Returning 10 result(s) out of 124 in 0.035 second(s)

  • 89.19.60.115:44443 (tcp/http/tls) - last seen on 2024-11-21 at 08:42:12 UTC

    • IP
      89.19.60.115
      Alternative IP(s)
      104.26.10.249 104.26.11.249 172.67.71.48 2606:4700:20:0:0:0:681a:af9 2606:4700:20:0:0:0:681a:bf9 2606:4700:20:0:0:0:ac43:4730
      Network
      89.19.60.0/22
      Domain(s)
      as199939.net draytek.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://89.19.60.115:44443/ 400

      HTTP Title
      400 - Bad Request
      Reverse DNS
      89-19-60-115.as199939.net
      ASN
      AS199939
      Organization
      KeenSystems B.V.
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Vigor Router
      Issuer Organization
      DrayTek Corp.
      Subject Organization
      DrayTek Corp.
      Subject Common Name
      Vigor Router
      Subject Alt Name
      www.draytek.com
      SHA256 Fingerprint
      ced28a1943f6c75459c06a36f0232d32b6f4e5e451afaf3dd0269ad821cac804
      Validity Not Before
      2024-04-23T07:34:03Z
      Validity Not After
      2025-05-23T07:34:03Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Thu, 21 Nov 2024 08:42:08 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:42:12.000Z",
         "alternativeip" : [
            "104.26.10.249",
            "104.26.11.249",
            "172.67.71.48",
            "2606:4700:20:0:0:0:681a:af9",
            "2606:4700:20:0:0:0:681a:bf9",
            "2606:4700:20:0:0:0:ac43:4730"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : -518131099,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS199939",
         "ca" : "false",
         "city" : "Sint-Oedenrode",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:42:08 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "as199939.net",
            "draytek.com"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "37274cdb2f5b753d824558abfefea62a",
            "sha1" : "c75cdf4ec2472d3f3f1f727105c4de9c1a74574d",
            "sha256" : "ced28a1943f6c75459c06a36f0232d32b6f4e5e451afaf3dd0269ad821cac804"
         },
         "host" : [
            "89-19-60-115",
            "www"
         ],
         "hostname" : [
            "89-19-60-115.as199939.net",
            "www.draytek.com"
         ],
         "ip" : "89.19.60.115",
         "ipv6" : "false",
         "issuer" : {
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "latitude" : "51.5554",
         "location" : "51.5554,5.4561",
         "longitude" : "5.4561",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "KeenSystems B.V.",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "reverse" : [
            "89-19-60-115.as199939.net"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "c5:1e:41:09:73:4e:f5:d5",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subject" : {
            "altname" : [
               "www.draytek.com"
            ],
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "subnet" : "89.19.60.0/22",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-05-23T07:34:03Z",
            "notbefore" : "2024-04-23T07:34:03Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 195.167.112.217:44443 (tcp/http/tls) - last seen on 2024-11-21 at 08:12:20 UTC

    • IP
      195.167.112.217
      Alternative IP(s)
      104.26.10.249 104.26.11.249 172.67.71.48 2606:4700:20:0:0:0:681a:af9 2606:4700:20:0:0:0:681a:bf9 2606:4700:20:0:0:0:ac43:4730
      Network
      195.167.96.0/19
      Domain(s)
      draytek.com otenet.gr
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://195.167.112.217:44443/ 400

