Returning 10 result(s) out of 1,165 in 0.030 second(s)

  • 118.220.185.250:8333 (tcp/http) - last seen on 2024-11-21 at 10:22:29 UTC

    • IP
      118.220.185.250
      Network
      118.220.128.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://118.220.185.250:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS9318
      Organization
      SK Broadband Co Ltd
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 10:22:29 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:22:29.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : -405977198,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS9318",
         "city" : "Pyeongtaek-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 10:22:29 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS9318",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "nic.or.kr",
               "skbroadband.com"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "broadNnet",
            "organization" : "SK Broadband Co Ltd",
            "subnet" : "118.220.128.0/18"
         },
         "ip" : "118.220.185.250",
         "ipv6" : "false",
         "latitude" : "37.0009",
         "location" : "37.0009,127.0859",
         "longitude" : "127.0859",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SK Broadband Co Ltd",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "118.220.128.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 220.89.219.158:8333 (tcp/http) - last seen on 2024-11-21 at 10:21:07 UTC

    • IP
      220.89.219.158
      Network
      220.88.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://220.89.219.158:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 10:21:06 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:21:07.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : -413569619,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS4766",
         "city" : "Seo-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 10:21:06 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "220.88.0.0/15"
         },
         "ip" : "220.89.219.158",
         "ipv6" : "false",
         "latitude" : "36.3566",
         "location" : "36.3566,127.3849",
         "longitude" : "127.3849",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "220.88.0.0/15",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 121.182.91.229:8333 (tcp/http) - last seen on 2024-11-21 at 10:14:01 UTC

    • IP
      121.182.91.229
      Network
      121.182.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://121.182.91.229:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 10:14:00 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:14:01.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : 68880474,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS4766",
         "city" : "Daegu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 10:14:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "121.182.0.0/15"
         },
         "ip" : "121.182.91.229",
         "ipv6" : "false",
         "latitude" : "35.8723",
         "location" : "35.8723,128.5924",
         "longitude" : "128.5924",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "121.182.0.0/15",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 125.137.121.253:8333 (tcp/http) - last seen on 2024-11-21 at 10:04:19 UTC

    • IP
      125.137.121.253
      Network
      125.136.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://125.137.121.253:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 10:05:45 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:04:19.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : -137030357,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS4766",
         "city" : "Cheongdo-gun",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 10:05:45 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "125.136.0.0/15"
         },
         "ip" : "125.137.121.253",
         "ipv6" : "false",
         "latitude" : "35.6706",
         "location" : "35.6706,128.7846",
         "longitude" : "128.7846",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "125.136.0.0/15",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 121.191.231.209:8333 (tcp/http) - last seen on 2024-11-21 at 09:57:31 UTC

    • IP
      121.191.231.209
      Network
      121.191.192.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://121.191.231.209:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 09:54:48 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:57:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : 319424131,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS4766",
         "city" : "Cheongju-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 09:54:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "121.191.0.0/16"
         },
         "ip" : "121.191.231.209",
         "ipv6" : "false",
         "latitude" : "36.6202",
         "location" : "36.6202,127.4243",
         "longitude" : "127.4243",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "121.191.192.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 59.6.132.253:8333 (tcp/http) - last seen on 2024-11-21 at 09:47:24 UTC

    • IP
      59.6.132.253
      Network
      59.6.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://59.6.132.253:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 09:57:43 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T09:47:24.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : 1738419800,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS4766",
         "city" : "Mapo-gu",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 09:57:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "59.6.0.0/16"
         },
         "ip" : "59.6.132.253",
         "ipv6" : "false",
         "latitude" : "37.5433",
         "location" : "37.5433,126.9073",
         "longitude" : "126.9073",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "59.6.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 122.99.233.146:8333 (tcp/http) - last seen on 2024-11-21 at 08:27:21 UTC

    • IP
      122.99.233.146
      Network
      122.99.128.0/17
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://122.99.233.146:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS17878
      Organization
      DREAMMARK1
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 08:50:36 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:27:21.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : 335929238,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS17878",
         "city" : "Suwon",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 08:50:36 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS17878",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "lxn.co.kr",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "LXN",
            "organization" : "LX",
            "subnet" : "122.99.232.0/22"
         },
         "ip" : "122.99.233.146",
         "ipv6" : "false",
         "latitude" : "37.2963",
         "location" : "37.2963,127.0506",
         "longitude" : "127.0506",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "DREAMMARK1",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "122.99.128.0/17",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 211.226.125.119:8333 (tcp/http) - last seen on 2024-11-21 at 07:42:22 UTC

    • IP
      211.226.125.119
      Network
      211.226.96.0/19
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://211.226.125.119:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 07:42:22 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T07:42:22.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : 1399824996,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS4766",
         "city" : "Seongnam-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 07:42:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "211.226.96.0/19"
         },
         "ip" : "211.226.125.119",
         "ipv6" : "false",
         "latitude" : "37.3564",
         "location" : "37.3564,127.1128",
         "longitude" : "127.1128",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "211.226.96.0/19",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 211.34.157.125:8333 (tcp/http) - last seen on 2024-11-21 at 07:40:31 UTC

    • IP
      211.34.157.125
      Network
      211.34.152.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://211.34.157.125:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 07:41:35 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T07:40:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : -2052672546,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS4766",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 07:41:35 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "211.34.152.0/21"
         },
         "ip" : "211.34.157.125",
         "ipv6" : "false",
         "latitude" : "37.5112",
         "location" : "37.5112,126.9741",
         "longitude" : "126.9741",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "211.34.152.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 121.178.212.197:8333 (tcp/http) - last seen on 2024-11-21 at 07:31:28 UTC

    • IP
      121.178.212.197
      Network
      121.178.212.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://121.178.212.197:8333/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      bcf02805649aa89e27e01ed2900316b2
      HTTP Header MD5
      fde25e1da4e7db726728b97ce2bda8ef
      HTTP Body MD5
      4481ddb7dc4c86ee57d53e06632d175b
    • HTTP/1.1 400 Bad Request
      Date: Thu, 21 Nov 2024 07:10:19 GMT
      Content-Type: text/html
      Content-Length: 264
      Connection: close
      Server: SECUI
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body bgcolor="white">
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T07:31:28.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "4481ddb7dc4c86ee57d53e06632d175b",
               "bodymmh3" : 1578429100,
               "headermd5" : "fde25e1da4e7db726728b97ce2bda8ef",
               "headermmh3" : 1805919268,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 409
         },
         "asn" : "AS4766",
         "city" : "Mokpo-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 07:10:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 264\r\nConnection: close\r\nServer: SECUI\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "bcf02805649aa89e27e01ed2900316b2",
         "datammh3" : 1264969385,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "121.178.0.0/15"
         },
         "ip" : "121.178.212.197",
         "ipv6" : "false",
         "latitude" : "34.8133",
         "location" : "34.8133,126.3874",
         "longitude" : "126.3874",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 8333,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "121.178.212.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }