Returning 10 result(s) out of 3,243 in 0.370 second(s)

  • 208.83.236.104:8331 (tcp/http) - last seen on 2024-11-07 at 13:23:21 UTC

    • IP
      208.83.236.104
      Network
      208.83.232.0/21
      Domain(s)
      vultrusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://208.83.236.104:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      208.83.236.104.vultrusercontent.com
      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 13:23:20 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T13:23:21.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -24829591,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS20473",
         "city" : "Honolulu",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 13:23:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "vultrusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS20473",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "constant.com",
               "vultr.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "NET-208-83-232-0-23",
            "organization" : "Vultr Holdings, LLC",
            "subnet" : "208.83.232.0/21"
         },
         "host" : [
            208
         ],
         "hostname" : [
            "208.83.236.104.vultrusercontent.com"
         ],
         "ip" : "208.83.236.104",
         "ipv6" : "false",
         "latitude" : "21.3513",
         "location" : "21.3513,-157.8725",
         "longitude" : "-157.8725",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-VULTR",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "208.83.236.104.vultrusercontent.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "104.vultrusercontent.com",
            "236.104.vultrusercontent.com",
            "83.236.104.vultrusercontent.com"
         ],
         "subnet" : "208.83.232.0/21",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 187.151.124.103:8331 (tcp/http) - last seen on 2024-11-07 at 13:16:36 UTC

    • IP
      187.151.124.103
      Network
      187.151.64.0/18
      Domain(s)
      prod-infinitum.com.mx
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://187.151.124.103:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      dsl-187-151-124-103-dyn.prod-infinitum.com.mx
      ASN
      AS8151
      Organization
      UNINET
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.8.0
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      254d1978020ac1861015ea4fc0c000b5
      HTTP Header MD5
      307329638a66444a5ae1ca27840902b4
      HTTP Body MD5
      ddf8b74fc33324f84c8ee7a83a23989a
    • HTTP/1.1 400 Bad Request
      Date: Thu, 07 Nov 2024 13:16:34 GMT
      Content-Type: text/html
      Content-Length: 270
      Connection: close
      Server: VVTK-HTTP-Server
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.8.0</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T13:16:36.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ddf8b74fc33324f84c8ee7a83a23989a",
               "bodymmh3" : -1651037025,
               "headermd5" : "307329638a66444a5ae1ca27840902b4",
               "headermmh3" : 1024798152,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 426
         },
         "asn" : "AS8151",
         "city" : "Huauchinango",
         "country" : "MX",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 13:16:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 270\r\nConnection: close\r\nServer: VVTK-HTTP-Server\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.8.0</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "254d1978020ac1861015ea4fc0c000b5",
         "datammh3" : -1852928638,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "prod-infinitum.com.mx"
         ],
         "geolocus" : {
            "asn" : "AS8151",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "MX",
            "countryname" : "Mexico",
            "domain" : [
               "prod-infinitum.com.mx",
               "uninet.com.mx"
            ],
            "isineu" : "false",
            "latitude" : "23.634501",
            "location" : "23.634501,-102.552784",
            "longitude" : "-102.552784",
            "netname" : "MX-USCV4-LACNIC",
            "organization" : "UNINET",
            "subnet" : "187.151.64.0/18"
         },
         "host" : [
            "dsl-187-151-124-103-dyn"
         ],
         "hostname" : [
            "dsl-187-151-124-103-dyn.prod-infinitum.com.mx"
         ],
         "ip" : "187.151.124.103",
         "ipv6" : "false",
         "latitude" : "20.1972",
         "location" : "20.1972,-98.0919",
         "longitude" : "-98.0919",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "UNINET",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.8.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "dsl-187-151-124-103-dyn.prod-infinitum.com.mx"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "187.151.64.0/18",
         "tld" : [
            "com.mx"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 67.211.66.180:8331 (tcp/http) - last seen on 2024-11-07 at 13:15:59 UTC

    • IP
      67.211.66.180
      Network
      67.211.64.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://67.211.66.180:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS59371
      Organization
      Dimension Network & Communication Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1550f60aea20c6f28ffe1512d9378c73
      HTTP Header MD5
      87f3e48a3bc7d54241527e87773372b9
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Date: Thu, 07 Nov 2024 13:15:58 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      Server: cdn-ddos-cc
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T13:15:59.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "87f3e48a3bc7d54241527e87773372b9",
               "headermmh3" : -870813713,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 403
         },
         "asn" : "AS59371",
         "country" : "HK",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 13:15:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: cdn-ddos-cc\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "1550f60aea20c6f28ffe1512d9378c73",
         "datammh3" : 1309920415,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS59371",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "dimensionet.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "DNC-HK",
            "organization" : "Dimension Network & Communication Limited",
            "subnet" : "67.211.64.0/20"
         },
         "ip" : "67.211.66.180",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Dimension Network & Communication Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "67.211.64.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 192.248.166.91:8331 (tcp/http) - last seen on 2024-11-07 at 13:12:06 UTC

    • IP
      192.248.166.91
      Network
      192.248.128.0/18
      Domain(s)
      vultrusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://192.248.166.91:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      192.248.166.91.vultrusercontent.com
      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 13:12:06 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T13:12:06.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 1205173511,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS20473",
         "city" : "Whitechapel",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 13:12:06 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "vultrusercontent.com"
         ],
         "host" : [
            192
         ],
         "hostname" : [
            "192.248.166.91.vultrusercontent.com"
         ],
         "ip" : "192.248.166.91",
         "ipv6" : "false",
         "latitude" : "51.5026",
         "location" : "51.5026,-0.0668",
         "longitude" : "-0.0668",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-VULTR",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "192.248.166.91.vultrusercontent.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "166.91.vultrusercontent.com",
            "248.166.91.vultrusercontent.com",
            "91.vultrusercontent.com"
         ],
         "subnet" : "192.248.128.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 172.232.184.130:8331 (tcp/http) - last seen on 2024-11-07 at 13:11:37 UTC

    • IP
      172.232.184.130
      Network
      172.232.128.0/17
      Domain(s)
      linodeusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://172.232.184.130:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      172-232-184-130.ip.linodeusercontent.com
      ASN
      AS63949
      Organization
      Akamai Connected Cloud
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 13:11:36 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T13:11:37.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -744322148,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS63949",
         "city" : "Tukwila",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 13:11:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "linodeusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS63949",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "akamai.com",
               "linode.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "LINODE",
            "organization" : "Linode",
            "subnet" : "172.232.160.0/19"
         },
         "host" : [
            "172-232-184-130"
         ],
         "hostname" : [
            "172-232-184-130.ip.linodeusercontent.com"
         ],
         "ip" : "172.232.184.130",
         "ipv6" : "false",
         "latitude" : "47.4775",
         "location" : "47.4775,-122.2589",
         "longitude" : "-122.2589",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Akamai Connected Cloud",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "172-232-184-130.ip.linodeusercontent.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "ip.linodeusercontent.com"
         ],
         "subnet" : "172.232.128.0/17",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 64.176.55.67:8331 (tcp/http) - last seen on 2024-11-07 at 12:50:46 UTC

    • IP
      64.176.55.67
      Network
      64.176.0.0/18
      Domain(s)
      vultrusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://64.176.55.67:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      64.176.55.67.vultrusercontent.com
      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 12:50:45 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T12:50:46.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -324201056,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS20473",
         "city" : "Osaka",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 12:50:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "vultrusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS20473",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "constant.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "CHOOP-1",
            "organization" : "The Constant Company, LLC",
            "subnet" : "64.176.32.0/19"
         },
         "host" : [
            64
         ],
         "hostname" : [
            "64.176.55.67.vultrusercontent.com"
         ],
         "ip" : "64.176.55.67",
         "ipv6" : "false",
         "latitude" : "34.6837",
         "location" : "34.6837,135.5236",
         "longitude" : "135.5236",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-VULTR",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "64.176.55.67.vultrusercontent.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "176.55.67.vultrusercontent.com",
            "55.67.vultrusercontent.com",
            "67.vultrusercontent.com"
         ],
         "subnet" : "64.176.0.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 43.228.212.78:8331 (tcp/http) - last seen on 2024-11-07 at 12:32:53 UTC

    • IP
      43.228.212.78
      Network
      43.228.212.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://43.228.212.78:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS6364
      Organization
      ATLANTIC-NET-1
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 12:32:53 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T12:32:53.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -369204161,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS6364",
         "country" : "SG",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 12:32:53 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS6364",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "SG",
            "countryname" : "Singapore",
            "domain" : [
               "atlantic.net"
            ],
            "isineu" : "false",
            "latitude" : "1.352083",
            "location" : "1.352083,103.819836",
            "longitude" : "103.819836",
            "netname" : "ATLANTICNET-AP",
            "organization" : "Atlantic.Net, Inc.",
            "subnet" : "43.228.212.0/22"
         },
         "ip" : "43.228.212.78",
         "ipv6" : "false",
         "latitude" : "1.3673",
         "location" : "1.3673,103.8014",
         "longitude" : "103.8014",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "ATLANTIC-NET-1",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "43.228.212.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 208.83.239.109:8331 (tcp/http) - last seen on 2024-11-07 at 12:31:17 UTC

    • IP
      208.83.239.109
      Network
      208.83.232.0/21
      Domain(s)
      vultrusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://208.83.239.109:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      208.83.239.109.vultrusercontent.com
      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 12:31:15 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T12:31:17.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : 99555725,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS20473",
         "city" : "Honolulu",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 12:31:15 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "vultrusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS20473",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "constant.com",
               "vultr.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "NET-208-83-232-0-23",
            "organization" : "Vultr Holdings, LLC",
            "subnet" : "208.83.232.0/21"
         },
         "host" : [
            208
         ],
         "hostname" : [
            "208.83.239.109.vultrusercontent.com"
         ],
         "ip" : "208.83.239.109",
         "ipv6" : "false",
         "latitude" : "21.3513",
         "location" : "21.3513,-157.8725",
         "longitude" : "-157.8725",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-VULTR",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "208.83.239.109.vultrusercontent.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "109.vultrusercontent.com",
            "239.109.vultrusercontent.com",
            "83.239.109.vultrusercontent.com"
         ],
         "subnet" : "208.83.232.0/21",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 134.122.149.193:8331 (tcp/http) - last seen on 2024-11-07 at 12:24:09 UTC

    • IP
      134.122.149.193
      Network
      134.122.128.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://134.122.149.193:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS152194
      Organization
      CTG Server Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      1550f60aea20c6f28ffe1512d9378c73
      HTTP Header MD5
      87f3e48a3bc7d54241527e87773372b9
      HTTP Body MD5
      b918f8b3770dc1158b467b0dd192e59e
    • HTTP/1.1 400 Bad Request
      Date: Thu, 07 Nov 2024 12:24:09 GMT
      Content-Type: text/html
      Content-Length: 252
      Connection: close
      Server: cdn-ddos-cc
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>openresty</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T12:24:09.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b918f8b3770dc1158b467b0dd192e59e",
               "bodymmh3" : 1280153115,
               "headermd5" : "87f3e48a3bc7d54241527e87773372b9",
               "headermmh3" : 195442071,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 403
         },
         "asn" : "AS152194",
         "country" : "SG",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 07 Nov 2024 12:24:09 GMT\r\nContent-Type: text/html\r\nContent-Length: 252\r\nConnection: close\r\nServer: cdn-ddos-cc\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "1550f60aea20c6f28ffe1512d9378c73",
         "datammh3" : 1309920415,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS152194",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "JP",
            "countryname" : "Japan",
            "domain" : [
               "ctgserver.com",
               "rackip.com"
            ],
            "isineu" : "false",
            "latitude" : "36.204824",
            "location" : "36.204824,138.252924",
            "longitude" : "138.252924",
            "netname" : "CTG122-144-JP",
            "organization" : "RACKIP CONSULTANCY PTE. LTD.",
            "subnet" : "134.122.149.0/24"
         },
         "ip" : "134.122.149.193",
         "ipv6" : "false",
         "latitude" : "1.3673",
         "location" : "1.3673,103.8014",
         "longitude" : "103.8014",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CTG Server Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "134.122.128.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 155.138.140.144:8331 (tcp/http) - last seen on 2024-11-07 at 12:22:07 UTC

    • IP
      155.138.140.144
      Network
      155.138.128.0/17
      Domain(s)
      vultrusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://155.138.140.144:8331/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      155.138.140.144.vultrusercontent.com
      ASN
      AS20473
      Organization
      AS-VULTR
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      0c1820e0d381850a77897bf32978a1f0
      HTTP Header MD5
      a629a0fe278971ad61801ba6975ba467
      HTTP Body MD5
      ea425366a98dfc499c0cbeedb9a4f02a
    • HTTP/1.1 400 Bad Request
      Server: nginx
      Date: Thu, 07 Nov 2024 12:22:07 GMT
      Content-Type: text/html
      Content-Length: 248
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T12:22:07.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
               "bodymmh3" : 1153229498,
               "headermd5" : "a629a0fe278971ad61801ba6975ba467",
               "headermmh3" : -22929997,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 393
         },
         "asn" : "AS20473",
         "city" : "Toronto",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 12:22:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
         "datammh3" : 190190724,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "vultrusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS20473",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "CA",
            "countryname" : "Canada",
            "domain" : [
               "constant.com",
               "vultr.com"
            ],
            "isineu" : "false",
            "latitude" : "56.130366",
            "location" : "56.130366,-106.346771",
            "longitude" : "-106.346771",
            "netname" : "NET-155-138-128-0-23",
            "organization" : "Vultr Holdings, LLC",
            "subnet" : "155.138.128.0/19"
         },
         "host" : [
            155
         ],
         "hostname" : [
            "155.138.140.144.vultrusercontent.com"
         ],
         "ip" : "155.138.140.144",
         "ipv6" : "false",
         "latitude" : "43.6547",
         "location" : "43.6547,-79.3623",
         "longitude" : "-79.3623",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "AS-VULTR",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8331,
         "product" : "Nginx",
         "productvendor" : "F5",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "155.138.140.144.vultrusercontent.com"
         ],
         "seen_date" : "2024-11-07",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "138.140.144.vultrusercontent.com",
            "140.144.vultrusercontent.com",
            "144.vultrusercontent.com"
         ],
         "subnet" : "155.138.128.0/17",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }