Returning 10 result(s) out of 255,931 in 0.127 second(s)

  • 61.244.200.134:3443 (tcp/http/tls) - last seen on 2024-11-21 at 08:48:09 UTC

    • IP
      61.244.200.134
      Network
      61.244.192.0/20
      Domain(s)
      ctinets.com draytek.com
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product

      URL

      https://61.244.200.134:3443/weblogin.htm 302

      Reverse DNS
      061244200134.ctinets.com
      ASN
      AS9269
      Organization
      Hong Kong Broadband Network Ltd.
      Protocol
      http Cert not expired http
      Source
      datascan::redirect::3
    • Product
      Server Server
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Vigor Router
      Issuer Organization
      DrayTek Corp.
      Subject Organization
      DrayTek Corp.
      Subject Common Name
      Vigor Router
      Subject Alt Name
      www.draytek.com
      SHA256 Fingerprint
      3cf80e1fbe20ad87d4d4d6578e392b4c6f2313f4c186a483780d996c20da1883
      Validity Not Before
      2024-04-15T07:30:23Z
      Validity Not After
      2025-05-15T07:30:23Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      031789ab3158b7718e8fc6456ee1ba08
      HTTP Header MD5
      4c423a1419130ee2426eba61c9956267
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 302 Found
      Location: /weblogin.htm
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      X-Frame-Options: SAMEORIGIN
      Cache-Control: no-cache, no-store, must-revalidate
      Expires: -1
      Pragma: no-cache
      Strict-Transport-Security: max-age=31536000; includeSubdomains
      Content-Length: 0
      Connection: close
      Date: Thu, 21 Nov 2024 08:48:09 GMT
      Server: Server
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:48:09.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "4c423a1419130ee2426eba61c9956267",
               "headermmh3" : 232981666
            },
            "length" : 380
         },
         "asn" : "AS9269",
         "ca" : "false",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 302 Found\r\nLocation: /weblogin.htm\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nX-Frame-Options: SAMEORIGIN\r\nCache-Control: no-cache, no-store, must-revalidate\r\nExpires: -1\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=31536000; includeSubdomains\r\nContent-Length: 0\r\nConnection: close\r\nDate: Thu, 21 Nov 2024 08:48:09 GMT\r\nServer: Server\r\n\r\n",
         "datamd5" : "031789ab3158b7718e8fc6456ee1ba08",
         "datammh3" : 378853982,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor"
         },
         "domain" : [
            "ctinets.com",
            "draytek.com"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "e16c88cbf145248501a839484475451d",
            "sha1" : "1c71882b86982232d230a1b2fa6d8b8d5f33758a",
            "sha256" : "3cf80e1fbe20ad87d4d4d6578e392b4c6f2313f4c186a483780d996c20da1883"
         },
         "forward" : "61.244.200.134",
         "geolocus" : {
            "asn" : "AS9269",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "ctinets.com",
               "hkbn.com.hk",
               "hkbn.net"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "HKBN",
            "organization" : "Hong Kong Broadband Network Ltd",
            "subnet" : "61.244.192.0/20"
         },
         "host" : [
            "061244200134",
            "www"
         ],
         "hostname" : [
            "061244200134.ctinets.com",
            "61.244.200.134",
            "www.draytek.com"
         ],
         "ip" : "61.244.200.134",
         "ipv6" : "false",
         "issuer" : {
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "latitude" : "22.2908",
         "location" : "22.2908,114.1501",
         "longitude" : "114.1501",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Hong Kong Broadband Network Ltd.",
         "port" : 3443,
         "product" : "Server",
         "productvendor" : "Server",
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Found",
         "reverse" : [
            "061244200134.ctinets.com"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "fb:78:43:bb:7b:64:43:9c",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan::redirect::3",
         "status" : 302,
         "subject" : {
            "altname" : [
               "www.draytek.com"
            ],
            "city" : "HuKou",
            "commonname" : "Vigor Router",
            "country" : "TW",
            "organization" : "DrayTek Corp.",
            "organizationalunit" : "DrayTek Support"
         },
         "subnet" : "61.244.192.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/weblogin.htm",
         "validity" : {
            "notafter" : "2025-05-15T07:30:23Z",
            "notbefore" : "2024-04-15T07:30:23Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 103.231.196.219:3443 (tcp/http/tls) - last seen on 2024-11-21 at 08:47:44 UTC

    • IP
      103.231.196.219
      Network
      103.231.196.0/23
      Device

      <enterprise field>: device.class <enterprise field>: device.productvendor <enterprise field>: device.product <enterprise field>: device.productversion

      Operating System
      Fortinet FortiOS
      URL

      https://103.231.196.219:3443/ 200

      ASN
      AS38758
      Organization
      PT. HIPERNET INDODATA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Fortinet FortiOS
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      support
      Issuer Organization
      Fortinet
      Subject Organization
      Fortinet
      Subject Email
      support@fortinet.com
      Subject Common Name
      FG200ETK19917792
      SHA256 Fingerprint
      30d1df5cab791fd1171b3232ae5e332f23ade3f159bf2644ae63a49423d7fcc8
      Validity Not Before
      2019-11-12T01:09:02Z
      Validity Not After
      2038-01-19T03:14:07Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      2b0ca53cec1da5bfb0b06151a42afe7a
      HTTP Header MD5
      aa7f210d0495fdc8933e8db09cc927db
      HTTP Body MD5
      84a18166fde3ee7e7c974b8d1e7e21b4
    • HTTP/1.1 200 OK
      Date: Thu, 21 Nov 2024 08:47:34 GMT
      Server: xxxxxxxx-xxxxx
      Last-Modified: Tue, 19 Oct 2021 22:27:19 GMT
      ETag: "83-616f4647"
      Accept-Ranges: bytes
      Content-Length: 131
      Connection: close
      Content-Type: text/html
      X-Frame-Options: SAMEORIGIN
      Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;
      X-XSS-Protection: 1; mode=block
      X-Content-Type-Options: nosniff
      Strict-Transport-Security: max-age=31536000
      
