102.39.125.177

{
  "5357": {
    "banner": {
      "decoded_to_utf8": true, 
      "banner": "SFRUUC8xLjEgNTAzIFNlcnZpY2UgVW5hdmFpbGFibGUNCkNvbnRlbnQtVHlwZTogdGV4dC9odG1sOyBjaGFyc2V0PXVzLWFzY2lpDQpTZXJ2ZXI6IE1pY3Jvc29mdC1IVFRQQVBJLzIuMA0KRGF0ZTogVGh1LCAwNiBNYXkgMjAyMSAwMDo1MDo1MiBHTVQNCkNvbm5lY3Rpb246IGNsb3NlDQpDb250ZW50LUxlbmd0aDogMzI2DQoNCjwhRE9DVFlQRSBIVE1MIFBVQkxJQyAiLS8vVzNDLy9EVEQgSFRNTCA0LjAxLy9FTiIiaHR0cDovL3d3dy53My5vcmcvVFIvaHRtbDQvc3RyaWN0LmR0ZCI+DQo8SFRNTD48SEVBRD48VElUTEU+U2VydmljZSBVbmF2YWlsYWJsZTwvVElUTEU+DQo8TUVUQSBIVFRQLUVRVUlWPSJDb250ZW50LVR5cGUiIENvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11cy1hc2NpaSI+PC9IRUFEPg0KPEJPRFk+PGgyPlNlcnZpY2UgVW5hdmFpbGFibGU8L2gyPg0KPGhyPjxwPkhUVFAgRXJyb3IgNTAzLiBUaGUgc2VydmljZSBpcyB1bmF2YWlsYWJsZS48L3A+DQo8L0JPRFk+PC9IVE1MPg0K", 
      "banner_decoded": "HTTP/1.1 503 Service Unavailable\r\nContent-Type: text/html; charset=us-ascii\r\nServer: Microsoft-HTTPAPI/2.0\r\nDate: Thu, 06 May 2021 00:50:52 GMT\r\nConnection: close\r\nContent-Length: 326\r\n\r\n<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 4.01//EN\"\"http://www.w3.org/TR/html4/strict.dtd\">\r\n<HTML><HEAD><TITLE>Service Unavailable</TITLE>\r\n<META HTTP-EQUIV=\"Content-Type\" Content=\"text/html; charset=us-ascii\"></HEAD>\r\n<BODY><h2>Service Unavailable</h2>\r\n<hr><p>HTTP Error 503. The service is unavailable.</p>\r\n</BODY></HTML>\r\n"
    }
  }, 
  "tags": [
    "http", 
    "rdp", 
    "remote_display"
  ], 
  "ip": "102.39.125.177", 
  "updated_at": "2021-05-05T10:06:45+00:00", 
  "3389": {
    "rdp": {
      "banner": {
        "tls": {
          "cipher_suite": {
            "id": "0x0035", 
            "name": "TLS_RSA_WITH_AES_256_CBC_SHA"
          }, 
          "version": "TLSv1.2", 
          "ocsp_stapling": false, 
          "certificate": {
            "parsed": {
              "fingerprint_sha1": "2cf18f172539184a177482927d7a2fa60dbf1767", 
              "tbs_noct_fingerprint": "21e5b05285a0f5edbd41545cfd0a6d49e81cc0a3feec9f4c19a08410066b2760", 
              "subject_dn": "CN=Server1", 
              "issuer": {
                "common_name": [
                  "Server1"
                ]
              }, 
              "tbs_fingerprint": "21e5b05285a0f5edbd41545cfd0a6d49e81cc0a3feec9f4c19a08410066b2760", 
              "redacted": false, 
              "validation_level": "unknown", 
              "issuer_dn": "CN=Server1", 
              "fingerprint_sha256": "ff8b960885ef7b30428d32a437a0b2fc81872e02a4631b9278ae12de58a64662", 
              "version": 3, 
              "extensions": {
                "key_usage": {
                  "data_encipherment": true, 
                  "key_encipherment": true, 
                  "value": 12
                }, 
                "extended_key_usage": {
                  "server_auth": true
                }
              }, 
              "validity": {
                "start": "2021-04-21T22:27:55Z", 
                "length": 15811200, 
                "end": "2021-10-21T22:27:55Z"
              }, 
              "signature_algorithm": {
                "oid": "1.2.840.113549.1.1.11", 
                "name": "SHA256-RSA"
              }, 
              "serial_number": "45563464053952085864948985632021829300", 
              "fingerprint_md5": "ce69a1332b2ad2b63ec4c55b5622219f", 
              "subject_key_info": {
                "fingerprint_sha256": "a107fe746bb79b64d35889a0b16a9a0637c9e8056ae409b12b9c385f7737fb41", 
                "key_algorithm": {
                  "name": "RSA"
                }, 
                "rsa_public_key": {
                  "length": 2048, 
                  "modulus": "2Eo+jqLn/xDx82COraCbJlEkqU17AY8Or/QrivfWzcMIij4mT+CUWS4a9ESIMXky3wcbyYQbxrhpfaswBYf5LJe6O5vIaC9Fo3XrzD0+vQvikSJ2zc2aPbuxe1sldCA93cfzvymgzfCErdGQjVDcTo3ijobsXbLRjprJYjUlFVtkUXqmDVvCmcU5cpUF8cJHcIiSmFLWztxk3PGe2tilT3ma5eauWtJGu+0+kJsr1ZiMd+6RlunzPnJ5aaTwhpkmH6cim43NOgUJ7i9yvMrExaFpfuakv/OJ0olK3ZqvqNMgGzB43qwF8nUwI6LPQNhDi8sgtxkj8eInGxDRvaRcFQ==", 
                  "exponent": 65537
                }
              }, 
              "signature": {
                "self_signed": true, 
                "valid": true, 
                "value": "B3VNhG8iaT6GBtmeH1hNSkeCfxmMGlDgQuLQZ+r6iFD5rQ9IO8I66w8HXLEUh7YrHX4ndJUZLuPW1v1Q0nNTXKa5RQnKmzL9guM/1JFKOkQGIAvuk3eHJE8pJ5OmE7/rm3gOxTAPNTIZhbsrQXkzr+bql+TIzcDC9Q3mrvaRnlnSJfP+7rhFXJ32OF0EkkgTIZXzxE6IHPIGUu2O2zsfFdwSEVFcVxrwyYEij4xrsR4VfGxrrGU5dawnbK/atIpxWNdNUsKJXcgJdYicSWA9PoZCktDSOqFGlbce+TxpyTJKnVkgBbBcJ0h08N6LayvTMkqE+bn9DvJxz1dAtGHnMw==", 
                "signature_algorithm": {
                  "oid": "1.2.840.113549.1.1.11", 
                  "name": "SHA256-RSA"
                }
              }, 
              "spki_subject_fingerprint": "0d370f4950f691003306d673e0d516930196e1e878c7ee625863d2141269cc1d", 
              "subject": {
                "common_name": [
                  "Server1"
                ]
              }
            }
          }, 
          "validation": {
            "browser_trusted": false, 
            "browser_error": "x509: failed to load system roots and no roots provided"
          }
        }, 
        "selected_security_protocol": {
          "tls": true, 
          "raw_value": 1
        }, 
        "connect_response": {
          "connect_id": 0, 
          "domain_parameters": {
            "max_mcspdu_size": 65528, 
            "max_user_id_channels": 3, 
            "min_octets_per_second": 0, 
            "domain_protocol_ver": 2, 
            "tcs_per_mcs": 1, 
            "max_token_ids": 0, 
            "max_provider_height": 1, 
            "max_channel_ids": 34
          }
        }, 
        "supported": true, 
        "version": {
          "raw_value": 524301, 
          "major": -1, 
          "minor": -1
        }, 
        "protocol_supported_flags": {
          "dynvc_graphics_pipeline": true, 
          "neg_resp_reserved": true, 
          "redirected_auth_mode": true, 
          "restricted_admin_mode": true, 
          "extended_client_data_supported": true
        }, 
        "metadata": {
          "product": "Remote Desktop", 
          "version": "-1.-1", 
          "description": "Remote Desktop -1.-1"
        }
      }
    }
  }, 
  "ports": [
    80, 
    3389, 
    5357
  ], 
  "location": {
    "province": "Gauteng", 
    "city": "Johannesburg", 
    "country": "South Africa", 
    "longitude": 27.8376, 
    "registered_country": "South Africa", 
    "registered_country_code": "ZA", 
    "postal_code": "2192", 
    "country_code": "ZA", 
    "latitude": -26.3811, 
    "timezone": "Africa/Johannesburg", 
    "continent": "Africa"
  }, 
  "80": {
    "http": {
      "get": {
        "body": "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\">\r\n<html xmlns=\"http://www.w3.org/1999/xhtml\">\r\n<head>\r\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=iso-8859-1\" />\r\n<title>IIS Windows</title>\r\n<style type=\"text/css\">\r\n<!--\r\nbody {\r\n\tcolor:#000000;\r\n\tbackground-color:#0072C6;\r\n\tmargin:0;\r\n}\r\n\r\n#container {\r\n\tmargin-left:auto;\r\n\tmargin-right:auto;\r\n\ttext-align:center;\r\n\t}\r\n\r\na img {\r\n\tborder:none;\r\n}\r\n\r\n-->\r\n</style>\r\n</head>\r\n<body>\r\n<div id=\"container\">\r\n<a href=\"http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409\"><img src=\"iisstart.png\" alt=\"IIS\" width=\"960\" height=\"600\" /></a>\r\n</div>\r\n</body>\r\n</html>", 
        "title": "IIS Windows", 
        "status_code": 200, 
        "status_line": "200 OK", 
        "headers": {
          "unknown": [
            {
              "key": "etag", 
              "value": "\"68d9f271ece3d61:0\""
            }, 
            {
              "key": "date", 
              "value": "Tue, 04 May 2021 02:32:50 GMT"
            }
          ], 
          "x_powered_by": "ASP.NET", 
          "vary": "Accept-Encoding", 
          "server": "Microsoft-IIS/10.0", 
          "last_modified": "Wed, 06 Jan 2021 05:26:11 GMT", 
          "content_type": "text/html", 
          "accept_ranges": "bytes"
        }, 
        "body_sha256": "beab13194dbde745c9fc12b8941fb2269da636f1c9c2099ee0bd88a487280db5", 
        "metadata": {
          "product": "IIS", 
          "version": "10.0", 
          "description": "Microsoft IIS 10.0", 
          "manufacturer": "Microsoft"
        }
      }
    }
  }, 
  "autonomous_system": {
    "description": "Vox-Telecom", 
    "rir": "unknown", 
    "routed_prefix": "102.39.0.0/16", 
    "country_code": "ZA", 
    "path": [
      7018, 
      174, 
      11845
    ], 
    "asn": 11845, 
    "name": "Vox-Telecom"
  }, 
  "protocols": [
    "80/http", 
    "3389/rdp", 
    "5357/banner"
  ], 
  "metadata": {
    "os": "Windows", 
    "os_description": "Windows"
  }
}