{ "openapi": "3.0.0", "info": { "title": "Shodan Streaming API Documentation", "description": "The Streaming API is an HTTP-based service that returns a real-time stream of data collected by Shodan. The stream returns the information as a JSON-encoded string using 2 output formats that can be set using the \"t\" URL parameter: - **json:**Each item is separated by a newline. For example, the Banners stream returns 1 banner per line where the banner contains all of the data that was just collected for a given service on the Internet. - **sse:**Outputs the JSON data using the Server-Sent Events protocol, making it easy to consume directly in the browser.\n \nThe base URL for all of these methods is: `https://stream.shodan.io`\n \n\n**Note:**\n \nPostman does not natively support streaming responses. There is an existing issue regarding this on their GitHub repository, which you can find [here](https://github.com/postmanlabs/postman-app-support/issues/5040). As an alternative, you can use cURL to view a stream of data in a terminal.", "version": "1.0.0" }, "servers": [ { "url": "https://stream.shodan.io" } ], "tags": [ { "name": "Data Stream (Enterprise)" }, { "name": "Network Alerts" } ], "paths": { "/shodan/banners": { "get": { "operationId": "getBanners", "tags": ["Data Stream (Enterprise)"], "summary": "Banners", "description": "This stream provides ALL of the data that Shodan collects. Use this stream if you need access to everything and/ or want to store your own Shodan database locally. If you only care about specific ports, please use the Ports stream.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "content": { "text/plain": { "schema": { "type": "string" }, "example": "109.70.101.126\t10443\t\tHTTP/1.1 200 OK\\r\\nDate: Thu, 28 Jan 2021 04:19:19 GMT\\r\\nServer: xxxxxxxx-xxxxx\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 79\\r\\nContent-Type: text/html; charset=utf-8\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nContent-Security-Policy: frame-ancestors 'self'\\r\\nX-XSS-Protection: 1; mode=block\\r\\nX-UA-Compatible: IE=Edge\\r\\n\\r\\n\n198.1.94.209\t2083\tthehovercam.thehovercam.com\tHTTP/1.1 401 Access Denied\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=\"utf-8\"\\r\\nDate: Thu, 28 Jan 2021 04:19:45 GMT\\r\\nSet-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\\r\\nSet-Cookie: cpsession=%3aKF7VjeDJlFfsEZ7y%2c19ed6a6b5dfd4383c6c1b334518bb6d7; HttpOnly; path=/; port=2083; secure\\r\\nSet-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\\r\\nSet-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2083; secure\\r\\nSet-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\\r\\nSet-Cookie: imp_key=expired; HttpOnly; domain=198.1.94.209; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2083; secure\\r\\nSet-Cookie: key=expired; HttpOnly; domain=198.1.94.209; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/3rdparty/squirrelmail/; port=2083; secure\\r\\nSet-Cookie: SQMSESSID=expired; HttpOnly; domain=198.1.94.209; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\\r\\nCache-Control: no-cache, must-revalidate\\r\\nContent-Length: 42455\\r\\n\\r\\n\n54.208.97.80\t80\tec2-54-208-97-80.compute-1.amazonaws.com\tHTTP/1.1 401 Unauthorized\\r\\nServer: nginx/1.10.3 (Ubuntu)\\r\\nDate: Thu, 28 Jan 2021 04:19:58 GMT\\r\\nContent-Type: text/html\\r\\nContent-Length: 606\\r\\nConnection: keep-alive\\r\\nWWW-Authenticate: Basic realm=\"Prometheus server authentication\"\\r\\n\\r\\n\n..." } } } } } }, "/shodan/asn/{asn}": { "get": { "operationId": "filteredByASN", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by ASN", "description": "This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in devices located in certain ASNs.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "asn", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of ASNs; example \"3303,32475\"", "example": "3303,32475" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": 1574478560,\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": null,\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"LiteSpeed\",\n \"host\": \"96.127.186.100\",\n \"html\": \"\",\n \"location\": \"/\",\n \"html_hash\": 0,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"timestamp\": \"2021-01-28T04:29:02.206862\",\n \"hostnames\": [\n \"ams-pnode1.websitehostserver.net\"\n ],\n \"org\": \"SingleHop LLC\",\n \"data\": \"HTTP/1.0 301 Moved Permanently\\r\\nLocation: https://96.127.186.100/\\r\\nCache-Control: private, no-cache, max-age=0\\r\\nPragma: no-cache\\r\\nServer:LiteSpeed\\r\\nContent-Length: 0\\r\\nConnection: Close\\r\\n\\r\\n\",\n \"port\": 443,\n \"transport\": \"tcp\",\n \"isp\": \"SingleHop LLC\",\n \"asn\": \"AS32475\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"ip\": 1618983524,\n \"domains\": [\n \"websitehostserver.net\"\n ],\n \"ip_str\": \"96.127.186.100\",\n \"_id\": \"97533624-bd22-46ce-9395-17ad28b304d6\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"6d64feef3c6422575abbbf34b1a2e0d9a29b812d\",\n \"options\": {},\n \"id\": \"1dbb01bb-5cd8-46b5-94d0-aee415b8c9ed\",\n \"module\": \"auto\",\n \"ptr\": true\n },\n \"opts\": {}\n}\n{\n \"hash\": -1008615971,\n \"product\": \"AkamaiGHost\",\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": \"Invalid URL\",\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"AkamaiGHost\",\n \"host\": \"104.66.169.60\",\n \"html\": '...',\n \"location\": \"/\",\n \"components\": {},\n \"html_hash\": 1470236789,\n \"sitemap\": null,\n \"securitytxt_hash\": null,\n },\n \"timestamp\": \"2021-01-28T04:29:01.265871\",\n \"hostnames\": [\"a104-66-169-60.deploy.static.akamaitechnologies.com\"],\n \"org\": \"Akamai Technologies\",\n \"data\": \"HTTP/1.0 400 Bad Request\\r\\nServer: AkamaiGHost\\r\\nMime-Version: 1.0\\r\\nContent-Type: text/html\\r\\nContent-Length: 208\\r\\nExpires: Thu, 28 Jan 2021 04:29:01 GMT\\r\\nDate: Thu, 28 Jan 2021 04:29:01 GMT\\r\\nConnection: close\\r\\n\\r\\n\",\n \"port\": 80,\n \"transport\": \"tcp\",\n \"info\": \"Akamai's HTTP Acceleration & Mirror service\",\n \"isp\": \"Akamai Technologies\",\n \"asn\": \"AS3303\",\n \"location\": {\n \"country_code3\": null,\n \"city\": \"Zurich\",\n \"region_code\": \"ZH\",\n \"postal_code\": null,\n \"longitude\": 8.5394,\n \"country_code\": \"CH\",\n \"latitude\": 47.3624,\n \"country_name\": \"Switzerland\",\n \"area_code\": null,\n \"dma_code\": null,\n },\n \"ip\": 1749199164,\n \"domains\": [\"akamaitechnologies.com\"],\n \"ip_str\": \"104.66.169.60\",\n \"_id\": \"93aa0f66-a2fb-44bc-9b04-6488b776b915\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"530935e60964ee0af497843f10b63adf84a753e3\",\n \"options\": {},\n \"id\": \"81d22eeb-60e5-4937-93af-557fcd7c089e\",\n \"module\": \"http\",\n \"ptr\": true,\n },\n \"opts\": {},\n}\n" } } } } } }, "/shodan/countries/{countries}": { "get": { "operationId": "filteredByCountry", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by Country", "description": "This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in devices located in certain countries.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "countries", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of countries indicated by their 2 letter code; example \"DE,US\"", "example": "DE,US" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": -947592388,\n \"product\": \"Apache httpd\",\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": null,\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"Apache\",\n \"host\": \"50.63.119.180\",\n \"html\": \"\\n\\n\\npageok\\n\\n\",\n \"location\": \"/\",\n \"components\": {},\n \"html_hash\": -295716025,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"timestamp\": \"2021-01-28T04:37:03.375136\",\n \"hostnames\": [\n \"ip-50-63-119-180.ip.secureserver.net\"\n ],\n \"org\": \"GoDaddy.com, LLC\",\n \"data\": \"HTTP/1.1 200 OK\\r\\nDate: Thu, 28 Jan 2021 04:36:59 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Fri, 26 Apr 2013 01:57:05 GMT\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 76\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\n\\r\\n\",\n \"port\": 80,\n \"transport\": \"tcp\",\n \"isp\": \"GoDaddy.com, LLC\",\n \"cpe23\": [\n \"cpe:2.3:a:apache:http_server\"\n ],\n \"cpe\": [\n \"cpe:/a:apache:http_server\"\n ],\n \"asn\": \"AS26496\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"ip\": 843020212,\n \"domains\": [\n \"secureserver.net\"\n ],\n \"ip_str\": \"50.63.119.180\",\n \"_id\": \"85efede2-0730-422c-9e50-bb78054c6d82\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"6d64feef3c6422575abbbf34b1a2e0d9a29b812d\",\n \"options\": {},\n \"id\": \"e418aa3b-c938-4124-be79-1ae40eaec50c\",\n \"module\": \"auto\",\n \"ptr\": true\n },\n \"opts\": {}\n}\n{\n \"hash\": 561623480,\n \"tags\": [\n \"cloud\"\n ],\n \"timestamp\": \"2021-01-28T04:37:05.314514\",\n \"hostnames\": [\n \"server-13-249-211-149.blr50.r.cloudfront.net\"\n ],\n \"org\": \"Amazon CloudFront\",\n \"data\": \"HTTP/1.1 400 Bad Request\\r\\nServer: CloudFront\\r\\nDate: Thu, 28 Jan 2021 04:37:05 GMT\\r\\nContent-Type: text/html\\r\\nContent-Length: 915\\r\\nConnection: close\\r\\nX-Cache: Error from cloudfront\\r\\nVia: 1.1 b5f6daf006d688b2f5eef74923ab8562.cloudfront.net (CloudFront)\\r\\nX-Amz-Cf-Pop: BLR50-C3\\r\\nX-Amz-Cf-Id: jxkyP17GNCKAKARB8a3XpoQBB2yCkyNFv16WnkukSV5z8Sm-vcNBiA==\\r\\n\\r\\n\\n\\nERROR: The request could not be satisfied\\n\\n400 ERROR\\nThe request could not be satisfied.\\n\\nBad request.\\nWe can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.\\n\\nIf you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.\\n\\n\\n\\nGenerated by cloudfront (CloudFront)\\nRequest ID: jxkyP17GNCKAKARB8a3XpoQBB2yCkyNFv16WnkukSV5z8Sm-vcNBiA==\\n\\n\\n\\n\",\n \"port\": 443,\n \"cloud\": {\n \"region\": \"GLOBAL\",\n \"service\": \"AMAZON\",\n \"provider\": \"Amazon\"\n },\n \"isp\": \"Amazon CloudFront\",\n \"transport\": \"tcp\",\n \"asn\": \"AS16509\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"ip\": 234476437,\n \"domains\": [\n \"cloudfront.net\"\n ],\n \"ip_str\": \"13.249.211.149\",\n \"_id\": \"da4400f5-e491-4b6b-a59d-87daa61f5a6f\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"cdd92e2d835a37d2798fa6c7105171f4d214012f\",\n \"options\": {},\n \"id\": \"fccd014d-c1fb-4ccc-9608-c0f918994cd6\",\n \"module\": \"https\",\n \"ptr\": true\n },\n \"opts\": {}\n}" } } } } } }, "/shodan/ports/{ports}": { "get": { "operationId": "filteredByPorts", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by Ports", "description": "Only returns banner data for the list of specified ports. This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in a specific list of ports.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "ports", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of ports; example \"22,443\"", "example": "22,443" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": 1592590585,\n \"product\": \"AkamaiGHost\",\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": \"Invalid URL\",\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"AkamaiGHost\",\n \"host\": \"23.8.80.84\",\n \"html\": \"\\nInvalid URL\\n\\nInvalid URL\\nThe requested URL \\\"[no URL]\\\", is invalid.\\nReference #9.4ede3717.1611810347.6c0f8ec\\n\\n\",\n \"location\": \"/\",\n \"components\": {},\n \"html_hash\": 1809591553,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"timestamp\": \"2021-01-28T05:05:47.864200\",\n \"ssl\": {\n \"chain_sha256\": [\n \"555a575d447769003b96bc6b6849ffecc710831ccf648082dbcb0a6e81f0037f\",\n \"14363822517e2989b087d0c9a42eef134a774bd0b2a0664d455af784bc08f4d0\",\n \"68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b\",\n \"d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4\"\n ],\n \"jarm\": \"2ad2ad0002ad2ad22c42d42d00000061cdb625ec378ec3fce160d347caef64\",\n \"chain\": [\n \"-----BEGIN CERTIFICATE-----\\nMIIRUTCCEDmgAwIBAgIRALPwTVpNEm50s5rtf/RAIEkwDQYJKoZIhvcNAQELBQAw\\ngYYxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJERTETMBEGA1UEBxMKV2lsbWluZ3Rv\\nbjEkMCIGA1UEChMbQ29ycG9yYXRpb24gU2VydmljZSBDb21wYW55MS8wLQYDVQQD\\nEyZUcnVzdGVkIFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgNTAeFw0yMTAx\\nMTUwMDAwMDBaFw0yMjAyMTUyMzU5NTlaMIHNMQswCQYDVQQGEwJERTEOMAwGA1UE\\nERMFNTEzNjgxHDAaBgNVBAgTE05vcmRyaGVpbi1XZXN0ZmFsZW4xEzARBgNVBAcT\\nCkxldmVya3VzZW4xHzAdBgNVBAkTFkthaXNlci1XaWxoZWxtLUFsbGVlIDExETAP\\nBgNVBAoTCEJheWVyIEFHMSUwIwYDVQQLExxCYXllciBCdXNpbmVzcyBTZXJ2aWNl\\ncyBHbWJIMSAwHgYDVQQDExdwZnQuYmF5ZXJjcm9wc2NpZW5jZS51czCCASIwDQYJ\\nKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMJuvlyHol6d+XOLgyI72qKzS3WDpfHM\\nJ9eCiq7rI4fHipV7I6RvDhs798U0UycK4w+v7DpNeXfr3hp894gkPcTNPjmbSErJ\\n5bEcBv+RSEESm1jlIYAtqLBjXgBA9U+MZbaKQWJ7YDtH3FkoCy/bNCQOxdMBV1yZ\\ndjgVTDkOi8E+kOTJxq3gBXVAES7eEWMSuVPA83LbzQin6ceidxcw6z0XglFLvAy7\\nk3IyCyRiWWF0p5nYY/Rl2hibggA92QYhcMKnvf6kgV9MHLCwx0GXeDYdEsyGAIN3\\nm03e0RjtW2UOqSC9z+iQnr0KLak2Z9GoB3G17vL18CjYQYmOdlR1Af8CAwEAAaOC\\nDW8wgg1rMB8GA1UdIwQYMBaAFPK7Ve78j8/QPxRoGpV+eQ6rFzD0MB0GA1UdDgQW\\nBBS1flKkmb2EwtVxtskDDgInFOKkxDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/\\nBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSwYDVR0gBEQwQjA2\\nBgsrBgEEAbIxAQICCDAnMCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51c2VydHJ1\\nc3QuY29tMAgGBmeBDAECAjBQBgNVHR8ESTBHMEWgQ6BBhj9odHRwOi8vY3JsLnVz\\nZXJ0cnVzdC5jb20vVHJ1c3RlZFNlY3VyZUNlcnRpZmljYXRlQXV0aG9yaXR5NS5j\\ncmwwgYIGCCsGAQUFBwEBBHYwdDBLBggrBgEFBQcwAoY/aHR0cDovL2NydC51c2Vy\\ndHJ1c3QuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZpY2F0ZUF1dGhvcml0eTUuY3J0\\nMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMIIBAwYKKwYB\\nBAHWeQIEAgSB9ASB8QDvAHUARqVV63X6kSAwtaKJafTzfREsQXS+/Um4havy/HD+\\nbUcAAAF3BQIGoAAABAMARjBEAiBacIci5y5rHCvYBpZfgJYa5cnFsMa5/trVAM+/\\nLOpD+QIgVqDXtTaNPwhp7EsXc85UJ/4Y3fGEZSOA5QwqAIsva8kAdgDfpV6raIJP\\nH2yt7rhfTj5a6s2iEqRqXo47EsAgRFwqcwAAAXcFAgbHAAAEAwBHMEUCIFOxIiQV\\n9pHAsBaRIKFJhaAde4Sw+VnjSl4ZZ6I9ZOEJAiEAkouFkWT/y6YdRsgoqf+mab9Z\\ncY5jAXu2qeXMM8Ih6OYwggq/BgNVHREEggq2MIIKsoIXcGZ0LmJheWVyY3JvcHNj\\naWVuY2UudXOCFWFkbWluLmhvdC1wb3RhdG9lcy5jYYIRYWdyby5iYXllci1jYS5j\\nb22CGGFsdW1uaS55b3V0aGFnc3VtbWl0LmNvbYIQYXBpLmJheWVyd2ViLmNvbYIZ\\nYXBwcG9ydGZvbGlvLmJheWVyLmNvbS5icoIUYXByZW5kZWNvbi5iYXllci5jb22C\\nGGNyb3BzY2llbmNlLmJheWVyLmNvbS5hcoIVZW5tb3ZpbWllbnRvLmJheWVyLmVz\\nghNmb2N1cy5iYXllci1hZ3JpLmZyghdncmFudHM0dHJhaXRzLmJheWVyLmNvbYIT\\naW1hZ2ViYW5rLmJheWVyLmNvbYIaaW5mby5jcm9wc2NpZW5jZS5iYXllci5jb22C\\nD2xlYXBzLmJheWVyLmNvbYIRbWF2ZXJpY2suYmF5ZXIudXOCI21kbXdlYnNlcnZp\\nY2UuY3JvcHNjaWVuY2UuYmF5ZXIuY29tghdtZWxhbmdlc3B1YmxpYy5iYXllci5m\\ncoIbbW9iaWxlYXBpLmJhY2tlZGJ5YmF5ZXIuY29tgidtb2JpbGVhcGkuZW52aXJv\\nbm1lbnRhbHNjaWVuY2UuYmF5ZXIudXOCHG5ld3NsZXR0ZXIueW91dGhhZ3N1bW1p\\ndC5jb22CDW5wcy5iYXllci5jb22CFnBoeXRvYmFjLmJheWVyLWFncmkuZnKCG3Bo\\neXRvcHJvZ3Jlc3MuYmF5ZXItYWdyaS5mcoIvcGxhdGZvcm1hZHlzdHJ5YnVjeWpu\\nYS5jcm9wc2NpZW5jZS5iYXllci5jb20ucGyCE3BvbnRvcy5iYXllci5jb20uYnKC\\nJnBwbWxvZ2luLmVudmlyb25tZW50YWxzY2llbmNlLmJheWVyLnVzgh5wcm9kMi5j\\ncm9wc2NpZW5jZS5iYXllci5jb20ucHmCHnByb2QyLmNyb3BzY2llbmNlLmJheWVy\\nLmNvbS51eYITcHJvdGVjbWFpcy5iYXllci5mcoIYcHJvdmVlZG9yZXMuYmF5ZXIu\\nY29tLm14ghZwdWJsaWNoZWFsdGguYmF5ZXIuY29tghlwdWJsaWNoZWFsdGhtYWcu\\nYmF5ZXIuY29tghZzdGFnZS5hcGkuYmF5ZXJ3ZWIuY29tgh1zdGFnZS5iYXllcmNy\\nb3BzY2llbmNlLmNvbS5hcoIdc3RhZ2UuYmF5ZXJjcm9wc2NpZW5jZS5jb20uY2+C\\nHXN0YWdlLmJheWVyY3JvcHNjaWVuY2UuY29tLmVjgh1zdGFnZS5iYXllcmNyb3Bz\\nY2llbmNlLmNvbS5weYIdc3RhZ2UuYmF5ZXJjcm9wc2NpZW5jZS5jb20udmWCF3N0\\nYWdlLmJlamEuYmF5ZXJ3ZWIuY29tghhzdGFnZS5iaWNhbmFkYS5iYXllci5jb22C\\nHHN0YWdlLmNpcmN1bG8xMy5iYXllci5jb20ubXiCHnN0YWdlLmNyb3BzY2llbmNl\\nLmJheWVyLmNvbS5hcoIec3RhZ2UuY3JvcHNjaWVuY2UuYmF5ZXIuY29tLmJvgh5z\\ndGFnZS5jcm9wc2NpZW5jZS5iYXllci5jb20ucHmCHnN0YWdlLmNyb3BzY2llbmNl\\nLmJheWVyLmNvbS51eYISc3RhZ2UuZmVlZGFiZWUuY29tgilzdGFnZS5tZG13ZWJz\\nZXJ2aWNlLmNyb3BzY2llbmNlLmJheWVyLmNvbYIcc3RhZ2UubWljdWx0aXZvLmJh\\neWVyLmNvbS5teIIYc3RhZ2UubWlwb3J0YWwuYmF5ZXIuY29tgiFzdGFnZS5tb2Jp\\nbGVhcGkuYmFja2VkYnliYXllci5jb22CHnN0YWdlLnByb3ZlZWRvcmVzLmJheWVy\\nLmNvbS5teIIbc3RhZ2Uuc2FsdWRhbWJpZW50YWwuY29tLm14giVzdGFnZS5zZWVk\\ndGFnLmJheWVyY3JvcHNjaWVuY2UudXMuY29tgixzdGFnZS5zdGV3YXJkc2hpcG10\\nZy5iYXllcmNyb3BzY2llbmNlLnVzLmNvbYIQc3RhcmRsLmJheWVyLmNvbYISc3Rh\\ncmRscWEuYmF5ZXIuY29tghBzdGFycWEuYmF5ZXIuY29tgiJzdGV3YXJkc2hpcC5i\\nYXllcmNyb3BzY2llbmNldXMuY29tgiZzdGV3YXJkc2hpcG10Zy5iYXllcmNyb3Bz\\nY2llbmNlLnVzLmNvbYIbc3prb2xlbmlhLmFncm8uYmF5ZXIuY29tLnBsgil0ZXN0\\nLmJjc2ZpZWxkYmlkcy5iYXllcmNyb3BzY2llbmNlLnVzLmNvbYIjdGVzdC5kaWdp\\ndGFsLW1hcmtldGluZy5jcy5iYXllci5jb22CF3Rlc3QuaW50LmFncmFyLmJheWVy\\nLmRlghx0ZXN0Lm5ldC5teWJheWVyc2VydmljZXMuY29tghV0ZXN0LnBmdC5iYXll\\ncndlYi5jb22CDXd3dy5iYXlkaXIuY2yCEXd3dy5iYXllci1hZ3JpLmZyght3d3cu\\nYmF5ZXJjcm9wc2NpZW5jZS5jb20uYXKCFHd3dy5iYXllcnRvb2xib3guY29tghB3\\nd3cuYmF5ZXhwZXJ0LmN6ghB3d3cuYmF5ZXhwZXJ0LnNrghB3d3cuYmF5cHJvZml0\\nLmN6ghB3d3cuYmF5cHJvZml0LnNrgih3d3cuYmNzZmllbGRiaWRzLmJheWVyY3Jv\\ncHNjaWVuY2UudXMuY29tgiZ3d3cuYnVsa3JlcGFjay5iYXllcmNyb3BzY2llbmNl\\nLnVzLmNvbYIWd3d3LmNvbHR1cmFlY3VsdHVyYS5pdIIYd3d3LmNvdm9pdHVyYWdl\\nLmJheWVyLmZyghh3d3cuY3JvcHNjaWVuY2UuYmF5ZXIuY2yCHHd3dy5jcm9wc2Np\\nZW5jZS5iYXllci5jb20ucHmCHHd3dy5jcm9wc2NpZW5jZS5iYXllci5jb20udXmC\\nGHd3dy5jcm9wc2NpZW5jZS5iYXllci5yb4IYd3d3LmNyb3BzY2llbmNlLmJheWVy\\nLnNrgg93d3cuY3NhdmF6YXMuaHWCInd3dy5kaWdpdGFsLW1hcmtldGluZy5jcy5i\\nYXllci5jb22CJnd3dy5rYXRhbG9ncmFzdGl0ZWxuYXphc2h0aXRhLmJheWVyLmJn\\nghV3d3cubW9tZW50b3MuYmF5ZXIubXiCHnd3dy5tb25pdG9yYWdnaW9jb2NjaW5p\\nZ2xpYS5pdIIYd3d3Lm1vbm9ncmFmaWFzLmJheWVyLm14ghZ3d3cubXliYXllcmFj\\nY291bnQuY29tghd3d3cubXliYXllcnNlcnZpY2VzLmNvbYIed3d3LnByb3RlY2Np\\nb25hbWJpZW50YWwuY29tLmFyghx3d3cucHJvdmVlZG9yZXMuYmF5ZXIuY29tLm14\\ngh13d3cucHVibGljaGVhbHRobWFnLmJheWVyLmNvbYIWd3d3LnNtYXJ0YWdyby5i\\nYXllci5lY4Ihd3d3LnN0YWdlLmJheWVyY3JvcHNjaWVuY2UuY29tLmFygiF3d3cu\\nc3RhZ2UuYmF5ZXJjcm9wc2NpZW5jZS5jb20udXmCFnd3dy50YXJpbS5iYXllci5j\\nb20udHKCGnd3dy54bi0taDFhcGVoMWMueG4tLXAxYWNmMA0GCSqGSIb3DQEBCwUA\\nA4IBAQA2mZ24FH7gy30Qjilz+YfzA+F2cmVUR+oPQZQ7iE+cWaMy3iDp8KCIlYx0\\neaPVk7dggAA9smSwklA/K6+iKN1D6746CWQ5GByQX+5Wzm+rWqslhPj1izU4H+6R\\nBqyX/QQ8lMcFYVcFSH6zTqPC5N7SOh9e60Kgps5kDTAWFYOhNcnZHT3eMobq90qY\\n6RT26wWIUvIQjbnETAKO8mJYO/WwVJcRBXWP05uY/THV5MpHFx4xn2Tzc5KrZxJO\\naTR2X2bzdgNAYKxk0j/duzulekB32vnPfYL5J9oatvkv28aiczOcZjq+UzyrWSjO\\nfVvWpv/iYwvgQ3gOxP5FkRI2masF\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----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\\nKw/4P1yG/5xtH6HrU2uqz3qOmM4yWg==\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----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\\nvGp4z7h/jnZymQyd/teRCBaho1+V\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----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\\nsmPi9WIsgtRqAEFQ8TmDn5XpNpaYbg==\\n-----END CERTIFICATE-----\\n\"\n ],\n \"dhparams\": null,\n \"versions\": [\n \"TLSv1\",\n \"-SSLv2\",\n \"-SSLv3\",\n \"TLSv1.1\",\n \"TLSv1.2\",\n \"TLSv1.3\"\n ],\n \"acceptable_cas\": [],\n \"tlsext\": [\n {\n \"id\": 65281,\n \"name\": \"renegotiation_info\"\n },\n {\n \"id\": 11,\n \"name\": \"ec_point_formats\"\n },\n {\n \"id\": 35,\n \"name\": \"session_ticket\"\n }\n ],\n \"ja3s\": \"e35df3e00ca4ef31d42b34bebaa2f86e\",\n \"cert\": {\n \"sig_alg\": \"sha256WithRSAEncryption\",\n \"issued\": \"20210115000000Z\",\n \"expires\": \"20220215235959Z\",\n \"expired\": false,\n \"version\": 2,\n \"extensions\": [\n {\n \"data\": \"0\\\\x16\\\\x80\\\\x14\\\\xf2\\\\xbbU\\\\xee\\\\xfc\\\\x8f\\\\xcf\\\\xd0?\\\\x14h\\\\x1a\\\\x95~y\\\\x0e\\\\xab\\\\x170\\\\xf4\",\n \"name\": \"authorityKeyIdentifier\"\n },\n {\n \"data\": \"\\\\x04\\\\x14\\\\xb5~R\\\\xa4\\\\x99\\\\xbd\\\\x84\\\\xc2\\\\xd5q\\\\xb6\\\\xc9\\\\x03\\\\x0e\\\\x02\\\\'\\\\x14\\\\xe2\\\\xa4\\\\xc4\",\n \"name\": \"subjectKeyIdentifier\"\n },\n {\n \"critical\": true,\n \"data\": \"\\\\x03\\\\x02\\\\x05\\\\xa0\",\n \"name\": \"keyUsage\"\n },\n {\n \"critical\": true,\n \"data\": \"0\\\\x00\",\n \"name\": \"basicConstraints\"\n },\n {\n \"data\": \"0\\\\x14\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x01\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x02\",\n \"name\": \"extendedKeyUsage\"\n },\n {\n \"data\": \"0B06\\\\x06\\\\x0b+\\\\x06\\\\x01\\\\x04\\\\x01\\\\xb21\\\\x01\\\\x02\\\\x02\\\\x080\\\\'0%\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x02\\\\x01\\\\x16\\\\x19https://cps.usertrust.com0\\\\x08\\\\x06\\\\x06g\\\\x81\\\\x0c\\\\x01\\\\x02\\\\x02\",\n \"name\": \"certificatePolicies\"\n },\n {\n \"data\": \"0G0E\\\\xa0C\\\\xa0A\\\\x86?http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl\",\n \"name\": \"crlDistributionPoints\"\n },\n {\n \"data\": \"0t0K\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x070\\\\x02\\\\x86?http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt0%\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x070\\\\x01\\\\x86\\\\x19http://ocsp.usertrust.com\",\n \"name\": \"authorityInfoAccess\"\n },\n {\n \"data\": \"\\\\x04\\\\x81\\\\xf1\\\\x00\\\\xef\\\\x00u\\\\x00F\\\\xa5U\\\\xebu\\\\xfa\\\\x91 0\\\\xb5\\\\xa2\\\\x89i\\\\xf4\\\\xf3}\\\\x11,At\\\\xbe\\\\xfdI\\\\xb8\\\\x85\\\\xab\\\\xf2\\\\xfcp\\\\xfemG\\\\x00\\\\x00\\\\x01w\\\\x05\\\\x02\\\\x06\\\\xa0\\\\x00\\\\x00\\\\x04\\\\x03\\\\x00F0D\\\\x02 Zp\\\\x87\\\"\\\\xe7.k\\\\x1c+\\\\xd8\\\\x06\\\\x96_\\\\x80\\\\x96\\\\x1a\\\\xe5\\\\xc9\\\\xc5\\\\xb0\\\\xc6\\\\xb9\\\\xfe\\\\xda\\\\xd5\\\\x00\\\\xcf\\\\xbf,\\\\xeaC\\\\xf9\\\\x02 V\\\\xa0\\\\xd7\\\\xb56\\\\x8d?\\\\x08i\\\\xecK\\\\x17s\\\\xceT\\\\'\\\\xfe\\\\x18\\\\xdd\\\\xf1\\\\x84e#\\\\x80\\\\xe5\\\\x0c*\\\\x00\\\\x8b/k\\\\xc9\\\\x00v\\\\x00\\\\xdf\\\\xa5^\\\\xabh\\\\x82O\\\\x1fl\\\\xad\\\\xee\\\\xb8_N>Z\\\\xea\\\\xcd\\\\xa2\\\\x12\\\\xa4j^\\\\x8e;\\\\x12\\\\xc0 D\\\\\\\\*s\\\\x00\\\\x00\\\\x01w\\\\x05\\\\x02\\\\x06\\\\xc7\\\\x00\\\\x00\\\\x04\\\\x03\\\\x00G0E\\\\x02 S\\\\xb1\\\"$\\\\x15\\\\xf6\\\\x91\\\\xc0\\\\xb0\\\\x16\\\\x91 \\\\xa1I\\\\x85\\\\xa0\\\\x1d{\\\\x84\\\\xb0\\\\xf9Y\\\\xe3J^\\\\x19g\\\\xa2=d\\\\xe1\\\\t\\\\x02!\\\\x00\\\\x92\\\\x8b\\\\x85\\\\x91d\\\\xff\\\\xcb\\\\xa6\\\\x1dF\\\\xc8(\\\\xa9\\\\xff\\\\xa6i\\\\xbfYq\\\\x8ec\\\\x01{\\\\xb6\\\\xa9\\\\xe5\\\\xcc3\\\\xc2!\\\\xe8\\\\xe6\",\n \"name\": \"ct_precert_scts\"\n },\n {\n \"data\": \"0\\\\x82\\\\n\\\\xb2\\\\x82\\\\x17pft.bayercropscience.us\\\\x82\\\\x15admin.hot-potatoes.ca\\\\x82\\\\x11agro.bayer-ca.com\\\\x82\\\\x18alumni.youthagsummit.com\\\\x82\\\\x10api.bayerweb.com\\\\x82\\\\x19appportfolio.bayer.com.br\\\\x82\\\\x14aprendecon.bayer.com\\\\x82\\\\x18cropscience.bayer.com.ar\\\\x82\\\\x15enmovimiento.bayer.es\\\\x82\\\\x13focus.bayer-agri.fr\\\\x82\\\\x17grants4traits.bayer.com\\\\x82\\\\x13imagebank.bayer.com\\\\x82\\\\x1ainfo.cropscience.bayer.com\\\\x82\\\\x0fleaps.bayer.com\\\\x82\\\\x11maverick.bayer.us\\\\x82#mdmwebservice.cropscience.bayer.com\\\\x82\\\\x17melangespublic.bayer.fr\\\\x82\\\\x1bmobileapi.backedbybayer.com\\\\x82\\\\'mobileapi.environmentalscience.bayer.us\\\\x82\\\\x1cnewsletter.youthagsummit.com\\\\x82\\\\rnps.bayer.com\\\\x82\\\\x16phytobac.bayer-agri.fr\\\\x82\\\\x1bphytoprogress.bayer-agri.fr\\\\x82/platformadystrybucyjna.cropscience.bayer.com.pl\\\\x82\\\\x13pontos.bayer.com.br\\\\x82&ppmlogin.environmentalscience.bayer.us\\\\x82\\\\x1eprod2.cropscience.bayer.com.py\\\\x82\\\\x1eprod2.cropscience.bayer.com.uy\\\\x82\\\\x13protecmais.bayer.fr\\\\x82\\\\x18proveedores.bayer.com.mx\\\\x82\\\\x16publichealth.bayer.com\\\\x82\\\\x19publichealthmag.bayer.com\\\\x82\\\\x16stage.api.bayerweb.com\\\\x82\\\\x1dstage.bayercropscience.com.ar\\\\x82\\\\x1dstage.bayercropscience.com.co\\\\x82\\\\x1dstage.bayercropscience.com.ec\\\\x82\\\\x1dstage.bayercropscience.com.py\\\\x82\\\\x1dstage.bayercropscience.com.ve\\\\x82\\\\x17stage.beja.bayerweb.com\\\\x82\\\\x18stage.bicanada.bayer.com\\\\x82\\\\x1cstage.circulo13.bayer.com.mx\\\\x82\\\\x1estage.cropscience.bayer.com.ar\\\\x82\\\\x1estage.cropscience.bayer.com.bo\\\\x82\\\\x1estage.cropscience.bayer.com.py\\\\x82\\\\x1estage.cropscience.bayer.com.uy\\\\x82\\\\x12stage.feedabee.com\\\\x82)stage.mdmwebservice.cropscience.bayer.com\\\\x82\\\\x1cstage.micultivo.bayer.com.mx\\\\x82\\\\x18stage.miportal.bayer.com\\\\x82!stage.mobileapi.backedbybayer.com\\\\x82\\\\x1estage.proveedores.bayer.com.mx\\\\x82\\\\x1bstage.saludambiental.com.mx\\\\x82%stage.seedtag.bayercropscience.us.com\\\\x82,stage.stewardshipmtg.bayercropscience.us.com\\\\x82\\\\x10stardl.bayer.com\\\\x82\\\\x12stardlqa.bayer.com\\\\x82\\\\x10starqa.bayer.com\\\\x82\\\"stewardship.bayercropscienceus.com\\\\x82&stewardshipmtg.bayercropscience.us.com\\\\x82\\\\x1bszkolenia.agro.bayer.com.pl\\\\x82)test.bcsfieldbids.bayercropscience.us.com\\\\x82#test.digital-marketing.cs.bayer.com\\\\x82\\\\x17test.int.agrar.bayer.de\\\\x82\\\\x1ctest.net.mybayerservices.com\\\\x82\\\\x15test.pft.bayerweb.com\\\\x82\\\\rwww.baydir.cl\\\\x82\\\\x11www.bayer-agri.fr\\\\x82\\\\x1bwww.bayercropscience.com.ar\\\\x82\\\\x14www.bayertoolbox.com\\\\x82\\\\x10www.bayexpert.cz\\\\x82\\\\x10www.bayexpert.sk\\\\x82\\\\x10www.bayprofit.cz\\\\x82\\\\x10www.bayprofit.sk\\\\x82(www.bcsfieldbids.bayercropscience.us.com\\\\x82&www.bulkrepack.bayercropscience.us.com\\\\x82\\\\x16www.colturaecultura.it\\\\x82\\\\x18www.covoiturage.bayer.fr\\\\x82\\\\x18www.cropscience.bayer.cl\\\\x82\\\\x1cwww.cropscience.bayer.com.py\\\\x82\\\\x1cwww.cropscience.bayer.com.uy\\\\x82\\\\x18www.cropscience.bayer.ro\\\\x82\\\\x18www.cropscience.bayer.sk\\\\x82\\\\x0fwww.csavazas.hu\\\\x82\\\"www.digital-marketing.cs.bayer.com\\\\x82&www.katalograstitelnazashtita.bayer.bg\\\\x82\\\\x15www.momentos.bayer.mx\\\\x82\\\\x1ewww.monitoraggiococciniglia.it\\\\x82\\\\x18www.monografias.bayer.mx\\\\x82\\\\x16www.mybayeraccount.com\\\\x82\\\\x17www.mybayerservices.com\\\\x82\\\\x1ewww.proteccionambiental.com.ar\\\\x82\\\\x1cwww.proveedores.bayer.com.mx\\\\x82\\\\x1dwww.publichealthmag.bayer.com\\\\x82\\\\x16www.smartagro.bayer.ec\\\\x82!www.stage.bayercropscience.com.ar\\\\x82!www.stage.bayercropscience.com.uy\\\\x82\\\\x16www.tarim.bayer.com.tr\\\\x82\\\\x1awww.xn--h1apeh1c.xn--p1acf\",\n \"name\": \"subjectAltName\"\n }\n ],\n \"fingerprint\": {\n \"sha256\": \"555a575d447769003b96bc6b6849ffecc710831ccf648082dbcb0a6e81f0037f\",\n \"sha1\": \"39c0a00060c1a0df4b9dea017c8d87950fe0250a\"\n },\n \"serial\": 2.3917953139147504e+38,\n \"subject\": {\n \"C\": \"DE\",\n \"CN\": \"pft.bayercropscience.us\",\n \"L\": \"Leverkusen\",\n \"O\": \"Bayer AG\",\n \"ST\": \"Nordrhein-Westfalen\",\n \"street\": \"Kaiser-Wilhelm-Allee 1\",\n \"postalCode\": \"51368\",\n \"OU\": \"Bayer Business Services GmbH\"\n },\n \"pubkey\": {\n \"type\": \"rsa\",\n \"bits\": 2048\n },\n \"issuer\": {\n \"C\": \"US\",\n \"L\": \"Wilmington\",\n \"CN\": \"Trusted Secure Certificate Authority 5\",\n \"O\": \"Corporation Service Company\",\n \"ST\": \"DE\"\n }\n },\n \"cipher\": {\n \"version\": \"TLSv1/SSLv3\",\n \"bits\": 256,\n \"name\": \"ECDHE-RSA-AES256-GCM-SHA384\"\n },\n \"trust\": {\n \"revoked\": false,\n \"browser\": {\n \"mozilla\": true,\n \"apple\": true,\n \"microsoft\": true\n }\n },\n \"alpn\": [\n \"http/1.1\",\n \"http/1.0\"\n ],\n \"ocsp\": {}\n },\n \"hostnames\": [\n \"a23-8-80-84.deploy.static.akamaitechnologies.com\"\n ],\n \"org\": \"Akamai Technologies\",\n \"data\": \"HTTP/1.0 400 Bad Request\\r\\nServer: AkamaiGHost\\r\\nMime-Version: 1.0\\r\\nContent-Type: text/html\\r\\nContent-Length: 208\\r\\nExpires: Thu, 28 Jan 2021 05:05:47 GMT\\r\\nDate: Thu, 28 Jan 2021 05:05:47 GMT\\r\\nConnection: close\\r\\n\\r\\n\",\n \"port\": 443,\n \"transport\": \"tcp\",\n \"info\": \"Akamai's HTTP Acceleration & Mirror service\",\n \"isp\": \"Akamai Technologies\",\n \"asn\": \"AS16625\",\n \"location\": {\n \"country_code3\": null,\n \"city\": \"Adelaide\",\n \"region_code\": \"SA\",\n \"postal_code\": null,\n \"longitude\": 138.6005,\n \"country_code\": \"AU\",\n \"latitude\": -34.9274,\n \"country_name\": \"Australia\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"ip\": 386420820,\n \"domains\": [\n \"akamaitechnologies.com\"\n ],\n \"ip_str\": \"23.8.80.84\",\n \"_id\": \"95d23749-3a9f-40fb-aa32-5e64fe763da7\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"91597136eb9b132d7cc954511e0d9cbe7ce2e377\",\n \"options\": {},\n \"id\": \"7d720834-91ea-42dc-8b41-0100933116f1\",\n \"module\": \"https\",\n \"ptr\": true\n },\n \"opts\": {\n \"vulns\": [],\n \"heartbleed\": \"2021/01/28 05:06:04 23.8.80.84:443 - SAFE\\n\"\n }\n}\n{\n \"hash\": -1180342095,\n \"product\": \"Microsoft IIS httpd\",\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": \"Object moved\",\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"Microsoft-IIS/10.0\",\n \"host\": \"104.208.220.204\",\n \"html\": \"Object moved\\r\\nObject moved to here.\\r\\n\\r\\n\",\n \"location\": \"/\",\n \"components\": {},\n \"html_hash\": -1401938847,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"tags\": [\n \"cloud\"\n ],\n \"timestamp\": \"2021-01-28T05:06:00.832166\",\n \"ssl\": {\n \"chain_sha256\": [\n \"9e9296f5bdfafaa18ded4e605b4bde781d7e6ed3120ea3c7f4d6a2a2ad82c926\",\n \"04eeea8e50b4775b3c24797262917ee50002ec4c75b56cdf3ee1c18cfca5ba52\",\n \"16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb\"\n ],\n \"jarm\": \"2ad2ad0000000000002ad2ad2ad2ad0f0dcb2ae084f34cae790be1eab88c30\",\n \"chain\": [\n \"-----BEGIN CERTIFICATE-----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\\nvmvOoX+Uqrupd8sFyF5Alhzt3wfofG+lqREYmYQ=\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----\\nMIIFWjCCBEKgAwIBAgIQDxSWXyAgaZlP1ceseIlB4jANBgkqhkiG9w0BAQsFADBa\\nMQswCQYDVQQGEwJJRTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJl\\nclRydXN0MSIwIAYDVQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTIw\\nMDcyMTIzMDAwMFoXDTI0MTAwODA3MDAwMFowTzELMAkGA1UEBhMCVVMxHjAcBgNV\\nBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEgMB4GA1UEAxMXTWljcm9zb2Z0IFJT\\nQSBUTFMgQ0EgMDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCqYnfP\\nmmOyBoTzkDb0mfMUUavqlQo7Rgb9EUEf/lsGWMk4bgj8T0RIzTqk970eouKVuL5R\\nIMW/snBjXXgMQ8ApzWRJCZbar879BV8rKpHoAW4uGJssnNABf2n17j9TiFy6BWy+\\nIhVnFILyLNK+W2M3zK9gheiWa2uACKhuvgCca5Vw/OQYErEdG7LBEzFnMzTmJcli\\nW1iCdXby/vI/OxbfqkKD4zJtm45DJvC9Dh+hpzqvLMiK5uo/+aXSJY+SqhoIEpz+\\nrErHw+uAlKuHFtEjSeeku8eR3+Z5ND9BSqc6JtLqb0bjOHPm5dSRrgt4nnil75bj\\nc9j3lWXpBb9PXP9Sp/nPCK+nTQmZwHGjUnqlO9ebAVQD47ZisFonnDAmjrZNVqEX\\nF3p7laEHrFMxttYuD81BdOzxAbL9Rb/8MeFGQjE2Qx65qgVfhH+RsYuuD9dUw/3w\\nZAhq05yO6nk07AM9c+AbNtRoEcdZcLCHfMDcbkXKNs5DJncCqXAN6LhXVERCw/us\\nG2MmCMLSIx9/kwt8bwhUmitOXc6fpT7SmFvRAtvxg84wUkg4Y/Gx++0j0z6StSeN\\n0EJz150jaHG6WV4HUqaWTb98Tm90IgXAU4AW2GBOlzFPiU5IY9jt+eXC2Q6yC/Zp\\nTL1LAcnL3Qa/OgLrHN0wiw1KFGD51WRPQ0Sh7QIDAQABo4IBJTCCASEwHQYDVR0O\\nBBYEFLV2DDARzseSQk1Mx1wsyKkM6AtkMB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoI\\nVDaGezq1BE3wMA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYI\\nKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADA0BggrBgEFBQcBAQQoMCYwJAYI\\nKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA6BgNVHR8EMzAxMC+g\\nLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vT21uaXJvb3QyMDI1LmNybDAq\\nBgNVHSAEIzAhMAgGBmeBDAECATAIBgZngQwBAgIwCwYJKwYBBAGCNyoBMA0GCSqG\\nSIb3DQEBCwUAA4IBAQCfK76SZ1vae4qt6P+dTQUO7bYNFUHR5hXcA2D59CJWnEj5\\nna7aKzyowKvQupW4yMH9fGNxtsh6iJswRqOOfZYC4/giBO/gNsBvwr8uDW7t1nYo\\nDYGHPpvnpxCM2mYfQFHq576/TmeYu1RZY29C4w8xYBlkAA8mDJfRhMCmehk7cN5F\\nJtyWRj2cZj/hOoI45TYDBChXpOlLZKIYiG1giY16vhCRi6zmPzEwv+tk156N6cGS\\nVm44jTQ/rs1sa0JSYjzUaYngoFdZC4OfxnIkQvUIA4TOFmPzNPEFdjcZsgbeEz4T\\ncGHTBPK4R28F44qIMCtHRV55VMX53ev6P3hRddJb\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----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\\nR9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp\\n-----END CERTIFICATE-----\\n\"\n ],\n \"dhparams\": null,\n \"versions\": [\n \"-TLSv1\",\n \"-SSLv2\",\n \"-SSLv3\",\n \"-TLSv1.1\",\n \"TLSv1.2\",\n \"-TLSv1.3\"\n ],\n \"acceptable_cas\": [],\n \"tlsext\": [\n {\n \"id\": 5,\n \"name\": \"status_request\"\n },\n {\n \"id\": 65281,\n \"name\": \"renegotiation_info\"\n }\n ],\n \"ja3s\": \"1d9c3e8c45ab7a2112263449a3ad9ece\",\n \"cert\": {\n \"sig_alg\": \"sha256WithRSAEncryption\",\n \"issued\": \"20201001180549Z\",\n \"expires\": \"20211001180549Z\",\n \"expired\": false,\n \"version\": 2,\n \"extensions\": [\n {\n \"data\": \"\\\\x04\\\\x81\\\\xf3\\\\x00\\\\xf1\\\\x00w\\\\x00\\\\xf6\\\\\\\\\\\\x94/\\\\xd1w0\\\"\\\\x14T\\\\x18\\\\x080\\\\x94V\\\\x8e\\\\xe3M\\\\x13\\\\x193\\\\xbf\\\\xdf\\\\x0c/ \\\\x0b\\\\xccN\\\\xf1d\\\\xe3\\\\x00\\\\x00\\\\x01t\\\\xe5`\\\\xb3\\\\x08\\\\x00\\\\x00\\\\x04\\\\x03\\\\x00H0F\\\\x02!\\\\x00\\\\xe10\\\\xa0\\\\x93\\\\x8cQ\\\\x7f5g\\\\x9f\\\\x81\\\\xa8\\\\xb4\\\\xd1R\\\\xa4N\\\\xe1^\\\\xc1\\\\x96*\\\\xc7\\\\xa8i\\\\xf8\\\\xa1\\\\x16\\\\xd1@\\\\xac\\\\xba\\\\x02!\\\\x00\\\\xc3\\\\xb4\\\\x9e\\\\xc8;\\\\xbd\\\\x15\\\\x8e\\\\xfa\\\\xdb%\\\\x84f\\\\xaa\\\\xc1\\\\nzA\\\\x98p\\\\xf9\\\\x8c\\\\xe8(54\\\\xcd\\\\x9dtd|\\\\xe9\\\\x00v\\\\x00D\\\\x94e.\\\\xb0\\\\xee\\\\xce\\\\xaf\\\\xc4@\\\\x07\\\\xd8\\\\xa8\\\\xfe(\\\\xc0\\\\xda\\\\xe6\\\\x82\\\\xbe\\\\xd8\\\\xcb1\\\\xb5?\\\\xd33\\\\x96\\\\xb5\\\\xb6\\\\x81\\\\xa8\\\\x00\\\\x00\\\\x01t\\\\xe5`\\\\xb3\\\\x07\\\\x00\\\\x00\\\\x04\\\\x03\\\\x00G0E\\\\x02!\\\\x00\\\\x88 \\\\xaa\\\\xe8\\\\xf4\\\\xc5c\\\\xf6\\\\x10\\\\xef\\\\xda\\\\x88\\\\xc4\\\\x1a\\\\xcfQ\\\\xdf\\\\xbd\\\\xe3\\\\x1b\\\\x8c\\\\xf3z\\\\x92\\\\xe5ia\\\\x0f3k\\\\x9e\\\\x00\\\\x02 3\\\\x9d\\\\x91\\\\xa6~\\\\x95\\\\xe9\\\\x00+s\\\\x08=\\\\x1fj\\\\x03\\\\x08.\\\\xfb\\\\xce\\\\xa7\\\\xc5\\\\xed5\\\\xaf\\\\xe9Ws`\\\\xba\\\\x1a\\\\xc2\\\\x1e\",\n \"name\": \"ct_precert_scts\"\n },\n {\n \"data\": \"0\\\\x180\\\\n\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x010\\\\n\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x02\",\n \"name\": \"UNDEF\"\n },\n {\n \"data\": \"0/\\\\x06\\\\'+\\\\x06\\\\x01\\\\x04\\\\x01\\\\x827\\\\x15\\\\x08\\\\x87\\\\xda\\\\x86u\\\\x83\\\\xee\\\\xd9\\\\x01\\\\x82\\\\xc9\\\\x85\\\\x1b\\\\x81\\\\xb5\\\\x9ea\\\\x85\\\\xf4\\\\xeb`\\\\x81]\\\\x85\\\\x86\\\\x8eA\\\\x87\\\\xc2\\\\x98P\\\\x02\\\\x01d\\\\x02\\\\x01%\",\n \"name\": \"UNDEF\"\n },\n {\n \"data\": \"0y0S\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x070\\\\x02\\\\x86Ghttp://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt0\\\"\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x070\\\\x01\\\\x86\\\\x16http://ocsp.msocsp.com\",\n \"name\": \"authorityInfoAccess\"\n },\n {\n \"data\": \"\\\\x04\\\\x14\\\\xbac\\\\x19T\\\\x9dcn\\\\xce\\\\x1e\\\\xaa7\\\\x86w\\\\xf7\\\\xa7@\\\\x08bJ~\",\n \"name\": \"subjectKeyIdentifier\"\n },\n {\n \"data\": \"\\\\x03\\\\x02\\\\x04\\\\xb0\",\n \"name\": \"keyUsage\"\n },\n {\n \"data\": \"0@\\\\x82\\\\x1dpods.edog.officeapps.live.com\\\\x82\\\\x1f*.pods.edog.officeapps.live.com\",\n \"name\": \"subjectAltName\"\n },\n {\n \"data\": \"0\\\\x81\\\\xa50\\\\x81\\\\xa2\\\\xa0\\\\x81\\\\x9f\\\\xa0\\\\x81\\\\x9c\\\\x86Mhttp://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl\\\\x86Khttp://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl\",\n \"name\": \"crlDistributionPoints\"\n },\n {\n \"data\": \"0N0B\\\\x06\\\\t+\\\\x06\\\\x01\\\\x04\\\\x01\\\\x827*\\\\x010503\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x02\\\\x01\\\\x16\\\\'http://www.microsoft.com/pki/mscorp/cps0\\\\x08\\\\x06\\\\x06g\\\\x81\\\\x0c\\\\x01\\\\x02\\\\x01\",\n \"name\": \"certificatePolicies\"\n },\n {\n \"data\": \"0\\\\x16\\\\x80\\\\x14\\\\xb5v\\\\x0c0\\\\x11\\\\xce\\\\xc7\\\\x92BML\\\\xc7\\\\\\\\,\\\\xc8\\\\xa9\\\\x0c\\\\xe8\\\\x0bd\",\n \"name\": \"authorityKeyIdentifier\"\n },\n {\n \"data\": \"0\\\\x14\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x01\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x02\",\n \"name\": \"extendedKeyUsage\"\n }\n ],\n \"fingerprint\": {\n \"sha256\": \"9e9296f5bdfafaa18ded4e605b4bde781d7e6ed3120ea3c7f4d6a2a2ad82c926\",\n \"sha1\": \"9fa0354d790576aa30f02f21b16612fbb8773b21\"\n },\n \"serial\": 2.3861798313051083e+45,\n \"subject\": {\n \"CN\": \"pods.edog.officeapps.live.com\"\n },\n \"pubkey\": {\n \"type\": \"rsa\",\n \"bits\": 2048\n },\n \"issuer\": {\n \"C\": \"US\",\n \"CN\": \"Microsoft RSA TLS CA 01\",\n \"O\": \"Microsoft Corporation\"\n }\n },\n \"cipher\": {\n \"version\": \"TLSv1/SSLv3\",\n \"bits\": 256,\n \"name\": \"ECDHE-RSA-AES256-GCM-SHA384\"\n },\n \"trust\": {\n \"revoked\": false,\n \"browser\": {\n \"mozilla\": true,\n \"apple\": true,\n \"microsoft\": true\n }\n },\n \"alpn\": [],\n \"ocsp\": {}\n },\n \"cloud\": {\n \"region\": \"useast2\",\n \"service\": null,\n \"provider\": \"Azure\"\n },\n \"hostnames\": [],\n \"org\": \"Microsoft Azure\",\n \"data\": \"HTTP/1.1 302 Found\\r\\nCache-Control: private\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLocation: http://www.office.com/\\r\\nServer: Microsoft-IIS/10.0\\r\\nAccess-Control-Allow-Origin: *\\r\\nAccess-Control-Expose-Headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode\\r\\nX-OfficeVersion: 16.0.13727.40505\\r\\nX-CorrelationId: 1f0ef74d-9cfc-4c22-a17e-8ef12d06ae9f\\r\\nX-UserSessionId: 1f0ef74d-9cfc-4c22-a17e-8ef12d06ae9f\\r\\nX-OfficeCluster: eus2-000.PODS.edog.officeapps.live.com\\r\\nX-AspNet-Version: 4.0.30319\\r\\nX-Powered-By: ASP.NET\\r\\nDate: Thu, 28 Jan 2021 05:06:00 GMT\\r\\nContent-Length: 139\\r\\n\\r\\n\",\n \"port\": 443,\n \"cpe23\": [\n \"cpe:2.3:a:microsoft:internet_information_server:10.0\",\n \"cpe:2.3:o:microsoft:windows\"\n ],\n \"isp\": \"Microsoft Corporation\",\n \"transport\": \"tcp\",\n \"cpe\": [\n \"cpe:/a:microsoft:internet_information_server:10.0\",\n \"cpe:/o:microsoft:windows\"\n ],\n \"asn\": \"AS8075\",\n \"version\": \"10.0\",\n \"location\": {\n \"country_code3\": null,\n \"city\": \"Boydton\",\n \"region_code\": \"VA\",\n \"postal_code\": null,\n \"longitude\": -78.375,\n \"country_code\": \"US\",\n \"latitude\": 36.6534,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": 560\n },\n \"ip\": 1758518476,\n \"domains\": [],\n \"ip_str\": \"104.208.220.204\",\n \"_id\": \"7c29cbd8-51d2-44ed-ade2-d2f75eb6617a\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"cdd92e2d835a37d2798fa6c7105171f4d214012f\",\n \"options\": {},\n \"id\": \"d31f59c7-6d19-4277-b89d-3f1b8413e5bf\",\n \"module\": \"https\",\n \"ptr\": true\n },\n \"opts\": {\n \"vulns\": [],\n \"heartbleed\": \"2021/01/28 05:06:08 104.208.220.204:443 - ERROR: write tcp 104.208.220.204:443: broken pipe\\n\"\n }\n}" } } } } } }, "/shodan/vulns/{vulns}": { "get": { "operationId": "filteredByVulnerabilities", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by Vulnerabilities", "description": "Only returns banner data for the list of specified vulnerabilities. This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in a specific list of vulnerabilities.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "vulns", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of case-insensitive vulnerabilities; example \"CVE-2017-7679,CVE-2018-15919\"", "example": "CVE-2017-7679,CVE-2018-15919" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": -286560,\n \"product\": \"Apache httpd\",\n \"http\": {\n \"status\": 400,\n \"robots_hash\": -1022729730,\n \"redirects\": [\n {\n \"host\": \"136.243.203.117\",\n \"html\": \"\\n\\n\\n\\t window.location.href=\\\"index.php\\\"; \\n\\t\\n\\n\\n\",\n \"data\": \"HTTP/1.1 200 OK\\r\\nDate: Sun, 26 Dec 2021 13:50:37 GMT\\r\\nServer: Apache/2.4.25 (Debian)\\r\\nLast-Modified: Sat, 02 May 2020 19:49:04 GMT\\r\\nETag: \\\"9c-5a4af97139ebf\\\"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 156\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\n\\r\\n\",\n \"location\": \"/\"\n }\n ],\n \"securitytxt\": null,\n \"title\": null,\n \"sitemap_hash\": null,\n \"robots\": \"User-agent: *\\nDisallow: /\\n\",\n \"server\": \"Apache/2.4.25 (Debian)\",\n \"host\": \"136.243.203.117\",\n \"html\": \"\\n\\n\\n\\t window.location.href=\\\"index.php\\\"; \\n\\t\\n\\n\\n\",\n \"location\": \"/index.php\",\n \"components\": {\n \"PHP\": {\n \"categories\": []\n }\n },\n \"html_hash\": 823453261,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"vulns\": {\n \"CVE-2019-0196\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html\",\n \"http://www.apache.org/dist/httpd/CHANGES_2.4.39\",\n \"http://www.openwall.com/lists/oss-security/2019/04/02/1\",\n \"http://www.securityfocus.com/bid/107669\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/97a1c58e138ed58a364513b58d807a802e72bf6079ff81a10948ef7c@%3Ccvs.httpd.apache.org%3E\",\n \"https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTJPHI3E3OKW7OT7COQXVG7DE7IDQ2OT/\",\n \"https://seclists.org/bugtraq/2019/Apr/5\",\n \"https://security.netapp.com/advisory/ntap-20190617-0002/\",\n \"https://support.f5.com/csp/article/K44591505\",\n \"https://usn.ubuntu.com/3937-1/\",\n \"https://www.debian.org/security/2019/dsa-4422\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.\"\n },\n \"CVE-2017-7679\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99170\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2478\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3475\",\n \"https://access.redhat.com/errata/RHSA-2017:3476\",\n \"https://access.redhat.com/errata/RHSA-2017:3477\",\n \"https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679\",\n \"https://lists.apache.org/thread.html/f4515e580dfb6eeca589a5cdebd4c4c709ce632b12924f343c3b7751@%3Cdev.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\",\n \"https://www.nomachine.com/SU08O00185\"\n ],\n \"cvss\": \"7.5\",\n \"summary\": \"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.\"\n },\n \"CVE-2017-7659\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.securityfocus.com/bid/99132\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://lists.apache.org/thread.html/1d0b746bbaa3a64890fcdab59ee9050aaa633b7143e7d412374e5a9a@%3Cannounce.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.\"\n },\n \"CVE-2017-9788\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3913\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99569\",\n \"http://www.securitytracker.com/id/1038906\",\n \"https://access.redhat.com/errata/RHSA-2017:2478\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:2708\",\n \"https://access.redhat.com/errata/RHSA-2017:2709\",\n \"https://access.redhat.com/errata/RHSA-2017:2710\",\n \"https://access.redhat.com/errata/RHSA-2017:3113\",\n \"https://access.redhat.com/errata/RHSA-2017:3114\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3239\",\n \"https://access.redhat.com/errata/RHSA-2017:3240\",\n \"https://httpd.apache.org/security/vulnerabilities_22.html\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/0dd69204a6bd643cc4e9ccd008f07a9375525d977c6ebeb07a881afb@%3Cannounce.httpd.apache.org%3E\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20170911-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\"\n ],\n \"cvss\": \"6.4\",\n \"summary\": \"In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.\"\n },\n \"CVE-2017-9798\": {\n \"verified\": false,\n \"references\": [\n \"http://openwall.com/lists/oss-security/2017/09/18/2\",\n \"http://www.debian.org/security/2017/dsa-3980\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html\",\n \"http://www.securityfocus.com/bid/100872\",\n \"http://www.securityfocus.com/bid/105598\",\n \"http://www.securitytracker.com/id/1039387\",\n \"https://access.redhat.com/errata/RHSA-2017:2882\",\n \"https://access.redhat.com/errata/RHSA-2017:2972\",\n \"https://access.redhat.com/errata/RHSA-2017:3018\",\n \"https://access.redhat.com/errata/RHSA-2017:3113\",\n \"https://access.redhat.com/errata/RHSA-2017:3114\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3239\",\n \"https://access.redhat.com/errata/RHSA-2017:3240\",\n \"https://access.redhat.com/errata/RHSA-2017:3475\",\n \"https://access.redhat.com/errata/RHSA-2017:3476\",\n \"https://access.redhat.com/errata/RHSA-2017:3477\",\n \"https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html\",\n \"https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch\",\n \"https://github.com/apache/httpd/commit/29afdd2550b3d30a8defece2b95ae81edcf66ac9\",\n \"https://github.com/hannob/optionsbleed\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2017-9798\",\n \"https://security-tracker.debian.org/tracker/CVE-2017-9798\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0003/\",\n \"https://support.apple.com/HT208331\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch\",\n \"https://www.exploit-db.com/exploits/42745/\",\n \"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\n \"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.\"\n },\n \"CVE-2018-11763\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html\",\n \"http://www.securityfocus.com/bid/105414\",\n \"http://www.securitytracker.com/id/1041713\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://security.netapp.com/advisory/ntap-20190204-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3783-1/\",\n \"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\n \"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\"\n ],\n \"cvss\": \"4.3\",\n \"summary\": \"In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol.\"\n },\n \"CVE-2017-3167\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99135\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2478\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3475\",\n \"https://access.redhat.com/errata/RHSA-2017:3476\",\n \"https://access.redhat.com/errata/RHSA-2017:3477\",\n \"https://lists.apache.org/thread.html/8409e41a8f7dd9ded37141c38df001be930115428c3d64f70bbdb8b4@%3Cdev.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\",\n \"https://www.nomachine.com/SU08O00185\"\n ],\n \"cvss\": \"7.5\",\n \"summary\": \"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.\"\n },\n \"CVE-2018-1312\": {\n \"verified\": false,\n \"references\": [\n \"http://www.openwall.com/lists/oss-security/2018/03/24/7\",\n \"http://www.securityfocus.com/bid/103524\",\n \"http://www.securitytracker.com/id/1040571\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://access.redhat.com/errata/RHSA-2019:1898\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html\",\n \"https://security.netapp.com/advisory/ntap-20180601-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3627-1/\",\n \"https://usn.ubuntu.com/3627-2/\",\n \"https://usn.ubuntu.com/3937-2/\",\n \"https://www.debian.org/security/2018/dsa-4164\"\n ],\n \"cvss\": \"6.8\",\n \"summary\": \"In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.\"\n },\n \"CVE-2018-1333\": {\n \"verified\": false,\n \"references\": [\n \"http://www.securitytracker.com/id/1041402\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2018-1333\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://security.netapp.com/advisory/ntap-20180926-0007/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3783-1/\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33).\"\n },\n \"CVE-2017-3169\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99134\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2478\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3475\",\n \"https://access.redhat.com/errata/RHSA-2017:3476\",\n \"https://access.redhat.com/errata/RHSA-2017:3477\",\n \"https://github.com/gottburgm/Exploits/tree/master/CVE-2017-3169\",\n \"https://lists.apache.org/thread.html/84bf7fcc5cad35d355f11839cbdd13cbc5ffc1d34675090bff0f96ae@%3Cdev.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\",\n \"https://www.nomachine.com/SU08O00185\"\n ],\n \"cvss\": \"7.5\",\n \"summary\": \"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.\"\n },\n \"CVE-2019-0197\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html\",\n \"http://www.openwall.com/lists/oss-security/2019/04/02/2\",\n \"http://www.securityfocus.com/bid/107665\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/e0b8f6e858b1c8ec2ce8e291a2c543d438915037c7af661ab6d33808@%3Cdev.httpd.apache.org%3E\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/\",\n \"https://security.netapp.com/advisory/ntap-20190617-0002/\",\n \"https://support.f5.com/csp/article/K44591505\"\n ],\n \"cvss\": \"4.9\",\n \"summary\": \"A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \\\"H2Upgrade on\\\" are unaffected by this issue.\"\n },\n \"CVE-2019-0220\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html\",\n \"http://www.openwall.com/lists/oss-security/2019/04/02/6\",\n \"http://www.securityfocus.com/bid/107670\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/\",\n \"https://seclists.org/bugtraq/2019/Apr/5\",\n \"https://security.netapp.com/advisory/ntap-20190625-0007/\",\n \"https://support.f5.com/csp/article/K44591505\",\n \"https://usn.ubuntu.com/3937-1/\",\n \"https://www.debian.org/security/2019/dsa-4422\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.\"\n },\n \"CVE-2019-0211\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html\",\n \"http://packetstormsecurity.com/files/152386/Apache-2.4.38-Root-Privilege-Escalation.html\",\n \"http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html\",\n \"http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html\",\n \"http://www.apache.org/dist/httpd/CHANGES_2.4.39\",\n \"http://www.openwall.com/lists/oss-security/2019/04/02/3\",\n \"http://www.securityfocus.com/bid/107666\",\n \"https://access.redhat.com/errata/RHBA-2019:0959\",\n \"https://access.redhat.com/errata/RHSA-2019:0746\",\n \"https://access.redhat.com/errata/RHSA-2019:0980\",\n \"https://access.redhat.com/errata/RHSA-2019:1296\",\n \"https://access.redhat.com/errata/RHSA-2019:1297\",\n \"https://access.redhat.com/errata/RHSA-2019:1543\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/890507b85c30adf133216b299cc35cd8cd0346a885acfc671c04694e@%3Cdev.community.apache.org%3E\",\n \"https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8c5939949f9b061c05c06e0e90098ebf7aa@%3Cusers.httpd.apache.org%3E\",\n \"https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c0586b2de6fb50caa98b109833f5d4daf28@%3Cdev.community.apache.org%3E\",\n \"https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff220784520556884fb8ea80e69400a45509e@%3Cdev.community.apache.org%3E\",\n \"https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/\",\n \"https://seclists.org/bugtraq/2019/Apr/16\",\n \"https://seclists.org/bugtraq/2019/Apr/5\",\n \"https://security.gentoo.org/glsa/201904-20\",\n \"https://security.netapp.com/advisory/ntap-20190423-0001/\",\n \"https://support.f5.com/csp/article/K32957101\",\n \"https://usn.ubuntu.com/3937-1/\",\n \"https://www.debian.org/security/2019/dsa-4422\",\n \"https://www.exploit-db.com/exploits/46676/\",\n \"https://www.synology.com/security/advisory/Synology_SA_19_14\"\n ],\n \"cvss\": \"7.2\",\n \"summary\": \"In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.\"\n },\n \"CVE-2017-15710\": {\n \"verified\": false,\n \"references\": [\n \"http://www.openwall.com/lists/oss-security/2018/03/24/8\",\n \"http://www.securityfocus.com/bid/103512\",\n \"http://www.securitytracker.com/id/1040569\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html\",\n \"https://security.netapp.com/advisory/ntap-20180601-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3627-1/\",\n \"https://usn.ubuntu.com/3627-2/\",\n \"https://usn.ubuntu.com/3937-2/\",\n \"https://www.debian.org/security/2018/dsa-4164\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all.\"\n },\n \"CVE-2018-1283\": {\n \"verified\": false,\n \"references\": [\n \"http://www.openwall.com/lists/oss-security/2018/03/24/4\",\n \"http://www.securityfocus.com/bid/103520\",\n \"http://www.securitytracker.com/id/1040568\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://security.netapp.com/advisory/ntap-20180601-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3627-1/\",\n \"https://usn.ubuntu.com/3627-2/\",\n \"https://www.debian.org/security/2018/dsa-4164\"\n ],\n \"cvss\": \"3.5\",\n \"summary\": \"In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a \\\"Session\\\" header. This comes from the \\\"HTTP_SESSION\\\" variable name used by mod_session to forward its data to CGIs, since the prefix \\\"HTTP_\\\" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.\"\n },\n \"CVE-2017-7668\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99137\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://lists.apache.org/thread.html/55a068b6a5eec0b3198ae7d96a7cb412352d0ffa7716612c5af3745b@%3Cdev.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\"\n ],\n \"cvss\": \"7.5\",\n \"summary\": \"The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.\"\n },\n \"CVE-2017-15715\": {\n \"verified\": false,\n \"references\": [\n \"http://www.openwall.com/lists/oss-security/2018/03/24/6\",\n \"http://www.securityfocus.com/bid/103525\",\n \"http://www.securitytracker.com/id/1040570\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://security.netapp.com/advisory/ntap-20180601-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3627-1/\",\n \"https://usn.ubuntu.com/3627-2/\",\n \"https://www.debian.org/security/2018/dsa-4164\"\n ],\n \"cvss\": \"6.8\",\n \"summary\": \"In Apache httpd 2.4.0 to 2.4.29, the expression specified in could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.\"\n },\n \"CVE-2018-17199\": {\n \"verified\": false,\n \"references\": [\n \"http://www.securityfocus.com/bid/106742\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.debian.org/debian-lts-announce/2019/01/msg00024.html\",\n \"https://seclists.org/bugtraq/2019/Apr/5\",\n \"https://security.gentoo.org/glsa/201903-21\",\n \"https://security.netapp.com/advisory/ntap-20190125-0001/\",\n \"https://usn.ubuntu.com/3937-1/\",\n \"https://www.debian.org/security/2019/dsa-4422\",\n \"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\n \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.\"\n }\n },\n \"timestamp\": \"2021-12-26T13:50:38.138557\",\n \"hostnames\": [\n \"cloud.sata.support.de\"\n ],\n \"org\": null,\n \"data\": \"HTTP/1.1 400 Bad Request\\r\\nDate: Sun, 26 Dec 2021 13:50:38 GMT\\r\\nServer: Apache/2.4.25 (Debian)\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate\\r\\nPragma: no-cache\\r\\nContent-Security-Policy: default-src 'self'; script-src 'self' 'nonce-Uzg3RlR0SGV4eWk2ZkVQTzRYVHVweUl5Y2x0MVFuRUF5WGlhSmlKa0Rvcz06SkxTY0llR3RsMmZ5UkNTbXF5T2RrRlp4SWc4Z0lVQm9peW5VVkdNSU4rND0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';\\r\\nReferrer-Policy: no-referrer\\r\\nX-Content-Type-Options: nosniff\\r\\nX-Download-Options: noopen\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nX-Permitted-Cross-Domain-Policies: none\\r\\nX-Robots-Tag: none\\r\\nX-XSS-Protection: 1; mode=block\\r\\nSet-Cookie: ocywvd3d4ksh=eva1s52oicv8tdeb7g0b7e66bc; path=/; HttpOnly\\r\\nSet-Cookie: oc_sessionPassphrase=turMN1jcd3qqiI4qFzrzqLVxkULQrAqmYaBNYHnPK0glR4ABkZKVi1TWtcxL9p%2Fp3XJi9UE35rkiewLJaoKAb5d%2B74HSEZZI4GpPVWWasb7X6YAeC5MncH8FVtfFNS7O; path=/; HttpOnly\\r\\nSet-Cookie: nc_sameSiteCookielax=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax\\r\\nSet-Cookie: nc_sameSiteCookiestrict=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict\\r\\nConnection: close\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n\",\n \"port\": 80,\n \"transport\": \"tcp\",\n \"info\": \"(Debian)\",\n \"isp\": \"Hetzner Online GmbH\",\n \"cpe23\": [\n \"cpe:2.3:a:php:php\",\n \"cpe:2.3:a:apache:http_server:2.4.25\"\n ],\n \"cpe\": [\n \"cpe:/a:php:php\",\n \"cpe:/a:apache:http_server:2.4.25\"\n ],\n \"asn\": \"AS24940\",\n \"version\": \"2.4.25\",\n \"location\": {\n \"city\": \"Oberdorla\",\n \"region_code\": \"TH\",\n \"area_code\": null,\n \"longitude\": 10.42163,\n \"latitude\": 51.16585,\n \"country_code\": \"DE\",\n \"country_name\": \"Germany\"\n },\n \"ip\": 2297678709,\n \"domains\": [\n \"support.de\"\n ],\n \"ip_str\": \"136.243.203.117\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"78039f81a0245caa8ab71c98182f0eff0ce52aab\",\n \"options\": {},\n \"id\": \"bb74aed0-dd93-4d4b-a51e-dd3bb2e10e04\",\n \"module\": \"http\",\n \"ptr\": true\n },\n \"opts\": {}\n}" } } } } } }, "/shodan/custom": { "get": { "operationId": "filteredByQuery", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by Query", "description": "Only returns banner data for the specified query. This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in banners matching a specific query. It generally follows the query syntax of the main search engine except that here the query is **case-sensitive**! The list of available keys can be found at [Search Filters.](https://www.shodan.io/search/filters) Put a \"-\" or \"!\" before the key to negate the filter terms.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "query", "in": "query", "schema": { "type": "number" }, "description": "Space-separated list of case-sensitive key:value filters or data query; example \"port:8080,443\", \"port:22 SSH-2.0-OpenSSH_6.4\", \"!country:VN\"", "example": "port:22 SSH-2.0-OpenSSH_6.4" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"product\": \"OpenSSH\",\n \"hash\": -1029792425,\n \"timestamp\": \"2021-12-27T18:21:53.120661\",\n \"hostnames\": [],\n \"org\": \"PEG TECH INC\",\n \"data\": \"SSH-2.0-OpenSSH_6.4\\\\r\\\\n\",\n \"port\": 22,\n \"transport\": \"tcp\",\n \"info\": \"protocol 2.0\",\n \"isp\": \"PEG TECH INC\",\n \"cpe23\": [\n \"cpe:2.3:a:openbsd:openssh:6.4\\\\r\\\\n\"\n ],\n \"cpe\": [\n \"cpe:/a:openbsd:openssh:6.4\\\\r\\\\n\"\n ],\n \"asn\": \"AS54600\",\n \"version\": \"6.4\\\\r\\\\n\",\n \"location\": {\n \"city\": \"San Jose\",\n \"region_code\": \"CA\",\n \"area_code\": null,\n \"longitude\": -121.89496,\n \"latitude\": 37.33939,\n \"country_code\": \"US\",\n \"country_name\": \"United States\"\n },\n \"ip\": 1804948851,\n \"domains\": [],\n \"ip_str\": \"107.149.85.115\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"ada8582d54117e5eb7c72186882e76f0854a54ae\",\n \"options\": {},\n \"id\": \"37f17a39-b456-4dbf-85ea-6dfd2d3f362f\",\n \"module\": \"auto\",\n \"ptr\": true\n },\n \"opts\": {\n \"raw\": \"5353482d322e302d4f70656e5353485f362e340d0a\"\n }\n}\n{\n \"product\": \"OpenSSH\",\n \"hash\": -1400530513,\n \"vulns\": {\n \"CVE-2014-2532\": {\n \"verified\": false,\n \"references\": [\n \"http://advisories.mageia.org/MGASA-2014-0143.html\",\n \"http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc\",\n \"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html\",\n \"http://marc.info/?l=bugtraq&m=141576985122836&w=2\",\n \"http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2\",\n \"http://rhn.redhat.com/errata/RHSA-2014-1552.html\",\n \"http://secunia.com/advisories/59855\",\n \"http://www.debian.org/security/2014/dsa-2894\",\n \"http://www.mandriva.com/security/advisories?name=MDVSA-2014:068\",\n \"http://www.mandriva.com/security/advisories?name=MDVSA-2015:095\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\",\n \"http://www.securityfocus.com/bid/66355\",\n \"http://www.securitytracker.com/id/1029925\",\n \"http://www.ubuntu.com/usn/USN-2155-1\",\n \"https://exchange.xforce.ibmcloud.com/vulnerabilities/91986\",\n \"https://support.apple.com/HT205267\"\n ],\n \"cvss\": 5.8,\n \"summary\": \"sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.\"\n },\n \"CVE-2018-15919\": {\n \"verified\": false,\n \"references\": [\n \"http://seclists.org/oss-sec/2018/q3/180\",\n \"http://www.securityfocus.com/bid/105163\",\n \"https://security.netapp.com/advisory/ntap-20181221-0001/\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or \\\"oracle\\\") as a vulnerability.'\"\n },\n \"CVE-2017-15906\": {\n \"verified\": false,\n \"references\": [\n \"http://www.securityfocus.com/bid/101552\",\n \"https://access.redhat.com/errata/RHSA-2018:0980\",\n \"https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19\",\n \"https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html\",\n \"https://security.gentoo.org/glsa/201801-05\",\n \"https://security.netapp.com/advisory/ntap-20180423-0004/\",\n \"https://www.openssh.com/txt/release-7.6\"\n ],\n \"cvss\": 5,\n \"summary\": \"The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.\"\n },\n \"CVE-2014-1692\": {\n \"verified\": false,\n \"references\": [\n \"http://marc.info/?l=bugtraq&m=141576985122836&w=2\",\n \"http://marc.info/?l=bugtraq&m=144050155601375&w=2\",\n \"http://openwall.com/lists/oss-security/2014/01/29/10\",\n \"http://openwall.com/lists/oss-security/2014/01/29/2\",\n \"http://secunia.com/advisories/60184\",\n \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1020637\",\n \"http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/Attic/schnorr.c.diff?r1=1.9;r2=1.10;f=h\",\n \"http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/schnorr.c#rev1.10\",\n \"http://www.securityfocus.com/bid/65230\",\n \"https://exchange.xforce.ibmcloud.com/vulnerabilities/90819\"\n ],\n \"cvss\": 7.5,\n \"summary\": \"The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.\"\n },\n \"CVE-2014-2653\": {\n \"verified\": false,\n \"references\": [\n \"http://advisories.mageia.org/MGASA-2014-0166.html\",\n \"http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html\",\n \"http://marc.info/?l=bugtraq&m=141576985122836&w=2\",\n \"http://openwall.com/lists/oss-security/2014/03/26/7\",\n \"http://rhn.redhat.com/errata/RHSA-2014-1552.html\",\n \"http://rhn.redhat.com/errata/RHSA-2015-0425.html\",\n \"http://secunia.com/advisories/59855\",\n \"http://www.debian.org/security/2014/dsa-2894\",\n \"http://www.mandriva.com/security/advisories?name=MDVSA-2014:068\",\n \"http://www.mandriva.com/security/advisories?name=MDVSA-2015:095\",\n \"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\n \"http://www.securityfocus.com/bid/66459\",\n \"http://www.ubuntu.com/usn/USN-2164-1\",\n \"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742513\"\n ],\n \"cvss\": 5.8,\n \"summary\": \"The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.\"\n },\n \"CVE-2016-10708\": {\n \"verified\": false,\n \"references\": [\n \"http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html\",\n \"http://www.securityfocus.com/bid/102780\",\n \"https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737\",\n \"https://kc.mcafee.com/corporate/index?page=content&id=SB10284\",\n \"https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html\",\n \"https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html\",\n \"https://security.netapp.com/advisory/ntap-20180423-0003/\",\n \"https://usn.ubuntu.com/3809-1/\",\n \"https://www.openssh.com/releasenotes.html\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.\"\n },\n \"CVE-2016-0777\": {\n \"verified\": false,\n \"references\": [\n \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734\",\n \"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html\",\n \"http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html\",\n \"http://seclists.org/fulldisclosure/2016/Jan/44\",\n \"http://www.debian.org/security/2016/dsa-3446\",\n \"http://www.openssh.com/txt/release-7.1p2\",\n \"http://www.openwall.com/lists/oss-security/2016/01/14/7\",\n \"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\n \"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html\",\n \"http://www.securityfocus.com/archive/1/537295/100/0/threaded\",\n \"http://www.securityfocus.com/bid/80695\",\n \"http://www.securitytracker.com/id/1034671\",\n \"http://www.ubuntu.com/usn/USN-2869-1\",\n \"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/\",\n \"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/\",\n \"https://bto.bluecoat.com/security-advisory/sa109\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722\",\n \"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc\",\n \"https://security.gentoo.org/glsa/201601-01\",\n \"https://support.apple.com/HT206167\"\n ],\n \"cvss\": \"4.0\",\n \"summary\": \"The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.\"\n },\n \"CVE-2016-0778\": {\n \"verified\": false,\n \"references\": [\n \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734\",\n \"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html\",\n \"http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html\",\n \"http://seclists.org/fulldisclosure/2016/Jan/44\",\n \"http://www.debian.org/security/2016/dsa-3446\",\n \"http://www.openssh.com/txt/release-7.1p2\",\n \"http://www.openwall.com/lists/oss-security/2016/01/14/7\",\n \"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\n \"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html\",\n \"http://www.securityfocus.com/archive/1/537295/100/0/threaded\",\n \"http://www.securityfocus.com/bid/80698\",\n \"http://www.securitytracker.com/id/1034671\",\n \"http://www.ubuntu.com/usn/USN-2869-1\",\n \"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/\",\n \"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/\",\n \"https://bto.bluecoat.com/security-advisory/sa109\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722\",\n \"https://security.gentoo.org/glsa/201601-01\",\n \"https://support.apple.com/HT206167\"\n ],\n \"cvss\": \"4.6\",\n \"summary\": \"The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.\"\n }\n },\n \"timestamp\": \"2021-12-27T18:21:39.929427\",\n \"hostnames\": [],\n \"ssh\": {\n \"hassh\": \"cca34b641961a75a15b91d1f1a13a3fb\",\n \"fingerprint\": \"03:b2:2e:ab:88:bc:48:67:d0:54:3e:4d:f4:bb:5c:d1\",\n \"mac\": \"hmac-sha2-256\",\n \"cipher\": \"aes128-ctr\",\n \"key\": \"AAAAB3NzaC1yc2EAAAADAQABAAABAQDFwCWAOWfK2UouwmiJ1pm4iXTNwvqhEPHtnR1Pc6wI5SiE\\nEhGI/ckuGstLUTIBLbgO6jz+B94MKt+SQqMzamaZd/khexavl2bzYq4YtF79o42V1/im7qw/lBXq\\ncUuyTYWakhxQUlOyz75Kw8G87O5Fl0Mgwp2bN9aRAKJpsjFCX3n/d8p6NKNZRdmvl+aimjhDAeKF\\nopxIRHlfSUruY9XHVIqI9XxE1IH3c7Ean7QkRI4hKTUC6BCLqGOW2lPtetFsbaFICYBugxSKGJkd\\nm/7DAakoYm9bTZsGexUFRz9P+h7pTXSMKmW3H2/ioqcarmvs2e+6QeTBOV9VTq2baOop\\n\",\n \"kex\": {\n \"languages\": [\n \"\"\n ],\n \"server_host_key_algorithms\": [\n \"ssh-rsa\",\n \"ecdsa-sha2-nistp256\"\n ],\n \"encryption_algorithms\": [\n \"aes128-ctr\",\n \"aes192-ctr\",\n \"aes256-ctr\",\n \"arcfour256\",\n \"arcfour128\",\n \"aes128-gcm@openssh.com\",\n \"aes256-gcm@openssh.com\",\n \"aes128-cbc\",\n \"3des-cbc\",\n \"blowfish-cbc\",\n \"cast128-cbc\",\n \"aes192-cbc\",\n \"aes256-cbc\",\n \"arcfour\",\n \"rijndael-cbc@lysator.liu.se\"\n ],\n \"kex_follows\": false,\n \"unused\": 0,\n \"kex_algorithms\": [\n \"ecdh-sha2-nistp256\",\n \"ecdh-sha2-nistp384\",\n \"ecdh-sha2-nistp521\",\n \"diffie-hellman-group-exchange-sha256\",\n \"diffie-hellman-group-exchange-sha1\",\n \"diffie-hellman-group14-sha1\",\n \"diffie-hellman-group1-sha1\"\n ],\n \"compression_algorithms\": [\n \"none\",\n \"zlib@openssh.com\"\n ],\n \"mac_algorithms\": [\n \"hmac-md5-etm@openssh.com\",\n \"hmac-sha1-etm@openssh.com\",\n \"umac-64-etm@openssh.com\",\n \"umac-128-etm@openssh.com\",\n \"hmac-sha2-256-etm@openssh.com\",\n \"hmac-sha2-512-etm@openssh.com\",\n \"hmac-ripemd160-etm@openssh.com\",\n \"hmac-sha1-96-etm@openssh.com\",\n \"hmac-md5-96-etm@openssh.com\",\n \"hmac-md5\",\n \"hmac-sha1\",\n \"umac-64@openssh.com\",\n \"umac-128@openssh.com\",\n \"hmac-sha2-256\",\n \"hmac-sha2-512\",\n \"hmac-ripemd160\",\n \"hmac-ripemd160@openssh.com\",\n \"hmac-sha1-96\",\n \"hmac-md5-96\"\n ]\n },\n \"type\": \"ssh-rsa\"\n },\n \"org\": \"Henan Telcom Union Technology Co., LTD\",\n \"data\": \"SSH-2.0-OpenSSH_6.4\\nKey type: ssh-rsa\\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQDFwCWAOWfK2UouwmiJ1pm4iXTNwvqhEPHtnR1Pc6wI5SiE\\nEhGI/ckuGstLUTIBLbgO6jz+B94MKt+SQqMzamaZd/khexavl2bzYq4YtF79o42V1/im7qw/lBXq\\ncUuyTYWakhxQUlOyz75Kw8G87O5Fl0Mgwp2bN9aRAKJpsjFCX3n/d8p6NKNZRdmvl+aimjhDAeKF\\nopxIRHlfSUruY9XHVIqI9XxE1IH3c7Ean7QkRI4hKTUC6BCLqGOW2lPtetFsbaFICYBugxSKGJkd\\nm/7DAakoYm9bTZsGexUFRz9P+h7pTXSMKmW3H2/ioqcarmvs2e+6QeTBOV9VTq2baOop\\nFingerprint: 03:b2:2e:ab:88:bc:48:67:d0:54:3e:4d:f4:bb:5c:d1\\n\\nKex Algorithms:\\n\\tecdh-sha2-nistp256\\n\\tecdh-sha2-nistp384\\n\\tecdh-sha2-nistp521\\n\\tdiffie-hellman-group-exchange-sha256\\n\\tdiffie-hellman-group-exchange-sha1\\n\\tdiffie-hellman-group14-sha1\\n\\tdiffie-hellman-group1-sha1\\n\\nServer Host Key Algorithms:\\n\\tssh-rsa\\n\\tecdsa-sha2-nistp256\\n\\nEncryption Algorithms:\\n\\taes128-ctr\\n\\taes192-ctr\\n\\taes256-ctr\\n\\tarcfour256\\n\\tarcfour128\\n\\taes128-gcm@openssh.com\\n\\taes256-gcm@openssh.com\\n\\taes128-cbc\\n\\t3des-cbc\\n\\tblowfish-cbc\\n\\tcast128-cbc\\n\\taes192-cbc\\n\\taes256-cbc\\n\\tarcfour\\n\\trijndael-cbc@lysator.liu.se\\n\\nMAC Algorithms:\\n\\thmac-md5-etm@openssh.com\\n\\thmac-sha1-etm@openssh.com\\n\\tumac-64-etm@openssh.com\\n\\tumac-128-etm@openssh.com\\n\\thmac-sha2-256-etm@openssh.com\\n\\thmac-sha2-512-etm@openssh.com\\n\\thmac-ripemd160-etm@openssh.com\\n\\thmac-sha1-96-etm@openssh.com\\n\\thmac-md5-96-etm@openssh.com\\n\\thmac-md5\\n\\thmac-sha1\\n\\tumac-64@openssh.com\\n\\tumac-128@openssh.com\\n\\thmac-sha2-256\\n\\thmac-sha2-512\\n\\thmac-ripemd160\\n\\thmac-ripemd160@openssh.com\\n\\thmac-sha1-96\\n\\thmac-md5-96\\n\\nCompression Algorithms:\\n\\tnone\\n\\tzlib@openssh.com\\n\\n\",\n \"port\": 22,\n \"cpe23\": [\n \"cpe:2.3:a:openbsd:openssh:6.4\"\n ],\n \"info\": \"protocol 2.0\",\n \"isp\": \"Zhengzhou Fastidc Technology Co.,Ltd.\",\n \"transport\": \"tcp\",\n \"cpe\": [\n \"cpe:/a:openbsd:openssh:6.4\"\n ],\n \"asn\": \"AS56005\",\n \"version\": \"6.4\",\n \"location\": {\n \"city\": \"Tianjin\",\n \"region_code\": \"TJ\",\n \"area_code\": null,\n \"longitude\": 117.17667,\n \"latitude\": 39.14222,\n \"country_code\": \"CN\",\n \"country_name\": \"China\"\n },\n \"ip\": 707994107,\n \"domains\": [],\n \"ip_str\": \"42.51.33.251\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"49217c0cdcbcebaf23c2979ae16d4eba64180b1f\",\n \"options\": {},\n \"id\": \"202965c3-78b2-4938-936f-6899d2cec8e4\",\n \"module\": \"ssh\",\n \"ptr\": true\n },\n \"opts\": {}\n}" } } } } } }, "/shodan/alert": { "get": { "operationId": "getNetworkAlerts", "tags": ["Network Alerts"], "summary": "All Network Alerts", "description": "Subscribe to banners discovered on all IP ranges described in the network alerts. The network alerts are renewed periodically every 1 hour.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": -553166942,\n \"timestamp\": \"2021-01-28T05:39:12.152185\",\n \"hostnames\": [\"dns.google\"],\n \"org\": \"Google\",\n \"data\": \"\\nRecursion: enabled\",\n \"port\": 53,\n \"transport\": \"udp\",\n \"isp\": \"Google\",\n \"asn\": \"AS15169\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null,\n },\n \"dns\": {\n \"resolver_hostname\": null,\n \"recursive\": true,\n \"resolver_id\": null,\n \"software\": null,\n },\n \"ip\": 134744072,\n \"domains\": [\"dns.google\"],\n \"ip_str\": \"8.8.8.8\",\n \"_id\": \"23c49fa8-0c87-4b67-91b7-ab50d493ed7f\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"308515b6113c0645034fb8122d0ff0d5194e7e72\",\n \"options\": {},\n \"id\": \"0e055a10-9a16-4a8b-ae00-54ae10dd7f16\",\n \"module\": \"dns-udp\",\n \"ptr\": true,\n \"alert\": {\n \"id\": \"NKXOVKN5W4SPTOF2\",\n \"name\": \"scan 8.8.8.8\",\n },\n },\n \"opts\": {\"raw\": \"34ef818200010000000000000776657273696f6e0462696e640000100003\"},\n}\n{\n \"hash\": 1977582756,\n \"timestamp\": \"2021-01-28T05:39:16.231331\",\n \"hostnames\": [\"one.one.one.one\"],\n \"org\": \"Mountain View Communications\",\n \"data\": \"\\nRecursion: enabled\\nResolver ID: VIE\",\n \"port\": 53,\n \"transport\": \"udp\",\n \"isp\": \"Mountain View Communications\",\n \"asn\": \"AS13335\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": 143.2104,\n \"country_code\": \"AU\",\n \"latitude\": -33.494,\n \"country_name\": \"Australia\",\n \"area_code\": null,\n \"dma_code\": null,\n },\n \"dns\": {\n \"resolver_hostname\": null,\n \"recursive\": true,\n \"resolver_id\": \"VIE\",\n \"software\": null,\n },\n \"ip\": 16843009,\n \"domains\": [\"one.one\"],\n \"ip_str\": \"1.1.1.1\",\n \"_id\": \"08d364c6-fb2a-4a88-9369-e831b53509d1\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"3901cdc9c9a3b8554f02333e2779a8659643ad15\",\n \"options\": {},\n \"id\": \"52fc8643-5a7d-45d8-9c2e-8b79bd9f6f27\",\n \"module\": \"dns-udp\",\n \"ptr\": true,\n \"alert\": {\n \"id\": \"TOZN4UUSGPMOYEAI\",\n \"name\": \"one one one one\",\n },\n },\n \"opts\": {\"raw\": \"34ef818500010000000000000776657273696f6e0462696e640000100003\"},\n}" } } } } } }, "/shodan/alert/{id}": { "get": { "operationId": "getNetworkAlertsByID", "tags": ["Network Alerts"], "summary": "Filtered by Alert ID", "description": "Subscribe to banners discovered on all IP ranges described in the network alerts. The network alerts are renewed periodically every 1 hour.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "The unique ID of the network alert; example \"OYPRB8IR9Z35AZPR\"", "example": "OYPRB8IR9Z35AZPR" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": 1592421393,\n \"timestamp\": \"2021-01-28T05:45:56.563794\",\n \"hostnames\": [\n \"one.one.one.one\"\n ],\n \"org\": \"Mountain View Communications\",\n \"data\": \"\\nRecursion: enabled\\nResolver ID: AMS\",\n \"port\": 53,\n \"transport\": \"udp\",\n \"isp\": \"Mountain View Communications\",\n \"asn\": \"AS13335\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": 143.2104,\n \"country_code\": \"AU\",\n \"latitude\": -33.494,\n \"country_name\": \"Australia\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"dns\": {\n \"resolver_hostname\": null,\n \"recursive\": true,\n \"resolver_id\": \"AMS\",\n \"software\": null\n },\n \"ip\": 16843009,\n \"domains\": [\n \"one.one\"\n ],\n \"ip_str\": \"1.1.1.1\",\n \"_id\": \"8e231550-6f50-440d-b5da-46cc49b2243a\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"78039f81a0245caa8ab71c98182f0eff0ce52aab\",\n \"options\": {},\n \"id\": \"58ad7d05-7afd-4769-aabb-3045c498f770\",\n \"module\": \"dns-udp\",\n \"ptr\": true,\n \"alert\": {\n \"id\": \"TOZN4UUSGPMOYEAI\",\n \"name\": \"one one one one\",\n },\n },\n \"opts\": {\n \"raw\": \"34ef818500010000000000000776657273696f6e0462696e640000100003\"\n }\n}\n{\n \"hash\": -553166942,\n \"timestamp\": \"2021-01-28T05:46:06.018756\",\n \"hostnames\": [\n \"dns.google\"\n ],\n \"org\": \"Google\",\n \"data\": \"\\nRecursion: enabled\",\n \"port\": 53,\n \"transport\": \"udp\",\n \"isp\": \"Google\",\n \"asn\": \"AS15169\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"dns\": {\n \"resolver_hostname\": null,\n \"recursive\": true,\n \"resolver_id\": null,\n \"software\": null\n },\n \"ip\": 134744072,\n \"domains\": [\n \"dns.google\"\n ],\n \"ip_str\": \"8.8.8.8\",\n \"_id\": \"e26af2fa-dbcc-4a36-9631-33a46e505b91\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"44ad81631af4ebeda49a419b8565d5fcd7ac4d2e\",\n \"options\": {},\n \"id\": \"2db17089-b705-459e-9a44-f53ca3b42df1\",\n \"module\": \"dns-udp\",\n \"ptr\": true,\n \"alert\": {\n \"id\": \"NKXOVKN5W4SPTOF2\",\n \"name\": \"scan 8.8.8.8\",\n },\n },\n \"opts\": {\n \"raw\": \"34ef818200010000000000000776657273696f6e0462696e640000100003\"\n }\n}" } } } } } } } }