211.245.23.135

As of: Jul 19, 2024 6:48am UTC | Latest

Host

Attribute Value
ip 211.245.23.135
location.continent Asia
location.country South Korea
location.country_code KR
location.city Seoul
location.postal_code 03141
location.timezone Asia/Seoul
location.province Seoul
location.coordinates.latitude 37.566
location.coordinates.longitude 126.9784
location_updated_at 2024-07-04T16:09:55.649712673Z
autonomous_system.asn 9318
autonomous_system.description SKB-AS SK Broadband Co Ltd
autonomous_system.bgp_prefix 211.245.16.0/20
autonomous_system.name SKB-AS SK Broadband Co Ltd
autonomous_system.country_code KR
autonomous_system_updated_at 2024-07-12T02:39:46.476651057Z
whois.network.handle BROADNNET
whois.network.name SK Broadband Co Ltd
whois.network.cidrs 211.245.0.0/17
whois.network.updated 2017-02-03T00:00:00Z
operating_system.uniform_resource_identifier cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
operating_system.part o
operating_system.vendor Microsoft
operating_system.product Windows
operating_system.other.family Windows
dns.names www.servingfriends.org
dns.names servingfriends.org
dns.records.www.servingfriends.org.record_type A
dns.records.www.servingfriends.org.resolved_at 2024-07-07T01:14:39.221806065Z
dns.records.servingfriends.org.record_type A
dns.records.servingfriends.org.resolved_at 2024-07-01T23:48:24.178346854Z
last_updated_at 2024-07-19T06:48:49.037Z
labels file-sharing
labels network-administration
labels remote-access

21/FTP TCP View Definition

Attribute Value
services.banner 220 Microsoft FTP Service\r\n
services.banner_hashes sha256:1330121f692d2b691ce187db6f11751c54549a97efc4a317e1ab240e6229a97d
services.banner_hex 323230204d6963726f736f66742046545020536572766963650d0a
services.extended_service_name FTP
services.ftp.banner 220 Microsoft FTP Service\r\n
services.ftp.auth_tls_response 534 Local policy on server does not allow TLS secure connections.\r\n
services.ftp.auth_ssl_response 534 Local policy on server does not allow TLS secure connections.\r\n
services.ftp.status_code 220
services.ftp.status_meaning Service ready for new user.
services.ftp.implicit_tls false
services.labels file-sharing
services.observed_at 2024-07-18T18:55:55.572895369Z
services.perspective_id PERSPECTIVE_NTT
services.port 21
services.service_name FTP
services.software.uniform_resource_identifier cpe:2.3:a:microsoft:internet_information_services:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Microsoft
services.software.product IIS
services.software.other.family IIS
services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.software.part o
services.software.vendor Microsoft
services.software.product Windows
services.software.other.family Windows
services.software.source OSI_APPLICATION_LAYER
services.source_ip 206.168.34.63
services.transport_protocol TCP
services.truncated false

80/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 404 Not Found\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: <REDACTED>\r\nConnection: close\r\nContent-Length: 315\r\n
services.banner_hashes sha256:d7de42c1e8c09cf951e3ad6248fda3ab48a60ca3eac8b25effd4b3067df8f362
services.banner_hex 485454502f312e3120343034204e6f7420466f756e640d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d75732d61736369690d0a5365727665723a204d6963726f736f66742d485454504150492f322e300d0a446174653a20203c52454441435445443e0d0a436f6e6e656374696f6e3a20636c6f73650d0a436f6e74656e742d4c656e6774683a203331350d0a
services.extended_service_name HTTP
services.http.request.method GET
services.http.request.uri http://211.245.23.135/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 404
services.http.response.status_reason Not Found
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Server Microsoft-HTTPAPI/2.0
services.http.response.headers.Content_Length 315
services.http.response.headers.Content_Type text/html; charset=us-ascii
services.http.response.headers.Connection close
services.http.response.html_tags <TITLE>Not Found</TITLE>
services.http.response.html_tags <META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii">
services.http.response.body_size 315
services.http.response.body <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">\r\n<HTML><HEAD><TITLE>Not Found</TITLE>\r\n<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>\r\n<BODY><h2>Not Found</h2>\r\n<hr><p>HTTP Error 404. The requested resource is not found.</p>\r\n</BODY></HTML>\r\n
services.http.response.body_hashes sha256:ce7127c38e30e92a021ed2bd09287713c6a923db9ffdb43f126e8965d777fbf0
services.http.response.body_hashes sha1:a66898b36c94c53766e66c1a7aaeb149447ec083
services.http.response.body_hash sha1:a66898b36c94c53766e66c1a7aaeb149447ec083
services.http.response.html_title Not Found
services.http.supports_http2 false
services.observed_at 2024-07-19T06:48:48.129565980Z
services.perspective_id PERSPECTIVE_TATA
services.port 80
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.software.part o
services.software.vendor Microsoft
services.software.product Windows
services.software.other.family Windows
services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:microsoft:http_api:2.0:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Microsoft
services.software.product HTTP API
services.software.version 2.0
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.138.120
services.transport_protocol TCP
services.truncated false

135/DCERPC TCP View Definition

Attribute Value
services.banner
services.banner_hashes sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
services.discovery_method IPV4_WALK_FULL_PRIORITY_1
services.extended_service_name DCERPC
services.observed_at 2024-07-18T19:17:14.605202102Z
services.parsed.dcerpc.could_bind true
services.parsed.dcerpc.could_query_epm true
services.parsed.dcerpc.endpoints.protocol [MS-TSCH]: Task Scheduler Service Remoting Protocol
services.parsed.dcerpc.endpoints.executable taskcomp.dll
services.parsed.dcerpc.endpoints.explained_uuid 378e52b0-c0a9-11cf-822d-00aa0051e40f v1.0
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\atsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable nsisvc.dll
services.parsed.dcerpc.endpoints.explained_uuid 7ea70bcf-48af-4f6a-8968-6a440754d5fa v1.0 NSI server endpoint
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-8ca1411fa829f8ed26]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE67C366D74735795E4D1F40B07BF1]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 7f1343fe-50a9-4927-a778-0c5859517bac v1.0 DfsDs service
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\wkssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-abff1323b517343693]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[DNSResolver]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid a500d4c6-0dd1-4543-bc0c-d5f93486eaf8 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-f17d9c98d78b00078b]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 8bfc3be1-6def-4e2d-af74-7c47cd0ade4a v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid bdaa0970-413b-4a3e-9e5d-f6dc9d7e0760 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable dhcpcsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d5 v1.0 DHCP Client LRPC Endpoint
services.parsed.dcerpc.endpoints.bindings ncalrpc:[dhcpcsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[dhcpcsvc6]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-dee7228a4fa7c2547c]
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49153]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\eventlog]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[eventlog]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid f47433c3-3e9d-4157-aad4-83aa1f5c2d4c v1.0 Fw APIs
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-6aefbe1cd2fcb2af24]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-1025827792aae3b72d]
services.parsed.dcerpc.endpoints.protocol [MS-SCMR]: Service Control Manager Remote Protocol
services.parsed.dcerpc.endpoints.executable services.exe
services.parsed.dcerpc.endpoints.explained_uuid 367abb81-9844-35f1-ad32-98f038001003 v2.0
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49165]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable sysntfy.dll
services.parsed.dcerpc.endpoints.explained_uuid c9ac6db5-82b7-4e55-ae8a-e464ed7b4277 v1.0 Impl friendly name
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-9af20a372980d02dc2]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-bfea1fa912e2abca53]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[DeviceSetupManager]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\srvsvc]
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49155]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[ubpmtaskhostchannel]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\atsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol [MS-EVEN6]: EventLog Remoting Protocol
services.parsed.dcerpc.endpoints.executable wevtsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid f6beaff7-1e19-4fbb-9f8f-b89e2018337c v1.0 Event log TCPIP
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49153]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\eventlog]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[eventlog]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 3a9ef155-691d-4449-8d05-09ad57031823 v1.0
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49155]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[ubpmtaskhostchannel]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\atsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol [MS-TSCH]: Task Scheduler Service Remoting Protocol
services.parsed.dcerpc.endpoints.executable schedsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid 86d35949-83c9-4044-b424-db363231fd0c v1.0
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49155]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[ubpmtaskhostchannel]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\atsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable schedsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid 0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid b25a52bf-e5dd-4f4a-aea6-8ca7272a0e86 v2.0 KeyIso
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49154]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[samss lpc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[SidKey Local End Point]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[protected_storage]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[lsasspirpc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[lsapolicylookup]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LSA_EAS_ENDPOINT]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[lsacap]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LSARPC_ENDPOINT]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[securityevent]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[audit]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\lsass]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid eb081a0d-10ee-478a-a1dd-50995283e7a8 v3.0 Witness Client Test Interface
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-abff1323b517343693]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[DNSResolver]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid e40f7b57-7a25-4cd3-a135-7f7d3df9d16b v1.0 Network Connection Broker server endpoint
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLEED3C0363EE5E7416C5F8C5CB884B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[trkwks]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\trkwks]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 0d3e2735-cea0-4ecc-a9e2-41a2d81aed4e v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid b2507c30-b126-494a-92ac-ee32b6eeb039 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-cc391a03113f561173]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable certprop.dll
services.parsed.dcerpc.endpoints.explained_uuid 30b044a5-a225-43f0-b3a4-e060df91f9c1 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-bfea1fa912e2abca53]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[DeviceSetupManager]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\srvsvc]
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49155]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[ubpmtaskhostchannel]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\atsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable srvsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid 98716d03-89ac-44c7-bb8c-285824e51c4a v1.0 XactSrv service
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49155]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[ubpmtaskhostchannel]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\atsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid f2c9b409-c1c9-4100-8639-d8ab1486694a v1.0 Witness Client Upcall Server
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-abff1323b517343693]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[DNSResolver]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 5222821f-d5e2-4885-84f1-5f6185a0ec41 v1.0 Network Connection Broker server endpoint for NCB Reset module
services.parsed.dcerpc.endpoints.bindings ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[trkwks]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\trkwks]
services.parsed.dcerpc.endpoints.protocol [MS-RSP]: Remote Shutdown Protocol
services.parsed.dcerpc.endpoints.executable wininit.exe
services.parsed.dcerpc.endpoints.explained_uuid d95afe70-a6d5-4259-822e-2c84da1ddb0d v1.0
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49152]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[WindowsShutdown]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\InitShutdown]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[WMsgKRpc07E9F0]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid c605f9fb-f0a3-4e2a-a073-73560f8d9e3e v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 1b37ca91-76b1-4f5e-a3c7-2abfc61f2bb0 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 2d98a740-581d-41b9-aa0d-a88b9d5ce938 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 3b338d89-6cfa-44b8-847e-531531bc9992 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 8782d3b9-ebbd-4644-a3d8-e8725381919b v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol [MS-TSCH]: Task Scheduler Service Remoting Protocol
services.parsed.dcerpc.endpoints.executable taskcomp.dll
services.parsed.dcerpc.endpoints.explained_uuid 1ff70682-0a51-30e8-076d-740be8cee98b v1.0
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\atsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 880fd55e-43b9-11e0-b1a8-cf4edfd72085 v1.0 KAPI Service endpoint
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLEED3C0363EE5E7416C5F8C5CB884B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[TSUMRPD_PRINT_DRV_LPC_API]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[trkwks]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\trkwks]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 9b008953-f195-4bf9-bde0-4471971e58ed v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-c1e1c717473d5bbae0]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\LSM_API_service]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LSMApi]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-9af20a372980d02dc2]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol [MS-CMPO]: MSDTC Connection Manager:
services.parsed.dcerpc.endpoints.executable msdtcprx.dll
services.parsed.dcerpc.endpoints.explained_uuid 906b0ce0-c70b-1067-b317-00dd010662da v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-dc64a38fd396c62bf6]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-dc64a38fd396c62bf6]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-dc64a38fd396c62bf6]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-f19a70b2c026c5a973]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE50572CAA4721E63C82409862BD78]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid abfb6ca3-0c5e-4734-9285-0aee72fe8d1c v1.0 Wcm Service
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-dee7228a4fa7c2547c]
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49153]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\eventlog]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[eventlog]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable gpsvc.dll
services.parsed.dcerpc.endpoints.explained_uuid 2eb08e3e-639f-4fba-97b1-14f878961076 v1.0 Group Policy RPC Interface
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-75faef51218057892e]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable MPSSVC.dll
services.parsed.dcerpc.endpoints.explained_uuid 2fb92682-6599-42dc-ae13-bd2ca89bd11c v1.0 Fw APIs
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-6aefbe1cd2fcb2af24]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-1025827792aae3b72d]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable dhcpcsvc6.dll
services.parsed.dcerpc.endpoints.explained_uuid 3c4728c5-f0ab-448b-bda1-6ce01eb0a6d6 v1.0 DHCPv6 Client LRPC Endpoint
services.parsed.dcerpc.endpoints.bindings ncalrpc:[dhcpcsvc6]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-dee7228a4fa7c2547c]
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49153]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\eventlog]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[eventlog]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable winlogon.exe
services.parsed.dcerpc.endpoints.explained_uuid 12e65dd8-887f-41ef-91bf-8d816c42c2e7 v1.0 Secure Desktop LRPC interface
services.parsed.dcerpc.endpoints.bindings ncalrpc:[WMsgKRpc080FE1]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[WMsgKRpc05A107B52]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 1a0d010f-1c33-432c-b0f5-8cf4e8053099 v1.0 IdSegSrv service
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49155]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[ubpmtaskhostchannel]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\atsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable MPSSVC.dll
services.parsed.dcerpc.endpoints.explained_uuid 7f9d11bf-7fb9-436b-a812-b2d50c5d4c03 v1.0 Fw APIs
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-6aefbe1cd2fcb2af24]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-1025827792aae3b72d]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 697dcda9-3ba9-4eb2-9247-e11f1901b0d2 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-c1e1c717473d5bbae0]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\LSM_API_service]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LSMApi]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-9af20a372980d02dc2]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 085b0334-e454-4d91-9b8c-4134f9e793f3 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable N/A
services.parsed.dcerpc.endpoints.explained_uuid 4bec6bb8-b5c2-4b6f-b2c1-5da5cf92d0d9 v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[actkernel]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[umpo]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable IKEEXT.DLL
services.parsed.dcerpc.endpoints.explained_uuid a398e520-d59a-4bdd-aa7a-3c1e0303a511 v1.0 IKE/Authip API
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49155]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[ubpmtaskhostchannel]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\atsvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[senssvc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[OLE066241BBC8B42BB8233641DA3D5B]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[IUserProfile2]
services.parsed.dcerpc.endpoints.protocol [MS-SAMR]: Security Account Manager (SAM) Remote Protocol
services.parsed.dcerpc.endpoints.executable samsrv.dll
services.parsed.dcerpc.endpoints.explained_uuid 12345778-1234-abcd-ef00-0123456789ac v1.0
services.parsed.dcerpc.endpoints.bindings ncacn_ip_tcp:211.245.23.135[49154]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[samss lpc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[SidKey Local End Point]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[protected_storage]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[lsasspirpc]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[lsapolicylookup]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LSA_EAS_ENDPOINT]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[lsacap]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LSARPC_ENDPOINT]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[securityevent]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[audit]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\pipe\lsass]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable BFE.DLL
services.parsed.dcerpc.endpoints.explained_uuid dd490425-5325-4565-b774-7e27d6c09c24 v1.0 Base Firewall Engine API
services.parsed.dcerpc.endpoints.bindings ncalrpc:[LRPC-1025827792aae3b72d]
services.parsed.dcerpc.endpoints.protocol N/A
services.parsed.dcerpc.endpoints.executable winlogon.exe
services.parsed.dcerpc.endpoints.explained_uuid 76f226c3-ec14-4325-8a99-6a46348418af v1.0
services.parsed.dcerpc.endpoints.bindings ncalrpc:[WindowsShutdown]
services.parsed.dcerpc.endpoints.bindings ncacn_np:\\SFI-WEB[\PIPE\InitShutdown]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[WMsgKRpc07E9F0]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[WMsgKRpc080FE1]
services.parsed.dcerpc.endpoints.bindings ncalrpc:[WMsgKRpc05A107B52]
services.perspective_id PERSPECTIVE_ORANGE
services.port 135
services.service_name DCERPC
services.software.uniform_resource_identifier cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.software.part o
services.software.vendor microsoft
services.software.product windows
services.software.source OSI_TRANSPORT_LAYER
services.source_ip 167.94.145.106
services.transport_fingerprint.id 310
services.transport_fingerprint.os Windows 2008 R2 / 2012
services.transport_fingerprint.raw 8192,128,true,MNWST,1460,false,false
services.transport_protocol TCP
services.truncated false

443/HTTP TCP View Definition

Attribute Value
services.banner HTTP/1.1 301 Moved Permanently\r\nContent-Type: text/html; charset=UTF-8\r\nLocation: https://www.servingfriends.org/\r\nServer: Microsoft-IIS/8.5\r\nX-Powered-By: ASP.NET\r\nDate: <REDACTED>\r\nContent-Length: 212\r\n
services.banner_hashes sha256:b306f42bd516cb760e7e2cda23b280e0dcc8e2be24414900df0619857847d50b
services.banner_hex 485454502f312e3120333031204d6f766564205065726d616e656e746c790d0a436f6e74656e742d547970653a20746578742f68746d6c3b20636861727365743d5554462d380d0a4c6f636174696f6e3a2068747470733a2f2f7777772e73657276696e67667269656e64732e6f72672f0d0a5365727665723a204d6963726f736f66742d4949532f382e350d0a582d506f77657265642d42793a204153502e4e45540d0a446174653a20203c52454441435445443e0d0a436f6e74656e742d4c656e6774683a203231320d0a
services.certificate 88992fd1f5df337de28fb9b72c6708eb6b420039c1f5503075b217d1072ae3db
services.extended_service_name HTTPS
services.http.request.method GET
services.http.request.uri https://211.245.23.135/
services.http.request.headers.User_Agent Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
services.http.request.headers.Accept */*
services.http.response.protocol HTTP/1.1
services.http.response.status_code 301
services.http.response.status_reason Moved Permanently
services.http.response.headers.Date <REDACTED>
services.http.response.headers.Server Microsoft-IIS/8.5
services.http.response.headers.Content_Length 212
services.http.response.headers.Content_Type text/html; charset=UTF-8
services.http.response.headers.Location https://www.servingfriends.org/
services.http.response.headers.X_Powered_By ASP.NET
services.http.response.html_tags <title>문서가 이동되었습니다.</title>
services.http.response.body_size 212
services.http.response.body <head><title>문서가 이동되었습니다.</title></head>\n<body><h1>개체가 이동되었습니다.</h1><a HREF="https://www.servingfriends.org/">여기</a>에서 이 문서를 찾을 수 있습니다.</body>
services.http.response.body_hashes sha256:7c549b3f44b5f2e92e735138c4fee297921ed1a920304d3c7319ff7c43ea5c79
services.http.response.body_hashes sha1:57c210976da8e0b7bc7f861e3a64895ee2cef059
services.http.response.body_hash sha1:57c210976da8e0b7bc7f861e3a64895ee2cef059
services.http.response.html_title 문서가 이동되었습니다.
services.http.supports_http2 false
services.jarm.fingerprint 26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532
services.jarm.cipher_and_version_fingerprint 26d26d16d26d26d22c26d26d26d26d
services.jarm.tls_extensions_sha256 fd9c9d14e4f4f67f94f0359f8b28f532
services.jarm.observed_at 2024-06-24T18:03:35.652037927Z
services.observed_at 2024-07-18T22:35:06.515483133Z
services.perspective_id PERSPECTIVE_TELIA
services.port 443
services.service_name HTTP
services.software.uniform_resource_identifier cpe:2.3:a:microsoft:internet_information_services:8.5:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Microsoft
services.software.product IIS
services.software.version 8.5
services.software.other.family IIS
services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*
services.software.part a
services.software.vendor Microsoft
services.software.product ASP.NET
services.software.source OSI_APPLICATION_LAYER
services.software.uniform_resource_identifier cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
services.software.part o
services.software.vendor Microsoft
services.software.product Windows Server 2012 R2
services.software.other.family Windows
services.software.source OSI_APPLICATION_LAYER
services.source_ip 167.94.146.55
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
services.tls.certificates.leaf_fp_sha_256 88992fd1f5df337de28fb9b72c6708eb6b420039c1f5503075b217d1072ae3db
services.tls.certificates.chain_fps_sha_256 e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab
services.tls.certificates.leaf_data.names servingfriends.org
services.tls.certificates.leaf_data.names www.servingfriends.org
services.tls.certificates.leaf_data.subject_dn CN=www.servingfriends.org
services.tls.certificates.leaf_data.issuer_dn C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
services.tls.certificates.leaf_data.pubkey_bit_size 2048
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint 435f8085c129835f38a8cdf09d67ca207bae76d7e78cdc411260627c2a8a7ef9
services.tls.certificates.leaf_data.fingerprint 88992fd1f5df337de28fb9b72c6708eb6b420039c1f5503075b217d1072ae3db
services.tls.certificates.leaf_data.issuer.common_name GlobalSign GCC R6 AlphaSSL CA 2023
services.tls.certificates.leaf_data.issuer.organization GlobalSign nv-sa
services.tls.certificates.leaf_data.issuer.country BE
services.tls.certificates.leaf_data.subject.common_name www.servingfriends.org
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 1/AhNahTYeAIhE5iFAQAodnYiLo/H4UvwOzMqmPav8E0VhRG1Mn//eTD2K55N8D+12LbNBvyS0pMSb4GZWAZf/0BLm/T+HW0WDHN79nLrr6eRLaZi2hNsV1+fSOkwDIieA9iHvKzj6DzmC/Y/LAMi1NBUTrxhHiiAD96VNmP52fSDE88blmLo41KtTimTgtZO9b4k97cjLiqhL8HT5Qlf6fpaEyd4rbloKs/oaLYtALoLjPTB8/KLB8Gk0oJNQqOOxqLzJESUKocYK/HG4IXVjYBcNWlHLEb7VQEAlRDqScF1RZldYou+XKm+D+GDzIGdvEK2lmKXiTIsHvlVomq/Q==
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 256
services.tls.certificates.leaf_data.public_key.fingerprint 7137d48280b6eeb0a7b563137e9a8653cd8324d26e1aac889ab2f83e2350b03c
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.certificates.leaf_data.signature.self_signed false
services.tls.certificates.chain.fingerprint e46fb2a75097a345d4246dcf44a10daa71d9fd0ebfab61ba67e6db84ee5b6cab
services.tls.certificates.chain.subject_dn C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2023
services.tls.certificates.chain.issuer_dn OU=GlobalSign Root CA - R6, O=GlobalSign, CN=GlobalSign
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 507bcb4f8187a3fb0cbc7fdfaf344f0d
services.tls.ja4s t120200_c014_fee41c0d62a8
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s 507bcb4f8187a3fb0cbc7fdfaf344f0d
services.tls.versions.ja4s t120200_c014_fee41c0d62a8
services.tls.versions.tls_version TLSv1_1
services.tls.versions.ja3s 26336690a8f7aafc732cffde53dc8f72
services.tls.versions.ja4s t110200_c014_fee41c0d62a8
services.tls.versions.tls_version TLSv1_0
services.tls.versions.ja3s e69f6e9634d5dabcd8f3162b12fe4fbf
services.tls.versions.ja4s t100200_c014_fee41c0d62a8
services.tls.versions.tls_version SSLv3
services.transport_protocol TCP
services.truncated false

5985/WINRM TCP View Definition

Attribute Value
services.banner
services.banner_hashes sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
services.extended_service_name WINRM
services.observed_at 2024-07-18T19:27:23.610175402Z
services.parsed.winrm.auth_types Negotiate
services.parsed.winrm.ntlm_info.encryption_56bit_supported true
services.parsed.winrm.ntlm_info.encryption_128bit_supported true
services.parsed.winrm.ntlm_info.ntlm1_supported true
services.parsed.winrm.ntlm_info.ntlm2_supported true
services.parsed.winrm.ntlm_info.always_sign_supported true
services.parsed.winrm.ntlm_info.challenge_type 3
services.parsed.winrm.ntlm_info.target_name SFI-WEB
services.parsed.winrm.ntlm_info.netbios_computer_name SFI-WEB
services.parsed.winrm.ntlm_info.netbios_domain_name SFI-WEB
services.parsed.winrm.ntlm_info.dns_server_name SFI-WEB
services.parsed.winrm.ntlm_info.dns_domain_name SFI-WEB
services.parsed.winrm.ntlm_info.dns_tree_name
services.parsed.winrm.ntlm_info.os_version 6.3.9600
services.parsed.winrm.ntlm_info.ntlm_version 15
services.perspective_id PERSPECTIVE_PCCW
services.port 5985
services.service_name WINRM
services.software.uniform_resource_identifier cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
services.software.part o
services.software.vendor microsoft
services.software.product windows
services.software.source OSI_TRANSPORT_LAYER
services.source_ip 199.45.154.116
services.transport_fingerprint.id 310
services.transport_fingerprint.os Windows 2008 R2 / 2012
services.transport_fingerprint.raw 8192,128,true,MNWST,1460,false,false
services.transport_protocol TCP
services.truncated false

33889/RDP TCP View Definition

Attribute Value
services.certificate b617b3babf8ade3f4518dc189c6e0e314a4ff4c75f18fa3ece96b6f4c8bec1e8
services.discovery_method IPV4_WALK_FULL_PRIORITY_3
services.extended_service_name RDP
services.jarm.fingerprint 26d26d16d26d26d22c26d26d26d26dfd9c9d14e4f4f67f94f0359f8b28f532
services.jarm.cipher_and_version_fingerprint 26d26d16d26d26d22c26d26d26d26d
services.jarm.tls_extensions_sha256 fd9c9d14e4f4f67f94f0359f8b28f532
services.jarm.observed_at 2024-07-04T19:45:25.099819586Z
services.labels network-administration
services.labels remote-access
services.observed_at 2024-07-18T20:49:42.296163861Z
services.perspective_id PERSPECTIVE_TATA
services.port 33889
services.rdp.protocol_flags.extended_client_data_supported true
services.rdp.protocol_flags.dynvc_graphics_pipeline true
services.rdp.protocol_flags.neg_resp_reserved true
services.rdp.protocol_flags.restricted_admin_mode true
services.rdp.protocol_flags.restricted_auth_mode false
services.rdp.selected_security_protocol.rdstls true
services.rdp.selected_security_protocol.raw_value 4
services.rdp.selected_security_protocol.standard_rdp false
services.rdp.selected_security_protocol.tls false
services.rdp.selected_security_protocol.credssp false
services.rdp.selected_security_protocol.credssp_early_auth false
services.rdp.selected_security_protocol.error false
services.rdp.selected_security_protocol.error_ssl_required false
services.rdp.selected_security_protocol.error_ssl_forbidden false
services.rdp.selected_security_protocol.error_ssl_cert_missing false
services.rdp.selected_security_protocol.error_bad_flags false
services.rdp.selected_security_protocol.error_hybrid_required false
services.rdp.selected_security_protocol.error_ssl_user_auth_required false
services.rdp.selected_security_protocol.error_unknown false
services.rdp.x224_cc_pdu_srcref 13330
services.service_name RDP
services.source_ip 167.94.138.56
services.tls.version_selected TLSv1_2
services.tls.cipher_selected TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
services.tls.certificates.leaf_fp_sha_256 b617b3babf8ade3f4518dc189c6e0e314a4ff4c75f18fa3ece96b6f4c8bec1e8
services.tls.certificates.leaf_data.subject_dn CN=SFI-WEB
services.tls.certificates.leaf_data.issuer_dn CN=SFI-WEB
services.tls.certificates.leaf_data.pubkey_bit_size 2048
services.tls.certificates.leaf_data.pubkey_algorithm RSA
services.tls.certificates.leaf_data.tbs_fingerprint e93cf24e25291fa214d238db7913d179ce81c56c6d649dc21b20e9f40144ab56
services.tls.certificates.leaf_data.fingerprint b617b3babf8ade3f4518dc189c6e0e314a4ff4c75f18fa3ece96b6f4c8bec1e8
services.tls.certificates.leaf_data.issuer.common_name SFI-WEB
services.tls.certificates.leaf_data.subject.common_name SFI-WEB
services.tls.certificates.leaf_data.public_key.key_algorithm RSA
services.tls.certificates.leaf_data.public_key.rsa.modulus 20VKzG4jsIXcTPTdcoBAwtSo6425L1bAeEBiSuk5XSWy2l8yr5vLd1W3z8pxJ/M5JIbmgGydoKxPDpyivNeYpzuKulDwP6g+DpN8JbFfr00xK5x8KceR7z2ibU1mCllEHnxmQUT1Gzqw8P/W3cg6VQlEAJSyB0o4nOcFcADe5m/zX/9/VIpe9qGbCG9Tjmv1ZrU1t119kC642JHLG5ph0b1EvHP/KqzGtaX/K/z8x5r3FOyU68wO2etcVUaY3f9SzxgFeoDyH86pGxmQbtWwK3Ja2RZCfaMJZo0kerFIJfsYhI8Jc6C9GAD/OFF1jr7aPKNpXnJ4LMZZTalK0hpFrw==
services.tls.certificates.leaf_data.public_key.rsa.exponent AAEAAQ==
services.tls.certificates.leaf_data.public_key.rsa.length 256
services.tls.certificates.leaf_data.public_key.fingerprint 5f5d5a4ac32a30a64ecf2fb506e5443a1804e1865fa77d35e6d24bd40d39a130
services.tls.certificates.leaf_data.signature.self_signed true
services.tls.certificates.leaf_data.signature.signature_algorithm SHA256-RSA
services.tls.server_key_exchange.ec_params.named_curve 23
services.tls.ja3s 8529fd8de0d7f73186ef5ea8b4531a76
services.tls.ja4s t120100_c014_bc98f8e001b5
services.tls.versions.tls_version TLSv1_2
services.tls.versions.ja3s 8529fd8de0d7f73186ef5ea8b4531a76
services.tls.versions.ja4s t120100_c014_bc98f8e001b5
services.tls.versions.tls_version TLSv1_1
services.tls.versions.ja3s 1308be477c8afb355e2860ab89378ae5
services.tls.versions.ja4s t110100_c014_bc98f8e001b5
services.tls.versions.tls_version TLSv1_0
services.tls.versions.ja3s bcf3a836c82d12ee988005fb0c011445
services.tls.versions.ja4s t100100_c014_bc98f8e001b5
services.transport_fingerprint.raw 64000,128,true,MNWST,1460,false,false
services.transport_protocol TCP
services.truncated false