Returning 10 result(s) out of 729,397 in 0.104 second(s)

  • 52.246.177.65:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:30:30 UTC

    • IP
      52.246.177.65
      Network
      52.224.0.0/11
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME Infra CA 06
      Subject Common Name
      0c395949-1fda-403f-bbd6-93969d194acb.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-0c395949-1fda-403f-bbd6-93969d194acb-5f93a757eb4b.gwt.cloudapp.net
      SHA256 Fingerprint
      2582b19b55c701fda00a157de0d26e8d1ec851931f0f501db1cc19f61e08ac31
      Validity Not Before
      2024-07-16T15:44:20Z
      Validity Not After
      2025-07-11T15:44:20Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:30:30 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:30:30.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : 29514782,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "city" : "Tokyo",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:30:30 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "79bce50fa9d320cf270d51ff4f7bcf76",
            "sha1" : "12b62b71822875409fa628cd628dc854e60747e6",
            "sha256" : "2582b19b55c701fda00a157de0d26e8d1ec851931f0f501db1cc19f61e08ac31"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "52.246.160.0/19"
         },
         "host" : [
            "0c395949-1fda-403f-bbd6-93969d194acb",
            "azuregateway-0c395949-1fda-403f-bbd6-93969d194acb-5f93a757eb4b"
         ],
         "hostname" : [
            "0c395949-1fda-403f-bbd6-93969d194acb.gwt.cloudapp.net",
            "azuregateway-0c395949-1fda-403f-bbd6-93969d194acb-5f93a757eb4b.gwt.cloudapp.net"
         ],
         "ip" : "52.246.177.65",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME Infra CA 06"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "35.6893",
         "location" : "35.6893,139.6899",
         "longitude" : "139.6899",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "1e:04:f7:2d:db:8b:1f:23:0f:d6:c9:75:31:00:00:04:f7:2d:db",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-0c395949-1fda-403f-bbd6-93969d194acb-5f93a757eb4b.gwt.cloudapp.net"
            ],
            "commonname" : "0c395949-1fda-403f-bbd6-93969d194acb.gwt.cloudapp.net"
         },
         "subnet" : "52.224.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-07-11T15:44:20Z",
            "notbefore" : "2024-07-16T15:44:20Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 48.210.12.66:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:30:01 UTC

    • IP
      48.210.12.66
      Network
      48.192.0.0/11
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME Infra CA 06
      Subject Common Name
      d698006d-aaf0-4aef-8fdd-07e30b3aa63b.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-d698006d-aaf0-4aef-8fdd-07e30b3aa63b-e1b0737f54f3.gwt.cloudapp.net
      SHA256 Fingerprint
      65fb6bd922a08e1e61ce7539ea8b7e17ef6f8d8b08541763bd9c00d03b91812e
      Validity Not Before
      2024-10-01T05:09:24Z
      Validity Not After
      2025-09-26T05:09:24Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:30:01 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:30:01.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : 882800289,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "city" : "Tokyo",
         "country" : "JP",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:30:01 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "faa6c6c84505ea430f3a73bf6844ac69",
            "sha1" : "04a3cf3ee7f60b68b897f31ea024bed4ab4237cd",
            "sha256" : "65fb6bd922a08e1e61ce7539ea8b7e17ef6f8d8b08541763bd9c00d03b91812e"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "GB",
            "countryname" : "United Kingdom",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "55.378051",
            "location" : "55.378051,-3.435973",
            "longitude" : "-3.435973",
            "netname" : "UK-MICROSOFT-19901207",
            "organization" : "Microsoft Limited",
            "subnet" : "48.192.0.0/11"
         },
         "host" : [
            "azuregateway-d698006d-aaf0-4aef-8fdd-07e30b3aa63b-e1b0737f54f3",
            "d698006d-aaf0-4aef-8fdd-07e30b3aa63b"
         ],
         "hostname" : [
            "azuregateway-d698006d-aaf0-4aef-8fdd-07e30b3aa63b-e1b0737f54f3.gwt.cloudapp.net",
            "d698006d-aaf0-4aef-8fdd-07e30b3aa63b.gwt.cloudapp.net"
         ],
         "ip" : "48.210.12.66",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME Infra CA 06"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "35.6893",
         "location" : "35.6893,139.6899",
         "longitude" : "139.6899",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "1e:05:7a:0a:53:79:28:1f:40:07:8d:be:8b:00:00:05:7a:0a:53",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-d698006d-aaf0-4aef-8fdd-07e30b3aa63b-e1b0737f54f3.gwt.cloudapp.net"
            ],
            "commonname" : "d698006d-aaf0-4aef-8fdd-07e30b3aa63b.gwt.cloudapp.net"
         },
         "subnet" : "48.192.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-09-26T05:09:24Z",
            "notbefore" : "2024-10-01T05:09:24Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 20.107.69.164:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:30:00 UTC

