Cyber Defense Search Engine

IP
41.193.46.202

Network
41.193.0.0/18

ASN
AS11845

Organization
Vox-Telecom

Protocol
undefined Cert not expired undefined

Source
datascan
Issuer Common Name
WebServer

Subject Common Name
WebServer

SHA256 Fingerprint
83b7c72ed41571d908e40d7b6f22cad921baf1bf4d40d939606df0ab28762f81

Validity Not Before
2024-07-15T09:24:51Z

Validity Not After
2025-01-14T09:24:51Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
3c768c4828bc7cf16f444a4228eaa0b3
```
<nodata>
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:30:38.000Z",
   "app" : {
      "length" : 8
   },
   "asn" : "AS11845",
   "ca" : "false",
   "city" : "Tokoza",
   "country" : "ZA",
   "data" : "<nodata>",
   "datamd5" : "3c768c4828bc7cf16f444a4228eaa0b3",
   "datammh3" : -969888823,
   "extkeyusage" : [
      "serverAuth"
   ],
   "fingerprint" : {
      "md5" : "63b626b325bf1d92772408296dbb7529",
      "sha1" : "3ed81822f1081172df59aa35fde066dcd8e446f2",
      "sha256" : "83b7c72ed41571d908e40d7b6f22cad921baf1bf4d40d939606df0ab28762f81"
   },
   "geolocus" : {
      "asn" : "AS11845",
      "continent" : "AF",
      "continentname" : "Africa",
      "country" : "ZA",
      "countryname" : "South Africa",
      "domain" : [
         "voxtelecom.co.za"
      ],
      "isineu" : "false",
      "latitude" : "-30.559482",
      "location" : "-30.559482,22.937506",
      "longitude" : "22.937506",
      "netname" : "Vox-Telecom",
      "organization" : "Vox Telecom",
      "subnet" : "41.193.40.0/21"
   },
   "ip" : "41.193.46.202",
   "ipv6" : "false",
   "issuer" : {
      "commonname" : "WebServer"
   },
   "keyusage" : [
      "keyEncipherment",
      "dataEncipherment"
   ],
   "latitude" : "-26.3679",
   "location" : "-26.3679,28.0658",
   "longitude" : "28.0658",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Vox-Telecom",
   "port" : 513,
   "protocol" : "undefined",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "seen_date" : "2024-11-21",
   "serial" : "39:9c:bc:ae:d0:e6:15:bf:47:4a:e2:a4:ef:2e:17:7f",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "subject" : {
      "commonname" : "WebServer"
   },
   "subnet" : "41.193.0.0/18",
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2025-01-14T09:24:51Z",
      "notbefore" : "2024-07-15T09:24:51Z"
   },
   "version" : "v3",
   "wildcard" : "false"
}

IP
1.242.223.165

Network
1.242.128.0/17

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

HTTP Title
400 Bad Request

ASN
AS9318

Organization
SK Broadband Co Ltd

Protocol
http Cert not expired http

Source
datascan
Operating System
Linux Linux Kernel
Issuer Common Name
Synology Inc. CA

Issuer Organization
Synology Inc.

Subject Organization
Synology Inc.

Subject Common Name
synology

Subject Alt Name
synology

SHA256 Fingerprint
7827d7adfe6cb12e804c78a5534f77f7019ac90c2951236e9d24ad18b019962f

Validity Not Before
2024-02-14T14:37:34Z

Validity Not After
2025-02-14T14:37:34Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8a518be22d853cf5aa74035d7312402b

HTTP Header MD5
470a9635da086f31b68019aaddc44c99

HTTP Body MD5
16444d0bf46608253d591db62f41e7c3

HTTP/1.1 400 Bad Request
Date: Thu, 21 Nov 2024 08:29:24 GMT
Content-Type: text/html
Content-Length: 150
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:29:25.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "16444d0bf46608253d591db62f41e7c3",
         "bodymmh3" : -534304446,
         "headermd5" : "470a9635da086f31b68019aaddc44c99",
         "headermmh3" : -1846413665,
         "title" : "400 Bad Request"
      },
      "length" : 280
   },
   "asn" : "AS9318",
   "ca" : "false",
   "city" : "Yongin-si",
   "country" : "KR",
   "data" : "HTTP/1.1 400 Bad Request\r\nDate: Thu, 21 Nov 2024 08:29:24 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "8a518be22d853cf5aa74035d7312402b",
   "datammh3" : -1129484780,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "extkeyusage" : [
      "serverAuth",
      "clientAuth"
   ],
   "fingerprint" : {
      "md5" : "e7986e1a9b9594e56d8d68408fd84706",
      "sha1" : "05f2fcca8a4c7414d550efc1ffd52ad5105572c6",
      "sha256" : "7827d7adfe6cb12e804c78a5534f77f7019ac90c2951236e9d24ad18b019962f"
   },
   "geolocus" : {
      "asn" : "AS9318",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "nic.or.kr",
         "skbroadband.com"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "broadNnet",
      "organization" : "SK Broadband Co Ltd",
      "subnet" : "1.242.128.0/17"
   },
   "ip" : "1.242.223.165",
   "ipv6" : "false",
   "issuer" : {
      "city" : "Taipel",
      "commonname" : "Synology Inc. CA",
      "country" : "TW",
      "organization" : "Synology Inc."
   },
   "keyusage" : [
      "digitalSignature",
      "keyEncipherment"
   ],
   "latitude" : "37.3104",
   "location" : "37.3104,127.0672",
   "longitude" : "127.0672",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "SK Broadband Co Ltd",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 513,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "reason" : "Bad Request",
   "seen_date" : "2024-11-21",
   "serial" : "16:66:30:59:79:d4:fa",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "status" : 400,
   "subject" : {
      "altname" : [
         "synology"
      ],
      "city" : "Taipel",
      "commonname" : "synology",
      "country" : "TW",
      "organization" : "Synology Inc."
   },
   "subnet" : "1.242.128.0/17",
   "tag" : "<enterprise field>: tag",
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2025-02-14T14:37:34Z",
      "notbefore" : "2024-02-14T14:37:34Z"
   },
   "version" : "v3",
   "wildcard" : "false"
}

IP
203.128.68.59

Alternative IP(s)
2001:df1:7800:2:0:0:6:20f 203.128.88.82 203.175.8.118

Network
203.128.64.0/19

Domain(s)
hapindo.co.id hapindo.id hpgroup.co.id neuviz.net.id

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

HTTP Title
400 Bad Request

Reverse DNS
ip-59-68-128-203.neuviz.net.id

ASN
AS18103

Organization
Neuviz Net

Protocol
http Cert not expired http

Source
datascan
Operating System
Linux Linux Kernel

Product
F5 Nginx 1.23.3

CPE(s)

<enterprise field>: cpe
Issuer Common Name
Sectigo RSA Domain Validation Secure Server CA

Issuer Organization
Sectigo Limited

Subject Common Name
hapindo.co.id

Subject Alt Name
hapindo.co.id *.hapindo.co.id *.hapindo.id *.hpgroup.co.id hapindo.id hpgroup.co.id

SHA256 Fingerprint
fadd07f82ac0d47708542c0651cf29e9f1bad94f2fc2f5e9d1e2b84503c91cfc

Validity Not Before
2024-10-09T00:00:00Z

Validity Not After
2025-11-09T23:59:59Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
3f6c66148f7bc416b67bda600850814d

HTTP Header MD5
8815e91d96d5af0f5c2d1efb97a7d4b4

HTTP Body MD5
9cbeec4a19e3f95a0285cd42708ce2e7

HTTP/1.1 400 Bad Request
Server: nginx/1.23.3
Date: Thu, 21 Nov 2024 08:28:25 GMT
Content-Type: text/html
Content-Length: 157
Connection: close
Strict-Transport-Security: max-age=31536000

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.23.3</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:28:25.000Z",
   "alternativeip" : [
      "2001:df1:7800:2:0:0:6:20f",
      "203.128.88.82",
      "203.175.8.118"
   ],
   "app" : {
      "http" : {
         "bodymd5" : "9cbeec4a19e3f95a0285cd42708ce2e7",
         "bodymmh3" : -564400380,
         "headermd5" : "8815e91d96d5af0f5c2d1efb97a7d4b4",
         "headermmh3" : 1391116476,
         "title" : "400 Bad Request"
      },
      "length" : 354
   },
   "asn" : "AS18103",
   "basicconstraints" : "critical",
   "ca" : "false",
   "city" : "Jakarta",
   "country" : "ID",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.23.3\r\nDate: Thu, 21 Nov 2024 08:28:25 GMT\r\nContent-Type: text/html\r\nContent-Length: 157\r\nConnection: close\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>nginx/1.23.3</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "3f6c66148f7bc416b67bda600850814d",
   "datammh3" : -1769968444,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "hapindo.co.id",
      "hapindo.id",
      "hpgroup.co.id",
      "neuviz.net.id"
   ],
   "extkeyusage" : [
      "serverAuth",
      "clientAuth"
   ],
   "fingerprint" : {
      "md5" : "2189bb499cd9c59f192324997e748e05",
      "sha1" : "c1f7cc589a59f22b638fd56e10e77e4364ce9045",
      "sha256" : "fadd07f82ac0d47708542c0651cf29e9f1bad94f2fc2f5e9d1e2b84503c91cfc"
   },
   "geolocus" : {
      "asn" : "AS18103",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "ID",
      "countryname" : "Indonesia",
      "domain" : [
         "apjii.or.id",
         "idnic.net",
         "neuviz.net.id"
      ],
      "isineu" : "false",
      "latitude" : "-0.789275",
      "location" : "-0.789275,113.921327",
      "longitude" : "113.921327",
      "netname" : "NEUVIZ-ID",
      "organization" : "Route Object of Neuviz Net",
      "subnet" : "203.128.64.0/19"
   },
   "host" : [
      "ip-59-68-128-203"
   ],
   "hostname" : [
      "hapindo.co.id",
      "hapindo.id",
      "hpgroup.co.id",
      "ip-59-68-128-203.neuviz.net.id"
   ],
   "ip" : "203.128.68.59",
   "ipv6" : "false",
   "issuer" : {
      "city" : "Salford",
      "commonname" : "Sectigo RSA Domain Validation Secure Server CA",
      "country" : "GB",
      "organization" : "Sectigo Limited"
   },
   "keyusage" : [
      "digitalSignature",
      "keyEncipherment"
   ],
   "latitude" : "-6.2114",
   "location" : "-6.2114,106.8446",
   "longitude" : "106.8446",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Neuviz Net",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 513,
   "product" : "Nginx",
   "productvendor" : "F5",
   "productversion" : "1.23.3",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "reason" : "Bad Request",
   "reverse" : [
      "ip-59-68-128-203.neuviz.net.id"
   ],
   "seen_date" : "2024-11-21",
   "serial" : "cf:98:53:d6:d8:58:2f:c3:1f:45:e8:88:f3:23:09:35",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "status" : 400,
   "subject" : {
      "altname" : [
         "hapindo.co.id",
         "*.hapindo.co.id",
         "*.hapindo.id",
         "*.hpgroup.co.id",
         "hapindo.id",
         "hpgroup.co.id"
      ],
      "commonname" : "hapindo.co.id"
   },
   "subnet" : "203.128.64.0/19",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "co.id",
      "id",
      "net.id"
   ],
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2025-11-09T23:59:59Z",
      "notbefore" : "2024-10-09T00:00:00Z"
   },
   "version" : "v3",
   "wildcard" : "true"
}

IP
185.126.235.13

Network
185.126.232.0/22

Domain(s)
185-avatel.es

Operating System
Microsoft Windows

Reverse DNS
13.235.126.185-avatel.es

ASN
AS200845

Organization
Avatel Telecom, SA

Protocol
undefined Cert not expired undefined

Source
datascan
Operating System
Microsoft Windows

CPE(s)

<enterprise field>: cpe
Issuer Common Name
SERVER-TS

Subject Common Name
SERVER-TS

SHA256 Fingerprint
2d9da159c1b9ad6e411dde837c33f3df91925ca0e2c0120e55abc85e236bb755

Validity Not Before
2024-08-08T14:01:39Z

Validity Not After
2025-02-07T14:01:39Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
3c768c4828bc7cf16f444a4228eaa0b3
```
<nodata>
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:25:07.000Z",
   "app" : {
      "length" : 8
   },
   "asn" : "AS200845",
   "ca" : "false",
   "city" : "Pego",
   "country" : "ES",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<nodata>",
   "datamd5" : "3c768c4828bc7cf16f444a4228eaa0b3",
   "datammh3" : -969888823,
   "domain" : [
      "185-avatel.es"
   ],
   "extkeyusage" : [
      "serverAuth"
   ],
   "fingerprint" : {
      "md5" : "0fac1334cdf58cf956bfa4d9441dbf73",
      "sha1" : "a3df5feeac43af57e6b9150c6612d6cea7d5d1f9",
      "sha256" : "2d9da159c1b9ad6e411dde837c33f3df91925ca0e2c0120e55abc85e236bb755"
   },
   "geolocus" : {
      "asn" : "AS200845",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "ES",
      "countryname" : "Spain",
      "domain" : [
         "avatel.es"
      ],
      "isineu" : "true",
      "latitude" : "40.463667",
      "location" : "40.463667,-3.74922",
      "longitude" : "-3.74922",
      "netname" : "TRAMUNTANET",
      "organization" : "TRAMUNTANET",
      "subnet" : "185.126.234.0/23"
   },
   "host" : [
      13
   ],
   "hostname" : [
      "13.235.126.185-avatel.es"
   ],
   "ip" : "185.126.235.13",
   "ipv6" : "false",
   "issuer" : {
      "commonname" : "SERVER-TS"
   },
   "keyusage" : [
      "keyEncipherment",
      "dataEncipherment"
   ],
   "latitude" : "38.8466",
   "location" : "38.8466,-0.1195",
   "longitude" : "-0.1195",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Avatel Telecom, SA",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 513,
   "protocol" : "undefined",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "reverse" : [
      "13.235.126.185-avatel.es"
   ],
   "seen_date" : "2024-11-21",
   "serial" : "16:0e:e5:1c:5a:24:77:94:4b:64:65:9c:47:db:71:49",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "subdomains" : [
      "235.126.185-avatel.es",
      "126.185-avatel.es"
   ],
   "subject" : {
      "commonname" : "SERVER-TS"
   },
   "subnet" : "185.126.232.0/22",
   "tld" : [
      "es"
   ],
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2025-02-07T14:01:39Z",
      "notbefore" : "2024-08-08T14:01:39Z"
   },
   "version" : "v3",
   "wildcard" : "false"
}

IP
103.83.8.5

Network
103.83.8.0/22

Domain(s)
test.org

Operating System
Linux Linux Kernel

ASN
AS136698

Organization
Devdarpan Broadband Pvt. Ltd.

Protocol
undefined Cert expired undefined

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe
Issuer Common Name
test.org

Issuer Organization
Default Company Ltd

Subject Organization
Default Company Ltd

Subject Common Name
test.org

SHA256 Fingerprint
fc7a3ce22f39436886b2481f756dacc7b698cb5a6be1e6403bcadc2d10a6f449

Validity Not Before
2020-07-27T08:53:04Z

Validity Not After
2023-07-27T08:53:04Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
3c768c4828bc7cf16f444a4228eaa0b3
```
<nodata>
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:24:30.000Z",
   "app" : {
      "length" : 8
   },
   "asn" : "AS136698",
   "ca" : "true",
   "country" : "IN",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<nodata>",
   "datamd5" : "3c768c4828bc7cf16f444a4228eaa0b3",
   "datammh3" : -969888823,
   "domain" : [
      "test.org"
   ],
   "fingerprint" : {
      "md5" : "4e99342d81a474c19a0e0e8d40d9bbcf",
      "sha1" : "25cf0e48060671ee3decd884869f32a98170a116",
      "sha256" : "fc7a3ce22f39436886b2481f756dacc7b698cb5a6be1e6403bcadc2d10a6f449"
   },
   "geolocus" : {
      "asn" : "AS136698",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "IN",
      "countryname" : "India",
      "domain" : [
         "gmail.com"
      ],
      "isineu" : "false",
      "latitude" : "20.593684",
      "location" : "20.593684,78.96288",
      "longitude" : "78.96288",
      "netname" : "DEVDRPAN",
      "organization" : "Route Object",
      "subnet" : "103.83.8.0/22"
   },
   "hostname" : [
      "test.org"
   ],
   "ip" : "103.83.8.5",
   "ipv6" : "false",
   "issuer" : {
      "city" : "Default City",
      "commonname" : "test.org",
      "country" : "CN",
      "organization" : "Default Company Ltd"
   },
   "latitude" : "21.9974",
   "location" : "21.9974,79.0011",
   "longitude" : "79.0011",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Devdarpan Broadband Pvt. Ltd.",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 513,
   "protocol" : "undefined",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 1024
   },
   "seen_date" : "2024-11-21",
   "serial" : "d5:5e:71:61:46:93:ad:ef",
   "signature" : {
      "algorithm" : "sha1WithRSAEncryption"
   },
   "source" : "datascan",
   "subject" : {
      "city" : "Default City",
      "commonname" : "test.org",
      "country" : "CN",
      "organization" : "Default Company Ltd"
   },
   "subnet" : "103.83.8.0/22",
   "tld" : [
      "org"
   ],
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2023-07-27T08:53:04Z",
      "notbefore" : "2020-07-27T08:53:04Z"
   },
   "version" : "v3",
   "wildcard" : "false"
}

IP
212.80.175.131

Network
212.80.174.0/23

Domain(s)
evolutio.com

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

HTTP Title
400 Bad Request

ASN
AS8903

Organization
Nextlevel Connectivity S.l.

Protocol
http Cert expired http

Source
datascan
Operating System
Microsoft Windows

Product
F5 Nginx

CPE(s)

<enterprise field>: cpe
Issuer Common Name
Sectigo RSA Domain Validation Secure Server CA

Issuer Organization
Sectigo Limited

Subject Common Name
relay.serverenforce.evolutio.com

Subject Alt Name
relay.serverenforce.evolutio.com www.relay.serverenforce.evolutio.com

SHA256 Fingerprint
bf16f3615d5d818f081ee4e8ca7875649b6016aa7287ac72f4e403b93f53c441

Validity Not Before
2021-08-30T00:00:00Z

Validity Not After
2022-08-30T23:59:59Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
28715c6ec3fd38b6ed232e3e37959e9c

HTTP Header MD5
a629a0fe278971ad61801ba6975ba467

HTTP Body MD5
16444d0bf46608253d591db62f41e7c3

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 21 Nov 2024 08:21:08 GMT
Content-Type: text/html
Content-Length: 150
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx</center>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:21:09.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "16444d0bf46608253d591db62f41e7c3",
         "bodymmh3" : -534304446,
         "headermd5" : "a629a0fe278971ad61801ba6975ba467",
         "headermmh3" : -2017398469,
         "title" : "400 Bad Request"
      },
      "length" : 295
   },
   "asn" : "AS8903",
   "basicconstraints" : "critical",
   "ca" : "false",
   "city" : "Madrid",
   "country" : "ES",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 21 Nov 2024 08:21:08 GMT\r\nContent-Type: text/html\r\nContent-Length: 150\r\nConnection: close\r\n\r\n<html>\r\n<head><title>400 Bad Request</title></head>\r\n<body>\r\n<center><h1>400 Bad Request</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n",
   "datamd5" : "28715c6ec3fd38b6ed232e3e37959e9c",
   "datammh3" : -1512152686,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "evolutio.com"
   ],
   "extkeyusage" : [
      "serverAuth",
      "clientAuth"
   ],
   "fingerprint" : {
      "md5" : "51e85fbd12cad0483c6c5aa2663dfb99",
      "sha1" : "8512dbe8086008ae563431bdb4876e594884ff90",
      "sha256" : "bf16f3615d5d818f081ee4e8ca7875649b6016aa7287ac72f4e403b93f53c441"
   },
   "host" : [
      "relay",
      "www"
   ],
   "hostname" : [
      "relay.serverenforce.evolutio.com",
      "www.relay.serverenforce.evolutio.com"
   ],
   "ip" : "212.80.175.131",
   "ipv6" : "false",
   "issuer" : {
      "city" : "Salford",
      "commonname" : "Sectigo RSA Domain Validation Secure Server CA",
      "country" : "GB",
      "organization" : "Sectigo Limited"
   },
   "keyusage" : [
      "digitalSignature",
      "keyEncipherment"
   ],
   "latitude" : "40.4186",
   "location" : "40.4186,-3.7323",
   "longitude" : "-3.7323",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Nextlevel Connectivity S.l.",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 513,
   "product" : "Nginx",
   "productvendor" : "F5",
   "protocol" : "http",
   "protocolversion" : "1.1",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "reason" : "Bad Request",
   "seen_date" : "2024-11-21",
   "serial" : "42:5e:e6:87:4e:5a:ca:c5:4a:f8:84:f2:1f:63:ac:5c",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "relay.serverenforce.evolutio.com",
      "serverenforce.evolutio.com"
   ],
   "subject" : {
      "altname" : [
         "relay.serverenforce.evolutio.com",
         "www.relay.serverenforce.evolutio.com"
      ],
      "commonname" : "relay.serverenforce.evolutio.com"
   },
   "subnet" : "212.80.174.0/23",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com"
   ],
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2022-08-30T23:59:59Z",
      "notbefore" : "2021-08-30T00:00:00Z"
   },
   "version" : "v3",
   "wildcard" : "false"
}

IP
87.205.170.173

Network
87.204.0.0/15

Domain(s)
duckdns.org inetia.pl

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

Reverse DNS
87-205-170-173.dynamic.inetia.pl

ASN
AS12741

Organization
Netia SA

Protocol
http Cert not expired http

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe
Issuer Common Name
E6

Issuer Organization
Let's Encrypt

Subject Common Name
aawmbf.duckdns.org

Subject Alt Name
aawmbf.duckdns.org

SHA256 Fingerprint
25b6c1680d47b645ca3433a39f4e84cf52ddc33a8637574579b0f3e6bde81b64

Validity Not Before
2024-09-27T20:24:10Z

Validity Not After
2024-12-26T20:24:09Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
a66806eb764d19cba9840875c84ee78e

HTTP Header MD5
39a681732be39e770ba8369ca9b0a086

HTTP Body MD5
980822991fc4045585308e8c5b6ef8bf

HTTP/1.0 400 Bad Request
Content-Type: text/plain; charset=utf-8
Content-Length: 40
Date: Thu, 21 Nov 2024 08:20:33 GMT
Server: Python/3.12 aiohttp/3.10.11

Invalid method encountered:

  b''
    ^

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:20:33.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "980822991fc4045585308e8c5b6ef8bf",
         "bodymmh3" : 939398497,
         "headermd5" : "39a681732be39e770ba8369ca9b0a086",
         "headermmh3" : -566970563
      },
      "length" : 203
   },
   "asn" : "AS12741",
   "basicconstraints" : "critical",
   "ca" : "false",
   "city" : "Gdansk",
   "country" : "PL",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "HTTP/1.0 400 Bad Request\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 40\r\nDate: Thu, 21 Nov 2024 08:20:33 GMT\r\nServer: Python/3.12 aiohttp/3.10.11\r\n\r\nInvalid method encountered:\n\n  b''\n    ^",
   "datamd5" : "a66806eb764d19cba9840875c84ee78e",
   "datammh3" : -833919316,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "domain" : [
      "duckdns.org",
      "inetia.pl"
   ],
   "extkeyusage" : [
      "serverAuth",
      "clientAuth"
   ],
   "fingerprint" : {
      "md5" : "09c6c243d0abfc6ddcedd341cb8ba44e",
      "sha1" : "aa2ccaf261c1bb9a4b78c5db19df4e3e85fbfc05",
      "sha256" : "25b6c1680d47b645ca3433a39f4e84cf52ddc33a8637574579b0f3e6bde81b64"
   },
   "host" : [
      "87-205-170-173",
      "aawmbf"
   ],
   "hostname" : [
      "87-205-170-173.dynamic.inetia.pl",
      "aawmbf.duckdns.org"
   ],
   "ip" : "87.205.170.173",
   "ipv6" : "false",
   "issuer" : {
      "commonname" : "E6",
      "country" : "US",
      "organization" : "Let's Encrypt"
   },
   "keyusage" : [
      "digitalSignature"
   ],
   "latitude" : "54.3516",
   "location" : "54.3516,18.6536",
   "longitude" : "18.6536",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Netia SA",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 513,
   "protocol" : "http",
   "protocolversion" : "1.0",
   "publickey" : {
      "algorithm" : "id-ecPublicKey",
      "length" : 384
   },
   "reason" : "Bad Request",
   "reverse" : [
      "87-205-170-173.dynamic.inetia.pl"
   ],
   "seen_date" : "2024-11-21",
   "serial" : "03:17:1b:ff:3a:aa:f9:c9:c7:94:fe:a8:f9:a7:88:71:8d:79",
   "signature" : {
      "algorithm" : "ecdsa-with-SHA384"
   },
   "source" : "datascan",
   "status" : 400,
   "subdomains" : [
      "dynamic.inetia.pl"
   ],
   "subject" : {
      "altname" : [
         "aawmbf.duckdns.org"
      ],
      "commonname" : "aawmbf.duckdns.org"
   },
   "subnet" : "87.204.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "org",
      "pl"
   ],
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2024-12-26T20:24:09Z",
      "notbefore" : "2024-09-27T20:24:10Z"
   },
   "version" : "v3",
   "wildcard" : "false"
}

IP
13.60.3.42

Network
13.60.0.0/15

Domain(s)
amazonaws.com south-railway.org

Operating System
Linux Linux Kernel

Reverse DNS
ec2-13-60-3-42.eu-north-1.compute.amazonaws.com

ASN
AS16509

Organization
AMAZON-02

Protocol
undefined Cert not expired undefined

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe
Issuer Common Name
Amazon RSA 2048 M03

Issuer Organization
Amazon

Subject Common Name
*.south-railway.org

SHA256 Fingerprint
875829239079d6dbf39913927bddacb0a711d59f5c496a454badf848af82b863

Validity Not Before
2023-11-22T08:20:10Z

Validity Not After
2025-11-21T08:20:10Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
3c768c4828bc7cf16f444a4228eaa0b3
```
<nodata>
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:20:18.000Z",
   "app" : {
      "length" : 8
   },
   "asn" : "AS16509",
   "city" : "Stockholm",
   "country" : "SE",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<nodata>",
   "datamd5" : "3c768c4828bc7cf16f444a4228eaa0b3",
   "datammh3" : -969888823,
   "domain" : [
      "amazonaws.com",
      "south-railway.org"
   ],
   "fingerprint" : {
      "md5" : "df0b26e0b097a46c9854e6fb086652c6",
      "sha1" : "012f111a22112cefc6d826f01a3dfa9dcf12c078",
      "sha256" : "875829239079d6dbf39913927bddacb0a711d59f5c496a454badf848af82b863"
   },
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "EU",
      "continentname" : "Europe",
      "country" : "SE",
      "countryname" : "Sweden",
      "domain" : [
         "amazon.com",
         "amazonaws.com"
      ],
      "isineu" : "true",
      "latitude" : "60.128161",
      "location" : "60.128161,18.643501",
      "longitude" : "18.643501",
      "netname" : "AMAZON-ARN",
      "organization" : "Amazon Data Services Sweden",
      "subnet" : "13.60.0.0/15"
   },
   "host" : [
      "ec2-13-60-3-42"
   ],
   "hostname" : [
      "ec2-13-60-3-42.eu-north-1.compute.amazonaws.com"
   ],
   "ip" : "13.60.3.42",
   "ipv6" : "false",
   "issuer" : {
      "commonname" : "Amazon RSA 2048 M03",
      "country" : "US",
      "organization" : "Amazon"
   },
   "latitude" : "59.3241",
   "location" : "59.3241,18.0517",
   "longitude" : "18.0517",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 513,
   "protocol" : "undefined",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "reverse" : [
      "ec2-13-60-3-42.eu-north-1.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "serial" : "5a:ee:2e:dc:58:3a:9a:c3:d5:cd:04:1f:46:e9:89:ea:33:15:b2:8a",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "subdomains" : [
      "compute.amazonaws.com",
      "eu-north-1.compute.amazonaws.com"
   ],
   "subject" : {
      "commonname" : "*.south-railway.org"
   },
   "subnet" : "13.60.0.0/15",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com",
      "org"
   ],
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2025-11-21T08:20:10Z",
      "notbefore" : "2023-11-22T08:20:10Z"
   },
   "version" : "v3",
   "wildcard" : "true"
}

IP
154.90.49.225

Network
154.90.32.0/19

Domain(s)
localhost.localdomain

Operating System
Linux Linux Kernel

ASN
AS138915

Organization
Kaopu Cloud HK Limited

Protocol
undefined Cert not expired undefined

Source
datascan
Operating System
Linux Linux Kernel
Issuer Common Name
localhost.localdomain

Issuer Organization
MyCompany

Subject Organization
MyCompany

Subject Common Name
localhost.localdomain

Subject Alt Name
localhost

SHA256 Fingerprint
91d5a5e281be317e88c7bcf27d52e55f2b344d930a47524a5cb59b13bf46694e

Validity Not Before
2024-11-17T19:41:06Z

Validity Not After
2034-11-15T19:41:06Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
3c768c4828bc7cf16f444a4228eaa0b3
```
<nodata>
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:19:37.000Z",
   "app" : {
      "length" : 8
   },
   "asn" : "AS138915",
   "ca" : "false",
   "city" : "Jakarta",
   "country" : "ID",
   "data" : "<nodata>",
   "datamd5" : "3c768c4828bc7cf16f444a4228eaa0b3",
   "datammh3" : -969888823,
   "domain" : [
      "localhost.localdomain"
   ],
   "fingerprint" : {
      "md5" : "eff449e70499007a1b8fe7fdafd2ad54",
      "sha1" : "2104e5a46925e9184da0e6670f8fda8966a696d8",
      "sha256" : "91d5a5e281be317e88c7bcf27d52e55f2b344d930a47524a5cb59b13bf46694e"
   },
   "geolocus" : {
      "asn" : "AS138915",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "ID",
      "countryname" : "Indonesia",
      "domain" : [
         "cloudinnovation.org"
      ],
      "isineu" : "false",
      "latitude" : "-0.789275",
      "location" : "-0.789275,113.921327",
      "longitude" : "113.921327",
      "netname" : "Lightnode_Limited",
      "organization" : "Route",
      "subnet" : "154.90.48.0/23"
   },
   "hostname" : [
      "localhost.localdomain"
   ],
   "ip" : "154.90.49.225",
   "ipv6" : "false",
   "issuer" : {
      "city" : "Seattle",
      "commonname" : "localhost.localdomain",
      "country" : "US",
      "organization" : "MyCompany",
      "organizationalunit" : "MyOrg"
   },
   "latitude" : "-6.2114",
   "location" : "-6.2114,106.8446",
   "longitude" : "106.8446",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Kaopu Cloud HK Limited",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 513,
   "protocol" : "undefined",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "seen_date" : "2024-11-21",
   "serial" : "51:ee:6a:2e:45:f5:ce:4e:99:3b:18:af:7e:fb:5c:42:dc:52:42:9d",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "subject" : {
      "altname" : [
         "localhost"
      ],
      "city" : "Seattle",
      "commonname" : "localhost.localdomain",
      "country" : "US",
      "organization" : "MyCompany",
      "organizationalunit" : "MyOrg"
   },
   "subnet" : "154.90.32.0/19",
   "tld" : [
      "localdomain"
   ],
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2034-11-15T19:41:06Z",
      "notbefore" : "2024-11-17T19:41:06Z"
   },
   "version" : "v3",
   "wildcard" : "false"
}

IP
13.208.71.13

Network
13.208.0.0/13

Domain(s)
amazonaws.com bright-aero.gov

Operating System
Linux Linux Kernel

Reverse DNS
ec2-13-208-71-13.ap-northeast-3.compute.amazonaws.com

ASN
AS16509

Organization
AMAZON-02

Protocol
undefined Cert not expired undefined

Source
datascan
Operating System
Linux Linux Kernel

CPE(s)

<enterprise field>: cpe
Issuer Common Name
Thawte TLS RSA CA G1

Issuer Organization
DigiCert Inc

Subject Common Name
*.bright-aero.gov

SHA256 Fingerprint
97968e3e4505c676931612c915c829cb36f2335fa9a40f50bcd5c712fbc8e282

Validity Not Before
2023-11-22T07:56:42Z

Validity Not After
2025-11-21T07:56:42Z

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
3c768c4828bc7cf16f444a4228eaa0b3
```
<nodata>
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-21T08:15:40.000Z",
   "app" : {
      "length" : 8
   },
   "asn" : "AS16509",
   "city" : "Osaka",
   "country" : "JP",
   "cpe" : "<enterprise field>: cpe",
   "cpecount" : "<enterprise field>: cpecount",
   "data" : "<nodata>",
   "datamd5" : "3c768c4828bc7cf16f444a4228eaa0b3",
   "datammh3" : -969888823,
   "domain" : [
      "amazonaws.com",
      "bright-aero.gov"
   ],
   "fingerprint" : {
      "md5" : "7d7a57e79ca98dfb462b82ddefa560ac",
      "sha1" : "b2d324548a9455730cfecde693fff03f032043c9",
      "sha256" : "97968e3e4505c676931612c915c829cb36f2335fa9a40f50bcd5c712fbc8e282"
   },
   "geolocus" : {
      "asn" : "AS16509",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "JP",
      "countryname" : "Japan",
      "domain" : [
         "amazon.com",
         "amazonaws.com",
         "aws.com"
      ],
      "isineu" : "false",
      "latitude" : "36.204824",
      "location" : "36.204824,138.252924",
      "longitude" : "138.252924",
      "netname" : "AMAZON-KIX",
      "organization" : "Amazon Data Services Osaka",
      "subnet" : "13.208.0.0/16"
   },
   "host" : [
      "ec2-13-208-71-13"
   ],
   "hostname" : [
      "ec2-13-208-71-13.ap-northeast-3.compute.amazonaws.com"
   ],
   "ip" : "13.208.71.13",
   "ipv6" : "false",
   "issuer" : {
      "commonname" : "Thawte TLS RSA CA G1",
      "country" : "US",
      "organization" : "DigiCert Inc",
      "organizationalunit" : "www.digicert.com"
   },
   "latitude" : "34.6946",
   "location" : "34.6946,135.5021",
   "longitude" : "135.5021",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "AMAZON-02",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 513,
   "protocol" : "undefined",
   "publickey" : {
      "algorithm" : "rsaEncryption",
      "length" : 2048
   },
   "reverse" : [
      "ec2-13-208-71-13.ap-northeast-3.compute.amazonaws.com"
   ],
   "seen_date" : "2024-11-21",
   "serial" : "1d:47:de:2b:a4:cf:f4:d1:59:3d:a4:e5:65:05:c2:db:54:b6:7e:7b",
   "signature" : {
      "algorithm" : "sha256WithRSAEncryption"
   },
   "source" : "datascan",
   "subdomains" : [
      "ap-northeast-3.compute.amazonaws.com",
      "compute.amazonaws.com"
   ],
   "subject" : {
      "commonname" : "*.bright-aero.gov"
   },
   "subnet" : "13.208.0.0/13",
   "tag" : "<enterprise field>: tag",
   "tld" : [
      "com",
      "gov"
   ],
   "tls" : "true",
   "transport" : "tcp",
   "validity" : {
      "notafter" : "2025-11-21T07:56:42Z",
      "notbefore" : "2023-11-22T07:56:42Z"
   },
   "version" : "v3",
   "wildcard" : "true"
}

Returning 10 result(s) out of 14,632 in 0.066 second(s)

41.193.46.202:513 (tcp/undefined/tls) - last seen on 2024-11-21 at 08:30:38 UTC

1.242.223.165:513 (tcp/http/tls) - last seen on 2024-11-21 at 08:29:25 UTC

203.128.68.59:513 (tcp/http/tls) - last seen on 2024-11-21 at 08:28:25 UTC

185.126.235.13:513 (tcp/undefined/tls) - last seen on 2024-11-21 at 08:25:07 UTC

103.83.8.5:513 (tcp/undefined/tls) - last seen on 2024-11-21 at 08:24:30 UTC

212.80.175.131:513 (tcp/http/tls) - last seen on 2024-11-21 at 08:21:09 UTC

87.205.170.173:513 (tcp/http/tls) - last seen on 2024-11-21 at 08:20:33 UTC

13.60.3.42:513 (tcp/undefined/tls) - last seen on 2024-11-21 at 08:20:18 UTC

154.90.49.225:513 (tcp/undefined/tls) - last seen on 2024-11-21 at 08:19:37 UTC

13.208.71.13:513 (tcp/undefined/tls) - last seen on 2024-11-21 at 08:15:40 UTC