      <html><script type="text/javascript">
      if (window!=top) top.location=window.location;top.location="/remote/login";
      </script></html>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:47:44.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "84a18166fde3ee7e7c974b8d1e7e21b4",
               "bodymmh3" : -1454941180,
               "header" : [
                  {
                     "name" : "Last-Modified",
                     "value" : "Tue, 19 Oct 2021 22:27:19 GMT"
                  },
                  {
                     "value" : "83-616f4647",
                     "name" : "ETag"
                  }
               ],
               "headermd5" : "aa7f210d0495fdc8933e8db09cc927db",
               "headermmh3" : -1849982417
            },
            "length" : 638
         },
         "asn" : "AS38758",
         "ca" : "false",
         "country" : "ID",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nDate: Thu, 21 Nov 2024 08:47:34 GMT\r\nServer: xxxxxxxx-xxxxx\r\nLast-Modified: Tue, 19 Oct 2021 22:27:19 GMT\r\nETag: \"83-616f4647\"\r\nAccept-Ranges: bytes\r\nContent-Length: 131\r\nConnection: close\r\nContent-Type: text/html\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:   'unsafe-eval' 'unsafe-inline' blob:;\r\nX-XSS-Protection: 1; mode=block\r\nX-Content-Type-Options: nosniff\r\nStrict-Transport-Security: max-age=31536000\r\n\r\n<html><script type=\"text/javascript\">\nif (window!=top) top.location=window.location;top.location=\"/remote/login\";\n</script></html>\n",
         "datamd5" : "2b0ca53cec1da5bfb0b06151a42afe7a",
         "datammh3" : 366042462,
         "device" : {
            "class" : "<enterprise field>: device.class",
            "product" : "<enterprise field>: device.product",
            "productvendor" : "<enterprise field>: device.productvendor",
            "productversion" : "<enterprise field>: device.productversion"
         },
         "fingerprint" : {
            "md5" : "a2f0c442f2e07cb9beac2d1a70bc6119",
            "sha1" : "bb0265c54d4d97615fa2cb6f02630228f9c9e10c",
            "sha256" : "30d1df5cab791fd1171b3232ae5e332f23ade3f159bf2644ae63a49423d7fcc8"
         },
         "geolocus" : {
            "asn" : "AS38758",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "ID",
            "countryname" : "Indonesia",
            "domain" : [
               "cfdnetworks.com",
               "hypernet.co.id"
            ],
            "isineu" : "false",
            "latitude" : "-0.789275",
            "location" : "-0.789275,113.921327",
            "longitude" : "113.921327",
            "netname" : "IDNIC-CFDNETWORKS-ID",
            "organization" : "PT Cablenet Fiber Data",
            "subnet" : "103.231.196.0/23"
         },
         "ip" : "103.231.196.219",
         "ipv6" : "false",
         "issuer" : {
            "city" : "Sunnyvale",
            "commonname" : "support",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "Certificate Authority"
         },
         "latitude" : "-6.1728",
         "location" : "-6.1728,106.8272",
         "longitude" : "106.8272",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "PT. HIPERNET INDODATA",
         "os" : "FortiOS",
         "osvendor" : "Fortinet",
         "port" : 3443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "serial" : "42:56:47",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 200,
         "subject" : {
            "city" : "Sunnyvale",
            "commonname" : "FG200ETK19917792",
            "country" : "US",
            "email" : "support@fortinet.com",
            "organization" : "Fortinet",
            "organizationalunit" : "FortiGate"
         },
         "subnet" : "103.231.196.0/23",
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2038-01-19T03:14:07Z",
            "notbefore" : "2019-11-12T01:09:02Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 107.154.228.22:3443 (tcp/http/tls) - last seen on 2024-11-21 at 08:47:37 UTC

    • IP
      107.154.228.22
      Alternative IP(s)
      196.201.213.182 45.223.18.17 45.223.20.17 45.223.28.17 45.60.109.225 45.60.12.229 45.60.14.229 45.60.16.229 45.60.20.229 45.60.73.225
      Network
      107.154.224.0/20
      Domain(s)
      imperva.com incapdns.net m-pesaforbusiness.co.ke masoko.com safaricom.co.ke safaricom.com safaricom.ke safaricombusiness.co.ke
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://107.154.228.22:3443/ 503

      Reverse DNS
      107.154.228.22.ip.incapdns.net
      ASN
      AS19551
      Organization
      INCAPSULA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GlobalSign Atlas R3 DV TLS CA 2024 Q3
      Issuer Organization
      GlobalSign nv-sa
      Subject Common Name
      imperva.com
      Subject Alt Name
      pay.m-pesaforbusiness.co.ke smartinventory.safaricom.co.ke employee-uat.safaricom.co.ke partnerhub.safaricom.co.ke report.skiza.safaricom.com www.iotsimmanagement.safaricombusiness.co.ke selfcare.safaricom.co.ke auth.fsdev.safaricom.co.ke webchat.safaricom.co.ke appstg.safaricom.co.ke partner-onboarding-portal.safaricom.co.ke pretups.safaricom.co.ke api.fsprod.safaricom.co.ke mpesaminiapps.safaricom.co.ke imperva.com luckydrawpromo.skiza.safaricom.com diginoc.safaricom.co.ke mpesastatementverification.safaricom.co.ke county.safaricom.co.ke sslcertificates.safaricom.co.ke dealermvp.safaricom.co.ke api.county.safaricom.co.ke faz01.ngao.safaricom.co.ke testtwaweza.safaricom.ke agm.safaricom.co.ke decode.safaricom.co.ke mpesafoundation.safaricom.ke franchisesimswap-uat.safaricom.co.ke appsandbox.safaricom.co.ke www.uat.shop.masoko.com
      SHA256 Fingerprint
      cdccdbdeac00cca954c1512da34836310977dcc40c45764ccd0bd77d979692ac
      Validity Not Before
      2024-09-13T09:08:56Z
      Validity Not After
      2025-03-12T09:08:56Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a2aac7c8bed07d3515cb7c949b91682c
      HTTP Header MD5
      72a58e9b8271000cadb418d51f50aa16
      HTTP Body MD5
      eb534f78cd9577c4dafe6b2bc5ef0049
    • HTTP/1.1 503 Service Unavailable
      Content-Type: text/html
      Cache-Control: no-cache, no-store
      Connection: close
      Content-Length: 691
      X-Iinfo: 12-84196762-0 0NNN RT(1732178855791 249) q(0 -1 -1 -1) r(0 -1)
      