    • IP
      20.107.69.164
      Network
      20.64.0.0/10
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME Infra CA 06
      Subject Common Name
      4b830069-cb51-4ff3-b9a9-ec7965c4842f.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-4b830069-cb51-4ff3-b9a9-ec7965c4842f-1de797e51ef1.gwt.cloudapp.net
      SHA256 Fingerprint
      4f3865b1131581fbb9deba6478f4ff9ada6e150efaa4b71480f23a12afe5b309
      Validity Not Before
      2024-07-17T16:19:53Z
      Validity Not After
      2025-07-12T16:19:53Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:29:59 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:30:00.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : -433467975,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "city" : "Amsterdam",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:29:59 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "9cb616d2c7cec1b0cab90825022c1431",
            "sha1" : "e4c157ff17b6c5bfc0b18faa464d342c574bed3e",
            "sha256" : "4f3865b1131581fbb9deba6478f4ff9ada6e150efaa4b71480f23a12afe5b309"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "20.107.0.0/17"
         },
         "host" : [
            "4b830069-cb51-4ff3-b9a9-ec7965c4842f",
            "azuregateway-4b830069-cb51-4ff3-b9a9-ec7965c4842f-1de797e51ef1"
         ],
         "hostname" : [
            "4b830069-cb51-4ff3-b9a9-ec7965c4842f.gwt.cloudapp.net",
            "azuregateway-4b830069-cb51-4ff3-b9a9-ec7965c4842f-1de797e51ef1.gwt.cloudapp.net"
         ],
         "ip" : "20.107.69.164",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME Infra CA 06"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "52.3759",
         "location" : "52.3759,4.8975",
         "longitude" : "4.8975",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "1e:04:f9:18:4d:55:c1:3c:02:94:5e:24:15:00:00:04:f9:18:4d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-4b830069-cb51-4ff3-b9a9-ec7965c4842f-1de797e51ef1.gwt.cloudapp.net"
            ],
            "commonname" : "4b830069-cb51-4ff3-b9a9-ec7965c4842f.gwt.cloudapp.net"
         },
         "subnet" : "20.64.0.0/10",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-07-12T16:19:53Z",
            "notbefore" : "2024-07-17T16:19:53Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 13.66.220.164:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:29:59 UTC

    • IP
      13.66.220.164
      Network
      13.64.0.0/11
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME Infra CA 02
      Subject Common Name
      4c5dfeaa-0901-407f-b4b5-8d365ca60288.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-4c5dfeaa-0901-407f-b4b5-8d365ca60288-174b35f449ca.gwt.cloudapp.net
      SHA256 Fingerprint
      039fc95e9c59b3eb949afdd33ad0f4e35e492c1fcb1cb830656254094786c1ea
      Validity Not Before
      2024-07-19T00:41:08Z
      Validity Not After
      2025-07-14T00:41:08Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:29:59 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:29:59.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : -433467975,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:29:59 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "f771515ce3e68a002cb028332d9a5786",
            "sha1" : "683a6ed48170ed46126a0c1f7b870305b85f7bff",
            "sha256" : "039fc95e9c59b3eb949afdd33ad0f4e35e492c1fcb1cb830656254094786c1ea"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "13.66.0.0/16"
         },
         "host" : [
            "4c5dfeaa-0901-407f-b4b5-8d365ca60288",
            "azuregateway-4c5dfeaa-0901-407f-b4b5-8d365ca60288-174b35f449ca"
         ],
         "hostname" : [
            "4c5dfeaa-0901-407f-b4b5-8d365ca60288.gwt.cloudapp.net",
            "azuregateway-4c5dfeaa-0901-407f-b4b5-8d365ca60288-174b35f449ca.gwt.cloudapp.net"
         ],
         "ip" : "13.66.220.164",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME Infra CA 02"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "47.6034",
         "location" : "47.6034,-122.3414",
         "longitude" : "-122.3414",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "7f:03:a8:e3:f0:ad:a7:19:b7:01:70:e0:ae:00:04:03:a8:e3:f0",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-4c5dfeaa-0901-407f-b4b5-8d365ca60288-174b35f449ca.gwt.cloudapp.net"
            ],
            "commonname" : "4c5dfeaa-0901-407f-b4b5-8d365ca60288.gwt.cloudapp.net"
         },
         "subnet" : "13.64.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-07-14T00:41:08Z",
            "notbefore" : "2024-07-19T00:41:08Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.162.236.71:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:29:35 UTC