      HTTP Title
      400 - Bad Request
      Reverse DNS
      pulse.static.otenet.gr
      ASN
      AS6799
      Organization
      OTEnet S\.A\.
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Vigor Router
      Issuer Organization
      DrayTek Corp.
      Subject Organization
      DrayTek Corp.
      Subject Common Name
      Vigor Router
      Subject Alt Name
      www.draytek.com
      SHA256 Fingerprint
      a4121e6cc470e71c345c616bccd2f8f7abefed046a7d13e07ec6cdec4c3ed782
      Validity Not Before
      2024-10-21T03:30:33Z
      Validity Not After
      2025-11-20T03:30:33Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Thu, 21 Nov 2024 10:12:19 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:12:20.000Z",
         "alternativeip" : [
            "104.26.10.249",
            "104.26.11.249",
            "172.67.71.48",
            "2606:4700:20:0:0:0:681a:af9",
            "2606:4700:20:0:0:0:681a:bf9",
            "2606:4700:20:0:0:0:ac43:4730"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : -846836730,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS6799",
         "ca" : "false",
         "city" : "Athens",
         "country" : "GR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 10:12:19 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "draytek.com",
            "otenet.gr"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "38d21777baab9d597fb84245013d4630",
            "sha1" : "92306565c099fa731ceac8a395bed284bac7e58e",
            "sha256" : "a4121e6cc470e71c345c616bccd2f8f7abefed046a7d13e07ec6cdec4c3ed782"
         },
         "geolocus" : {
            "asn" : "AS6799",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "GR",
            "countryname" : "Greece",
            "domain" : [
               "ote.gr",
               "otenet.gr"
            ],
            "isineu" : "true",
            "latitude" : "39.074208",
            "location" : "39.074208,21.824312",
            "longitude" : "21.824312",
            "netname" : "OTE-DIA-CUSTOMERS",
            "organization" : "OTEnet",
            "subnet" : "195.167.112.0/21"
         },
         "host" : [
            "pulse",
            "www"
         ],
         "hostname" : [
            "pulse.static.otenet.gr",
            "www.draytek.com"
         ],
         "ip" : "195.167.112.217",
         "ipv6" : "false",
         "issuer" : {
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "latitude" : "37.9842",
         "location" : "37.9842,23.7353",
         "longitude" : "23.7353",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "OTEnet S\\.A\\.",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "reverse" : [
            "pulse.static.otenet.gr"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "8b:18:21:1f:b7:76:6d:3f",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "static.otenet.gr"
         ],
         "subject" : {
            "altname" : [
               "www.draytek.com"
            ],
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "subnet" : "195.167.96.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "gr"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-20T03:30:33Z",
            "notbefore" : "2024-10-21T03:30:33Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 94.247.1.230:44443 (tcp/http/tls) - last seen on 2024-11-21 at 07:18:56 UTC

    • IP
      94.247.1.230
      Network
      94.247.0.0/21
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://94.247.1.230:44443/ 400

      HTTP Title
      400 - Bad Request
      ASN
      AS39647
      Organization
      Enreach Netherlands B.V.
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Vigor Router
      Subject Common Name
      Vigor Router
      SHA256 Fingerprint
      90fc6db5b19a9dd5ce65ec17883c05d83eedd1be5f36874f0f43d0f603aea2f1
      Validity Not Before
      2024-05-13T07:19:35Z
      Validity Not After
      2025-06-12T07:19:35Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Thu, 21 Nov 2024 07:18:55 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T07:18:56.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : 1449170311,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS39647",
         "ca" : "false",
         "city" : "Rhenen",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 07:18:55 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "3f0bd0cab470a6f820f7f0069e7e0805",
            "sha1" : "b0379f66e58f44a0c43a1b96d83c9364607c0521",
            "sha256" : "90fc6db5b19a9dd5ce65ec17883c05d83eedd1be5f36874f0f43d0f603aea2f1"
         },
         "ip" : "94.247.1.230",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Vigor Router",
            "country" : "TW"
         },
         "latitude" : "51.9674",
         "location" : "51.9674,5.5753",
         "longitude" : "5.5753",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Enreach Netherlands B.V.",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "serial" : "87:4f:fb:02:af:7f:81:3b",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subject" : {
            "commonname" : "Vigor Router",
            "country" : "TW"
         },
         "subnet" : "94.247.0.0/21",
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-06-12T07:19:35Z",
            "notbefore" : "2024-05-13T07:19:35Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 88.215.27.137:44443 (tcp/http/tls) - last seen on 2024-11-21 at 05:43:33 UTC

    • IP
      88.215.27.137
      Alternative IP(s)
      104.26.10.249 104.26.11.249 172.67.71.48 188.66.67.144 2606:4700:20:0:0:0:681a:af9 2606:4700:20:0:0:0:681a:bf9 2606:4700:20:0:0:0:ac43:4730
      Network
      88.215.0.0/18
      Domain(s)
      draytek.com flourisheducation.co.uk
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://88.215.27.137:44443/ 400

      HTTP Title
      400 - Bad Request
      Reverse DNS
      remote.flourisheducation.co.uk
      ASN
      AS31655
      Organization
      Gamma Telecom Holdings Ltd
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Vigor Router
      Issuer Organization
      DrayTek Corp.
      Subject Organization
      DrayTek Corp.
      Subject Common Name
      Vigor Router
      Subject Alt Name
      www.draytek.com
      SHA256 Fingerprint
      8d9fd063a44ef671d1fada0ab2692a3ff22476de4967dbd7a2ea0a4e22fe4c43
      Validity Not Before
      2024-05-06T11:24:09Z
      Validity Not After
      2025-06-05T11:24:09Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Thu, 21 Nov 2024 05:43:32 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T05:43:33.000Z",
         "alternativeip" : [
            "104.26.10.249",
            "104.26.11.249",
            "172.67.71.48",
            "188.66.67.144",
            "2606:4700:20:0:0:0:681a:af9",
            "2606:4700:20:0:0:0:681a:bf9",
            "2606:4700:20:0:0:0:ac43:4730"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : 255477806,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS31655",
         "ca" : "false",
         "city" : "Bedford",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 05:43:32 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "draytek.com",
            "flourisheducation.co.uk"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "6f6c5897dceb95ffa0185eda0ac128a5",
            "sha1" : "cc44eaf502f895203cc7ea7682d56595e78efaa8",
            "sha256" : "8d9fd063a44ef671d1fada0ab2692a3ff22476de4967dbd7a2ea0a4e22fe4c43"
         },
         "geolocus" : {
            "asn" : "AS31655",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "GB",
            "countryname" : "United Kingdom",
            "domain" : [
               "gamma.co.uk"
            ],
            "isineu" : "false",
            "latitude" : "55.378051",
            "location" : "55.378051,-3.435973",
            "longitude" : "-3.435973",
            "netname" : "GAMMA-DSL",
            "organization" : "Gamma Telecom Holdings Ltd",
            "subnet" : "88.215.0.0/18"
         },
         "host" : [
            "remote",
            "www"
         ],
         "hostname" : [
            "remote.flourisheducation.co.uk",
            "www.draytek.com"
         ],
         "ip" : "88.215.27.137",
         "ipv6" : "false",
         "issuer" : {
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "latitude" : "51.4327",
         "location" : "51.4327,-0.1512",
         "longitude" : "-0.1512",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Gamma Telecom Holdings Ltd",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "reverse" : [
            "remote.flourisheducation.co.uk"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "86:f0:3c:03:07:12:3c:39",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subject" : {
            "altname" : [
               "www.draytek.com"
            ],
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "subnet" : "88.215.0.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "co.uk",
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-06-05T11:24:09Z",
            "notbefore" : "2024-05-06T11:24:09Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 95.228.158.161:44443 (tcp/http/tls) - last seen on 2024-11-21 at 01:25:09 UTC

    • IP
      95.228.158.161
      Alternative IP(s)
      104.26.10.249 104.26.11.249 172.67.71.48 2606:4700:20:0:0:0:681a:af9 2606:4700:20:0:0:0:681a:bf9 2606:4700:20:0:0:0:ac43:4730
      Network
      95.224.0.0/11
      Domain(s)
      draytek.com telecomitalia.it
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://95.228.158.161:44443/ 400

      HTTP Title
      400 - Bad Request
      Reverse DNS
      host-95-228-158-161.business.telecomitalia.it
      ASN
      AS3269
      Organization
      TIM
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Vigor Router
      Issuer Organization
      DrayTek Corp.
      Subject Organization
      DrayTek Corp.
      Subject Common Name
      Vigor Router
      Subject Alt Name
      www.draytek.com
      SHA256 Fingerprint
      a285ed81e48334ba374df07c7289110c372736e686f110bd8a07aec90a9f0edc
      Validity Not Before
      2024-05-20T10:13:28Z
      Validity Not After
      2025-06-19T10:13:28Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Thu, 21 Nov 2024 02:25:08 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T01:25:09.000Z",
         "alternativeip" : [
            "104.26.10.249",
            "104.26.11.249",
            "172.67.71.48",
            "2606:4700:20:0:0:0:681a:af9",
            "2606:4700:20:0:0:0:681a:bf9",
            "2606:4700:20:0:0:0:ac43:4730"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : -1944380779,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS3269",
         "ca" : "false",
         "city" : "Barberino di Mugello",
         "country" : "IT",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 02:25:08 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "draytek.com",
            "telecomitalia.it"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "b3afd4cd241d6c4e97fe6f7fe362ad58",
            "sha1" : "cdad46052621a2031c2db09dea0661f16540f2f1",
            "sha256" : "a285ed81e48334ba374df07c7289110c372736e686f110bd8a07aec90a9f0edc"
         },
         "geolocus" : {
            "asn" : "AS3269",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "IT",
            "countryname" : "Italy",
            "domain" : [
               "telecomitalia.it"
            ],
            "isineu" : "true",
            "latitude" : "41.87194",
            "location" : "41.87194,12.56738",
            "longitude" : "12.56738",
            "netname" : "ALICE-SMART",
            "organization" : "INTERBUSINESS",
            "subnet" : "95.224.0.0/12"
         },
         "host" : [
            "host-95-228-158-161",
            "www"
         ],
         "hostname" : [
            "host-95-228-158-161.business.telecomitalia.it",
            "www.draytek.com"
         ],
         "ip" : "95.228.158.161",
         "ipv6" : "false",
         "issuer" : {
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "latitude" : "44.0024",
         "location" : "44.0024,11.2469",
         "longitude" : "11.2469",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "TIM",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "reverse" : [
            "host-95-228-158-161.business.telecomitalia.it"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "b8:a4:2c:24:38:bb:2c:03",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "business.telecomitalia.it"
         ],
         "subject" : {
            "altname" : [
               "www.draytek.com"
            ],
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "subnet" : "95.224.0.0/11",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "it"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-06-19T10:13:28Z",
            "notbefore" : "2024-05-20T10:13:28Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 83.174.22.209:44443 (tcp/http/tls) - last seen on 2024-11-21 at 01:04:16 UTC

