FOFA Search Engine

Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x08\x00\x00\x00 Flag: PROTOCOL_HYBRID_EX Target_Name: HDSER Product_Version: 10.0.17763 Ntlm 15 OS: Windows Server 2019, Version 1809/Windows 10, Version 1809 NetBIOS_Domain_Name: HDSER NetBIOS_Computer_Name: HDSER DNS_Domain_Name: HDSER DNS_Computer_Name: HDSER System_Time: 2025-04-01 14:19:27 +0000 UTC

Issuer

Organization:

CommonName:HDSER

Validity

ValidType:Untrust

Subject

Organization:

CommonName:HDSER

Version: v3 Serial Number: 115090197811823178341171741199597283611 Signature Algorithm: SHA256-RSA Issuer: CommonName: HDSER Validity: Not Before: 2024-11-27 02:09 UTC Not After : 2025-05-29 02:09 UTC Subject: CommonName: HDSER Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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ey Usage: Key Encipherment Data Encipherment Extended Key Usage: Server Auth Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

121.43.110.18:33890

33890 unknown

121.43.110.18 121.43.110.18

country China / Zhejiang / Hangzhou

ASN: 37963

Organization: Hangzhou Alibaba Advertising Co.,Ltd.

2025-04-01

Banner

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x00\x00 0\x03\x00\x00\x00\x01\x00\x05\x00\x00@\x00\x00\x06\x00\x00\x1f@

114.229.60.211:33890

33890 rdp

114.229.60.211 114.229.60.211

country China / Jiangsu / Zhenjiang

ASN: 4134

Organization: Chinanet

2025-04-01

Header

Banner

Products

CName

Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02 \x08\x00\x02\x00\x00\x00 Flag: PROTOCOL_HYBRID Target_Name: ylfdm453 Product_Version: 6.1.7601 Ntlm 15 OS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1 NetBIOS_Domain_Name: ylfdm453 NetBIOS_Computer_Name: ylfdm453 DNS_Domain_Name: ylfdm453 DNS_Computer_Name: ylfdm453 System_Time: 2025-04-01 14:17:58 +0000 UTC

Issuer

Organization:

CommonName:SZUJBOEJJES4JTM

Validity

ValidType:Untrust

Subject

Organization:

CommonName:SZUJBOEJJES4JTM

Version: v3 Serial Number: 33190513430520656979983486974654392909 Signature Algorithm: SHA1-RSA Issuer: CommonName: SZUJBOEJJES4JTM Validity: Not Before: 2017-05-11 18:42 UTC Not After : 2017-11-10 18:42 UTC Subject: CommonName: SZUJBOEJJES4JTM Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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ey Usage: Key Encipherment Data Encipherment Extended Key Usage: Server Auth Certificate Signature Algorithm: SHA1-RSA Certificate Signature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

120.24.231.25:33890

33890 irc

120.24.231.25 120.24.231.25

country China / Guangdong / Shenzhen

ASN: 37963

Organization: Hangzhou Alibaba Advertising Co.,Ltd.

2025-04-01

Banner

:dircproxy NOTICE AUTH :Looking up your hostname... :dircproxy NOTICE AUTH :Got your hostname.

123.184.199.194:33890

33890 http

123.184.199.194 123.184.199.194

country China / Liaoning / Shenyang

ASN: 134762

Organization: CHINANET Liaoning province Dalian MAN network

2025-04-01

Banner

HTTP/1.0 500 Internal Server Error Content-Length: 20 D Connection: close

112.124.88.111:33890

33890 unknown

112.124.88.111 112.124.88.111

country China / Zhejiang / Hangzhou

ASN: 37963

Organization: Hangzhou Alibaba Advertising Co.,Ltd.

2025-04-01

Banner

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00 05\x00@\x00\x00\x00\x06\x00\x00 \x00þ\x03\x00\x00\x00\x01\x00\x00...

131.153.168.106:33890

33890 rdp

131.153.168.106 131.153.168.106

country United States of America / Arizona / Phoenix

ASN: 19437

Organization: SS-ASH

2025-04-01

Header

Banner

Products

CName

Remote Desktop Protocol \x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x1f\x08\x00\x08\x00\x00\x00 Flag: PROTOCOL_HYBRID_EX Target_Name: WIN-PQDDQ84SFMF Product_Version: 10.0.17763 Ntlm 15 OS: Windows Server 2019, Version 1809/Windows 10, Version 1809 NetBIOS_Domain_Name: WIN-PQDDQ84SFMF NetBIOS_Computer_Name: WIN-PQDDQ84SFMF DNS_Domain_Name: WIN-PQDDQ84SFMF DNS_Computer_Name: WIN-PQDDQ84SFMF System_Time: 2025-04-01 14:16:10 +0000 UTC

Issuer

Organization:

CommonName:WIN-PQDDQ84SFMF

Validity

ValidType:Untrust

Subject

Organization:

CommonName:WIN-PQDDQ84SFMF

Version: v3 Serial Number: 129485246962710200258170738814495046002 Signature Algorithm: SHA256-RSA Issuer: CommonName: WIN-PQDDQ84SFMF Validity: Not Before: 2024-11-06 15:15 UTC Not After : 2025-05-08 15:15 UTC Subject: CommonName: WIN-PQDDQ84SFMF Subject Public Key Info: Public Key Algorithm: RSA Public Key: Exponent: 65537 Public Key Modulus: (2048 bits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ey Usage: Key Encipherment Data Encipherment Extended Key Usage: Server Auth Certificate Signature Algorithm: SHA256-RSA Certificate Signature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

223.254.255.117:33890

kwCiZAgewS3Z0j0f2WOSuA== ⁹⁹⁹⁺

33890

223.254.255.117 223.254.255.117

country China / Liaoning / Shenyang

2025-04-01

nginx

Header

Banner

Products

CName

HTTP/1.1 200 OK Connection: close Content-Length: 917 Accept-Ranges: bytes Content-Type: text/html Date: Tue, 01 Apr 2025 14:16:48 GMT Etag: "67d8df90-395" Last-Modified: Tue, 18 Mar 2025 02:50:56 GMT Server: nginx

223.254.255.117:33890

33890 http

223.254.255.117 223.254.255.117

country China / Liaoning / Shenyang

2025-04-01

nginx

Header

Banner

Products

CName

HTTP/1.1 400 Bad Request Server: nginx Date: Tue, 01 Apr 2025 14:16:48 GMT Content-Type: text/html Content-Length: 150 Connection: close