    • IP
      52.162.236.71
      Network
      52.160.0.0/11
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME INFRA CA 01
      Subject Common Name
      3102007a-8cb2-4a32-98fb-c52077cb1745.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-3102007a-8cb2-4a32-98fb-c52077cb1745-da1d228efae3.gwt.cloudapp.net
      SHA256 Fingerprint
      c2c3a288d89fdf5bcf9f91f3fe610ff0ad9aa86e091b86eb8f87cb7c610f873b
      Validity Not Before
      2024-07-31T08:25:59Z
      Validity Not After
      2025-07-26T08:25:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:29:34 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:29:35.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : 2073142945,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "city" : "Chicago",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:29:34 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "a7b5b7d0a80a4f7cf10f6bc8844bab66",
            "sha1" : "c5d08ebc0d23732a389d7744a6641e8b61e994db",
            "sha256" : "c2c3a288d89fdf5bcf9f91f3fe610ff0ad9aa86e091b86eb8f87cb7c610f873b"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "52.162.0.0/16"
         },
         "host" : [
            "3102007a-8cb2-4a32-98fb-c52077cb1745",
            "azuregateway-3102007a-8cb2-4a32-98fb-c52077cb1745-da1d228efae3"
         ],
         "hostname" : [
            "3102007a-8cb2-4a32-98fb-c52077cb1745.gwt.cloudapp.net",
            "azuregateway-3102007a-8cb2-4a32-98fb-c52077cb1745-da1d228efae3.gwt.cloudapp.net"
         ],
         "ip" : "52.162.236.71",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME INFRA CA 01"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "41.8874",
         "location" : "41.8874,-87.6318",
         "longitude" : "-87.6318",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "3a:03:64:bb:59:48:2d:de:1d:82:b1:2a:0e:00:04:03:64:bb:59",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-3102007a-8cb2-4a32-98fb-c52077cb1745-da1d228efae3.gwt.cloudapp.net"
            ],
            "commonname" : "3102007a-8cb2-4a32-98fb-c52077cb1745.gwt.cloudapp.net"
         },
         "subnet" : "52.160.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-07-26T08:25:59Z",
            "notbefore" : "2024-07-31T08:25:59Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 51.104.22.71:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:29:34 UTC

    • IP
      51.104.22.71
      Network
      51.104.0.0/15
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME Infra CA 06
      Subject Common Name
      00a90072-d749-47f7-ae52-d62a8894e78f.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-00a90072-d749-47f7-ae52-d62a8894e78f-71699a670c4c.gwt.cloudapp.net
      SHA256 Fingerprint
      dab1b35232a72636bc96fa46bca6e6e2f8dcf5167187dfab7917d129308df66f
      Validity Not Before
      2024-07-14T20:20:11Z
      Validity Not After
      2025-07-09T20:20:11Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:29:34 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:29:34.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : 2073142945,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "city" : "London",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:29:34 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "2d24d372d62b96a7a8aa724da7a99fe3",
            "sha1" : "07f415b5b9e744c11331cd2124b9063501bcb00f",
            "sha256" : "dab1b35232a72636bc96fa46bca6e6e2f8dcf5167187dfab7917d129308df66f"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "GB",
            "countryname" : "United Kingdom",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "55.378051",
            "location" : "55.378051,-3.435973",
            "longitude" : "-3.435973",
            "netname" : "MICROSOFT",
            "organization" : "Microsoft Limited",
            "subnet" : "51.104.0.0/15"
         },
         "host" : [
            "00a90072-d749-47f7-ae52-d62a8894e78f",
            "azuregateway-00a90072-d749-47f7-ae52-d62a8894e78f-71699a670c4c"
         ],
         "hostname" : [
            "00a90072-d749-47f7-ae52-d62a8894e78f.gwt.cloudapp.net",
            "azuregateway-00a90072-d749-47f7-ae52-d62a8894e78f-71699a670c4c.gwt.cloudapp.net"
         ],
         "ip" : "51.104.22.71",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME Infra CA 06"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "51.5074",
         "location" : "51.5074,-0.1196",
         "longitude" : "-0.1196",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "1e:04:f3:e1:54:da:7e:37:38:78:db:1c:83:00:00:04:f3:e1:54",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-00a90072-d749-47f7-ae52-d62a8894e78f-71699a670c4c.gwt.cloudapp.net"
            ],
            "commonname" : "00a90072-d749-47f7-ae52-d62a8894e78f.gwt.cloudapp.net"
         },
         "subnet" : "51.104.0.0/15",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-07-09T20:20:11Z",
            "notbefore" : "2024-07-14T20:20:11Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.233.39.210:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:29:33 UTC

    • IP
      52.233.39.210
      Network
      52.224.0.0/11
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME Infra CA 02
      Subject Common Name
      6e97b7a4-9328-4285-bfd7-5f2a07952ae2.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-6e97b7a4-9328-4285-bfd7-5f2a07952ae2-a2994a2b7442.gwt.cloudapp.net
      SHA256 Fingerprint
      da6983390e8fcd727adb69e8b4ab5e276b502aa9bd5fb3c67f659fc0ab29bfc6
      Validity Not Before
      2024-08-27T16:12:57Z
      Validity Not After
      2025-08-22T16:12:57Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:29:33 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:29:33.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : 472989433,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "city" : "Toronto",
         "country" : "CA",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:29:33 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "9033066058f78e76e81ca678757c987c",
            "sha1" : "7b4038c5863e4d3b295d7b3d0b485fd4f0b47041",
            "sha256" : "da6983390e8fcd727adb69e8b4ab5e276b502aa9bd5fb3c67f659fc0ab29bfc6"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "52.233.0.0/18"
         },
         "host" : [
            "6e97b7a4-9328-4285-bfd7-5f2a07952ae2",
            "azuregateway-6e97b7a4-9328-4285-bfd7-5f2a07952ae2-a2994a2b7442"
         ],
         "hostname" : [
            "6e97b7a4-9328-4285-bfd7-5f2a07952ae2.gwt.cloudapp.net",
            "azuregateway-6e97b7a4-9328-4285-bfd7-5f2a07952ae2-a2994a2b7442.gwt.cloudapp.net"
         ],
         "ip" : "52.233.39.210",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME Infra CA 02"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "43.7090",
         "location" : "43.7090,-79.4057",
         "longitude" : "-79.4057",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "7f:03:ec:ec:11:5b:8a:f5:43:9f:3e:34:8f:00:04:03:ec:ec:11",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-6e97b7a4-9328-4285-bfd7-5f2a07952ae2-a2994a2b7442.gwt.cloudapp.net"
            ],
            "commonname" : "6e97b7a4-9328-4285-bfd7-5f2a07952ae2.gwt.cloudapp.net"
         },
         "subnet" : "52.224.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-08-22T16:12:57Z",
            "notbefore" : "2024-08-27T16:12:57Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 52.233.196.139:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:29:05 UTC

    • IP
      52.233.196.139
      Network
      52.224.0.0/11
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME Infra CA 06
      Subject Common Name
      8cdb0069-bf1a-4a50-b336-cafb3c438480.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-8cdb0069-bf1a-4a50-b336-cafb3c438480-5820f5f27813.gwt.cloudapp.net
      SHA256 Fingerprint
      b0e6cad220970c2c2b72cc13b4f18bf2275d96bdfa6d4403fcf61808132638d5
      Validity Not Before
      2024-07-18T02:31:53Z
      Validity Not After
      2025-07-13T02:31:53Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:29:04 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:29:05.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : 2100388024,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "city" : "Amsterdam",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:29:04 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "d7503e7115ab6971f71499b073ac642e",
            "sha1" : "b5699348b8044993eca67ec648a7558686e23e02",
            "sha256" : "b0e6cad220970c2c2b72cc13b4f18bf2275d96bdfa6d4403fcf61808132638d5"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "52.233.128.0/17"
         },
         "host" : [
            "8cdb0069-bf1a-4a50-b336-cafb3c438480",
            "azuregateway-8cdb0069-bf1a-4a50-b336-cafb3c438480-5820f5f27813"
         ],
         "hostname" : [
            "8cdb0069-bf1a-4a50-b336-cafb3c438480.gwt.cloudapp.net",
            "azuregateway-8cdb0069-bf1a-4a50-b336-cafb3c438480-5820f5f27813.gwt.cloudapp.net"
         ],
         "ip" : "52.233.196.139",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME Infra CA 06"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "52.3759",
         "location" : "52.3759,4.8975",
         "longitude" : "4.8975",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "1e:04:f9:d3:37:fe:f6:de:3c:52:60:74:db:00:00:04:f9:d3:37",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-8cdb0069-bf1a-4a50-b336-cafb3c438480-5820f5f27813.gwt.cloudapp.net"
            ],
            "commonname" : "8cdb0069-bf1a-4a50-b336-cafb3c438480.gwt.cloudapp.net"
         },
         "subnet" : "52.224.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-07-13T02:31:53Z",
            "notbefore" : "2024-07-18T02:31:53Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 20.16.201.71:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:29:03 UTC

    • IP
      20.16.201.71
      Network
      20.0.0.0/11
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME Infra CA 02
      Subject Common Name
      7e940069-df77-44c7-ad27-f71a2aac0b0a.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-7e940069-df77-44c7-ad27-f71a2aac0b0a-9ac4b5bcbf81.gwt.cloudapp.net
      SHA256 Fingerprint
      2f2aa5fb33f40c15a98e1887a993316f15697a6b599da6310f57501de501cab7
      Validity Not Before
      2024-07-18T00:04:56Z
      Validity Not After
      2025-07-13T00:04:56Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:29:03 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:29:03.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : -1969622215,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "city" : "Amsterdam",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:29:03 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "bb08452623741ca4b3c29a5a59c6220f",
            "sha1" : "8d04b975c3c74646d24623457ff1177788a1ab4e",
            "sha256" : "2f2aa5fb33f40c15a98e1887a993316f15697a6b599da6310f57501de501cab7"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "20.16.0.0/16"
         },
         "host" : [
            "7e940069-df77-44c7-ad27-f71a2aac0b0a",
            "azuregateway-7e940069-df77-44c7-ad27-f71a2aac0b0a-9ac4b5bcbf81"
         ],
         "hostname" : [
            "7e940069-df77-44c7-ad27-f71a2aac0b0a.gwt.cloudapp.net",
            "azuregateway-7e940069-df77-44c7-ad27-f71a2aac0b0a-9ac4b5bcbf81.gwt.cloudapp.net"
         ],
         "ip" : "20.16.201.71",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME Infra CA 02"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "52.3759",
         "location" : "52.3759,4.8975",
         "longitude" : "4.8975",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "7f:03:a6:fd:cc:9d:14:de:c4:63:59:3b:62:00:04:03:a6:fd:cc",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-7e940069-df77-44c7-ad27-f71a2aac0b0a-9ac4b5bcbf81.gwt.cloudapp.net"
            ],
            "commonname" : "7e940069-df77-44c7-ad27-f71a2aac0b0a.gwt.cloudapp.net"
         },
         "subnet" : "20.0.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-07-13T00:04:56Z",
            "notbefore" : "2024-07-18T00:04:56Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 20.162.248.150:20000 (tcp/http/tls) - last seen on 2024-11-07 at 05:29:00 UTC

