Cyber Defense Search Engine

datascan ctl threatlist sniffer vulnscan riskscan

1
2
3
4
...
next >

IP
45.77.116.80

Network
45.76.0.0/15

Domain(s)
vultrusercontent.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://45.77.116.80:8984/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
45.77.116.80.vultrusercontent.com

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 04:48:19 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:48:19.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : 1461567087,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS20473",
   "city" : "Miami",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 04:48:19 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vultrusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "constant.com",
         "vultr.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NET-45-77-96-0-23",
      "organization" : "Vultr Holdings, LLC",
      "subnet" : "45.77.96.0/19"
   },
   "host" : [
      45
   ],
   "hostname" : [
      "45.77.116.80.vultrusercontent.com"
   ],
   "ip" : "45.77.116.80",
   "ipv6" : "false",
   "latitude" : "25.8119",
   "location" : "25.8119,-80.2318",
   "longitude" : "-80.2318",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8984,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "45.77.116.80.vultrusercontent.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "116.80.vultrusercontent.com",
      "77.116.80.vultrusercontent.com",
      "80.vultrusercontent.com"
   ],
   "subnet" : "45.76.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
70.34.220.6

Network
70.34.192.0/19

Domain(s)
vultrusercontent.com

Device

<enterprise field>: device.class

Operating System
Wind River VxWorks Amazon

URL

http://70.34.220.6:8984/ 200

HTTP Title
hello

Reverse DNS
70.34.220.6.vultrusercontent.com

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Wind River VxWorks Amazon

HTTP Component(s)
OpenSSL OpenSSL 0.9.7b Apache mod_perl 1.28 Apache mod_jk modssl mod_ssl 2.8.15 Perl Perl 5.8.0 MatrixSSL MatrixSSL 3.4.2 PHP PHP 5.2.2 libupnp libupnp 1.6.6 Apache mod_dav 2 PhusionPassenger Phusion Passenger 3.0.0

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
708f3422aae984094ce690f91472f63c

HTTP Header MD5
8926312e63b00ce3d9a6f5e05096d555

HTTP Body MD5
9900920a65e13dd0e901a28af8b6d359

HTTP/1.1 200 OK
Date: Thu, 07 Nov 2024 04:13:21 GMT
Server: dcv 2wire Gateway 4D_WebSTAR_S/5.0 4D_WebSTAR_S/5.102.1 5.1.2600 2/Service Pack 3, UPnP/1.0, TVersity Media Server 5.2.3790 2/Service Pack 1, UPnP/1.0, TVersity Media Server 6.0.6000 2/, UPnP/1.0, TVersity Media Server 6.1.7600 2/, UPnP/1.0, TVersity Media Server 6.2.8400 2/, UPnP/1.0, TVersity Media Server 6.2.9200 2/, UPnP/1.0, TVersity Media Server Abyss/1.0.3 Abyss/2.0.0.20-X1-Win32 AbyssLib/2.0.0.20 Abyss/2.3.2-X1-Win32 AbyssLib/2.3.2 Acme.Serve/v1.7 of 13nov96 AdSubtract Ag [47] Agranat-EMWeb Agranat-EmWeb/R4_01 Agranat-EmWeb/R5_1_2 Agranat-EmWeb/R5_2_4 Agranat-EmWeb/R5_2_6 AirTunes/220.68 AkamaiGHost alibaba allegro-software Allegro-Software-RomPager Allegro-Software-RomPager/ 2.10 Allegro-Software-RomPager/4.01 Allegro-Software-RomPager/4.30b3 Amazon-Cloud-Drive AmazonS3 Amazon SimpleDB AmazonSnowball american sitebuilder AMT aolserver apache Apache Apache/0.6.5 Apache/1 Apache/1.1.3 Apache/1.2.42 (PalmOS) Apache/1.3.27 Apache/1.3.28 (SolutionIP) mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b Apache/1.3.28 (Unix) Apache/1.3.28 (Unix) mod_auth_pam/1.1.1 APACHE/1.3.9 Apache/2 Apache/2.0.43 Apache/2.2.3 (Red Hat) Apache/2.2.4 (Win32) PHP/5.2.2 Apache/2.2.4 (Win32) PHP/5.2.3 Apache-AdvancedExtranetServer/2.0.44 (Mandrake Linux/11mdk) mod_perl/1.99_08 Perl/v5.8.0 mod_ssl/2.0.44 OpenSSL/0.9.7a PHP/4.3.1 mod_jk2/2.0.0 Apache-AdvancedExtranetServer/2.0.47 (Mandrake Linux/6.12.92mdk) mod_perl/1.99_09 Perl/v5.8.1 mod_ssl/2.0.47 OpenSSL/0.9.7b PHP/4.3.2 Apache-AdvancedExtranetServer/2.0.47 (Mandrake Linux/6.3.92mdk) mod_ssl/2.0.47 OpenSSL/0.9.7b PHP/4.3.2 Apache-AdvancedExtranetServer/2.0.48 (Mandrake Linux/6.8.100mdk) mod_perl/1.99_11 Perl/v5.8.3 mod_ssl/2.0.48 OpenSSL/0.9.7c PHP/4.3.4 Apache-AdvancedExtranetServer/2.0.48 (Mandrake Linux/6mdk) PHP/4.3.4 Apache-AdvancedExtranetServer/2.0.53 (Mandrakelinux/PREFORK-9mdk) mod_ssl/2.0.53 OpenSSL/0.9.7e PHP/4.3.10 mod_perl/1.999.21 Perl/v5.8.6 Apache Coyote/1.0 Apache-Coyote/1.1 apachejserv/1.0.1 apache-ssl-us Apache Tomcat Apache Tomcat/4.0.3 Apache Tomcat/4.0.6 (HTTP/1.1 Connector) Apache Tomcat/4.1.10 Apache Tomcat/4.1.12 (HTTP/1.1 Connector) Apache Tomcat/4.1.27-LE-jdk14 (HTTP/1.1 Connector) aserve Aspen/0.8 ASP.NET ATPhttpd Avaya CMBE/2 Avaya CMBE/2.0.0 avenida Avirt Avocent DSView 3/3 Avocent DSView 3/3.7.0.71 AV-TECH AV787 Video Web Server awhttpd awselb/2.0 BBC 05.20.050; coda 10.00.123 BBC 06.00.083; ovbbccb 06.00.083 BBC 11.00.044; ovbbcrcp 11.00.044 BBC 11.10.035; ovbbccb 11.10.035 BBC 11.13.007; ovbbccb unknown version BBC 2.6.0.7; com.hp.openview.bbc.LLBServer 2.6.0.7 BBC 2.6.0.7; com.hp.openview.Coda 0.0.1 BigIP BIG-IP bkhttp/0.3 Blazix/1.2.1 BlueCoat-Security-Appliance boa Boa/0.92p OS-9 Version Boa/0.93.15 Boa/0.93.15 (with Intersil Extensions) Boa/0.94.14rc18-ipcam Boa/0.94.14rc21 boulevard Brickserver Modifications camera cern chainpoint-node ChaiServer Check Point SVN foundation Cherokee/0.2.7 CherryPy/3 CherryPy/3.1.2 Cisco AWARE 2.0 cisco-CPA cisco ios cisco-IOS cisco-IOS/12.1 HTTP-server/1.0(1) Citrix Web PN Server cl-http cloudflare cloudflare-nginx CloudFront Cobalt com.hp.openview.bbc.LLBServer 2.6.8.1 com.hp.openview.Coda 0.0.1 commerce-builder CompaqHTTPServer CompaqHTTPServer/4.1 CompaqHTTPServer/9.9 HP System Management Homepage CompaqHTTPServer/9.9 HP System Management Homepage/2.1.5.146 CompaqHTTPServer/9.9 HP System Management Homepage/3.0.1.73 httpd/2.2.6+ CompaqHTTPServer/9.9 HP System Management Homepage/6.0.0.96 httpd/2.2.6+ Conexant-EmWeb/R6_1_0 cosmos CouchDB/2.1.1 (Erlang OTP/20) Cougar/9.01.01.3841 cpaneld cpsrvd cpsrvd/11.44.3.0 CradlepointHTTPService/1.0.0 Cross Web Server CUPS/1.1 CUPS/1.7 IPP/2.1 cwpsrv Darwin/10.2.0, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Debian/4.0r8 DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0 Debian/4.0 UPnP/1.0 miniupnpd/1.0 Debian/wheezy/sid UPnP/1.1 MiniUPnPd/1.8 DeleGate/7.7.0 DNVRS-Webs DrayTek/Vigor2130 UPnP/1.0 miniupnpd/1.0 DVRDVS-Webs dwhttpd EHTTP/1.1 eHTTP v2.0 Embedded HTTP Server Embedthis-Appweb/3.2.3 Embedthis-http Embedthis-http/4.0.0 emwac EnergyICT RTU 101-F25CE1-1524 enterpriseweb Eserv/2.97 Essentia/2.1 Ews/0 Ews/0.1 EWS-NIC3/6.31 EWS-NIC4/13.39 EWS-NIC4/13.40 falcon Fedora/10 UPnP/1.0 MiniUPnPd/1.4 Fedora/8 UPnP/1.0 miniupnpd/1.0 FedoraCore/6 UPnP/1.0 miniupnpd/1.0 fnord Folkweb FreeBSD/8.2-RELEASE-p4 DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0.24 frontier frontpage FUHO-DVR GFE/1 GFE/1.3 GlassFish GoAhead-Webs GoAhead-Webs/2.5.0 GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN Gordian Embedded goserve gosite gSOAP/2.7 gunicorn/19.7.1 gws HeiTel GmbH Web Server [V1.15/V1.14/V1.3] HeiTel GmbH Web Server [V1.26/V1.15/V1.7] Helix Server Version 9.0.4.960 (linux-2.2-libc6-i586-server) (RealServer compatible) Helix Server Version 9.0.4.960 (win32) (RealServer compatible) hellbent java webserver v0.1 Hikvision-Webs homedoor HP Apache-based Web Server/1.3.26 (Unix) HP Apache-based Web Server/1.3.26 (Unix) mod_ssl/2.8.9 OpenSSL/0.9.6c HP-ChaiServer/2.2 HP-ChaiSOE/1.0 HP HTTP Server; Hewlett-Packard HP Designjet T520 36in - ABC123; Serial Number: 0123456789; Built:Tue Sep 09, 2014 08:32:54AM {012345678901} HP HTTP Server; HP Officejet 6500 E709n - CB057A; Serial Number: abc123; Rainbow Built:Sat Dec 13, 2008 10:58:21AM {abc123, ASIC id 0x00ffc2105} HP HTTP Server; HP Photosmart C309a series - CC335A; Serial Number: abc123; Vader Built:Wed Apr 15, 2009 11:40:58AM {abc123, ASIC id 0x00280004} HP-iLO-Server/1.30 HPSMH HP Web Jetadmin 10.3.85669 HP Web Jetadmin 10.3.91358 (10.3 SR5) HP Web Jetadmin/2.0.50 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m HP Web Jetadmin/2 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m HP-Web-Server httpd HttpFileServer httpd hyperwave IBM_HTTP_Server IBM_HTTP_SERVER IBM-HTTP-Server/1.0 IBM_HTTP_Server/1.3.12 Apache/1.3.12 (Unix) IBM_HTTP_SERVER/1.3.19.2  Apache/1.3.20 (Win32) IBM_HTTP_SERVER/1.3.28.1-PK16139  Apache/1.3.28 (Unix) IBM_HTTP_Server/2.0.42.2-PK25355 Apache/2.0.47 (Unix) DAV/2 IBM_HTTP_Server/2.0.47.1 Apache/2.0.47 (Unix) DAV/2 PHP/4.3.8 IBM_HTTP_Server/2.0.47.1-PK01070 Apache/2.0.47 (Win32) PHP/5.0.4 IBM_HTTP_Server/6.0.2.19 Apache/2.0.47 (Unix) IBM_HTTP_Server/6.0.2 Apache/2.0.47 (Unix) IBM_HTTP_Server/6.0 Apache/2.0.47 (Unix) DAV/2 IBM_HTTP_Server/6.1 Apache/2.0.47 (Win32) PHP/5.1.1 IBM_HTTP_Server/7.0.0.9 (Unix) IBM HTTP Server/V5R3M0 ibm internet connection server IdeaWebServer/0.83.74 IdeaWebServer/v0.70 Intel(R) Active Management Technology Intel(R) Active Management Technology 7.1.86 Intel(R) Standard Manageability 5.0.50 Intel(R) Standard Manageability 9.0.3 IPCamera Login IPG8000 iPlanet-Web-Proxy-Server/3.6 iPlanet-Web-Proxy-Server/3.6-SP5 ipos/7.0 UPnP/1.0 TL-WR740N/1.0 ipos/7.0 UPnP/1.0 TL-WR740N/1.0/2.0 ipos/7.0 UPnP/1.0 TL-WR740N/4.0 ipos/7.0 UPnP/1.0 TL-WR741N/1.0/2.0 ipos/7.0 UPnP/1.0 TL-WR741N/4.0 ipos/7.0 UPnP/1.0 TL-WR841N/6.0/7.0 ipos/7.0 UPnP/1.0 TL-WR841N/8.0 ipos/7.0 UPnP/1.0 TL-WR940N/1.0 ipos/7.0 UPnP/1.0 TL-WR941N/2.0 Ipswitch-IMail/5.08 Ipswitch-IMail/7.07 Ipswitch-IMail/7.11 Ipswitch-IMail/8.05 ISOS/9.0 UPnP/1.0 Conexant-EmWeb/R6_1_0 Jaguar Server jakarta-tomcat-4.0.1 JavaWebServer JBoss-EAP/7 JC-HTTPD/1 JC-HTTPD/1.11.14 JC-SHTTPD/1 JC-SHTTPD/1.17.20 JetAdmin Jetty(1.4.5) Jetty/4.0.1 (SunOS 5.8 sparc) Jetty/4.2.23 (SunOS/5.9 sparc java/1.4.2_04) Jetty/4.2.x (VxWorks/WIND version 2.9 ppc java/1.1-rr-std-b12) Jetty/5.1.10 (Linux/2.6.12 i386 java/1.5.0_05) Jetty/5.1.4 (Windows Server 2008 R2/6.1 x86 java/1.5.0_22 Jetty(6.1.12.rc2) Jetty(7.6.9.v20130131) Jetty(8.1.10.v20130312) Jetty(9.4.z-SNAPSHOT) JRun/3.1 KazaaClient kHTTPd 0.1.6 LabVIEW/5.1.1 Lasso/3.6.5 lighttpd lighttpd/1.3.7 (Mar 23 2007/16:00:15) lighttpd/1.4.16 LilHTTP/2.1 Linux/2.4.18_mvl30-ixdp425, UPnP/1.0, Intel SDK for UPnP devices/1.3.1 Linux/2.4.20-46.7asp, UPnP/1.0, Portable SDK for UPnP devices/1.6.17 Linux/2.4.21 UPnP/1.0 miniupnpd/1.0 LINUX/2.4 UPnP/1.0 BRCM400/1.0 Linux/2.6.10_dev-malta-mips2_fp_le, UPnP/1.0, Intel SDK for UPnP devices /1.2 Linux/2.6.10-iop1-1, UPnP/1.0, Portable SDK for UPnP devices/1.4.1 Linux/2.6.12-5.1-brcmstb-dm800, UPnP/1.0, Portable SDK for UPnP devices/1.6.0 Linux/2.6.12.6-arm1-040, UPnP/1.0, Portable SDK for UPnP devices/1.6.5.2 Linux/2.6.12.6-VENUS, UPnP/1.0, Portable SDK for UPnP devices/1.6.10 Linux/2.6.13, UPnP/1.0, Portable SDK for UPnP devices/1.6.0 Linux/2.6.18_pro500-davinci_N03A_IPCAM_1.0-g5c649288-dirty, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Linux/2.6.23.17_stm23_0125dorade00 UPnP/1.0 DLNADOC/1.50 Portable SDK for UPnP devices/1.4.6-5 Linux/2.6.28-11-server, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Linux/2.6.28-17-generic, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Linux/2.6.28.1-xxxx-std-ipv4-32, UPnP/1.0, Portable SDK for UPnP devices/1.4.3 Linux/2.6.28, UPnP/1.0, Portable SDK for UPnP devices/1.6.10 Linux/2.6.29.6-217.2.3.fc11.i686.PAE UPnP/1.0 miniupnpd/1.0 Linux/2.6.32-220.7.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14 Linux/2.6.32-24-generic, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Linux/2.6.32-279.11.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14 Linux/2.6.32-279.1.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.13 Linux/2.6.32-279.14.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14 Linux/2.6.32-279.14.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.15 Linux/2.6.36+ DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0 Linux/3.0.8 UPnP/1.0 DLNADOC/1.50 Portable SDK for UPnP devices/1.6.6 Linux-amd64-2.6.18-238.9.1.el5, UPnP/1.0, PMS/1.52.1 Linux/Cross_compiled UPnP/1.0 miniupnpd/1.0 Linux-i386-2.6.33.2, UPnP/1.0, PMS/1.21.1 Linux Mips 2.4.20 UPnP/1.0 MiniUPnPd/1.2 Linux UPnP/1.0 Huawei-ATP-IGD Linux, UPnP/1.0, Intel SDK for UPnP devices /1.2 Linux UPnP/1.0 Sonos/31.3-22220 (ANVIL) Linux UPnP/1.0 Sonos/34.16-37101 (ZP120) Linux UPnP/1.0 Sonos/36.4-41270 (WD100) Linux UPnP/1.0 Sonos/39.2-47040c (ZPS1) Linux UPnP/1.0 Sonos/47.2-59120 (BR100) Linux UPnP/1.0 Sonos/47.2-59120 (ZPS3) ListManagerWeb/8.8a (based on Tcl-Webserver/3.4.2) LiteSpeed LiteSpeed/5.2.8 Enterprise Lotus Lotus-Domino Lotus-Domino/0 Lotus-Domino/5.0.8 Lotus-Domino/Release Lotus-Domino/Release-4.6.7(Intl) Lotus Expeditor Web Container/6 Lotus Expeditor Web Container/6.1 Loxone Miniserver some name UPnP/1.0 Mac_OS_X-x86_64-10.5.8, UPnP/1.0, PMS/1.20 Mbedthis-Appweb/2 Mbedthis-Appweb/2.4.0 Mbedthis-AppWeb/2.4.0 Mbedthis-Appweb/2.4.2 micro_httpd Microplex emHTTPD/1 Microplex emHTTPD/1.0 Microplex emHTTPD/1.1 Microsoft-HTTPAPI/2.0 Microsoft-IIS Microsoft-IIS/4.0 Microsoft-IIS/5.0 Microsoft-IIS/5.1 Microsoft-IIS/6.0 Microsoft-IIS/7.0 Microsoft-IIS/7.5 Microsoft-IIS/8.0 Microsoft-IIS/8.5 Microsoft-IIS/9.0 Microsoft-PWS/4.0 Microsoft-PWS-95/4.0 Microsoft-WinCE/4.10 Microsoft-WinCE/4.20 Microsoft-WinCE/5.0 Microsoft WinCE Fidelix v11.50.29 Mikrotik HttpProxy Mini Dome IP Camera mini_httpd mini_httpd/1.14 23jun2000 mini_httpd/1 23jun2000 MiniServ/0.01 mod_security/1.71 Mongrel 1 Mongrel 1.1.5 Monkey/0.6.2 MS-MFC-HttpSvr/1.0 MS .NET Remoting, MS .NET CLR 2.0.50727.42 mt-daapd/0.2.4.1 mt-daapd/svn-999 myCIO Mylo/0.2.0 MyWebServer/1.01 ncsa neowebscript NetApp/7.2.1.1 NetApp/7.3.4P1 NetApp//8.1RC2 NetCache appliance (NetApp/5.3.1R3) NetCache appliance (NetApp/5.4R2D2) NetCache appliance (NetApp/5.6.1D22) NetCache appliance (NetApp/6.0.2P1) NetCache appliance (NetApp/6.0.4) NetCache appliance (NetApp/6.1RC2) netcloak NET-DK/1.0 NET-DK 1.1 Netgear/1.0 UPnP/1.0 miniupnpd/1.0 netpresenz Netscape-Enterprise/3.5.1 Netscape-Enterprise/3.6 SP3 Netscape-Enterprise/6.0 NetWare Netwave IP Camera nginx nginx/0.8.53 nginx/0.8.53 + Phusion Passenger 3.0.0 (mod_rails/mod_rack) nginx + Phusion Passenger nginx + Phusion Passenger 5.1.11 Niagara Web Server/3.8.111 NS_6.1 NSC/0.6.4 (JVM) nsl Nucleus/4.3 UPnP/1.0 Virata-EmWeb/R6_2_0 NULLhttpd/0.5.1 OmniHTTPd open-market-secure-webserver openresty openresty/1.13.6.2 OpenTV/5.40 OpenVPN-AS OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.2 OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.4 OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.5 Oracle9iAS/9.0.2.3.0 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.2.3.0 (N) Oracle9iAS/9.0.3.1 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.3.1.0 (N) Oracle-Application-Server-10g Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server Oracle-Application-Server-10g/10.1.2.2.0 Oracle-HTTP-Server OracleAS-Web-Cache-10g/10.1.2.2.0 (N;ecid
Content-Type: text/html
Content-Length: 84

<html>
<head>
  <title>hello</title>
</head>
<body>
  <h1>hello</h1>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T04:13:21.000Z",
   "app" : {
      "extract" : {
         "ip" : [
            "2.6.12.6",
            "9.0.2.3",
            "3.0.1.73",
            "7.2.1.1",
            "2.6.0.7",
            "2.6.29.6",
            "10.1.2.0",
            "1.6.5.2",
            "2.6.28.1",
            "2.6.23.17",
            "3.7.0.71",
            "2.6.8.1",
            "7.0.0.9",
            "10.1.2.2",
            "6.0.0.96",
            "9.0.3.1",
            "2.1.5.146",
            "6.0.2.19",
            "2.6.33.2",
            "1.3.28.1",
            "11.44.3.0",
            "2.0.47.1",
            "2.0.42.2",
            "1.3.19.2",
            "2.0.0.20",
            "1.13.6.2"
         ]
      },
      "http" : {
         "bodymd5" : "9900920a65e13dd0e901a28af8b6d359",
         "bodymmh3" : 1667249752,
         "component" : [
            {
               "product" : "mod_dav",
               "productvendor" : "Apache",
               "productversion" : "2"
            },
            {
               "productvendor" : "Apache",
               "product" : "mod_jk"
            },
            {
               "product" : "Phusion Passenger",
               "productvendor" : "PhusionPassenger",
               "productversion" : "3.0.0"
            },
            {
               "product" : "PHP",
               "productvendor" : "PHP",
               "productversion" : "5.2.2"
            },
            {
               "product" : "mod_ssl",
               "productvendor" : "modssl",
               "productversion" : "2.8.15"
            },
            {
               "product" : "mod_perl",
               "productversion" : "1.28",
               "productvendor" : "Apache"
            },
            {
               "product" : "Perl",
               "productversion" : "5.8.0",
               "productvendor" : "Perl"
            },
            {
               "product" : "libupnp",
               "productversion" : "1.6.6",
               "productvendor" : "libupnp"
            },
            {
               "productversion" : "3.4.2",
               "productvendor" : "MatrixSSL",
               "product" : "MatrixSSL"
            },
            {
               "productvendor" : "OpenSSL",
               "productversion" : "0.9.7b",
               "product" : "OpenSSL"
            }
         ],
         "headermd5" : "8926312e63b00ce3d9a6f5e05096d555",
         "headermmh3" : -7992623,
         "title" : "hello"
      },
      "length" : 12514
   },
   "asn" : "AS20473",
   "city" : "Sp\u00e5nga",
   "country" : "SE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 07 Nov 2024 04:13:21 GMT\r\nServer: dcv 2wire Gateway 4D_WebSTAR_S/5.0 4D_WebSTAR_S/5.102.1 5.1.2600 2/Service Pack 3, UPnP/1.0, TVersity Media Server 5.2.3790 2/Service Pack 1, UPnP/1.0, TVersity Media Server 6.0.6000 2/, UPnP/1.0, TVersity Media Server 6.1.7600 2/, UPnP/1.0, TVersity Media Server 6.2.8400 2/, UPnP/1.0, TVersity Media Server 6.2.9200 2/, UPnP/1.0, TVersity Media Server Abyss/1.0.3 Abyss/2.0.0.20-X1-Win32 AbyssLib/2.0.0.20 Abyss/2.3.2-X1-Win32 AbyssLib/2.3.2 Acme.Serve/v1.7 of 13nov96 AdSubtract Ag [47] Agranat-EMWeb Agranat-EmWeb/R4_01 Agranat-EmWeb/R5_1_2 Agranat-EmWeb/R5_2_4 Agranat-EmWeb/R5_2_6 AirTunes/220.68 AkamaiGHost alibaba allegro-software Allegro-Software-RomPager Allegro-Software-RomPager/ 2.10 Allegro-Software-RomPager/4.01 Allegro-Software-RomPager/4.30b3 Amazon-Cloud-Drive AmazonS3 Amazon SimpleDB AmazonSnowball american sitebuilder AMT aolserver apache Apache Apache/0.6.5 Apache/1 Apache/1.1.3 Apache/1.2.42 (PalmOS) Apache/1.3.27 Apache/1.3.28 (SolutionIP) mod_perl/1.28 mod_ssl/2.8.15 OpenSSL/0.9.7b Apache/1.3.28 (Unix) Apache/1.3.28 (Unix) mod_auth_pam/1.1.1 APACHE/1.3.9 Apache/2 Apache/2.0.43 Apache/2.2.3 (Red Hat) Apache/2.2.4 (Win32) PHP/5.2.2 Apache/2.2.4 (Win32) PHP/5.2.3 Apache-AdvancedExtranetServer/2.0.44 (Mandrake Linux/11mdk) mod_perl/1.99_08 Perl/v5.8.0 mod_ssl/2.0.44 OpenSSL/0.9.7a PHP/4.3.1 mod_jk2/2.0.0 Apache-AdvancedExtranetServer/2.0.47 (Mandrake Linux/6.12.92mdk) mod_perl/1.99_09 Perl/v5.8.1 mod_ssl/2.0.47 OpenSSL/0.9.7b PHP/4.3.2 Apache-AdvancedExtranetServer/2.0.47 (Mandrake Linux/6.3.92mdk) mod_ssl/2.0.47 OpenSSL/0.9.7b PHP/4.3.2 Apache-AdvancedExtranetServer/2.0.48 (Mandrake Linux/6.8.100mdk) mod_perl/1.99_11 Perl/v5.8.3 mod_ssl/2.0.48 OpenSSL/0.9.7c PHP/4.3.4 Apache-AdvancedExtranetServer/2.0.48 (Mandrake Linux/6mdk) PHP/4.3.4 Apache-AdvancedExtranetServer/2.0.53 (Mandrakelinux/PREFORK-9mdk) mod_ssl/2.0.53 OpenSSL/0.9.7e PHP/4.3.10 mod_perl/1.999.21 Perl/v5.8.6 Apache Coyote/1.0 Apache-Coyote/1.1 apachejserv/1.0.1 apache-ssl-us Apache Tomcat Apache Tomcat/4.0.3 Apache Tomcat/4.0.6 (HTTP/1.1 Connector) Apache Tomcat/4.1.10 Apache Tomcat/4.1.12 (HTTP/1.1 Connector) Apache Tomcat/4.1.27-LE-jdk14 (HTTP/1.1 Connector) aserve Aspen/0.8 ASP.NET ATPhttpd Avaya CMBE/2 Avaya CMBE/2.0.0 avenida Avirt Avocent DSView 3/3 Avocent DSView 3/3.7.0.71 AV-TECH AV787 Video Web Server awhttpd awselb/2.0 BBC 05.20.050; coda 10.00.123 BBC 06.00.083; ovbbccb 06.00.083 BBC 11.00.044; ovbbcrcp 11.00.044 BBC 11.10.035; ovbbccb 11.10.035 BBC 11.13.007; ovbbccb unknown version BBC 2.6.0.7; com.hp.openview.bbc.LLBServer 2.6.0.7 BBC 2.6.0.7; com.hp.openview.Coda 0.0.1 BigIP BIG-IP bkhttp/0.3 Blazix/1.2.1 BlueCoat-Security-Appliance boa Boa/0.92p OS-9 Version Boa/0.93.15 Boa/0.93.15 (with Intersil Extensions) Boa/0.94.14rc18-ipcam Boa/0.94.14rc21 boulevard Brickserver Modifications camera cern chainpoint-node ChaiServer Check Point SVN foundation Cherokee/0.2.7 CherryPy/3 CherryPy/3.1.2 Cisco AWARE 2.0 cisco-CPA cisco ios cisco-IOS cisco-IOS/12.1 HTTP-server/1.0(1) Citrix Web PN Server cl-http cloudflare cloudflare-nginx CloudFront Cobalt com.hp.openview.bbc.LLBServer 2.6.8.1 com.hp.openview.Coda 0.0.1 commerce-builder CompaqHTTPServer CompaqHTTPServer/4.1 CompaqHTTPServer/9.9 HP System Management Homepage CompaqHTTPServer/9.9 HP System Management Homepage/2.1.5.146 CompaqHTTPServer/9.9 HP System Management Homepage/3.0.1.73 httpd/2.2.6+ CompaqHTTPServer/9.9 HP System Management Homepage/6.0.0.96 httpd/2.2.6+ Conexant-EmWeb/R6_1_0 cosmos CouchDB/2.1.1 (Erlang OTP/20) Cougar/9.01.01.3841 cpaneld cpsrvd cpsrvd/11.44.3.0 CradlepointHTTPService/1.0.0 Cross Web Server CUPS/1.1 CUPS/1.7 IPP/2.1 cwpsrv Darwin/10.2.0, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Debian/4.0r8 DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0 Debian/4.0 UPnP/1.0 miniupnpd/1.0 Debian/wheezy/sid UPnP/1.1 MiniUPnPd/1.8 DeleGate/7.7.0 DNVRS-Webs DrayTek/Vigor2130 UPnP/1.0 miniupnpd/1.0 DVRDVS-Webs dwhttpd EHTTP/1.1 eHTTP v2.0 Embedded HTTP Server Embedthis-Appweb/3.2.3 Embedthis-http Embedthis-http/4.0.0 emwac EnergyICT RTU 101-F25CE1-1524 enterpriseweb Eserv/2.97 Essentia/2.1 Ews/0 Ews/0.1 EWS-NIC3/6.31 EWS-NIC4/13.39 EWS-NIC4/13.40 falcon Fedora/10 UPnP/1.0 MiniUPnPd/1.4 Fedora/8 UPnP/1.0 miniupnpd/1.0 FedoraCore/6 UPnP/1.0 miniupnpd/1.0 fnord Folkweb FreeBSD/8.2-RELEASE-p4 DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0.24 frontier frontpage FUHO-DVR GFE/1 GFE/1.3 GlassFish GoAhead-Webs GoAhead-Webs/2.5.0 GoAhead-Webs/2.5.0 PeerSec-MatrixSSL/3.4.2-OPEN Gordian Embedded goserve gosite gSOAP/2.7 gunicorn/19.7.1 gws HeiTel GmbH Web Server [V1.15/V1.14/V1.3] HeiTel GmbH Web Server [V1.26/V1.15/V1.7] Helix Server Version 9.0.4.960 (linux-2.2-libc6-i586-server) (RealServer compatible) Helix Server Version 9.0.4.960 (win32) (RealServer compatible) hellbent java webserver v0.1 Hikvision-Webs homedoor HP Apache-based Web Server/1.3.26 (Unix) HP Apache-based Web Server/1.3.26 (Unix) mod_ssl/2.8.9 OpenSSL/0.9.6c HP-ChaiServer/2.2 HP-ChaiSOE/1.0 HP HTTP Server; Hewlett-Packard HP Designjet T520 36in - ABC123; Serial Number: 0123456789; Built:Tue Sep 09, 2014 08:32:54AM {012345678901} HP HTTP Server; HP Officejet 6500 E709n - CB057A; Serial Number: abc123; Rainbow Built:Sat Dec 13, 2008 10:58:21AM {abc123, ASIC id 0x00ffc2105} HP HTTP Server; HP Photosmart C309a series - CC335A; Serial Number: abc123; Vader Built:Wed Apr 15, 2009 11:40:58AM {abc123, ASIC id 0x00280004} HP-iLO-Server/1.30 HPSMH HP Web Jetadmin 10.3.85669 HP Web Jetadmin 10.3.91358 (10.3 SR5) HP Web Jetadmin/2.0.50 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m HP Web Jetadmin/2 (Win32) mod_auth_sspi/1.0.1 mod_ssl/2.0.50 OpenSSL/0.9.6m HP-Web-Server httpd HttpFileServer httpd hyperwave IBM_HTTP_Server IBM_HTTP_SERVER IBM-HTTP-Server/1.0 IBM_HTTP_Server/1.3.12 Apache/1.3.12 (Unix) IBM_HTTP_SERVER/1.3.19.2  Apache/1.3.20 (Win32) IBM_HTTP_SERVER/1.3.28.1-PK16139  Apache/1.3.28 (Unix) IBM_HTTP_Server/2.0.42.2-PK25355 Apache/2.0.47 (Unix) DAV/2 IBM_HTTP_Server/2.0.47.1 Apache/2.0.47 (Unix) DAV/2 PHP/4.3.8 IBM_HTTP_Server/2.0.47.1-PK01070 Apache/2.0.47 (Win32) PHP/5.0.4 IBM_HTTP_Server/6.0.2.19 Apache/2.0.47 (Unix) IBM_HTTP_Server/6.0.2 Apache/2.0.47 (Unix) IBM_HTTP_Server/6.0 Apache/2.0.47 (Unix) DAV/2 IBM_HTTP_Server/6.1 Apache/2.0.47 (Win32) PHP/5.1.1 IBM_HTTP_Server/7.0.0.9 (Unix) IBM HTTP Server/V5R3M0 ibm internet connection server IdeaWebServer/0.83.74 IdeaWebServer/v0.70 Intel(R) Active Management Technology Intel(R) Active Management Technology 7.1.86 Intel(R) Standard Manageability 5.0.50 Intel(R) Standard Manageability 9.0.3 IPCamera Login IPG8000 iPlanet-Web-Proxy-Server/3.6 iPlanet-Web-Proxy-Server/3.6-SP5 ipos/7.0 UPnP/1.0 TL-WR740N/1.0 ipos/7.0 UPnP/1.0 TL-WR740N/1.0/2.0 ipos/7.0 UPnP/1.0 TL-WR740N/4.0 ipos/7.0 UPnP/1.0 TL-WR741N/1.0/2.0 ipos/7.0 UPnP/1.0 TL-WR741N/4.0 ipos/7.0 UPnP/1.0 TL-WR841N/6.0/7.0 ipos/7.0 UPnP/1.0 TL-WR841N/8.0 ipos/7.0 UPnP/1.0 TL-WR940N/1.0 ipos/7.0 UPnP/1.0 TL-WR941N/2.0 Ipswitch-IMail/5.08 Ipswitch-IMail/7.07 Ipswitch-IMail/7.11 Ipswitch-IMail/8.05 ISOS/9.0 UPnP/1.0 Conexant-EmWeb/R6_1_0 Jaguar Server jakarta-tomcat-4.0.1 JavaWebServer JBoss-EAP/7 JC-HTTPD/1 JC-HTTPD/1.11.14 JC-SHTTPD/1 JC-SHTTPD/1.17.20 JetAdmin Jetty(1.4.5) Jetty/4.0.1 (SunOS 5.8 sparc) Jetty/4.2.23 (SunOS/5.9 sparc java/1.4.2_04) Jetty/4.2.x (VxWorks/WIND version 2.9 ppc java/1.1-rr-std-b12) Jetty/5.1.10 (Linux/2.6.12 i386 java/1.5.0_05) Jetty/5.1.4 (Windows Server 2008 R2/6.1 x86 java/1.5.0_22 Jetty(6.1.12.rc2) Jetty(7.6.9.v20130131) Jetty(8.1.10.v20130312) Jetty(9.4.z-SNAPSHOT) JRun/3.1 KazaaClient kHTTPd 0.1.6 LabVIEW/5.1.1 Lasso/3.6.5 lighttpd lighttpd/1.3.7 (Mar 23 2007/16:00:15) lighttpd/1.4.16 LilHTTP/2.1 Linux/2.4.18_mvl30-ixdp425, UPnP/1.0, Intel SDK for UPnP devices/1.3.1 Linux/2.4.20-46.7asp, UPnP/1.0, Portable SDK for UPnP devices/1.6.17 Linux/2.4.21 UPnP/1.0 miniupnpd/1.0 LINUX/2.4 UPnP/1.0 BRCM400/1.0 Linux/2.6.10_dev-malta-mips2_fp_le, UPnP/1.0, Intel SDK for UPnP devices /1.2 Linux/2.6.10-iop1-1, UPnP/1.0, Portable SDK for UPnP devices/1.4.1 Linux/2.6.12-5.1-brcmstb-dm800, UPnP/1.0, Portable SDK for UPnP devices/1.6.0 Linux/2.6.12.6-arm1-040, UPnP/1.0, Portable SDK for UPnP devices/1.6.5.2 Linux/2.6.12.6-VENUS, UPnP/1.0, Portable SDK for UPnP devices/1.6.10 Linux/2.6.13, UPnP/1.0, Portable SDK for UPnP devices/1.6.0 Linux/2.6.18_pro500-davinci_N03A_IPCAM_1.0-g5c649288-dirty, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Linux/2.6.23.17_stm23_0125dorade00 UPnP/1.0 DLNADOC/1.50 Portable SDK for UPnP devices/1.4.6-5 Linux/2.6.28-11-server, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Linux/2.6.28-17-generic, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Linux/2.6.28.1-xxxx-std-ipv4-32, UPnP/1.0, Portable SDK for UPnP devices/1.4.3 Linux/2.6.28, UPnP/1.0, Portable SDK for UPnP devices/1.6.10 Linux/2.6.29.6-217.2.3.fc11.i686.PAE UPnP/1.0 miniupnpd/1.0 Linux/2.6.32-220.7.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14 Linux/2.6.32-24-generic, UPnP/1.0, Portable SDK for UPnP devices/1.6.6 Linux/2.6.32-279.11.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14 Linux/2.6.32-279.1.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.13 Linux/2.6.32-279.14.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.14 Linux/2.6.32-279.14.1.el6.x86_64, UPnP/1.0, Portable SDK for UPnP devices/1.6.15 Linux/2.6.36+ DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.0 Linux/3.0.8 UPnP/1.0 DLNADOC/1.50 Portable SDK for UPnP devices/1.6.6 Linux-amd64-2.6.18-238.9.1.el5, UPnP/1.0, PMS/1.52.1 Linux/Cross_compiled UPnP/1.0 miniupnpd/1.0 Linux-i386-2.6.33.2, UPnP/1.0, PMS/1.21.1 Linux Mips 2.4.20 UPnP/1.0 MiniUPnPd/1.2 Linux UPnP/1.0 Huawei-ATP-IGD Linux, UPnP/1.0, Intel SDK for UPnP devices /1.2 Linux UPnP/1.0 Sonos/31.3-22220 (ANVIL) Linux UPnP/1.0 Sonos/34.16-37101 (ZP120) Linux UPnP/1.0 Sonos/36.4-41270 (WD100) Linux UPnP/1.0 Sonos/39.2-47040c (ZPS1) Linux UPnP/1.0 Sonos/47.2-59120 (BR100) Linux UPnP/1.0 Sonos/47.2-59120 (ZPS3) ListManagerWeb/8.8a (based on Tcl-Webserver/3.4.2) LiteSpeed LiteSpeed/5.2.8 Enterprise Lotus Lotus-Domino Lotus-Domino/0 Lotus-Domino/5.0.8 Lotus-Domino/Release Lotus-Domino/Release-4.6.7(Intl) Lotus Expeditor Web Container/6 Lotus Expeditor Web Container/6.1 Loxone Miniserver some name UPnP/1.0 Mac_OS_X-x86_64-10.5.8, UPnP/1.0, PMS/1.20 Mbedthis-Appweb/2 Mbedthis-Appweb/2.4.0 Mbedthis-AppWeb/2.4.0 Mbedthis-Appweb/2.4.2 micro_httpd Microplex emHTTPD/1 Microplex emHTTPD/1.0 Microplex emHTTPD/1.1 Microsoft-HTTPAPI/2.0 Microsoft-IIS Microsoft-IIS/4.0 Microsoft-IIS/5.0 Microsoft-IIS/5.1 Microsoft-IIS/6.0 Microsoft-IIS/7.0 Microsoft-IIS/7.5 Microsoft-IIS/8.0 Microsoft-IIS/8.5 Microsoft-IIS/9.0 Microsoft-PWS/4.0 Microsoft-PWS-95/4.0 Microsoft-WinCE/4.10 Microsoft-WinCE/4.20 Microsoft-WinCE/5.0 Microsoft WinCE Fidelix v11.50.29 Mikrotik HttpProxy Mini Dome IP Camera mini_httpd mini_httpd/1.14 23jun2000 mini_httpd/1 23jun2000 MiniServ/0.01 mod_security/1.71 Mongrel 1 Mongrel 1.1.5 Monkey/0.6.2 MS-MFC-HttpSvr/1.0 MS .NET Remoting, MS .NET CLR 2.0.50727.42 mt-daapd/0.2.4.1 mt-daapd/svn-999 myCIO Mylo/0.2.0 MyWebServer/1.01 ncsa neowebscript NetApp/7.2.1.1 NetApp/7.3.4P1 NetApp//8.1RC2 NetCache appliance (NetApp/5.3.1R3) NetCache appliance (NetApp/5.4R2D2) NetCache appliance (NetApp/5.6.1D22) NetCache appliance (NetApp/6.0.2P1) NetCache appliance (NetApp/6.0.4) NetCache appliance (NetApp/6.1RC2) netcloak NET-DK/1.0 NET-DK 1.1 Netgear/1.0 UPnP/1.0 miniupnpd/1.0 netpresenz Netscape-Enterprise/3.5.1 Netscape-Enterprise/3.6 SP3 Netscape-Enterprise/6.0 NetWare Netwave IP Camera nginx nginx/0.8.53 nginx/0.8.53 + Phusion Passenger 3.0.0 (mod_rails/mod_rack) nginx + Phusion Passenger nginx + Phusion Passenger 5.1.11 Niagara Web Server/3.8.111 NS_6.1 NSC/0.6.4 (JVM) nsl Nucleus/4.3 UPnP/1.0 Virata-EmWeb/R6_2_0 NULLhttpd/0.5.1 OmniHTTPd open-market-secure-webserver openresty openresty/1.13.6.2 OpenTV/5.40 OpenVPN-AS OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.2 OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.4 OpenWRT/kamikaze UPnP/1.0 MiniUPnPd/1.5 Oracle9iAS/9.0.2.3.0 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.2.3.0 (N) Oracle9iAS/9.0.3.1 Oracle HTTP Server Oracle9iAS-Web-Cache/9.0.3.1.0 (N) Oracle-Application-Server-10g Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server Oracle-Application-Server-10g/10.1.2.2.0 Oracle-HTTP-Server OracleAS-Web-Cache-10g/10.1.2.2.0 (N;ecid\r\nContent-Type: text/html\r\nContent-Length: 84\r\n\r\n<html>\n<head>\n  <title>hello</title>\n</head>\n<body>\n  <h1>hello</h1>\n</body>\n</html>",
   "datamd5" : "708f3422aae984094ce690f91472f63c",
   "datammh3" : 407638299,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vultrusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "constant.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "VULTR",
      "organization" : "The Constant Company, LLC",
      "subnet" : "70.34.192.0/19"
   },
   "host" : [
      70
   ],
   "hostname" : [
      "70.34.220.6.vultrusercontent.com"
   ],
   "ip" : "70.34.220.6",
   "ipv6" : "false",
   "latitude" : "59.3779",
   "location" : "59.3779,17.9155",
   "longitude" : "17.9155",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "VxWorks",
   "osbits" : 32,
   "osdistribution" : "Amazon",
   "osvendor" : "Wind River",
   "port" : 8984,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "reverse" : [
      "70.34.220.6.vultrusercontent.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subdomains" : [
      "220.6.vultrusercontent.com",
      "34.220.6.vultrusercontent.com",
      "6.vultrusercontent.com"
   ],
   "subnet" : "70.34.192.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
64.176.83.122

Network
64.176.64.0/19

Domain(s)
vultrusercontent.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://64.176.83.122:8984/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
64.176.83.122.vultrusercontent.com

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 03:27:06 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:27:06.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -857089965,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS20473",
   "city" : "Singapore",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 03:27:06 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vultrusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "constant.com",
         "vultr.com"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "NET-64-176-80-0-23",
      "organization" : "Vultr Holdings, LLC",
      "subnet" : "64.176.80.0/20"
   },
   "host" : [
      64
   ],
   "hostname" : [
      "64.176.83.122.vultrusercontent.com"
   ],
   "ip" : "64.176.83.122",
   "ipv6" : "false",
   "latitude" : "1.3078",
   "location" : "1.3078,103.6818",
   "longitude" : "103.6818",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8984,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "64.176.83.122.vultrusercontent.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "122.vultrusercontent.com",
      "176.83.122.vultrusercontent.com",
      "83.122.vultrusercontent.com"
   ],
   "subnet" : "64.176.64.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
45.77.250.88

Network
45.76.0.0/15

Domain(s)
vultrusercontent.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://45.77.250.88:8984/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
45.77.250.88.vultrusercontent.com

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.23.3

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8f4262e9d39fce1d46cbd86caba71bc9

HTTP Header MD5
c3aa27ed3b42ce6989c1a3b3b1fda80b

HTTP Body MD5
04672d0a98ffcd457c06e5be0e5ee243

HTTP/1.1 400 Bad Request
Server: nginx/1.23.3
Date: Thu, 07 Nov 2024 03:09:38 GMT
Content-Type: text/html
Content-Length: 255
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx/1.23.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T03:09:39.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "04672d0a98ffcd457c06e5be0e5ee243",
         "bodymmh3" : -1165575734,
         "headermd5" : "c3aa27ed3b42ce6989c1a3b3b1fda80b",
         "headermmh3" : 496578773,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 407
   },
   "asn" : "AS20473",
   "city" : "Singapore",
   "country" : "SG",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.23.3\r\nDate: Thu, 07 Nov 2024 03:09:38 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.23.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "8f4262e9d39fce1d46cbd86caba71bc9",
   "datammh3" : -938381467,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vultrusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "SG",
      "countryname" : "Singapore",
      "domain" : [
         "constant.com",
         "vultr.com"
      ],
      "isineu" : "false",
      "latitude" : "1.352083",
      "location" : "1.352083,103.819836",
      "longitude" : "103.819836",
      "netname" : "NET-45-77-240-0-23",
      "organization" : "Vultr Holdings, LLC",
      "subnet" : "45.77.240.0/20"
   },
   "host" : [
      45
   ],
   "hostname" : [
      "45.77.250.88.vultrusercontent.com"
   ],
   "ip" : "45.77.250.88",
   "ipv6" : "false",
   "latitude" : "1.3078",
   "location" : "1.3078,103.6818",
   "longitude" : "103.6818",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8984,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.23.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "45.77.250.88.vultrusercontent.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "250.88.vultrusercontent.com",
      "77.250.88.vultrusercontent.com",
      "88.vultrusercontent.com"
   ],
   "subnet" : "45.76.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
158.247.241.99

Network
158.247.192.0/18

Domain(s)
constant.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://158.247.241.99:8984/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
158-247-241-99.constant.com

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 01:11:20 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T01:11:20.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : 1871533594,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS20473",
   "city" : "Seoul",
   "country" : "KR",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 01:11:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "constant.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "choopa.com",
         "constant.com",
         "vultr.com"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "CONSTANT-AP",
      "organization" : "The Constant Company, LLC",
      "subnet" : "158.247.192.0/18"
   },
   "host" : [
      "158-247-241-99"
   ],
   "hostname" : [
      "158-247-241-99.constant.com"
   ],
   "ip" : "158.247.241.99",
   "ipv6" : "false",
   "latitude" : "37.5681",
   "location" : "37.5681,126.8998",
   "longitude" : "126.8998",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8984,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "158-247-241-99.constant.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subnet" : "158.247.192.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
45.63.93.96

Network
45.63.64.0/18

Domain(s)
vultrusercontent.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://45.63.93.96:8984/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
45.63.93.96.vultrusercontent.com

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 00:36:42 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T00:36:42.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -413795473,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS20473",
   "city" : "Santa Clara",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 00:36:42 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vultrusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "constant.com",
         "vultr.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NET-45-63-64-0-23",
      "organization" : "Vultr Holdings, LLC",
      "subnet" : "45.63.64.0/19"
   },
   "host" : [
      45
   ],
   "hostname" : [
      "45.63.93.96.vultrusercontent.com"
   ],
   "ip" : "45.63.93.96",
   "ipv6" : "false",
   "latitude" : "37.3931",
   "location" : "37.3931,-121.9620",
   "longitude" : "-121.9620",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8984,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "45.63.93.96.vultrusercontent.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "63.93.96.vultrusercontent.com",
      "93.96.vultrusercontent.com",
      "96.vultrusercontent.com"
   ],
   "subnet" : "45.63.64.0/18",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
181.215.70.143

Network
181.215.70.0/24

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://181.215.70.143:8984/ 407

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
beff904528226673ee6dbdb9e7fe6002

HTTP Header MD5
4bd5a82db187fbf06a2b7f25b880c717

HTTP Body MD5
917a0ae17b6e9db13c448d39f37c69ca

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

Proxy Authentication Required

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T00:19:36.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "917a0ae17b6e9db13c448d39f37c69ca",
         "bodymmh3" : -1539650452,
         "headermd5" : "4bd5a82db187fbf06a2b7f25b880c717",
         "headermmh3" : 372433470
      },
      "length" : 111
   },
   "asn" : "AS20473",
   "city" : "Melbourne",
   "country" : "AU",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 407 Proxy Authentication Required\r\nProxy-Authenticate: Basic realm=\"\"\r\n\r\nProxy Authentication Required",
   "datamd5" : "beff904528226673ee6dbdb9e7fe6002",
   "datammh3" : 501879459,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "ip" : "181.215.70.143",
   "ipv6" : "false",
   "latitude" : "-37.8159",
   "location" : "-37.8159,144.9669",
   "longitude" : "144.9669",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8984,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Proxy Authentication Required",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 407,
   "subnet" : "181.215.70.0/24",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
45.63.11.248

Network
45.63.0.0/19

Domain(s)
vultrusercontent.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://45.63.11.248:8984/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
45.63.11.248.vultrusercontent.com

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 07 Nov 2024 00:10:23 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T00:10:23.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : 186992242,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS20473",
   "city" : "Piscataway",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 07 Nov 2024 00:10:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vultrusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "constant.com",
         "vultr.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NET-45-63-0-0-23",
      "organization" : "Vultr Holdings, LLC",
      "subnet" : "45.63.0.0/20"
   },
   "host" : [
      45
   ],
   "hostname" : [
      "45.63.11.248.vultrusercontent.com"
   ],
   "ip" : "45.63.11.248",
   "ipv6" : "false",
   "latitude" : "40.5511",
   "location" : "40.5511,-74.4606",
   "longitude" : "-74.4606",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8984,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "45.63.11.248.vultrusercontent.com"
   ],
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "11.248.vultrusercontent.com",
      "248.vultrusercontent.com",
      "63.11.248.vultrusercontent.com"
   ],
   "subnet" : "45.63.0.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
208.72.155.212

Network
208.72.152.0/22

Domain(s)
vultrusercontent.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://208.72.155.212:8984/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
208.72.155.212.vultrusercontent.com

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Wed, 06 Nov 2024 23:52:59 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-06T23:52:59.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -939597376,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS20473",
   "city" : "Honolulu",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Wed, 06 Nov 2024 23:52:59 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vultrusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "constant.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "CONSTANT",
      "organization" : "The Constant Company, LLC",
      "subnet" : "208.72.152.0/22"
   },
   "host" : [
      208
   ],
   "hostname" : [
      "208.72.155.212.vultrusercontent.com"
   ],
   "ip" : "208.72.155.212",
   "ipv6" : "false",
   "latitude" : "21.3038",
   "location" : "21.3038,-157.8664",
   "longitude" : "-157.8664",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8984,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "208.72.155.212.vultrusercontent.com"
   ],
   "seen_date" : "2024-11-06",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "155.212.vultrusercontent.com",
      "212.vultrusercontent.com",
      "72.155.212.vultrusercontent.com"
   ],
   "subnet" : "208.72.152.0/22",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
45.77.157.87

Network
45.76.0.0/15

Domain(s)
vultrusercontent.com

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://45.77.157.87:8984/ 400

HTTP Title
400 The plain HTTP request was sent to HTTPS port

Reverse DNS
45.77.157.87.vultrusercontent.com

ASN
AS20473

Organization
AS-VULTR

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
0c1820e0d381850a77897bf32978a1f0

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
ea425366a98dfc499c0cbeedb9a4f02a

HTTP/1.1 400 Bad Request
Server: nginx
Date: Wed, 06 Nov 2024 23:25:34 GMT
Content-Type: text/html
Content-Length: 248
Connection: close

<html>
<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<center>The plain HTTP request was sent to HTTPS port</center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-06T23:25:34.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "ea425366a98dfc499c0cbeedb9a4f02a",
         "bodymmh3" : 1153229498,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -742193477,
         "title" : "400 The plain HTTP request was sent to HTTPS port"
      },
      "length" : 393
   },
   "asn" : "AS20473",
   "city" : "Piscataway",
   "country" : "US",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Wed, 06 Nov 2024 23:25:34 GMT\r\nContent-Type: text/html\r\nContent-Length: 248\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "0c1820e0d381850a77897bf32978a1f0",
   "datammh3" : 190190724,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "vultrusercontent.com"
   ],
   "geolocus" : {
      "asn" : "AS20473",
      "continent" : "NA",
      "continentname" : "North America",
      "country" : "US",
      "countryname" : "United States",
      "domain" : [
         "constant.com",
         "vultr.com"
      ],
      "isineu" : "false",
      "latitude" : "37.09024",
      "location" : "37.09024,-95.712891",
      "longitude" : "-95.712891",
      "netname" : "NET-45-77-156-0-23",
      "organization" : "Vultr Holdings, LLC",
      "subnet" : "45.77.156.0/23"
   },
   "host" : [
      45
   ],
   "hostname" : [
      "45.77.157.87.vultrusercontent.com"
   ],
   "ip" : "45.77.157.87",
   "ipv6" : "false",
   "latitude" : "40.5511",
   "location" : "40.5511,-74.4606",
   "longitude" : "-74.4606",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AS-VULTR",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 8984,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "Bad Request",
   "reverse" : [
      "45.77.157.87.vultrusercontent.com"
   ],
   "seen_date" : "2024-11-06",
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "157.87.vultrusercontent.com",
      "77.157.87.vultrusercontent.com",
      "87.vultrusercontent.com"
   ],
   "subnet" : "45.76.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

Returning 10 result(s) out of 950 in 0.130 second(s)

45.77.116.80:8984 (tcp/http) - last seen on 2024-11-07 at 04:48:19 UTC

70.34.220.6:8984 (tcp/http) - last seen on 2024-11-07 at 04:13:21 UTC

64.176.83.122:8984 (tcp/http) - last seen on 2024-11-07 at 03:27:06 UTC

45.77.250.88:8984 (tcp/http) - last seen on 2024-11-07 at 03:09:39 UTC

158.247.241.99:8984 (tcp/http) - last seen on 2024-11-07 at 01:11:20 UTC

45.63.93.96:8984 (tcp/http) - last seen on 2024-11-07 at 00:36:42 UTC

181.215.70.143:8984 (tcp/http) - last seen on 2024-11-07 at 00:19:36 UTC

45.63.11.248:8984 (tcp/http) - last seen on 2024-11-07 at 00:10:23 UTC

208.72.155.212:8984 (tcp/http) - last seen on 2024-11-06 at 23:52:59 UTC

45.77.157.87:8984 (tcp/http) - last seen on 2024-11-06 at 23:25:34 UTC