20.79.182.252:20000 (tcp/http/tls) - last seen on 2024-11-21 at 10:32:31 UTC
-
- IP
- 20.79.182.252
- Network
- 20.64.0.0/10
- Domain(s)
- cloudapp.net
- Device
-
<enterprise field>: device.class
- Operating System
- Microsoft Windows
- HTTP Title
- Bad Request
- ASN
- AS8075
- Organization
- MICROSOFT-CORP-MSN-AS-BLOCK
- Protocol
- http Cert not expired http
- Source
- datascan
-
- Operating System
- Microsoft Windows
- Product
- Microsoft HTTPAPI 2.0
- CPE(s)
-
<enterprise field>: cpe
-
- Issuer Common Name
- AME INFRA CA 01
- Subject Common Name
- ff570060-0da7-404d-bc86-e2c149de3c66.gwt.cloudapp.net
- Subject Alt Name
- azuregateway-ff570060-0da7-404d-bc86-e2c149de3c66-65d432589215.gwt.cloudapp.net
- SHA256 Fingerprint
- b0059e1fd836ebf97c0d93588e503093db2f364cb55858958ed91772c9ac686b
- Validity Not Before
- 2024-10-04T22:14:15Z
- Validity Not After
- 2025-09-29T22:14:15Z
This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.
-
- Data MD5
- ab7ec59c257a6ef4d994483c583b818c
- HTTP Header MD5
- 5f8987fc4ee9770a3292cd04557b2dbf
- HTTP Body MD5
- 779df2c90c98bc5e3cb4127ecf04909e
-
HTTP/1.1 400 Bad Request Content-Type: text/html; charset=us-ascii Server: Microsoft-HTTPAPI/2.0 Date: Thu, 21 Nov 2024 10:32:30 GMT Connection: close Content-Length: 326 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd"> <HTML><HEAD><TITLE>Bad Request</TITLE> <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD> <BODY><h2>Bad Request - Invalid Verb</h2> <hr><p>HTTP Error 400. The request verb is invalid.</p> </BODY></HTML> -
{ "@category" : "datascan", "@timestamp" : "2024-11-21T10:32:31.000Z", "app" : { "extract" : { "domain" : [ "w3.org" ], "hostname" : [ "www.w3.org" ], "url" : [ "http://www.w3.org/TR/html4/strict.dtd" ] }, "http" : { "bodymd5" : "779df2c90c98bc5e3cb4127ecf04909e", "bodymmh3" : -640633908, "headermd5" : "5f8987fc4ee9770a3292cd04557b2dbf", "headermmh3" : 1106450484, "title" : "Bad Request" }, "length" : 505 }, "asn" : "AS8075", "ca" : "false", "city" : "Frankfurt am Main", "country" : "DE", "cpe" : "<enterprise field>: cpe", "cpecount" : "<enterprise field>: cpecount", "data" : "HTTP/1.1 400 Bad Request\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 21 Nov 2024 10:32:30 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Bad Request</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Bad Request - Invalid Verb</h2>\r\n<hr><p>HTTP Error 400. The request verb is invalid.</p>\r\n</BODY></HTML>\r\n", "datamd5" : "ab7ec59c257a6ef4d994483c583b818c", "datammh3" : 1596030123, "device" : { "class" : "<enterprise field>: device.class" }, "domain" : [ "cloudapp.net" ], "extkeyusage" : [ "serverAuth", "clientAuth" ], "fingerprint" : { "md5" : "bed3922f34b80c1d9b45ec751a3c25f1", "sha1" : "878492bff83a6cb6c8c3feab48299bc05b2cbea3", "sha256" : "b0059e1fd836ebf97c0d93588e503093db2f364cb55858958ed91772c9ac686b" }, "geolocus" : { "asn" : "AS8075", "continent" : "NA", "continentname" : "North America", "country" : "US", "countryname" : "United States", "domain" : [ "microsoft.com" ], "isineu" : "false", "latitude" : "37.09024", "location" : "37.09024,-95.712891", "longitude" : "-95.712891", "netname" : "MSFT", "organization" : "Microsoft Corporation", "subnet" : "20.79.0.0/16" }, "host" : [ "azuregateway-ff570060-0da7-404d-bc86-e2c149de3c66-65d432589215", "ff570060-0da7-404d-bc86-e2c149de3c66" ], "hostname" : [ "azuregateway-ff570060-0da7-404d-bc86-e2c149de3c66-65d432589215.gwt.cloudapp.net", "ff570060-0da7-404d-bc86-e2c149de3c66.gwt.cloudapp.net" ], "ip" : "20.79.182.252", "ipv6" : "false", "issuer" : { "commonname" : "AME INFRA CA 01" }, "keyusage" : [ "digitalSignature", "keyEncipherment" ], "latitude" : "50.1187", "location" : "50.1187,8.6842", "longitude" : "8.6842", "node" : { "country" : "<enterprise field>: node.country", "groupid" : "<enterprise field>: node.groupid", "id" : "<enterprise field>: node.id", "physicalcountry" : "<enterprise field>: node.physicalcountry" }, "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK", "os" : "Windows", "osvendor" : "Microsoft", "port" : 20000, "product" : "HTTPAPI", "productvendor" : "Microsoft", "productversion" : "2.0", "protocol" : "http", "protocolversion" : "1.1", "publickey" : { "algorithm" : "rsaEncryption", "length" : 2048 }, "reason" : "Bad Request", "seen_date" : "2024-11-21", "serial" : "3a:03:c8:b8:a1:e9:68:f5:86:9b:55:82:3b:00:04:03:c8:b8:a1", "signature" : { "algorithm" : "sha256WithRSAEncryption" }, "source" : "datascan", "status" : 400, "subdomains" : [ "gwt.cloudapp.net" ], "subject" : { "altname" : [ "azuregateway-ff570060-0da7-404d-bc86-e2c149de3c66-65d432589215.gwt.cloudapp.net" ], "commonname" : "ff570060-0da7-404d-bc86-e2c149de3c66.gwt.cloudapp.net" }, "subnet" : "20.64.0.0/10", "tag" : "<enterprise field>: tag", "tld" : [ "net" ], "tls" : "true", "transport" : "tcp", "validity" : { "notafter" : "2025-09-29T22:14:15Z", "notbefore" : "2024-10-04T22:14:15Z" }, "version" : "v3", "wildcard" : "false" }