    • IP
      20.162.248.150
      Network
      20.160.0.0/12
      Domain(s)
      cloudapp.net
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      HTTP Title
      Bad Request
      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Microsoft Windows
      Product
      Microsoft HTTPAPI 2.0
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      AME Infra CA 02
      Subject Common Name
      84090072-b3b7-4417-9599-b211c56b1e52.gwt.cloudapp.net
      Subject Alt Name
      azuregateway-84090072-b3b7-4417-9599-b211c56b1e52-18e1fa89c122.gwt.cloudapp.net
      SHA256 Fingerprint
      3e7363fa38cc396f7183fa554b4a51a73ac5ca671f2a3c0f101f7bd9096a27be
      Validity Not Before
      2024-10-02T10:44:29Z
      Validity Not After
      2025-09-27T10:44:29Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      ab7ec59c257a6ef4d994483c583b818c
      HTTP Header MD5
      5f8987fc4ee9770a3292cd04557b2dbf
      HTTP Body MD5
      779df2c90c98bc5e3cb4127ecf04909e
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html; charset=us-ascii
      Server: Microsoft-HTTPAPI/2.0
      Date: Thu, 07 Nov 2024 05:29:00 GMT
      Connection: close
      Content-Length: 326
      
      <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
      <HTML><HEAD><TITLE>Bad Request</TITLE>
      <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
      <BODY><h2>Bad Request - Invalid Verb</h2>
      <hr><p>HTTP Error 400. The request verb is invalid.</p>
      </BODY></HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-07T05:29:00.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "w3.org"
               ],
               "hostname" : [
                  "www.w3.org"
               ],
               "url" : [
                  "http://www.w3.org/TR/html4/strict.dtd"
               ]
            },
            "http" : {
               "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e",
               "bodymmh3" : -640633908,
               "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf",
               "headermmh3" : -1684661634,
               "title" : "Bad Request"
            },
            "length" : 505
         },
         "asn" : "AS8075",
         "ca" : "false",
         "city" : "London",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 07 Nov 2024 05:29:00 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n",
         "datamd5" : "ab7ec59c257a6ef4d994483c583b818c",
         "datammh3" : 1596030123,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "cloudapp.net"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "6e617037ac80fb52d9d677279db87211",
            "sha1" : "efaca9886a08de505a392e01e4e6dd0ea9bfd8f2",
            "sha256" : "3e7363fa38cc396f7183fa554b4a51a73ac5ca671f2a3c0f101f7bd9096a27be"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "MSFT",
            "organization" : "Microsoft Corporation",
            "subnet" : "20.162.0.0/16"
         },
         "host" : [
            "84090072-b3b7-4417-9599-b211c56b1e52",
            "azuregateway-84090072-b3b7-4417-9599-b211c56b1e52-18e1fa89c122"
         ],
         "hostname" : [
            "84090072-b3b7-4417-9599-b211c56b1e52.gwt.cloudapp.net",
            "azuregateway-84090072-b3b7-4417-9599-b211c56b1e52-18e1fa89c122.gwt.cloudapp.net"
         ],
         "ip" : "20.162.248.150",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "AME Infra CA 02"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "51.5074",
         "location" : "51.5074,-0.1196",
         "longitude" : "-0.1196",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 20000,
         "product" : "HTTPAPI",
         "productvendor" : "Microsoft",
         "productversion" : "2.0",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-07",
         "serial" : "7f:04:29:f4:1e:55:1d:1c:7c:60:c7:7d:11:00:04:04:29:f4:1e",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "gwt.cloudapp.net"
         ],
         "subject" : {
            "altname" : [
               "azuregateway-84090072-b3b7-4417-9599-b211c56b1e52-18e1fa89c122.gwt.cloudapp.net"
            ],
            "commonname" : "84090072-b3b7-4417-9599-b211c56b1e52.gwt.cloudapp.net"
         },
         "subnet" : "20.160.0.0/12",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-09-27T10:44:29Z",
            "notbefore" : "2024-10-02T10:44:29Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }