Returning 10 result(s) out of 48 in 0.063 second(s)

  • 154.204.58.23:5683 (tcp/http) - last seen on 2024-11-21 at 08:40:34 UTC

    • IP
      154.204.58.23
      Network
      154.204.58.0/23
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://154.204.58.23:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Thu, 21 Nov 2024 08:40:37 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:40:34.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : 1785858468,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS133199",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Thu, 21 Nov 2024 08:40:37 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS133199",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "cloudinnovation.org"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "SonderCloud_Limited",
            "organization" : "SonderCloud Limited",
            "subnet" : "154.204.58.0/23"
         },
         "ip" : "154.204.58.23",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SonderCloud Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "154.204.58.0/23",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 45.207.53.157:5683 (tcp/http) - last seen on 2024-11-21 at 05:33:51 UTC

    • IP
      45.207.53.157
      Network
      45.207.48.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://45.207.53.157:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Thu, 21 Nov 2024 05:33:51 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T05:33:51.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : 1631497963,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS133199",
         "country" : "MU",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Thu, 21 Nov 2024 05:33:51 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS133199",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "cloudinnovation.org"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "SonderCloud_Limited",
            "organization" : "SonderCloud Limited",
            "subnet" : "45.207.48.0/21"
         },
         "ip" : "45.207.53.157",
         "ipv6" : "false",
         "latitude" : "-20.3000",
         "location" : "-20.3000,57.5833",
         "longitude" : "57.5833",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SonderCloud Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "45.207.48.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 208.87.200.85:5683 (tcp/http) - last seen on 2024-11-20 at 19:54:24 UTC

    • IP
      208.87.200.85
      Network
      208.87.200.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://208.87.200.85:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Wed, 20 Nov 2024 19:54:23 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T19:54:24.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : -1776305480,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS133199",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Wed, 20 Nov 2024 19:54:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS133199",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "sondercloud.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "SONDERCLOUDLIMITED-HK",
            "organization" : "SonderCloud Limited",
            "subnet" : "208.87.200.0/22"
         },
         "ip" : "208.87.200.85",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SonderCloud Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-20",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "208.87.200.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 154.204.43.65:5683 (tcp/http) - last seen on 2024-11-20 at 09:28:11 UTC

    • IP
      154.204.43.65
      Network
      154.204.43.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://154.204.43.65:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Wed, 20 Nov 2024 09:28:09 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T09:28:11.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : -1168556869,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS133199",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Wed, 20 Nov 2024 09:28:09 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS133199",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "cloudinnovation.org"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "SonderCloud_Limited",
            "organization" : "SonderCloud Limited",
            "subnet" : "154.204.43.0/24"
         },
         "ip" : "154.204.43.65",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SonderCloud Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-20",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "154.204.43.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 206.119.167.18:5683 (tcp/http) - last seen on 2024-11-19 at 23:24:08 UTC

    • IP
      206.119.167.18
      Network
      206.119.160.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://206.119.167.18:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Tue, 19 Nov 2024 23:24:07 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-19T23:24:08.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : 1916087445,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS133199",
         "city" : "Los Angeles",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Tue, 19 Nov 2024 23:24:07 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS133199",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "cogentco.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "COGENT-206-119-16",
            "organization" : "The Internet Access Company",
            "subnet" : "206.119.164.0/22"
         },
         "ip" : "206.119.167.18",
         "ipv6" : "false",
         "latitude" : "34.0544",
         "location" : "34.0544,-118.2441",
         "longitude" : "-118.2441",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SonderCloud Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-19",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "206.119.160.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 49.0.236.241:5683 (tcp/http) - last seen on 2024-11-19 at 07:55:48 UTC

    • IP
      49.0.236.241
      Network
      49.0.224.0/19
      Domain(s)
      hwclouds-dns.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://49.0.236.241:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      ecs-49-0-236-241.compute.hwclouds-dns.com
      ASN
      AS136907
      Organization
      HUAWEI CLOUDS
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Tue, 19 Nov 2024 07:55:48 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-19T07:55:48.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : 30983955,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS136907",
         "city" : "Hong Kong",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Tue, 19 Nov 2024 07:55:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "hwclouds-dns.com"
         ],
         "geolocus" : {
            "asn" : "AS136907",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "huawei.com",
               "huaweicloud.com",
               "hwclouds-dns.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "Huawei-Cloud-Hongkong",
            "organization" : "HUAWEI INTERNATIONAL PTE. LTD.",
            "subnet" : "49.0.224.0/19"
         },
         "host" : [
            "ecs-49-0-236-241"
         ],
         "hostname" : [
            "ecs-49-0-236-241.compute.hwclouds-dns.com"
         ],
         "ip" : "49.0.236.241",
         "ipv6" : "false",
         "latitude" : "22.2842",
         "location" : "22.2842,114.1759",
         "longitude" : "114.1759",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "HUAWEI CLOUDS",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "ecs-49-0-236-241.compute.hwclouds-dns.com"
         ],
         "seen_date" : "2024-11-19",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "compute.hwclouds-dns.com"
         ],
         "subnet" : "49.0.224.0/19",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 96.126.97.195:5683 (tcp/http) - last seen on 2024-11-18 at 23:32:25 UTC

    • IP
      96.126.97.195
      Network
      96.126.96.0/19
      Domain(s)
      linodeusercontent.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://96.126.97.195:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      Reverse DNS
      96-126-97-195.ip.linodeusercontent.com
      ASN
      AS63949
      Organization
      Akamai Connected Cloud
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Mon, 18 Nov 2024 23:32:25 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-18T23:32:25.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : 273872285,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS63949",
         "city" : "Fremont",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Mon, 18 Nov 2024 23:32:25 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "linodeusercontent.com"
         ],
         "geolocus" : {
            "asn" : "AS63949",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "akamai.com",
               "linode.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "LINODE",
            "organization" : "Linode",
            "subnet" : "96.126.96.0/19"
         },
         "host" : [
            "96-126-97-195"
         ],
         "hostname" : [
            "96-126-97-195.ip.linodeusercontent.com"
         ],
         "ip" : "96.126.97.195",
         "ipv6" : "false",
         "latitude" : "37.5625",
         "location" : "37.5625,-122.0004",
         "longitude" : "-122.0004",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Akamai Connected Cloud",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "reverse" : [
            "96-126-97-195.ip.linodeusercontent.com"
         ],
         "seen_date" : "2024-11-18",
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "ip.linodeusercontent.com"
         ],
         "subnet" : "96.126.96.0/19",
         "tld" : [
            "com"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 154.197.50.9:5683 (tcp/http) - last seen on 2024-11-18 at 19:34:24 UTC

    • IP
      154.197.50.9
      Network
      154.197.50.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://154.197.50.9:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Mon, 18 Nov 2024 19:34:23 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-18T19:34:24.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : 1600756848,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS133199",
         "country" : "SC",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Mon, 18 Nov 2024 19:34:23 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS133199",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "cloudinnovation.org"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "SonderCloud_Limited",
            "organization" : "SonderCloud Limited",
            "subnet" : "154.197.50.0/24"
         },
         "ip" : "154.197.50.9",
         "ipv6" : "false",
         "latitude" : "-4.5833",
         "location" : "-4.5833,55.6667",
         "longitude" : "55.6667",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SonderCloud Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-18",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "154.197.50.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 208.87.200.53:5683 (tcp/http) - last seen on 2024-11-18 at 19:21:43 UTC

    • IP
      208.87.200.53
      Network
      208.87.200.0/21
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://208.87.200.53:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS133199
      Organization
      SonderCloud Limited
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Mon, 18 Nov 2024 19:21:43 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-18T19:21:43.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : 1447815733,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS133199",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Mon, 18 Nov 2024 19:21:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS133199",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "sondercloud.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "SONDERCLOUDLIMITED-HK",
            "organization" : "SonderCloud Limited",
            "subnet" : "208.87.200.0/22"
         },
         "ip" : "208.87.200.53",
         "ipv6" : "false",
         "latitude" : "22.2578",
         "location" : "22.2578,114.1657",
         "longitude" : "114.1657",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "SonderCloud Limited",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-18",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "208.87.200.0/21",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 178.177.40.137:5683 (tcp/http) - last seen on 2024-11-18 at 06:29:26 UTC

    • IP
      178.177.40.137
      Network
      178.177.40.0/24
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      http://178.177.40.137:5683/ 400

      HTTP Title
      400 The plain HTTP request was sent to HTTPS port
      ASN
      AS24866
      Organization
      PJSC MegaFon
      Protocol
      http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      Product
      F5 Nginx 1.20.1
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3d43c6b14bab5120a590f1db25c65845
      HTTP Header MD5
      b188a274e4dd16917329dd5641e9140e
      HTTP Body MD5
      b848e7fd55b1559997bfa21dd0df6f3b
    • HTTP/1.1 400 Bad Request
      Server: nginx/1.20.1
      Date: Mon, 18 Nov 2024 06:28:14 GMT
      Content-Type: text/html
      Content-Length: 255
      Connection: close
      
      <html>
      <head><title>400 The plain HTTP request was sent to HTTPS port</title></head>
      <body>
      <center><h1>400 Bad Request</h1></center>
      <center>The plain HTTP request was sent to HTTPS port</center>
      <hr><center>nginx/1.20.1</center>
      </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-18T06:29:26.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "b848e7fd55b1559997bfa21dd0df6f3b",
               "bodymmh3" : -956574224,
               "headermd5" : "b188a274e4dd16917329dd5641e9140e",
               "headermmh3" : -329170818,
               "title" : "400 The plain HTTP request was sent to HTTPS port"
            },
            "length" : 407
         },
         "asn" : "AS24866",
         "country" : "RU",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.20.1\r\nDate: Mon, 18 Nov 2024 06:28:14 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 The plain HTTP request was sent to HTTPS port</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<center>The plain HTTP request was sent to HTTPS port</center>\r\n<hr><center>nginx/1.20.1</center>\r\n</body>\r\n</html>\r\n",
         "datamd5" : "3d43c6b14bab5120a590f1db25c65845",
         "datammh3" : 1319440318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "ip" : "178.177.40.137",
         "ipv6" : "false",
         "latitude" : "55.7386",
         "location" : "55.7386,37.6068",
         "longitude" : "37.6068",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "PJSC MegaFon",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 5683,
         "product" : "Nginx",
         "productvendor" : "F5",
         "productversion" : "1.20.1",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Bad Request",
         "seen_date" : "2024-11-18",
         "source" : "datascan",
         "status" : 400,
         "subnet" : "178.177.40.0/24",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }