102.39.125.177

AttributeValue
3389.rdp.banner.connect_response.connect_id
0
3389.rdp.banner.connect_response.domain_parameters.domain_protocol_ver
2
3389.rdp.banner.connect_response.domain_parameters.max_channel_ids
34
3389.rdp.banner.connect_response.domain_parameters.max_mcspdu_size
65528
3389.rdp.banner.connect_response.domain_parameters.max_provider_height
1
3389.rdp.banner.connect_response.domain_parameters.max_token_ids
0
3389.rdp.banner.connect_response.domain_parameters.max_user_id_channels
3
3389.rdp.banner.connect_response.domain_parameters.min_octets_per_second
0
3389.rdp.banner.connect_response.domain_parameters.tcs_per_mcs
1
3389.rdp.banner.metadata.description
Remote Desktop -1.-1
3389.rdp.banner.metadata.product
Remote Desktop
3389.rdp.banner.metadata.version
-1.-1
3389.rdp.banner.protocol_supported_flags.dynvc_graphics_pipeline
True
3389.rdp.banner.protocol_supported_flags.extended_client_data_supported
True
3389.rdp.banner.protocol_supported_flags.neg_resp_reserved
True
3389.rdp.banner.protocol_supported_flags.redirected_auth_mode
True
3389.rdp.banner.protocol_supported_flags.restricted_admin_mode
True
3389.rdp.banner.selected_security_protocol.raw_value
1
3389.rdp.banner.selected_security_protocol.tls
True
3389.rdp.banner.supported
True
3389.rdp.banner.tls.certificate.parsed.extensions.extended_key_usage.server_auth
True
3389.rdp.banner.tls.certificate.parsed.extensions.key_usage.data_encipherment
True
3389.rdp.banner.tls.certificate.parsed.extensions.key_usage.key_encipherment
True
3389.rdp.banner.tls.certificate.parsed.extensions.key_usage.value
12
3389.rdp.banner.tls.certificate.parsed.fingerprint_md5
ce69a1332b2ad2b63ec4c55b5622219f
3389.rdp.banner.tls.certificate.parsed.fingerprint_sha1
2cf18f172539184a177482927d7a2fa60dbf1767
3389.rdp.banner.tls.certificate.parsed.fingerprint_sha256
ff8b960885ef7b30428d32a437a0b2fc81872e02a4631b9278ae12de58a64662
3389.rdp.banner.tls.certificate.parsed.issuer.common_name
Server1
3389.rdp.banner.tls.certificate.parsed.issuer_dn
CN=Server1
3389.rdp.banner.tls.certificate.parsed.redacted
False
3389.rdp.banner.tls.certificate.parsed.serial_number
45563464053952085864948985632021829300
3389.rdp.banner.tls.certificate.parsed.signature.self_signed
True
3389.rdp.banner.tls.certificate.parsed.signature.signature_algorithm.name
SHA256-RSA
3389.rdp.banner.tls.certificate.parsed.signature.signature_algorithm.oid
1.2.840.113549.1.1.11
3389.rdp.banner.tls.certificate.parsed.signature.valid
True
3389.rdp.banner.tls.certificate.parsed.signature.value
B3VNhG8iaT6GBtmeH1hNSkeCfxmMGlDgQuLQZ+r6iFD5rQ9IO8I66w8HXLEUh7YrHX4ndJUZLuPW1v1Q0nNTXKa5RQnKmzL9guM/1JFKOkQGIAvuk3eHJE8pJ5OmE7/rm3gOxTAPNTIZhbsrQXkzr+bql+TIzcDC9Q3mrvaRnlnSJfP+7rhFXJ32OF0EkkgTIZXzxE6IHPIGUu2O2zsfFdwSEVFcVxrwyYEij4xrsR4VfGxrrGU5dawnbK/atIpxWNdNUsKJXcgJdYicSWA9PoZCktDSOqFGlbce+TxpyTJKnVkgBbBcJ0h08N6LayvTMkqE+bn9DvJxz1dAtGHnMw==
3389.rdp.banner.tls.certificate.parsed.signature_algorithm.name
SHA256-RSA
3389.rdp.banner.tls.certificate.parsed.signature_algorithm.oid
1.2.840.113549.1.1.11
3389.rdp.banner.tls.certificate.parsed.spki_subject_fingerprint
0d370f4950f691003306d673e0d516930196e1e878c7ee625863d2141269cc1d
3389.rdp.banner.tls.certificate.parsed.subject.common_name
Server1
3389.rdp.banner.tls.certificate.parsed.subject_dn
CN=Server1
3389.rdp.banner.tls.certificate.parsed.subject_key_info.fingerprint_sha256
a107fe746bb79b64d35889a0b16a9a0637c9e8056ae409b12b9c385f7737fb41
3389.rdp.banner.tls.certificate.parsed.subject_key_info.key_algorithm.name
RSA
3389.rdp.banner.tls.certificate.parsed.subject_key_info.rsa_public_key.exponent
65537
3389.rdp.banner.tls.certificate.parsed.subject_key_info.rsa_public_key.length
2048
3389.rdp.banner.tls.certificate.parsed.subject_key_info.rsa_public_key.modulus
2Eo+jqLn/xDx82COraCbJlEkqU17AY8Or/QrivfWzcMIij4mT+CUWS4a9ESIMXky3wcbyYQbxrhpfaswBYf5LJe6O5vIaC9Fo3XrzD0+vQvikSJ2zc2aPbuxe1sldCA93cfzvymgzfCErdGQjVDcTo3ijobsXbLRjprJYjUlFVtkUXqmDVvCmcU5cpUF8cJHcIiSmFLWztxk3PGe2tilT3ma5eauWtJGu+0+kJsr1ZiMd+6RlunzPnJ5aaTwhpkmH6cim43NOgUJ7i9yvMrExaFpfuakv/OJ0olK3ZqvqNMgGzB43qwF8nUwI6LPQNhDi8sgtxkj8eInGxDRvaRcFQ==
3389.rdp.banner.tls.certificate.parsed.tbs_fingerprint
21e5b05285a0f5edbd41545cfd0a6d49e81cc0a3feec9f4c19a08410066b2760
3389.rdp.banner.tls.certificate.parsed.tbs_noct_fingerprint
21e5b05285a0f5edbd41545cfd0a6d49e81cc0a3feec9f4c19a08410066b2760
3389.rdp.banner.tls.certificate.parsed.validation_level
unknown
3389.rdp.banner.tls.certificate.parsed.validity.end
2021-10-21T22:27:55Z
3389.rdp.banner.tls.certificate.parsed.validity.length
15811200
3389.rdp.banner.tls.certificate.parsed.validity.start
2021-04-21T22:27:55Z
3389.rdp.banner.tls.certificate.parsed.version
3
3389.rdp.banner.tls.cipher_suite.id
0x0035
3389.rdp.banner.tls.cipher_suite.name
TLS_RSA_WITH_AES_256_CBC_SHA
3389.rdp.banner.tls.ocsp_stapling
False
3389.rdp.banner.tls.validation.browser_error
x509: failed to load system roots and no roots provided
3389.rdp.banner.tls.validation.browser_trusted
False
3389.rdp.banner.tls.version
TLSv1.2
3389.rdp.banner.version.major
-1
3389.rdp.banner.version.minor
-1
3389.rdp.banner.version.raw_value
524301
5357.banner.banner
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
5357.banner.banner_decoded
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Thu, 06 May 2021 00:50:52 GMT
Connection: close
Content-Length: 326

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN""http://www.w3.org/TR/html4/strict.dtd">
<HTML><HEAD><TITLE>Service Unavailable</TITLE>
<META HTTP-EQUIV="Content-Type" Content="text/html; charset=us-ascii"></HEAD>
5357.banner.decoded_to_utf8
True
80.http.get.body
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IIS Windows</title>
<style type="text/css">
<!--
body {
color:#000000;
background-color:#0072C6;
80.http.get.body_sha256
beab13194dbde745c9fc12b8941fb2269da636f1c9c2099ee0bd88a487280db5
80.http.get.headers.accept_ranges
bytes
80.http.get.headers.content_type
text/html
80.http.get.headers.last_modified
Wed, 06 Jan 2021 05:26:11 GMT
80.http.get.headers.server
Microsoft-IIS/10.0
80.http.get.headers.unknown
{u'value': u'"68d9f271ece3d61:0"', u'key': u'etag'}, {u'value': u'Tue, 04 May 2021 02:32:50 GMT', u'key': u'date'}
80.http.get.headers.vary
Accept-Encoding
80.http.get.headers.x_powered_by
ASP.NET
80.http.get.metadata.description
Microsoft IIS 10.0
80.http.get.metadata.manufacturer
Microsoft
80.http.get.metadata.product
IIS
80.http.get.metadata.version
10.0
80.http.get.status_code
200
80.http.get.status_line
200 OK
80.http.get.title
IIS Windows
autonomous_system.asn
11845
autonomous_system.country_code
ZA
autonomous_system.description
Vox-Telecom
autonomous_system.name
Vox-Telecom
autonomous_system.path
7018, 174, 11845
autonomous_system.rir
unknown
autonomous_system.routed_prefix
102.39.0.0/16
ip
102.39.125.177
location.city
Johannesburg
location.continent
Africa
location.country
South Africa
location.country_code
ZA
location.latitude
-26.3811
location.longitude
27.8376
location.postal_code
2192
location.province
Gauteng
location.registered_country
South Africa
location.registered_country_code
ZA
location.timezone
Africa/Johannesburg
metadata.os
Windows
metadata.os_description
Windows
ports
80, 3389, 5357
protocols
80/http, 3389/rdp, 5357/banner
tags
http, rdp, remote_display
updated_at
2021-05-05T10:06:45+00:00

HTTP Body


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IIS Windows</title>
<style type="text/css">
<!--
body {
	color:#000000;
	background-color:#0072C6;
	margin:0;
}

#container {
	margin-left:auto;
	margin-right:auto;
	text-align:center;
	}

a img {
	border:none;
}

-->
</style>
</head>
<body>
<div id="container">
<a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iisstart.png" alt="IIS" width="960" height="600" /></a>
</div>
</body>
</html>