      <html style="height:100%"><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta name="viewport" content="initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"></head><body style="margin:0px;height:100%"><iframe id="main-iframe" src="/_Incapsula_Resource?CWUDNSAI=27&xinfo=12-84196762-0%200NNN%20RT%281732178855791%20249%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-499556618464658060&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET" frameborder=0 width="100%" height="100%" marginheight="0px" marginwidth="0px">Request unsuccessful. Incapsula incident ID: 0-499556618464658060</iframe></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:47:37.000Z",
         "alternativeip" : [
            "196.201.213.182",
            "45.223.18.17",
            "45.223.20.17",
            "45.223.28.17",
            "45.60.109.225",
            "45.60.12.229",
            "45.60.14.229",
            "45.60.16.229",
            "45.60.20.229",
            "45.60.73.225"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "eb534f78cd9577c4dafe6b2bc5ef0049",
               "bodymmh3" : 1188792786,
               "headermd5" : "72a58e9b8271000cadb418d51f50aa16",
               "headermmh3" : -1196879680
            },
            "length" : 900
         },
         "asn" : "AS19551",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 503 Service Unavailable\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store\r\nConnection: close\r\nContent-Length: 691\r\nX-Iinfo: 12-84196762-0 0NNN RT(1732178855791 249) q(0 -1 -1 -1) r(0 -1)\r\n\r\n<html style=\"height:100%\"><head><META NAME=\"ROBOTS\" CONTENT=\"NOINDEX, NOFOLLOW\"><meta name=\"format-detection\" content=\"telephone=no\"><meta name=\"viewport\" content=\"initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge,chrome=1\"></head><body style=\"margin:0px;height:100%\"><iframe id=\"main-iframe\" src=\"/_Incapsula_Resource?CWUDNSAI=27&xinfo=12-84196762-0%200NNN%20RT%281732178855791%20249%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-499556618464658060&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET\" frameborder=0 width=\"100%\" height=\"100%\" marginheight=\"0px\" marginwidth=\"0px\">Request unsuccessful. Incapsula incident ID: 0-499556618464658060</iframe></body></html>",
         "datamd5" : "a2aac7c8bed07d3515cb7c949b91682c",
         "datammh3" : -933183748,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "imperva.com",
            "incapdns.net",
            "m-pesaforbusiness.co.ke",
            "masoko.com",
            "safaricom.co.ke",
            "safaricom.com",
            "safaricom.ke",
            "safaricombusiness.co.ke"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "b04cad4b0e95177c13dd9442aff2b929",
            "sha1" : "6d43d3ff85fe20e83f1b069363c891657a675f8b",
            "sha256" : "cdccdbdeac00cca954c1512da34836310977dcc40c45764ccd0bd77d979692ac"
         },
         "geolocus" : {
            "asn" : "AS19551",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "imperva.com",
               "incapdns.net",
               "incapsula.com",
               "thalesgroup.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "INCAPSULA-NETWORK",
            "organization" : "Incapsula Inc",
            "subnet" : "107.154.228.22/31"
         },
         "host" : [
            107,
            "agm",
            "api",
            "appsandbox",
            "appstg",
            "auth",
            "county",
            "dealermvp",
            "decode",
            "diginoc",
            "employee-uat",
            "faz01",
            "franchisesimswap-uat",
            "luckydrawpromo",
            "mpesafoundation",
            "mpesaminiapps",
            "mpesastatementverification",
            "partner-onboarding-portal",
            "partnerhub",
            "pay",
            "pretups",
            "report",
            "selfcare",
            "smartinventory",
            "sslcertificates",
            "testtwaweza",
            "webchat",
            "www"
         ],
         "hostname" : [
            "107.154.228.22.ip.incapdns.net",
            "agm.safaricom.co.ke",
            "api.county.safaricom.co.ke",
            "api.fsprod.safaricom.co.ke",
            "appsandbox.safaricom.co.ke",
            "appstg.safaricom.co.ke",
            "auth.fsdev.safaricom.co.ke",
            "county.safaricom.co.ke",
            "dealermvp.safaricom.co.ke",
            "decode.safaricom.co.ke",
            "diginoc.safaricom.co.ke",
            "employee-uat.safaricom.co.ke",
            "faz01.ngao.safaricom.co.ke",
            "franchisesimswap-uat.safaricom.co.ke",
            "imperva.com",
            "luckydrawpromo.skiza.safaricom.com",
            "mpesafoundation.safaricom.ke",
            "mpesaminiapps.safaricom.co.ke",
            "mpesastatementverification.safaricom.co.ke",
            "partner-onboarding-portal.safaricom.co.ke",
            "partnerhub.safaricom.co.ke",
            "pay.m-pesaforbusiness.co.ke",
            "pretups.safaricom.co.ke",
            "report.skiza.safaricom.com",
            "selfcare.safaricom.co.ke",
            "smartinventory.safaricom.co.ke",
            "sslcertificates.safaricom.co.ke",
            "testtwaweza.safaricom.ke",
            "webchat.safaricom.co.ke",
            "www.iotsimmanagement.safaricombusiness.co.ke",
            "www.uat.shop.masoko.com"
         ],
         "ip" : "107.154.228.22",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GlobalSign Atlas R3 DV TLS CA 2024 Q3",
            "country" : "BE",
            "organization" : "GlobalSign nv-sa"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "INCAPSULA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Service Unavailable",
         "reverse" : [
            "107.154.228.22.ip.incapdns.net"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "01:0b:cc:b1:2a:1c:9c:7a:1b:ff:f1:22:e6:08:4d:e2",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 503,
         "subdomains" : [
            "154.228.22.ip.incapdns.net",
            "22.ip.incapdns.net",
            "228.22.ip.incapdns.net",
            "county.safaricom.co.ke",
            "fsdev.safaricom.co.ke",
            "fsprod.safaricom.co.ke",
            "iotsimmanagement.safaricombusiness.co.ke",
            "ip.incapdns.net",
            "ngao.safaricom.co.ke",
            "shop.masoko.com",
            "skiza.safaricom.com",
            "uat.shop.masoko.com"
         ],
         "subject" : {
            "altname" : [
               "pay.m-pesaforbusiness.co.ke",
               "smartinventory.safaricom.co.ke",
               "employee-uat.safaricom.co.ke",
               "partnerhub.safaricom.co.ke",
               "report.skiza.safaricom.com",
               "www.iotsimmanagement.safaricombusiness.co.ke",
               "selfcare.safaricom.co.ke",
               "auth.fsdev.safaricom.co.ke",
               "webchat.safaricom.co.ke",
               "appstg.safaricom.co.ke",
               "partner-onboarding-portal.safaricom.co.ke",
               "pretups.safaricom.co.ke",
               "api.fsprod.safaricom.co.ke",
               "mpesaminiapps.safaricom.co.ke",
               "imperva.com",
               "luckydrawpromo.skiza.safaricom.com",
               "diginoc.safaricom.co.ke",
               "mpesastatementverification.safaricom.co.ke",
               "county.safaricom.co.ke",
               "sslcertificates.safaricom.co.ke",
               "dealermvp.safaricom.co.ke",
               "api.county.safaricom.co.ke",
               "faz01.ngao.safaricom.co.ke",
               "testtwaweza.safaricom.ke",
               "agm.safaricom.co.ke",
               "decode.safaricom.co.ke",
               "mpesafoundation.safaricom.ke",
               "franchisesimswap-uat.safaricom.co.ke",
               "appsandbox.safaricom.co.ke",
               "www.uat.shop.masoko.com"
            ],
            "commonname" : "imperva.com"
         },
         "subnet" : "107.154.224.0/20",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "co.ke",
            "com",
            "ke",
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-03-12T09:08:56Z",
            "notbefore" : "2024-09-13T09:08:56Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 45.223.125.126:3443 (tcp/http/tls) - last seen on 2024-11-21 at 08:47:36 UTC

    • IP
      45.223.125.126
      Alternative IP(s)
      2407:6800:0:5cb:0:0:0:a 45.60.109.225 45.60.32.9 45.60.38.9 45.60.73.225
      Network
      45.223.96.0/19
      Domain(s)
      bfs.org.au cardms.com.au imperva.com indue.com.au rewarderpoints.com.au smartcard.com.au warwickcu.com.au
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://45.223.125.126:3443/ 503

      ASN
      AS19551
      Organization
      INCAPSULA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GlobalSign Atlas R3 DV TLS CA 2024 Q3
      Issuer Organization
      GlobalSign nv-sa
      Subject Common Name
      imperva.com
      Subject Alt Name
      *.warwickcu.com.au test-online.bfs.org.au rewarderpoints.com.au smartcard.com.au www.smartcard.com.au *.bfs.org.au *.cardms.com.au *.rewarderpoints.com.au testonline.indue.com.au *.indue.com.au imperva.com *.cdc.indue.com.au
      SHA256 Fingerprint
      6e8a3ef5d6ab479ddf1c84341f36e838227c712fbfbbd2bcc171be6f13b1899e
      Validity Not Before
      2024-08-28T10:11:35Z
      Validity Not After
      2025-02-24T10:11:35Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      b4fb7864cb5a5383c76f394b2a67a604
      HTTP Header MD5
      45c359b209a0b71d36b1ab5c583b17b4
      HTTP Body MD5
      525b14570f05710e8b5968741eb90059
    • HTTP/1.1 503 Service Unavailable
      Content-Type: text/html
      Cache-Control: no-cache, no-store
      Connection: close
      Content-Length: 694
      X-Iinfo: 61-285648999-0 0NNN RT(1732178855745 214) q(0 -1 -1 -1) r(0 -1)
      
      <html style="height:100%"><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta name="viewport" content="initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"></head><body style="margin:0px;height:100%"><iframe id="main-iframe" src="/_Incapsula_Resource?CWUDNSAI=27&xinfo=61-285648999-0%200NNN%20RT%281732178855745%20214%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-1389556228299489917&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET" frameborder=0 width="100%" height="100%" marginheight="0px" marginwidth="0px">Request unsuccessful. Incapsula incident ID: 0-1389556228299489917</iframe></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:47:36.000Z",
         "alternativeip" : [
            "2407:6800:0:5cb:0:0:0:a",
            "45.60.109.225",
            "45.60.32.9",
            "45.60.38.9",
            "45.60.73.225"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "525b14570f05710e8b5968741eb90059",
               "bodymmh3" : -1771375694,
               "headermd5" : "45c359b209a0b71d36b1ab5c583b17b4",
               "headermmh3" : 1707318678
            },
            "length" : 904
         },
         "asn" : "AS19551",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 503 Service Unavailable\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store\r\nConnection: close\r\nContent-Length: 694\r\nX-Iinfo: 61-285648999-0 0NNN RT(1732178855745 214) q(0 -1 -1 -1) r(0 -1)\r\n\r\n<html style=\"height:100%\"><head><META NAME=\"ROBOTS\" CONTENT=\"NOINDEX, NOFOLLOW\"><meta name=\"format-detection\" content=\"telephone=no\"><meta name=\"viewport\" content=\"initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge,chrome=1\"></head><body style=\"margin:0px;height:100%\"><iframe id=\"main-iframe\" src=\"/_Incapsula_Resource?CWUDNSAI=27&xinfo=61-285648999-0%200NNN%20RT%281732178855745%20214%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-1389556228299489917&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET\" frameborder=0 width=\"100%\" height=\"100%\" marginheight=\"0px\" marginwidth=\"0px\">Request unsuccessful. Incapsula incident ID: 0-1389556228299489917</iframe></body></html>",
         "datamd5" : "b4fb7864cb5a5383c76f394b2a67a604",
         "datammh3" : -1957656056,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "bfs.org.au",
            "cardms.com.au",
            "imperva.com",
            "indue.com.au",
            "rewarderpoints.com.au",
            "smartcard.com.au",
            "warwickcu.com.au"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "bb961b33427d7a3a8897ebbded2e4e16",
            "sha1" : "a5c374a0093f4fe8ee68e088fcd00e76a736dfb2",
            "sha256" : "6e8a3ef5d6ab479ddf1c84341f36e838227c712fbfbbd2bcc171be6f13b1899e"
         },
         "geolocus" : {
            "asn" : "AS19551",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "imperva.com",
               "incapsula.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "INCAPSULA-NET",
            "organization" : "Incapsula Inc",
            "subnet" : "45.223.125.126/31"
         },
         "host" : [
            "test-online",
            "testonline",
            "www"
         ],
         "hostname" : [
            "imperva.com",
            "rewarderpoints.com.au",
            "smartcard.com.au",
            "test-online.bfs.org.au",
            "testonline.indue.com.au",
            "www.smartcard.com.au"
         ],
         "ip" : "45.223.125.126",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GlobalSign Atlas R3 DV TLS CA 2024 Q3",
            "country" : "BE",
            "organization" : "GlobalSign nv-sa"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "INCAPSULA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Service Unavailable",
         "seen_date" : "2024-11-21",
         "serial" : "01:27:1f:69:58:fc:f3:b0:f3:5e:95:5e:5e:74:00:20",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 503,
         "subdomains" : [
            "cdc.indue.com.au"
         ],
         "subject" : {
            "altname" : [
               "*.warwickcu.com.au",
               "test-online.bfs.org.au",
               "rewarderpoints.com.au",
               "smartcard.com.au",
               "www.smartcard.com.au",
               "*.bfs.org.au",
               "*.cardms.com.au",
               "*.rewarderpoints.com.au",
               "testonline.indue.com.au",
               "*.indue.com.au",
               "imperva.com",
               "*.cdc.indue.com.au"
            ],
            "commonname" : "imperva.com"
         },
         "subnet" : "45.223.96.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com",
            "com.au",
            "org.au"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-02-24T10:11:35Z",
            "notbefore" : "2024-08-28T10:11:35Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 172.175.234.30:3443 (tcp/http/tls) - last seen on 2024-11-21 at 08:47:31 UTC

    • IP
      172.175.234.30
      Network
      172.128.0.0/10
      Domain(s)
      azure-api.net
      Device

      <enterprise field>: device.class

      Operating System
      FreeBSD FreeBSD
      URL

      https://172.175.234.30:3443/ 400

      ASN
      AS8075
      Organization
      MICROSOFT-CORP-MSN-AS-BLOCK
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      FreeBSD FreeBSD
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      Microsoft Azure RSA TLS Issuing CA 07
      Issuer Organization
      Microsoft Corporation
      Subject Organization
      Microsoft Corporation
      Subject Common Name
      api-sellercenter-prd.azure-api.net
      Subject Alt Name
      api-sellercenter-prd.azure-api.net api-sellercenter-prd.management.azure-api.net api-sellercenter-prd.portal.azure-api.net api-sellercenter-prd.developer.azure-api.net api-sellercenter-prd.scm.azure-api.net api-sellercenter-prd.configuration.azure-api.net api-sellercenter-prd.data.azure-api.net api-sellercenter-prd-eastus2-01.regional.azure-api.net api-sellercenter-prd.unique.azure-api.net api-sellercenter-prd.unique.management.azure-api.net api-sellercenter-prd.unique.portal.azure-api.net api-sellercenter-prd.unique.developer.azure-api.net api-sellercenter-prd.unique.scm.azure-api.net api-sellercenter-prd.unique.configuration.azure-api.net api-sellercenter-prd.unique.data.azure-api.net api-sellercenter-prd-eastus2-01.unique.regional.azure-api.net api-sellercenter-prd.portal-editor.azure-api.net
      SHA256 Fingerprint
      dd719b71d290c30e8ceb40733f4f7492dd4c95f6e95f32f14514c7404499f737
      Validity Not Before
      2024-09-16T16:20:41Z
      Validity Not After
      2025-09-11T16:20:41Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e4a0f4c71a66623f5deae66b4452c88e
      HTTP Header MD5
      d10c96a278671bae12e199ab1454a946
      HTTP Body MD5
      af0a3e38cebd74e1fc8448aa52459d36
    • HTTP/1.1 400 Bad Request
      Content-Length: 604
      Content-Type: application/json; charset=utf-8
      Strict-Transport-Security: max-age=31536000; includeSubDomains
      X-Content-Type-Options: nosniff
      Date: Thu, 21 Nov 2024 08:47:31 GMT
      Connection: close
      
      {"error":{"code":"MissingOrIncorrectVersionParameter","message":"API version query parameter is not specified or was specified incorrectly.  Supported versions: 2014-02-14-preview,2014-02-14,2015-09-15,2016-07-07,2016-10-10,2017-03-01,2018-01-01,2018-06-01-preview,2019-01-01,2019-12-01-preview,2019-12-01,2020-06-01-preview,2020-12-01,2021-01-01-preview,2021-04-01-preview,2021-08-01,2021-12-01-preview,2022-04-01-preview,2022-08-01,2022-09-01-preview,2023-03-01-preview,2023-05-01-preview,2023-09-01-preview,2024-06-01-preview  Example query param format: api-version=SupportedVersion","details":null}}
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:47:31.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "af0a3e38cebd74e1fc8448aa52459d36",
               "bodymmh3" : -1298898185,
               "headermd5" : "d10c96a278671bae12e199ab1454a946",
               "headermmh3" : -622338857
            },
            "length" : 853
         },
         "asn" : "AS8075",
         "basicconstraints" : "critical",
         "ca" : "false",
         "city" : "Boydton",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 400 Bad Request\r\nContent-Length: 604\r\nContent-Type: application/json; charset=utf-8\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nDate: Thu, 21 Nov 2024 08:47:31 GMT\r\nConnection: close\r\n\r\n{\"error\":{\"code\":\"MissingOrIncorrectVersionParameter\",\"message\":\"API version query parameter is not specified or was specified incorrectly.  Supported versions: 2014-02-14-preview,2014-02-14,2015-09-15,2016-07-07,2016-10-10,2017-03-01,2018-01-01,2018-06-01-preview,2019-01-01,2019-12-01-preview,2019-12-01,2020-06-01-preview,2020-12-01,2021-01-01-preview,2021-04-01-preview,2021-08-01,2021-12-01-preview,2022-04-01-preview,2022-08-01,2022-09-01-preview,2023-03-01-preview,2023-05-01-preview,2023-09-01-preview,2024-06-01-preview  Example query param format: api-version=SupportedVersion\",\"details\":null}}",
         "datamd5" : "e4a0f4c71a66623f5deae66b4452c88e",
         "datammh3" : -122856486,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "azure-api.net"
         ],
         "extkeyusage" : [
            "clientAuth",
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "c4e7e49d41d50def00397713cc0d6b16",
            "sha1" : "a470e24b01c98c28c6b757671dadf579f1b39e25",
            "sha256" : "dd719b71d290c30e8ceb40733f4f7492dd4c95f6e95f32f14514c7404499f737"
         },
         "geolocus" : {
            "asn" : "AS8075",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "GB",
            "countryname" : "United Kingdom",
            "domain" : [
               "microsoft.com"
            ],
            "isineu" : "false",
            "latitude" : "55.378051",
            "location" : "55.378051,-3.435973",
            "longitude" : "-3.435973",
            "netname" : "UK-MICROSOFT-20000324",
            "organization" : "Microsoft Limited",
            "subnet" : "172.128.0.0/10"
         },
         "host" : [
            "api-sellercenter-prd",
            "api-sellercenter-prd-eastus2-01"
         ],
         "hostname" : [
            "api-sellercenter-prd-eastus2-01.regional.azure-api.net",
            "api-sellercenter-prd-eastus2-01.unique.regional.azure-api.net",
            "api-sellercenter-prd.azure-api.net",
            "api-sellercenter-prd.configuration.azure-api.net",
            "api-sellercenter-prd.data.azure-api.net",
            "api-sellercenter-prd.developer.azure-api.net",
            "api-sellercenter-prd.management.azure-api.net",
            "api-sellercenter-prd.portal-editor.azure-api.net",
            "api-sellercenter-prd.portal.azure-api.net",
            "api-sellercenter-prd.scm.azure-api.net",
            "api-sellercenter-prd.unique.azure-api.net",
            "api-sellercenter-prd.unique.configuration.azure-api.net",
            "api-sellercenter-prd.unique.data.azure-api.net",
            "api-sellercenter-prd.unique.developer.azure-api.net",
            "api-sellercenter-prd.unique.management.azure-api.net",
            "api-sellercenter-prd.unique.portal.azure-api.net",
            "api-sellercenter-prd.unique.scm.azure-api.net"
         ],
         "ip" : "172.175.234.30",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "Microsoft Azure RSA TLS Issuing CA 07",
            "country" : "US",
            "organization" : "Microsoft Corporation"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "36.6676",
         "location" : "36.6676,-78.3875",
         "longitude" : "-78.3875",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "MICROSOFT-CORP-MSN-AS-BLOCK",
         "os" : "FreeBSD",
         "osvendor" : "FreeBSD",
         "port" : 3443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Bad Request",
         "seen_date" : "2024-11-21",
         "serial" : "33:00:7f:e8:a2:86:7e:fb:3a:18:60:93:15:00:00:00:7f:e8:a2",
         "signature" : {
            "algorithm" : "sha384WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 400,
         "subdomains" : [
            "configuration.azure-api.net",
            "data.azure-api.net",
            "developer.azure-api.net",
            "management.azure-api.net",
            "portal-editor.azure-api.net",
            "portal.azure-api.net",
            "regional.azure-api.net",
            "scm.azure-api.net",
            "unique.azure-api.net",
            "unique.configuration.azure-api.net",
            "unique.data.azure-api.net",
            "unique.developer.azure-api.net",
            "unique.management.azure-api.net",
            "unique.portal.azure-api.net",
            "unique.regional.azure-api.net",
            "unique.scm.azure-api.net"
         ],
         "subject" : {
            "altname" : [
               "api-sellercenter-prd.azure-api.net",
               "api-sellercenter-prd.management.azure-api.net",
               "api-sellercenter-prd.portal.azure-api.net",
               "api-sellercenter-prd.developer.azure-api.net",
               "api-sellercenter-prd.scm.azure-api.net",
               "api-sellercenter-prd.configuration.azure-api.net",
               "api-sellercenter-prd.data.azure-api.net",
               "api-sellercenter-prd-eastus2-01.regional.azure-api.net",
               "api-sellercenter-prd.unique.azure-api.net",
               "api-sellercenter-prd.unique.management.azure-api.net",
               "api-sellercenter-prd.unique.portal.azure-api.net",
               "api-sellercenter-prd.unique.developer.azure-api.net",
               "api-sellercenter-prd.unique.scm.azure-api.net",
               "api-sellercenter-prd.unique.configuration.azure-api.net",
               "api-sellercenter-prd.unique.data.azure-api.net",
               "api-sellercenter-prd-eastus2-01.unique.regional.azure-api.net",
               "api-sellercenter-prd.portal-editor.azure-api.net"
            ],
            "city" : "Redmond",
            "commonname" : "api-sellercenter-prd.azure-api.net",
            "country" : "US",
            "organization" : "Microsoft Corporation"
         },
         "subnet" : "172.128.0.0/10",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-09-11T16:20:41Z",
            "notbefore" : "2024-09-16T16:20:41Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 45.223.108.155:3443 (tcp/http/tls) - last seen on 2024-11-21 at 08:47:23 UTC

