ONYPHE
datascan ctl threatlist sniffer vulnscan riskscan

Returning 5 result(s) out of 5 in 0.024 second(s)

  • 120.197.148.234:8200 (tcp/http) - last seen on 2024-11-07 at 03:37:06 UTC

    • IP
      120.197.148.234
      Network
      120.197.144.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://120.197.148.234:8200/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS9808
      Organization
      China Mobile Communications Group Co., Ltd.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.25.3
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      07b95786a40c0c95aaba185c7dd486f0
      HTTP Header MD5
      c900a8df9ebd4605f30685948c4b670f
      HTTP Body MD5
      6c81822eabca0945fbde2143368ab254 
    • HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Date: Thu, 07 Nov 2024 03:37:04 GMT
Content-Type: text/html
Content-Length: 255
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.25.3</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:37:06.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6c81822eabca0945fbde2143368ab254",
         "bodymmh3" : 1266048030,
         "headermd5" : "c900a8df9ebd4605f30685948c4b670f",
         "headermmh3" : 1438017116,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS9808",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.25.3\r\nDate: Thu, 07 Nov 2024 03:37:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.25.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "07b95786a40c0c95aaba185c7dd486f0",
   "datammh3" : -273275138,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS9808",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinamobile.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CMNET",
      "organization" : "China Mobile",
      "subnet" : "120.197.144.0/20"
   },
   "ip" : "120.197.148.234",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Mobile Communications Group Co., Ltd.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8200,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.25.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "120.197.144.0/20",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 108.72.231.43:8200 (tcp/http) - last seen on 2024-10-28 at 07:14:06 UTC

    • IP
      108.72.231.43
      Network
      108.72.0.0/14
      Domain(s)
      sbcglobal.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://108.72.231.43:8200/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      108-72-231-43.lightspeed.brhmal.sbcglobal.net
      ASN
      AS7018
      Organization
      ATT-INTERNET4
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.25.3
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b952180c6a638c0ab677b3325659981a
      HTTP Header MD5
      d4e08c94ab1c3c1050d436fcc58da03c
      HTTP Body MD5
      6c81822eabca0945fbde2143368ab254 
    • HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Date: Mon, 28 Oct 2024 07:14:05 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Strict-Transport-Security: max-age=63072000

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.25.3</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-10-28T07:14:06.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6c81822eabca0945fbde2143368ab254",
         "bodymmh3" : 1266048030,
         "headermd5" : "d4e08c94ab1c3c1050d436fcc58da03c",
         "headermmh3" : 1135168761,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 452
   },
   "asn" : "AS7018",
   "city" : "Calera",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.25.3\r\nDate: Mon, 28 Oct 2024 07:14:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.25.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "b952180c6a638c0ab677b3325659981a",
   "datammh3" : -1966814250,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "sbcglobal.net"
   ],
   "geolocus" : {
      "asn" : "AS7018",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "att.com",
         "att.net",
         "sbcglobal.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "SBCIS-SBIS",
      "organization" : "AT&T Corp.",
      "subnet" : "108.72.0.0/14"
   },
   "host" : [
      "108-72-231-43"
   ],
   "hostname" : [
      "108-72-231-43.lightspeed.brhmal.sbcglobal.net"
   ],
   "ip" : "108.72.231.43",
   "ipv6" : "false",
   "latitude" : "33.1063",
   "location" : "33.1063,-86.7583",
   "longitude" : "-86.7583",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ATT-INTERNET4",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8200,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.25.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "108-72-231-43.lightspeed.brhmal.sbcglobal.net"
   ],
   "seen_date" : "2024-10-28",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "lightspeed.brhmal.sbcglobal.net",
      "brhmal.sbcglobal.net"
   ],
   "subnet" : "108.72.0.0/14",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 114.134.166.148:8200 (tcp/http) - last seen on 2024-10-19 at 16:43:06 UTC

    • IP
      114.134.166.148
      Network
      114.134.160.0/20
      Domain(s)
      nztechnologygroup.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://114.134.166.148:8200/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      114-134-166-148.static.nztechnologygroup.com
      ASN
      AS45280
      Organization
      New Zealand Technology Group Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.25.3
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0605de4808f42411ce75a8d9bb1677ee
      HTTP Header MD5
      d5074ba768a6a5487256f81088bc3676
      HTTP Body MD5
      6c81822eabca0945fbde2143368ab254 
    • HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Date: Sat, 19 Oct 2024 16:43:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 255
Connection: close
Strict-Transport-Security: max-age=31536000; includeSubDomains

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.25.3</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-10-19T16:43:06.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6c81822eabca0945fbde2143368ab254",
         "bodymmh3" : 930879268,
         "headermd5" : "d5074ba768a6a5487256f81088bc3676",
         "headermmh3" : 65180909,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 486
   },
   "asn" : "AS45280",
   "city" : "Auckland",
   "country" : "NZ",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.25.3\r\nDate: Sat, 19 Oct 2024 16:43:06 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 255\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.25.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0605de4808f42411ce75a8d9bb1677ee",
   "datammh3" : 732613524,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "nztechnologygroup.com"
   ],
   "geolocus" : {
      "asn" : "AS45280",
      "continent" : "OC",
      "continentname" : "Oceania",
      "country" : "NZ",
      "countryname" : "New Zealand",
      "domain" : [
         "nztechnologygroup.com"
      ],
      "isineu" : "false",
      "latitude" : "-40.900557",
      "location" : "-40.900557,174.885971",
      "longitude" : "174.885971",
      "netname" : "NZTECHNOLOGYGROUPLTD-NZ",
      "organization" : "New Zealand Technology Group Limited",
      "subnet" : "114.134.160.0/20"
   },
   "host" : [
      "114-134-166-148"
   ],
   "hostname" : [
      "114-134-166-148.static.nztechnologygroup.com"
   ],
   "ip" : "114.134.166.148",
   "ipv6" : "false",
   "latitude" : "-36.8506",
   "location" : "-36.8506,174.7679",
   "longitude" : "174.7679",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "New Zealand Technology Group Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8200,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.25.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "114-134-166-148.static.nztechnologygroup.com"
   ],
   "seen_date" : "2024-10-19",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "static.nztechnologygroup.com"
   ],
   "subnet" : "114.134.160.0/20",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 91.234.124.104:8200 (tcp/http) - last seen on 2024-10-19 at 12:19:38 UTC

    • IP
      91.234.124.104
      Network
      91.234.124.0/22
      Domain(s)
      krucznet.com.pl
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://91.234.124.104:8200/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      104.124.234.91.ip4.krucznet.com.pl
      ASN
      AS198397
      Organization
      KRUCZNET Sp. z o.o.
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.25.3
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      07b95786a40c0c95aaba185c7dd486f0
      HTTP Header MD5
      c900a8df9ebd4605f30685948c4b670f
      HTTP Body MD5
      6c81822eabca0945fbde2143368ab254 
    • HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Date: Sat, 19 Oct 2024 12:19:37 GMT
Content-Type: text/html
Content-Length: 255
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.25.3</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-10-19T12:19:38.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6c81822eabca0945fbde2143368ab254",
         "bodymmh3" : 1266048030,
         "headermd5" : "c900a8df9ebd4605f30685948c4b670f",
         "headermmh3" : -211487242,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS198397",
   "city" : "Gliwice",
   "country" : "PL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.25.3\r\nDate: Sat, 19 Oct 2024 12:19:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.25.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "07b95786a40c0c95aaba185c7dd486f0",
   "datammh3" : -273275138,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "krucznet.com.pl"
   ],
   "host" : [
      104
   ],
   "hostname" : [
      "104.124.234.91.ip4.krucznet.com.pl"
   ],
   "ip" : "91.234.124.104",
   "ipv6" : "false",
   "latitude" : "50.3064",
   "location" : "50.3064,18.6380",
   "longitude" : "18.6380",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "KRUCZNET Sp. z o.o.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8200,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.25.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "104.124.234.91.ip4.krucznet.com.pl"
   ],
   "seen_date" : "2024-10-19",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "234.91.ip4.krucznet.com.pl",
      "91.ip4.krucznet.com.pl",
      "124.234.91.ip4.krucznet.com.pl",
      "ip4.krucznet.com.pl"
   ],
   "subnet" : "91.234.124.0/22",
   "tld" : [
      "com.pl"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

  • 108.72.231.43:8200 (tcp/http) - last seen on 2024-10-14 at 20:00:15 UTC

    • IP
      108.72.231.43
      Network
      108.72.0.0/14
      Domain(s)
      sbcglobal.net
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://108.72.231.43:8200/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      108-72-231-43.lightspeed.brhmal.sbcglobal.net
      ASN
      AS7018
      Organization
      ATT-INTERNET4
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.25.3
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b952180c6a638c0ab677b3325659981a
      HTTP Header MD5
      d4e08c94ab1c3c1050d436fcc58da03c
      HTTP Body MD5
      6c81822eabca0945fbde2143368ab254 
    • HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Date: Mon, 14 Oct 2024 20:00:14 GMT
Content-Type: text/html
Content-Length: 255
Connection: close
Strict-Transport-Security: max-age=63072000

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.25.3</center>
</body>
</html>

    • {
   "@category" : "datascan",
   "@timestamp" : "2024-10-14T20:00:15.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6c81822eabca0945fbde2143368ab254",
         "bodymmh3" : 1266048030,
         "headermd5" : "d4e08c94ab1c3c1050d436fcc58da03c",
         "headermmh3" : 1028923677,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 452
   },
   "asn" : "AS7018",
   "city" : "Calera",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.25.3\r\nDate: Mon, 14 Oct 2024 20:00:14 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\nStrict-Transport-Security: max-age=63072000\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.25.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "b952180c6a638c0ab677b3325659981a",
   "datammh3" : -1966814250,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "sbcglobal.net"
   ],
   "geolocus" : {
      "asn" : "AS7018",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "att.com",
         "att.net",
         "sbcglobal.net"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "SBCIS-SBIS",
      "organization" : "AT&T Corp.",
      "subnet" : "108.72.0.0/14"
   },
   "host" : [
      "108-72-231-43"
   ],
   "hostname" : [
      "108-72-231-43.lightspeed.brhmal.sbcglobal.net"
   ],
   "ip" : "108.72.231.43",
   "ipv6" : "false",
   "latitude" : "33.1063",
   "location" : "33.1063,-86.7583",
   "longitude" : "-86.7583",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "ATT-INTERNET4",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8200,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.25.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "108-72-231-43.lightspeed.brhmal.sbcglobal.net"
   ],
   "seen_date" : "2024-10-14",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "lightspeed.brhmal.sbcglobal.net",
      "brhmal.sbcglobal.net"
   ],
   "subnet" : "108.72.0.0/14",
   "tld" : [
      "net"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}