latitude" : "1.3673",
   "location" : "1.3673,103.8014",
   "longitude" : "103.8014",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "CTG Server Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.17.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "202.61.128.0/18",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
184.174.34.31

Network
184.174.32.0/21

Domain(s)
contaboserver.net

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://184.174.34.31:789/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
vmi1400311.contaboserver.net

ASN
AS51167

Organization
Contabo GmbH

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 04:16:16 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:16:16.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : 1113451349,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS51167",
   "city" : "D\u00fcsseldorf",
   "country" : "DE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 04:16:16 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "contaboserver.net"
   ],
   "geolocus" : {
      "asn" : "AS51167",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "colocationamerica.com",
         "contabo.net",
         "ipxo.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "IL-845",
      "organization" : "IPXO LLC",
      "subnet" : "184.174.32.0/21"
   },
   "host" : [
      "vmi1400311"
   ],
   "hostname" : [
      "vmi1400311.contaboserver.net"
   ],
   "ip" : "184.174.34.31",
   "ipv6" : "false",
   "latitude" : "51.1878",
   "location" : "51.1878,6.8607",
   "longitude" : "6.8607",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Contabo GmbH",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 789,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "vmi1400311.contaboserver.net"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "184.174.32.0/21",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 2,983 in 0.155 second(s)

134.122.221.215:789 (tcp/http) - last seen on 2024-11-07 at 05:38:13 UTC

196.10.95.144:789 (tcp/http) - last seen on 2024-11-07 at 05:29:32 UTC

156.238.15.22:789 (tcp/http) - last seen on 2024-11-07 at 05:19:53 UTC

185.234.66.63:789 (tcp/http) - last seen on 2024-11-07 at 05:10:27 UTC

200.68.111.24:789 (tcp/http) - last seen on 2024-11-07 at 05:10:04 UTC

43.138.0.39:789 (tcp/http) - last seen on 2024-11-07 at 05:01:18 UTC

156.238.15.24:789 (tcp/http) - last seen on 2024-11-07 at 04:52:29 UTC

154.83.22.52:789 (tcp/http) - last seen on 2024-11-07 at 04:35:42 UTC

202.61.146.142:789 (tcp/http) - last seen on 2024-11-07 at 04:25:04 UTC

184.174.34.31:789 (tcp/http) - last seen on 2024-11-07 at 04:16:16 UTC