    • IP
      83.174.22.209
      Alternative IP(s)
      104.26.10.249 104.26.11.249 172.67.71.48 2606:4700:20:0:0:0:681a:af9 2606:4700:20:0:0:0:681a:bf9 2606:4700:20:0:0:0:ac43:4730
      Network
      83.174.0.0/18
      Domain(s)
      draytek.com vodafone.pt
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://83.174.22.209:44443/ 400

      HTTP Title
      400 - Bad Request
      Reverse DNS
      209.22.174.83.rev.vodafone.pt
      ASN
      AS12353
      Organization
      Vodafone Portugal - Communicacoes Pessoais S.A.
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Vigor Router
      Issuer Organization
      DrayTek Corp.
      Subject Organization
      DrayTek Corp.
      Subject Common Name
      Vigor Router
      Subject Alt Name
      www.draytek.com
      SHA256 Fingerprint
      a25214b4aa19ed5e7755b00db42bba6acfaad76dd655b3b8f0f293a15b62df15
      Validity Not Before
      2024-10-06T15:06:45Z
      Validity Not After
      2025-11-07T15:06:45Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Thu, 21 Nov 2024 01:04:15 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T01:04:16.000Z",
         "alternativeip" : [
            "104.26.10.249",
            "104.26.11.249",
            "172.67.71.48",
            "2606:4700:20:0:0:0:681a:af9",
            "2606:4700:20:0:0:0:681a:bf9",
            "2606:4700:20:0:0:0:ac43:4730"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : 348600578,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS12353",
         "ca" : "false",
         "city" : "Vila Nova de Famalic\u00e3o",
         "country" : "PT",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 01:04:15 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "draytek.com",
            "vodafone.pt"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "2f1b807a8e954d53727cabe83fd3a620",
            "sha1" : "15aa54ab128fac782a252571ce20e8a329b1ab3b",
            "sha256" : "a25214b4aa19ed5e7755b00db42bba6acfaad76dd655b3b8f0f293a15b62df15"
         },
         "geolocus" : {
            "asn" : "AS12353",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "PT",
            "countryname" : "Portugal",
            "domain" : [
               "vodafone.com",
               "vodafone.pt"
            ],
            "isineu" : "true",
            "latitude" : "39.399872",
            "location" : "39.399872,-8.224454",
            "longitude" : "-8.224454",
            "netname" : "PT-VDF-045",
            "organization" : "Vodafone Portugal",
            "subnet" : "83.174.0.0/18"
         },
         "host" : [
            209,
            "www"
         ],
         "hostname" : [
            "209.22.174.83.rev.vodafone.pt",
            "www.draytek.com"
         ],
         "ip" : "83.174.22.209",
         "ipv6" : "false",
         "issuer" : {
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "latitude" : "41.4043",
         "location" : "41.4043,-8.5139",
         "longitude" : "-8.5139",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Vodafone Portugal - Communicacoes Pessoais S.A.",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "reverse" : [
            "209.22.174.83.rev.vodafone.pt"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "94:e3:e0:86:a1:ca:19:ff",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "174.83.rev.vodafone.pt",
            "22.174.83.rev.vodafone.pt",
            "83.rev.vodafone.pt",
            "rev.vodafone.pt"
         ],
         "subject" : {
            "altname" : [
               "www.draytek.com"
            ],
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "subnet" : "83.174.0.0/18",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "pt"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-11-07T15:06:45Z",
            "notbefore" : "2024-10-06T15:06:45Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 185.234.154.69:44443 (tcp/http/tls) - last seen on 2024-11-21 at 01:00:07 UTC

    • IP
      185.234.154.69
      Network
      185.234.154.0/24
      Domain(s)
      ictprovider.nl
      Device

      <enterprise field>: device.class

      URL

      https://185.234.154.69:44443/ 400

      HTTP Title
      400 - Bad Request
      Reverse DNS
      185-234-154-69.pool.ictprovider.nl
      ASN
      AS41960
      Organization
      Nextpertise B.V.
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Dambeton_router
      Issuer Organization
      MKBiT
      Subject Organization
      MKBiT
      Subject Email
      helpdesk@mkbit.nl
      Subject Common Name
      Dambeton_router
      SHA256 Fingerprint
      61ddeb6b13f57837b7d5dfe8cbc235991422f14e987741c310e6a61aec2cfd55
      Validity Not Before
      2024-07-09T17:04:48Z
      Validity Not After
      2025-08-08T17:04:48Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Thu, 21 Nov 2024 02:00:06 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T01:00:07.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : -982409938,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS41960",
         "ca" : "false",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 02:00:06 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ictprovider.nl"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "454c16ddd1b6e167ae8d65a2f58488e6",
            "sha1" : "628ac703442951345826d3e381e3222b2401b9d4",
            "sha256" : "61ddeb6b13f57837b7d5dfe8cbc235991422f14e987741c310e6a61aec2cfd55"
         },
         "host" : [
            "185-234-154-69"
         ],
         "hostname" : [
            "185-234-154-69.pool.ictprovider.nl"
         ],
         "ip" : "185.234.154.69",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Emmen",
            "commonname" : "Dambeton_router",
            "country" : "NL",
            "email" : "helpdesk@mkbit.nl",
            "organization" : "MKBiT",
            "organizationalunit" : "Engineer"
         },
         "latitude" : "52.3824",
         "location" : "52.3824,4.8995",
         "longitude" : "4.8995",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Nextpertise B.V.",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "reverse" : [
            "185-234-154-69.pool.ictprovider.nl"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "8d:0f:a7:43:cd:b8:8e:01",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "pool.ictprovider.nl"
         ],
         "subject" : {
            "city" : "Emmen",
            "commonname" : "Dambeton_router",
            "country" : "NL",
            "email" : "helpdesk@mkbit.nl",
            "organization" : "MKBiT",
            "organizationalunit" : "Engineer"
         },
         "subnet" : "185.234.154.0/24",
         "tld" : [
            "nl"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-08T17:04:48Z",
            "notbefore" : "2024-07-09T17:04:48Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 51.52.194.88:44443 (tcp/http/tls) - last seen on 2024-11-21 at 00:22:34 UTC

    • IP
      51.52.194.88
      Alternative IP(s)
      104.26.10.249 104.26.11.249 172.67.71.48 2606:4700:20:0:0:0:681a:af9 2606:4700:20:0:0:0:681a:bf9 2606:4700:20:0:0:0:ac43:4730
      Network
      51.52.192.0/19
      Domain(s)
      draytek.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://51.52.194.88:44443/ 400

      HTTP Title
      400 - Bad Request
      ASN
      AS31655
      Organization
      Gamma Telecom Holdings Ltd
      Protocol
      http Cert expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Vigor Router
      Issuer Organization
      DrayTek Corp.
      Subject Organization
      DrayTek Corp.
      Subject Common Name
      Vigor Router
      Subject Alt Name
      www.draytek.com
      SHA256 Fingerprint
      bb9db8c8d2d5e7458a076b32a9dea752db8bcd2903b3266997db78a5c9a0afbe
      Validity Not Before
      2021-06-21T17:23:44Z
      Validity Not After
      2022-07-21T17:23:44Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Thu, 21 Nov 2024 00:22:33 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T00:22:34.000Z",
         "alternativeip" : [
            "104.26.10.249",
            "104.26.11.249",
            "172.67.71.48",
            "2606:4700:20:0:0:0:681a:af9",
            "2606:4700:20:0:0:0:681a:bf9",
            "2606:4700:20:0:0:0:ac43:4730"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : -1109116269,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS31655",
         "ca" : "false",
         "city" : "Lewisham",
         "country" : "GB",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 00:22:33 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "draytek.com"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "f6ffba4ab2f21968bf3f27377a21d796",
            "sha1" : "a11bacaa2267e3656b2d12c80adb1c000e8b84c6",
            "sha256" : "bb9db8c8d2d5e7458a076b32a9dea752db8bcd2903b3266997db78a5c9a0afbe"
         },
         "geolocus" : {
            "asn" : "AS31655",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "GB",
            "countryname" : "United Kingdom",
            "domain" : [
               "gamma.co.uk"
            ],
            "isineu" : "false",
            "latitude" : "55.378051",
            "location" : "55.378051,-3.435973",
            "longitude" : "-3.435973",
            "netname" : "GAMMA-2",
            "organization" : "Gamma Telecom Limited",
            "subnet" : "51.52.0.0/16"
         },
         "host" : [
            "www"
         ],
         "hostname" : [
            "www.draytek.com"
         ],
         "ip" : "51.52.194.88",
         "ipv6" : "false",
         "issuer" : {
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "latitude" : "51.4858",
         "location" : "51.4858,-0.0206",
         "longitude" : "-0.0206",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Gamma Telecom Holdings Ltd",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "serial" : "d4:ed:6f:70:69:2f:e9:9b",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subject" : {
            "altname" : [
               "www.draytek.com"
            ],
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "subnet" : "51.52.192.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2022-07-21T17:23:44Z",
            "notbefore" : "2021-06-21T17:23:44Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 37.0.82.26:44443 (tcp/http/tls) - last seen on 2024-11-20 at 21:02:06 UTC

    • IP
      37.0.82.26
      Alternative IP(s)
      104.26.10.249 104.26.11.249 172.67.71.48 2606:4700:20:0:0:0:681a:af9 2606:4700:20:0:0:0:681a:bf9 2606:4700:20:0:0:0:ac43:4730
      Network
      37.0.80.0/20
      Domain(s)
      draytek.com routit.net
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://37.0.82.26:44443/ 400

      HTTP Title
      400 - Bad Request
      Reverse DNS
      rt82bb0-37-26.routit.net
      ASN
      AS28685
      Organization
      Routit BV
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Vigor Router
      Issuer Organization
      DrayTek Corp.
      Subject Organization
      DrayTek Corp.
      Subject Common Name
      Vigor Router
      Subject Alt Name
      www.draytek.com
      SHA256 Fingerprint
      9fc58882d5ef6cebd172879925c87e8c915e3e10828cf36215e28723a3a556c5
      Validity Not Before
      2024-10-01T11:26:03Z
      Validity Not After
      2025-10-31T11:26:03Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Wed, 20 Nov 2024 21:02:05 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T21:02:06.000Z",
         "alternativeip" : [
            "104.26.10.249",
            "104.26.11.249",
            "172.67.71.48",
            "2606:4700:20:0:0:0:681a:af9",
            "2606:4700:20:0:0:0:681a:bf9",
            "2606:4700:20:0:0:0:ac43:4730"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : 369665885,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS28685",
         "ca" : "false",
         "city" : "Amsterdam",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Wed, 20 Nov 2024 21:02:05 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "draytek.com",
            "routit.net"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "d04a885473afb6e2520ceaa440596ee8",
            "sha1" : "f3dfea099fcd93f4c05554791a3f0bd45c0ac173",
            "sha256" : "9fc58882d5ef6cebd172879925c87e8c915e3e10828cf36215e28723a3a556c5"
         },
         "host" : [
            "rt82bb0-37-26",
            "www"
         ],
         "hostname" : [
            "rt82bb0-37-26.routit.net",
            "www.draytek.com"
         ],
         "ip" : "37.0.82.26",
         "ipv6" : "false",
         "issuer" : {
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "latitude" : "52.3883",
         "location" : "52.3883,4.9525",
         "longitude" : "4.9525",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Routit BV",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "reverse" : [
            "rt82bb0-37-26.routit.net"
         ],
         "seen_date" : "2024-11-20",
         "serial" : "d3:c8:3e:07:dd:67:6f:1e",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subject" : {
            "altname" : [
               "www.draytek.com"
            ],
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "subnet" : "37.0.80.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-10-31T11:26:03Z",
            "notbefore" : "2024-10-01T11:26:03Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 185.234.154.70:44443 (tcp/http/tls) - last seen on 2024-11-20 at 19:49:05 UTC

