server=="cloudflare" && is_domain=false && banner="Content-Length: 155" && protocol="http" && org!="CLOUDFLARENET" && country="ID" && asn!="59134"
as.org!="Cloudflare London, LLC"&&product.name="CloudFlare"&&header.status_code=="400"&&protocol=="http"&&header.content_length=="655"&&ip.country=="ID"
product:"Cloudflare" country:"ID"
+app:"Cloudflare" +service:"http" +title:"400 The plain HTTP request was sent to HTTPS port" +country:"Singapore"
country:ID title:"400 The plain HTTP request was sent to HTTPS port" product:nginx protocol:"tcp" name:http banner:"Server: cloudflare" banner:"CF-RAY: -" NOT asn:209242
not autonomous_system.name: "CLOUDFLARE*" and services: (software.product: "CloudFlare Load Balancer" and http.response.html_title: "400 The plain HTTP request was sent to HTTPS port") and location.country: "Indonesia"
not labels: ipv6 and not autonomous_system.name: "cloudflare*" and ((services: (software.vendor: "CloudFlare" and services.http.response.html_title: "403 Forbidden" and not tls.certificates.leaf_data.names="*cloudflare*" and extended_service_name: "HTTPS")) or (services: (software.vendor: "CloudFlare" and extended_service_name: "HTTP" and http.response.html_title: "400 The plain HTTP request was sent to HTTPS port"))) and location.country: "Indonesia"