    • IP
      45.223.108.155
      Alternative IP(s)
      45.60.109.225 45.60.73.225
      Network
      45.223.96.0/19
      Domain(s)
      imperva.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://45.223.108.155:3443/ 503

      ASN
      AS19551
      Organization
      INCAPSULA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GlobalSign Atlas R3 DV TLS CA 2024 Q4
      Issuer Organization
      GlobalSign nv-sa
      Subject Common Name
      imperva.com
      Subject Alt Name
      imperva.com
      SHA256 Fingerprint
      b107ee263108228818cc2eb0da064b8a0564e02f2c17d64c30937601885968f2
      Validity Not Before
      2024-10-31T04:19:57Z
      Validity Not After
      2025-04-29T04:19:57Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      7f68a1e377f882e5b530e788d736983e
      HTTP Header MD5
      836dff83730e2678d6de49e181fc86f1
      HTTP Body MD5
      8b503557d6c404cae7fd4ea39b9f6da0
    • HTTP/1.1 503 Service Unavailable
      Content-Type: text/html
      Cache-Control: no-cache, no-store
      Connection: close
      Content-Length: 691
      X-Iinfo: 52-58742326-0 0NNN RT(1732178843332 106) q(0 -1 -1 -1) r(0 -1)
      
      <html style="height:100%"><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta name="viewport" content="initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"></head><body style="margin:0px;height:100%"><iframe id="main-iframe" src="/_Incapsula_Resource?CWUDNSAI=27&xinfo=52-58742326-0%200NNN%20RT%281732178843332%20106%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-327095844571514484&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET" frameborder=0 width="100%" height="100%" marginheight="0px" marginwidth="0px">Request unsuccessful. Incapsula incident ID: 0-327095844571514484</iframe></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:47:23.000Z",
         "alternativeip" : [
            "45.60.109.225",
            "45.60.73.225"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "8b503557d6c404cae7fd4ea39b9f6da0",
               "bodymmh3" : -823609811,
               "headermd5" : "836dff83730e2678d6de49e181fc86f1",
               "headermmh3" : 60851112
            },
            "length" : 900
         },
         "asn" : "AS19551",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 503 Service Unavailable\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store\r\nConnection: close\r\nContent-Length: 691\r\nX-Iinfo: 52-58742326-0 0NNN RT(1732178843332 106) q(0 -1 -1 -1) r(0 -1)\r\n\r\n<html style=\"height:100%\"><head><META NAME=\"ROBOTS\" CONTENT=\"NOINDEX, NOFOLLOW\"><meta name=\"format-detection\" content=\"telephone=no\"><meta name=\"viewport\" content=\"initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge,chrome=1\"></head><body style=\"margin:0px;height:100%\"><iframe id=\"main-iframe\" src=\"/_Incapsula_Resource?CWUDNSAI=27&xinfo=52-58742326-0%200NNN%20RT%281732178843332%20106%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-327095844571514484&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET\" frameborder=0 width=\"100%\" height=\"100%\" marginheight=\"0px\" marginwidth=\"0px\">Request unsuccessful. Incapsula incident ID: 0-327095844571514484</iframe></body></html>",
         "datamd5" : "7f68a1e377f882e5b530e788d736983e",
         "datammh3" : -1661730318,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "imperva.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "8ccbbd0bf7eba708e233378cad4137e1",
            "sha1" : "2b5bfb277434b9babdac5fe6ab3b5c06631e81b2",
            "sha256" : "b107ee263108228818cc2eb0da064b8a0564e02f2c17d64c30937601885968f2"
         },
         "geolocus" : {
            "asn" : "AS19551",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "imperva.com",
               "incapsula.com",
               "thalesgroup.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "INCAPSULA-NET",
            "organization" : "Incapsula Inc",
            "subnet" : "45.223.108.0/23"
         },
         "hostname" : [
            "imperva.com"
         ],
         "ip" : "45.223.108.155",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GlobalSign Atlas R3 DV TLS CA 2024 Q4",
            "country" : "BE",
            "organization" : "GlobalSign nv-sa"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "INCAPSULA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Service Unavailable",
         "seen_date" : "2024-11-21",
         "serial" : "01:d0:b8:77:61:5c:33:95:e2:22:23:f0:45:c5:3a:66",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 503,
         "subject" : {
            "altname" : [
               "imperva.com"
            ],
            "commonname" : "imperva.com"
         },
         "subnet" : "45.223.96.0/19",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-04-29T04:19:57Z",
            "notbefore" : "2024-10-31T04:19:57Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 45.60.197.250:3443 (tcp/http/tls) - last seen on 2024-11-21 at 08:47:20 UTC

    • IP
      45.60.197.250
      Alternative IP(s)
      45.60.109.225 45.60.195.250 45.60.196.85 45.60.205.250 45.60.73.225
      Network
      45.60.196.0/22
      Domain(s)
      ascendas-firstspace.com capitaland.com imperva.com
      Device

      <enterprise field>: device.class

      Operating System
      Linux Linux Kernel
      URL

      https://45.60.197.250:3443/ 503

      ASN
      AS19551
      Organization
      INCAPSULA
      Protocol
      http Cert not expired http
      Source
      datascan
    • Operating System
      Linux Linux Kernel
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GlobalSign Atlas R3 DV TLS CA 2024 Q3
      Issuer Organization
      GlobalSign nv-sa
      Subject Common Name
      imperva.com
      Subject Alt Name
      cl-aem-perf.capitaland.com www.ascendas-firstspace.com ascendas-firstspace.com imperva.com
      SHA256 Fingerprint
      519e29b59d3fe61de950cd31c54eddf3f15c481f5f2bb007a1062a4c7a0a10d9
      Validity Not Before
      2024-08-22T19:41:18Z
      Validity Not After
      2025-02-18T19:41:18Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      70b5cd122c4b95efb1cb5d281dfc3ad8
      HTTP Header MD5
      7e31a534a9ec2679bf14c8ec73622bc0
      HTTP Body MD5
      76bc31ce865ecfd590e6f9b3888daa4f
    • HTTP/1.1 503 Service Unavailable
      Content-Type: text/html
      Cache-Control: no-cache, no-store
      Connection: close
      Content-Length: 691
      X-Iinfo: 18-92366035-0 0NNN RT(1732178839391 153) q(0 -1 -1 -1) r(0 -1)
      
      <html style="height:100%"><head><META NAME="ROBOTS" CONTENT="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta name="viewport" content="initial-scale=1.0"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"></head><body style="margin:0px;height:100%"><iframe id="main-iframe" src="/_Incapsula_Resource?CWUDNSAI=27&xinfo=18-92366035-0%200NNN%20RT%281732178839391%20153%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-424048937311143250&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET" frameborder=0 width="100%" height="100%" marginheight="0px" marginwidth="0px">Request unsuccessful. Incapsula incident ID: 0-424048937311143250</iframe></body></html>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:47:20.000Z",
         "alternativeip" : [
            "45.60.109.225",
            "45.60.195.250",
            "45.60.196.85",
            "45.60.205.250",
            "45.60.73.225"
         ],
         "app" : {
            "http" : {
               "bodymd5" : "76bc31ce865ecfd590e6f9b3888daa4f",
               "bodymmh3" : -269618275,
               "headermd5" : "7e31a534a9ec2679bf14c8ec73622bc0",
               "headermmh3" : 551518872
            },
            "length" : 900
         },
         "asn" : "AS19551",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 503 Service Unavailable\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store\r\nConnection: close\r\nContent-Length: 691\r\nX-Iinfo: 18-92366035-0 0NNN RT(1732178839391 153) q(0 -1 -1 -1) r(0 -1)\r\n\r\n<html style=\"height:100%\"><head><META NAME=\"ROBOTS\" CONTENT=\"NOINDEX, NOFOLLOW\"><meta name=\"format-detection\" content=\"telephone=no\"><meta name=\"viewport\" content=\"initial-scale=1.0\"><meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge,chrome=1\"></head><body style=\"margin:0px;height:100%\"><iframe id=\"main-iframe\" src=\"/_Incapsula_Resource?CWUDNSAI=27&xinfo=18-92366035-0%200NNN%20RT%281732178839391%20153%29%20q%280%20-1%20-1%20-1%29%20r%280%20-1%29&incident_id=0-424048937311143250&edet=22&cinfo=ffffffff&rpinfo=0&mth=GET\" frameborder=0 width=\"100%\" height=\"100%\" marginheight=\"0px\" marginwidth=\"0px\">Request unsuccessful. Incapsula incident ID: 0-424048937311143250</iframe></body></html>",
         "datamd5" : "70b5cd122c4b95efb1cb5d281dfc3ad8",
         "datammh3" : -27975778,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ascendas-firstspace.com",
            "capitaland.com",
            "imperva.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "3b1a0d95133e29bc462dcfb37d406cd4",
            "sha1" : "4238b85292302615d0ad80d0e97082595449a37b",
            "sha256" : "519e29b59d3fe61de950cd31c54eddf3f15c481f5f2bb007a1062a4c7a0a10d9"
         },
         "geolocus" : {
            "asn" : "AS19551",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "imperva.com",
               "incapsula.com",
               "thalesgroup.com"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "INCAPSULA-NET",
            "organization" : "Incapsula Inc",
            "subnet" : "45.60.196.0/22"
         },
         "host" : [
            "cl-aem-perf",
            "www"
         ],
         "hostname" : [
            "ascendas-firstspace.com",
            "cl-aem-perf.capitaland.com",
            "imperva.com",
            "www.ascendas-firstspace.com"
         ],
         "ip" : "45.60.197.250",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GlobalSign Atlas R3 DV TLS CA 2024 Q3",
            "country" : "BE",
            "organization" : "GlobalSign nv-sa"
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "37.7510",
         "location" : "37.7510,-97.8220",
         "longitude" : "-97.8220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "INCAPSULA",
         "os" : "Linux Kernel",
         "osvendor" : "Linux",
         "port" : 3443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Service Unavailable",
         "seen_date" : "2024-11-21",
         "serial" : "01:a3:52:80:44:a8:44:01:96:01:93:ea:41:1d:3b:7d",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 503,
         "subject" : {
            "altname" : [
               "cl-aem-perf.capitaland.com",
               "www.ascendas-firstspace.com",
               "ascendas-firstspace.com",
               "imperva.com"
            ],
            "commonname" : "imperva.com"
         },
         "subnet" : "45.60.196.0/22",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-02-18T19:41:18Z",
            "notbefore" : "2024-08-22T19:41:18Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 122.190.204.34:3443 (tcp/http/tls) - last seen on 2024-11-21 at 08:47:20 UTC

    • IP
      122.190.204.34
      Network
      122.188.0.0/14
      Domain(s)
      icloudshield.com
      Device

      <enterprise field>: device.class

      URL

      https://122.190.204.34:3443/ 404

      HTTP Title
      404 Not Found
      ASN
      AS4837
      Organization
      CHINA UNICOM China169 Backbone
      Protocol
      http Cert not expired http
      Source
      datascan
    • Issuer Common Name
      TrustAsia RSA OV TLS CA G3
      Issuer Organization
      TrustAsia Technologies, Inc.
      Subject Organization
      云盾智慧安全科技有限公司
      Subject Common Name
      *.icloudshield.com
      Subject Alt Name
      *.icloudshield.com icloudshield.com
      SHA256 Fingerprint
      06057617ba61fd9a0d27efd5bc1d29aef422b7713841d9eef76c0403b036ebda
      Validity Not Before
      2024-01-12T00:00:00Z
      Validity Not After
      2025-02-05T23:59:59Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      abbec780093d180a879e57a89ae9ca04
      HTTP Header MD5
      c8256e9ca94c9505c36657e3138cac2a
      HTTP Body MD5
      df219703e58ac5a6c1f2d6acda0aa619
    • HTTP/1.1 404 Not Found
      Date: Thu, 21 Nov 2024 08:47:19 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: close
      WZWS-RAY: 1249-1732207639.915-w-waf03whc
      
      187
      <!DOCTYPE html>
      <html>
      <head>
      	<title>404 Not Found</title>
      	<meta charset="utf-8" />
      	<meta name="viewport" content="width=device-width, initial-scale=1">
      </head>
      <body bgcolor="white">
      	<center style="margin-top: 100px;"><h1>404 Not Found</h1></center>
      	<hr>
      	<center>Client IP: <srcip></center>
      	<center>eventID: 1249-1732207639.915-w-waf03whc reason:</center>
      </body>
      </html>
      
      
      
      
      
      0
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:47:20.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "df219703e58ac5a6c1f2d6acda0aa619",
               "bodymmh3" : 405784349,
               "headermd5" : "c8256e9ca94c9505c36657e3138cac2a",
               "headermmh3" : 563249690,
               "title" : "404 Not Found"
            },
            "length" : 588
         },
         "asn" : "AS4837",
         "basicconstraints" : "critical",
         "ca" : "false",
         "country" : "CN",
         "data" : "HTTP/1.1 404 Not Found\r\nDate: Thu, 21 Nov 2024 08:47:19 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\nWZWS-RAY: 1249-1732207639.915-w-waf03whc\r\n\r\n187\r\n<!DOCTYPE html>\n<html>\n<head>\n\t<title>404 Not Found</title>\n\t<meta charset=\"utf-8\" />\n\t<meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n</head>\n<body bgcolor=\"white\">\n\t<center style=\"margin-top: 100px;\"><h1>404 Not Found</h1></center>\n\t<hr>\n\t<center>Client IP: <srcip></center>\n\t<center>eventID: 1249-1732207639.915-w-waf03whc reason:</center>\n</body>\n</html>\n\n\n\n\n\r\n0\r\n\r\n",
         "datamd5" : "abbec780093d180a879e57a89ae9ca04",
         "datammh3" : 1626890771,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "icloudshield.com"
         ],
         "extkeyusage" : [
            "serverAuth",
            "clientAuth"
         ],
         "fingerprint" : {
            "md5" : "19ae3482eb678ac22a371437b5bc0869",
            "sha1" : "5536c0501513976d7b1341ead21f54d592bc8cd7",
            "sha256" : "06057617ba61fd9a0d27efd5bc1d29aef422b7713841d9eef76c0403b036ebda"
         },
         "geolocus" : {
            "asn" : "AS4837",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "CN",
            "countryname" : "China",
            "domain" : [
               "chinaunicom.cn"
            ],
            "isineu" : "false",
            "latitude" : "35.86166",
            "location" : "35.86166,104.195397",
            "longitude" : "104.195397",
            "netname" : "UNICOM-HB",
            "organization" : "China Unicom Hubei Province Network",
            "subnet" : "122.188.0.0/14"
         },
         "hostname" : [
            "icloudshield.com"
         ],
         "ip" : "122.190.204.34",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "TrustAsia RSA OV TLS CA G3",
            "country" : "CN",
            "organization" : "TrustAsia Technologies, Inc."
         },
         "keyusage" : [
            "digitalSignature",
            "keyEncipherment"
         ],
         "latitude" : "34.7732",
         "location" : "34.7732,113.7220",
         "longitude" : "113.7220",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CHINA UNICOM China169 Backbone",
         "port" : 3443,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reason" : "Not Found",
         "seen_date" : "2024-11-21",
         "serial" : "b1:fe:56:9e:99:aa:fb:ff:57:e3:50:86:10:fa:b2:10",
         "signature" : {
            "algorithm" : "sha384WithRSAEncryption"
         },
         "source" : "datascan",
         "status" : 404,
         "subject" : {
            "altname" : [
               "*.icloudshield.com",
               "icloudshield.com"
            ],
            "commonname" : "*.icloudshield.com",
            "country" : "CN",
            "organization" : "\u4e91\u76fe\u667a\u6167\u5b89\u5168\u79d1\u6280\u6709\u9650\u516c\u53f8"
         },
         "subnet" : "122.188.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "com"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "url" : "/",
         "validity" : {
            "notafter" : "2025-02-05T23:59:59Z",
            "notbefore" : "2024-01-12T00:00:00Z"
         },
         "version" : "v3",
         "wildcard" : "true"
      }
      
  • 70.89.35.101:3443 (tcp/undefined/tls) - last seen on 2024-11-21 at 08:47:20 UTC

    • IP
      70.89.35.101
      Network
      70.88.0.0/14
      Domain(s)
      comcastbusiness.net
      Operating System
      Microsoft Windows
      Reverse DNS
      70-89-35-101-anderson-brown-and-higley-assoc-pa-hfc.comcastbusiness.net
      ASN
      AS7922
      Organization
      COMCAST-7922
      Protocol
      undefined Cert not expired undefined
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • Issuer Common Name
      GOOFYPC
      Subject Common Name
      GOOFYPC
      SHA256 Fingerprint
      c412a0f3ea52913b2a5952712bb87e6e022f829dcf1f9c1ec4464b6d3e4c5237
      Validity Not Before
      2024-07-11T15:33:28Z
      Validity Not After
      2025-01-10T15:33:28Z
    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      3c768c4828bc7cf16f444a4228eaa0b3
    • <nodata>
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T08:47:20.000Z",
         "app" : {
            "length" : 8
         },
         "asn" : "AS7922",
         "ca" : "false",
         "city" : "Montgomeryville",
         "country" : "US",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "<nodata>",
         "datamd5" : "3c768c4828bc7cf16f444a4228eaa0b3",
         "datammh3" : -969888823,
         "domain" : [
            "comcastbusiness.net"
         ],
         "extkeyusage" : [
            "serverAuth"
         ],
         "fingerprint" : {
            "md5" : "12e04463de474650126fce9daaad83ab",
            "sha1" : "87b9e6c715aec36f6bef028414afa44419182dec",
            "sha256" : "c412a0f3ea52913b2a5952712bb87e6e022f829dcf1f9c1ec4464b6d3e4c5237"
         },
         "geolocus" : {
            "asn" : "AS7922",
            "continent" : "NA",
            "continentname" : "North America",
            "country" : "US",
            "countryname" : "United States",
            "domain" : [
               "comcast.com",
               "comcast.net",
               "comcastbusiness.net"
            ],
            "isineu" : "false",
            "latitude" : "37.09024",
            "location" : "37.09024,-95.712891",
            "longitude" : "-95.712891",
            "netname" : "CBC-NASHVILLE-2",
            "organization" : "Comcast Cable Communications, LLC",
            "subnet" : "70.88.0.0/14"
         },
         "host" : [
            "70-89-35-101-anderson-brown-and-higley-assoc-pa-hfc"
         ],
         "hostname" : [
            "70-89-35-101-anderson-brown-and-higley-assoc-pa-hfc.comcastbusiness.net"
         ],
         "ip" : "70.89.35.101",
         "ipv6" : "false",
         "issuer" : {
            "commonname" : "GOOFYPC"
         },
         "keyusage" : [
            "keyEncipherment",
            "dataEncipherment"
         ],
         "latitude" : "40.2473",
         "location" : "40.2473,-75.2438",
         "longitude" : "-75.2438",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "COMCAST-7922",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 3443,
         "protocol" : "undefined",
         "publickey" : {
            "algorithm" : "rsaEncryption",
            "length" : 2048
         },
         "reverse" : [
            "70-89-35-101-anderson-brown-and-higley-assoc-pa-hfc.comcastbusiness.net"
         ],
         "seen_date" : "2024-11-21",
         "serial" : "23:60:50:37:d7:ed:39:a5:48:f8:fe:a6:1c:f0:a0:69",
         "signature" : {
            "algorithm" : "sha256WithRSAEncryption"
         },
         "source" : "datascan",
         "subject" : {
            "commonname" : "GOOFYPC"
         },
         "subnet" : "70.88.0.0/14",
         "tag" : "<enterprise field>: tag",
         "tld" : [
            "net"
         ],
         "tls" : "true",
         "transport" : "tcp",
         "validity" : {
            "notafter" : "2025-01-10T15:33:28Z",
            "notbefore" : "2024-07-11T15:33:28Z"
         },
         "version" : "v3",
         "wildcard" : "false"
      }
      
  • 114.111.58.143:3443 (tcp/undefined/tls) - last seen on 2024-11-21 at 08:47:20 UTC