    • IP
      185.234.154.70
      Network
      185.234.154.0/24
      Domain(s)
      ictprovider.nl
      Device

      <enterprise field>: device.class

      URL

      https://185.234.154.70:44443/ 400

      HTTP Title
      400 - Bad Request
      Reverse DNS
      185-234-154-70.pool.ictprovider.nl
      ASN
      AS41960
      Organization
      Nextpertise B.V.
      Protocol
      http Cert not expired http
      Source
      datascan
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Dambeton_router
      Issuer Organization
      MKBiT
      Subject Organization
      MKBiT
      Subject Email
      helpdesk@mkbit.nl
      Subject Common Name
      Dambeton_router
      SHA256 Fingerprint
      61ddeb6b13f57837b7d5dfe8cbc235991422f14e987741c310e6a61aec2cfd55
      Validity Not Before
      2024-07-09T17:04:48Z
      Validity Not After
      2025-08-08T17:04:48Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2c5580b4f7890cce840901dfabdf5ce0
      HTTP Header MD5
      c9aa61fb353b31eb26d33b977235774f
      HTTP Body MD5
      44ee0a5e70fa74b23b17da4e67949438
    • HTTP/1.1 400 Bad Request
      Content-Type: text/html
      Content-Length: 183
      Connection: close
      Date: Wed, 20 Nov 2024 20:49:04 GMT
      Server: Server
      
      <?xml version="1.0" encoding="iso-8859-1"?>
      <!DOCTYPE html>
      <html lang="en">
       <head>
        <title>400 - Bad Request</title>
       </head>
       <body>
        <h1>400 - Bad Request</h1>
       </body>
      </html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-20T19:49:05.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "44ee0a5e70fa74b23b17da4e67949438",
               "bodymmh3" : -384509140,
               "headermd5" : "c9aa61fb353b31eb26d33b977235774f",
               "headermmh3" : 105465957,
               "title" : "400 - Bad Request"
            },
            "length" : 329
         },
         "asn" : "AS41960",
         "ca" : "false",
         "country" : "NL",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html\r\nContent-Length: 183\r\nConnection: close\r\nDate: Wed, 20 Nov 2024 20:49:04 GMT\r\nServer: Server\r\n\r\n<?xml version=\"1.0\" encoding=\"iso-8859-1\"?>\n<!DOCTYPE html>\n<html lang=\"en\">\n <head>\n  <title>400 - Bad Request</title>\n </head>\n <body>\n  <h1>400 - Bad Request</h1>\n </body>\n</html>\n",
         "datamd5" : "2c5580b4f7890cce840901dfabdf5ce0",
         "datammh3" : -826053566,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ictprovider.nl"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "454c16ddd1b6e167ae8d65a2f58488e6",
            "sha1" : "628ac703442951345826d3e381e3222b2401b9d4",
            "sha256" : "61ddeb6b13f57837b7d5dfe8cbc235991422f14e987741c310e6a61aec2cfd55"
         },
         "host" : [
            "185-234-154-70"
         ],
         "hostname" : [
            "185-234-154-70.pool.ictprovider.nl"
         ],
         "ip" : "185.234.154.70",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Emmen",
            "commonname" : "Dambeton_router",
            "country" : "NL",
            "email" : "helpdesk@mkbit.nl",
            "organization" : "MKBiT",
            "organizationalunit" : "Engineer"
         },
         "latitude" : "52.3824",
         "location" : "52.3824,4.8995",
         "longitude" : "4.8995",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Nextpertise B.V.",
         "port" : 44443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "reverse" : [
            "185-234-154-70.pool.ictprovider.nl"
         ],
         "seen_date" : "2024-11-20",
         "serial" : "8d:0f:a7:43:cd:b8:8e:01",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "pool.ictprovider.nl"
         ],
         "subject" : {
            "city" : "Emmen",
            "commonname" : "Dambeton_router",
            "country" : "NL",
            "email" : "helpdesk@mkbit.nl",
            "organization" : "MKBiT",
            "organizationalunit" : "Engineer"
         },
         "subnet" : "185.234.154.0/24",
         "tld" : [
            "nl"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-08-08T17:04:48Z",
            "notbefore" : "2024-07-09T17:04:48Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }