Cyber Defense Search Engine

datascan ctl threatlist sniffer vulnscan riskscan

IP
120.197.148.234

Network
120.197.144.0/20

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://120.197.148.234:8200/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

ASN
AS9808

Organization
China Mobile Communications Group Co., Ltd.

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.25.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
07b95786a40c0c95aaba185c7dd486f0

HTTP Header MD5
c900a8df9ebd4605f30685948c4b670f

HTTP Body MD5
6c81822eabca0945fbde2143368ab254

HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Date: Thu, 07 Nov 2024 03:37:04 GMT
Content-Type: text/html
Content-Length: 255
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.25.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:37:06.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6c81822eabca0945fbde2143368ab254",
         "bodymmh3" : 1266048030,
         "headermd5" : "c900a8df9ebd4605f30685948c4b670f",
         "headermmh3" : 1438017116,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS9808",
   "country" : "CN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.25.3\r\nDate: Thu, 07 Nov 2024 03:37:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.25.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "07b95786a40c0c95aaba185c7dd486f0",
   "datammh3" : -273275138,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS9808",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "CN",
      "countryname" : "China",
      "domain" : [
         "chinamobile.com"
      ],
      "isineu" : "false",
      "latitude" : "35.86166",
      "location" : "35.86166,104.195397",
      "longitude" : "104.195397",
      "netname" : "CMNET",
      "organization" : "China Mobile",
      "subnet" : "120.197.144.0/20"
   },
   "ip" : "120.197.148.234",
   "ipv6" : "false",
   "latitude" : "34.7732",
   "location" : "34.7732,113.7220",
   "longitude" : "113.7220",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "China Mobile Communications Group Co., Ltd.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8200,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.25.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "120.197.144.0/20",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
91.234.124.104

Network
91.234.124.0/22

Domain(s)
krucznet.com.pl

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://91.234.124.104:8200/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
104.124.234.91.ip4.krucznet.com.pl

ASN
AS198397

Organization
KRUCZNET Sp. z o.o.

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.25.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
07b95786a40c0c95aaba185c7dd486f0

HTTP Header MD5
c900a8df9ebd4605f30685948c4b670f

HTTP Body MD5
6c81822eabca0945fbde2143368ab254

HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Date: Sat, 19 Oct 2024 12:19:37 GMT
Content-Type: text/html
Content-Length: 255
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.25.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-10-19T12:19:38.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "6c81822eabca0945fbde2143368ab254",
         "bodymmh3" : 1266048030,
         "headermd5" : "c900a8df9ebd4605f30685948c4b670f",
         "headermmh3" : -211487242,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS198397",
   "city" : "Gliwice",
   "country" : "PL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.25.3\r\nDate: Sat, 19 Oct 2024 12:19:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.25.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "07b95786a40c0c95aaba185c7dd486f0",
   "datammh3" : -273275138,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "krucznet.com.pl"
   ],
   "host" : [
      104
   ],
   "hostname" : [
      "104.124.234.91.ip4.krucznet.com.pl"
   ],
   "ip" : "91.234.124.104",
   "ipv6" : "false",
   "latitude" : "50.3064",
   "location" : "50.3064,18.6380",
   "longitude" : "18.6380",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "KRUCZNET Sp. z o.o.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8200,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.25.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "104.124.234.91.ip4.krucznet.com.pl"
   ],
   "seen_date" : "2024-10-19",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "234.91.ip4.krucznet.com.pl",
      "91.ip4.krucznet.com.pl",
      "124.234.91.ip4.krucznet.com.pl",
      "ip4.krucznet.com.pl"
   ],
   "subnet" : "91.234.124.0/22",
   "tld" : [
      "com.pl"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 2 result(s) out of 2 in 0.192 second(s)

120.197.148.234:8200 (tcp/http) - last seen on 2024-11-07 at 03:37:06 UTC

91.234.124.104:8200 (tcp/http) - last seen on 2024-10-19 at 12:19:38 UTC