185.136.171.163

{
  "ip": "185.136.171.163",
  "services": [
    {
      "_decoded": "rdp",
      "_encoding": {
        "certificate": "DISPLAY_HEX"
      },
      "certificate": "4707dfea9416d96a71593f3aae9d7aab921ad04576867cb8b09318741647afbc",
      "extended_service_name": "RDP",
      "jarm": {
        "_encoding": {
          "fingerprint": "DISPLAY_HEX",
          "cipher_and_version_fingerprint": "DISPLAY_HEX",
          "tls_extensions_sha256": "DISPLAY_HEX"
        },
        "fingerprint": "26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532",
        "cipher_and_version_fingerprint": "26d26d16d26d26d22c26d26d26d26d",
        "tls_extensions_sha256": "fd9c9d14e4f4f67f94f0359f8b28f532",
        "observed_at": "2023-01-15T16:41:54.941919605Z"
      },
      "observed_at": "2023-01-31T17:57:20.589096892Z",
      "perspective_id": "PERSPECTIVE_NTT",
      "port": 3389,
      "rdp": {
        "version": {
          "raw": 524292,
          "major": 5,
          "minor": 0
        },
        "protocol_flags": {
          "extended_client_data_supported": true,
          "dynvc_graphics_pipeline": true,
          "neg_resp_reserved": true,
          "restricted_admin_mode": true,
          "restricted_auth_mode": false
        },
        "selected_security_protocol": {
          "standard_rdp": true,
          "tls": true,
          "raw_value": 1,
          "credssp": false,
          "rdstls": false,
          "credssp_early_auth": false,
          "error": false,
          "error_ssl_required": false,
          "error_ssl_forbidden": false,
          "error_ssl_cert_missing": false,
          "error_bad_flags": false,
          "error_hybrid_required": false,
          "error_ssl_user_auth_required": false,
          "error_unknown": false
        },
        "x224_cc_pdu_srcref": 13330,
        "connect_response": {
          "domain_parameters": {
            "max_channel_ids": 34,
            "max_user_id_channels": 3,
            "num_priorities": 1,
            "max_provider_height": 1,
            "max_mcspdu_size": 65528,
            "domain_protocol_version": 2,
            "max_token_ids": 0,
            "min_throughput": 0
          },
          "connect_id": 0
        },
        "certificate_info": {}
      },
      "service_name": "RDP",
      "source_ip": "167.248.133.46",
      "tls": {
        "version_selected": "TLSv1_2",
        "cipher_selected": "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA",
        "certificates": {
          "_encoding": {
            "leaf_fp_sha_256": "DISPLAY_HEX"
          },
          "leaf_fp_sha_256": "4707dfea9416d96a71593f3aae9d7aab921ad04576867cb8b09318741647afbc",
          "leaf_data": {
            "subject_dn": "CN=WIN-P9NRMH5G6M8",
            "issuer_dn": "CN=WIN-P9NRMH5G6M8",
            "pubkey_bit_size": 2048,
            "pubkey_algorithm": "RSA",
            "tbs_fingerprint": "33f2c97d8408cb5aaffdd8fc165671ea7c15858045626ddf88cb4aceab31e27d",
            "fingerprint": "4707dfea9416d96a71593f3aae9d7aab921ad04576867cb8b09318741647afbc",
            "issuer": {
              "common_name": [
                "WIN-P9NRMH5G6M8"
              ]
            },
            "subject": {
              "common_name": [
                "WIN-P9NRMH5G6M8"
              ]
            },
            "public_key": {
              "key_algorithm": "RSA",
              "rsa": {
                "_encoding": {
                  "modulus": "DISPLAY_BASE64",
                  "exponent": "DISPLAY_BASE64"
                },
                "modulus": "uXketq4mxwToy+4KGI4NX0bNT7CosZyErSk2SfqO1LxGVfoAjDOewy4MYwI4o+omSaxfVYS/kIGSDiv4pcQXpXGhJ6rCvXjPzUo0cdE1hMMdndC6EOHX7YJkUAMBl02j8333XwnstpevD912EYFvznFQh6A8GeI8Fu6Lp5LI4/TrtpdPgzJTxx91FtdcvrCLukQO14dlMYkcWBReFiAdoi/FizBP2epCgSD61Zwe5pO+fMl4/3TkkI183QODCw5ci/B170b3AYNIIy9F01f0f7xGzDAI4Q5kFKkGBodLwD06E5vjpFxB4yBaN/tmR7hUWjsRGFrSIw2KcrrVBVsbLQ==",
                "exponent": "AAEAAQ==",
                "length": 256
              },
              "fingerprint": "d8e4f67c1fa2dcf7da73cb5c1dab49ad8391c74db643672fad0e211b1e4a4034"
            },
            "signature": {
              "self_signed": true,
              "signature_algorithm": "SHA256-RSA"
            }
          }
        },
        "server_key_exchange": {
          "ec_params": {
            "named_curve": 23
          }
        },
        "_encoding": {
          "ja3s": "DISPLAY_HEX"
        },
        "ja3s": "8529fd8de0d7f73186ef5ea8b4531a76"
      },
      "transport_fingerprint": {
        "raw": "64000,128,true,MNWST,1460,false,false"
      },
      "transport_protocol": "TCP",
      "truncated": false
    }
  ],
  "location": {
    "continent": "Europe",
    "country": "France",
    "country_code": "FR",
    "city": "Strasbourg",
    "postal_code": "",
    "timezone": "Europe/Paris",
    "province": "Grand Est",
    "coordinates": {
      "latitude": 48.5855,
      "longitude": 7.7418
    },
    "registered_country": "Germany",
    "registered_country_code": "DE"
  },
  "location_updated_at": "2023-01-20T05:53:00.121029Z",
  "autonomous_system": {
    "asn": 29066,
    "description": "VELIANET-AS velia.net Internetdienste GmbH",
    "bgp_prefix": "185.136.168.0/22",
    "name": "VELIANET-AS velia.net Internetdienste GmbH",
    "country_code": "DE"
  },
  "autonomous_system_updated_at": "2023-01-20T05:53:00.121580Z",
  "dns": {},
  "last_updated_at": "2023-02-01T01:25:58.606Z"
}