Returning 10 result(s) out of 77,702 in 0.079 second(s)

  • 119.28.20.240:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:56 UTC

    • IP
      119.28.20.240
      Network
      119.28.0.0/16
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://119.28.20.240:5800/ 200

      HTTP Title
      VNC Viewer for Java
      ASN
      AS132203
      Organization
      Tencent Building, Kejizhongyi Avenue
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      46ce075b2a055ebe4cd729d1ebe1c8ab
      HTTP Header MD5
      de24180cefaa2ef5700b06288d7ac4f7
      HTTP Body MD5
      da3508b6949d41afea5fd25de1d5ce85
    • HTTP/1.1 200 OK
      Server: RealVNC/E4
      Date: Thu, 21 Nov 2024 10:25:56 GMT
      Cache-Control: no-cache
      Content-Type: text/html
      Connection: close
      
      <html>
      <head>
      <title>
      VNC Viewer for Java
      </title>
      </head>
      <body>
      <applet code="vncviewer/VNCViewer.class" archive="vncviewer.jar"
              width="600" height="250">
      <param name="port" value="5900">
      </applet>
      </body>
      </html>
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:56.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "da3508b6949d41afea5fd25de1d5ce85",
               "bodymmh3" : 375985560,
               "headermd5" : "de24180cefaa2ef5700b06288d7ac4f7",
               "headermmh3" : -346219527,
               "title" : "VNC Viewer for Java"
            },
            "length" : 384
         },
         "asn" : "AS132203",
         "city" : "Hong Kong",
         "country" : "HK",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 200 OK\r\nServer: RealVNC/E4\r\nDate: Thu, 21 Nov 2024 10:25:56 GMT\r\nCache-Control: no-cache\r\nContent-Type: text/html\r\nConnection: close\r\n\r\n<html>\r\n<head>\r\n<title>\r\nVNC Viewer for Java\r\n</title>\r\n</head>\r\n<body>\r\n<applet code=\"vncviewer/VNCViewer.class\" archive=\"vncviewer.jar\"\r\n        width=\"600\" height=\"250\">\r\n<param name=\"port\" value=\"5900\">\r\n</applet>\r\n</body>\r\n</html>\r\n\r\n",
         "datamd5" : "46ce075b2a055ebe4cd729d1ebe1c8ab",
         "datammh3" : 925947300,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS132203",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "HK",
            "countryname" : "Hong Kong",
            "domain" : [
               "cnnic.cn",
               "tencent.com"
            ],
            "isineu" : "false",
            "latitude" : "22.396428",
            "location" : "22.396428,114.109497",
            "longitude" : "114.109497",
            "netname" : "TencentCloud",
            "organization" : "ComsenzNet routes",
            "subnet" : "119.28.16.0/21"
         },
         "ip" : "119.28.20.240",
         "ipv6" : "false",
         "latitude" : "22.2842",
         "location" : "22.2842,114.1759",
         "longitude" : "114.1759",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Tencent Building, Kejizhongyi Avenue",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "119.28.0.0/16",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 14.55.74.210:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:56 UTC

    • IP
      14.55.74.210
      Network
      14.55.74.0/23
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://14.55.74.210:5800/ 200

      HTTP Title
      [picamain]
      ASN
      AS4766
      Organization
      Korea Telecom
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      6c93002d0a5366d270b289a8fa701f62
      HTTP Header MD5
      5f57c09195c67827a2bf23194539d5c6
      HTTP Body MD5
      20490b86f9832bba2d0ca1fabec7a040
    • HTTP/1.0 200 OK
      
      <HTML>
        <HEAD><TITLE> [picamain] </TITLE></HEAD>
        <BODY>
        <SPAN style='position: absolute; top:0px;left:0px'>
      <OBJECT 
          ID='VncViewer'
          classid = 'clsid:8AD9C840-044E-11D1-B3E9-00805F499D93'
          codebase = 'http://java.sun.com/update/1.4.2/jinstall-1_4-windows-i586.cab#Version=1,4,0,0'
          WIDTH = 1600 HEIGHT = 932 >
          <PARAM NAME = CODE VALUE = VncViewer.class >
          <PARAM NAME = ARCHIVE VALUE = VncViewer.jar >
          <PARAM NAME = 'type' VALUE = 'application/x-java-applet;version=1.4'>
          <PARAM NAME = 'scriptable' VALUE = 'false'>
          <PARAM NAME = PORT VALUE=10348>
          <PARAM NAME = ENCODING VALUE=Tight>
          <PARAM NAME = 'Open New Window' VALUE='Yes'>
          <COMMENT>
      	<EMBED 
                  type = 'application/x-java-applet;version=1.4' \
                  CODE = VncViewer.class \
                  ARCHIVE = VncViewer.jar \
                  WIDTH = 1600 \
                  HEIGHT = 932 \
                  PORT =10348 \
                  ENCODING =Tight \
      	    scriptable = false \
      	    pluginspage ='http://java.sun.com/products/plugin/index.html#download'>
      	    <NOEMBED>
                  </NOEMBED>
      	</EMBED>
          </COMMENT>
      </OBJECT>
        </SPAN>
        </BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:56.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "sun.com"
               ],
               "hostname" : [
                  "java.sun.com"
               ],
               "url" : [
                  "http://java.sun.com/products/plugin/index.html",
                  "http://java.sun.com/update/1.4.2/jinstall-1_4-windows-i586.cab"
               ]
            },
            "http" : {
               "bodymd5" : "20490b86f9832bba2d0ca1fabec7a040",
               "bodymmh3" : -769990561,
               "headermd5" : "5f57c09195c67827a2bf23194539d5c6",
               "headermmh3" : -1031289583,
               "title" : "[picamain]"
            },
            "length" : 1164
         },
         "asn" : "AS4766",
         "city" : "Iksan",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\n\n<HTML>\n  <HEAD><TITLE> [picamain] </TITLE></HEAD>\n  <BODY>\n  <SPAN style='position: absolute; top:0px;left:0px'>\n<OBJECT \n    ID='VncViewer'\n    classid = 'clsid:8AD9C840-044E-11D1-B3E9-00805F499D93'\n    codebase = 'http://java.sun.com/update/1.4.2/jinstall-1_4-windows-i586.cab#Version=1,4,0,0'\n    WIDTH = 1600 HEIGHT = 932 >\n    <PARAM NAME = CODE VALUE = VncViewer.class >\n    <PARAM NAME = ARCHIVE VALUE = VncViewer.jar >\n    <PARAM NAME = 'type' VALUE = 'application/x-java-applet;version=1.4'>\n    <PARAM NAME = 'scriptable' VALUE = 'false'>\n    <PARAM NAME = PORT VALUE=10348>\n    <PARAM NAME = ENCODING VALUE=Tight>\n    <PARAM NAME = 'Open New Window' VALUE='Yes'>\n    <COMMENT>\n\t<EMBED \n            type = 'application/x-java-applet;version=1.4' \\\n            CODE = VncViewer.class \\\n            ARCHIVE = VncViewer.jar \\\n            WIDTH = 1600 \\\n            HEIGHT = 932 \\\n            PORT =10348 \\\n            ENCODING =Tight \\\n\t    scriptable = false \\\n\t    pluginspage ='http://java.sun.com/products/plugin/index.html#download'>\n\t    <NOEMBED>\n            </NOEMBED>\n\t</EMBED>\n    </COMMENT>\n</OBJECT>\n  </SPAN>\n  </BODY>\n</HTML>\n",
         "datamd5" : "6c93002d0a5366d270b289a8fa701f62",
         "datammh3" : -305243875,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS4766",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "kt.com",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "KORNET",
            "organization" : "Korea Telecom",
            "subnet" : "14.54.0.0/15"
         },
         "ip" : "14.55.74.210",
         "ipv6" : "false",
         "latitude" : "35.9445",
         "location" : "35.9445,126.9540",
         "longitude" : "126.9540",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Korea Telecom",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "14.55.74.0/23",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 45.5.196.17:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:55 UTC

    • IP
      45.5.196.17
      Network
      45.5.196.0/22
      Domain(s)
      net.br
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://45.5.196.17:5800/ 404

      Reverse DNS
      45-5-196-17.rpnet.net.br
      ASN
      AS266105
      Organization
      RPNET INFORMATICA LTDA - ME
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      HTTP Component(s)
      expressjs Express
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      e5363e8be29c7e634afdfd891f6702e3
      HTTP Header MD5
      463a5b954677eec796ff848aed6651ab
      HTTP Body MD5
      093206c775ab5f7ce396f1b67fcae5bb
    • HTTP/1.1 404 Not Found
      X-Powered-By: Express
      Access-Control-Allow-Origin: *
      Content-Type: application/json; charset=utf-8
      Content-Length: 63
      ETag: W/"3f-GR0G8sZfNVmVbqqGkyrPOefU7Ys"
      Date: Thu, 21 Nov 2024 10:25:55 GMT
      Connection: close
      
      {"statusCode":404,"message":"Cannot GET /","error":"Not Found"}
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:55.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "093206c775ab5f7ce396f1b67fcae5bb",
               "bodymmh3" : 1127349807,
               "component" : [
                  {
                     "product" : "Express",
                     "productvendor" : "expressjs"
                  }
               ],
               "header" : [
                  {
                     "name" : "ETag",
                     "value" : "W/\"3f-GR0G8sZfNVmVbqqGkyrPOefU7Ys"
                  }
               ],
               "headermd5" : "463a5b954677eec796ff848aed6651ab",
               "headermmh3" : -872293055
            },
            "length" : 309
         },
         "asn" : "AS266105",
         "city" : "Cascavel",
         "country" : "BR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 404 Not Found\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 63\r\nETag: W/\"3f-GR0G8sZfNVmVbqqGkyrPOefU7Ys\"\r\nDate: Thu, 21 Nov 2024 10:25:55 GMT\r\nConnection: close\r\n\r\n{\"statusCode\":404,\"message\":\"Cannot GET /\",\"error\":\"Not Found\"}",
         "datamd5" : "e5363e8be29c7e634afdfd891f6702e3",
         "datammh3" : 321368565,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "net.br"
         ],
         "geolocus" : {
            "asn" : "AS266105",
            "continent" : "SA",
            "continentname" : "South America",
            "country" : "BR",
            "countryname" : "Brazil",
            "domain" : [
               "cert.br",
               "net.br"
            ],
            "isineu" : "false",
            "latitude" : "-14.235004",
            "location" : "-14.235004,-51.92528",
            "longitude" : "-51.92528",
            "netname" : "16.455.902/0001-52",
            "organization" : "RPNET INFORMATICA LTDA - ME",
            "subnet" : "45.5.196.0/22"
         },
         "host" : [
            "45-5-196-17"
         ],
         "hostname" : [
            "45-5-196-17.rpnet.net.br"
         ],
         "ip" : "45.5.196.17",
         "ipv6" : "false",
         "latitude" : "-24.9651",
         "location" : "-24.9651,-53.4528",
         "longitude" : "-53.4528",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "RPNET INFORMATICA LTDA - ME",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Not Found",
         "reverse" : [
            "45-5-196-17.rpnet.net.br"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 404,
         "subdomains" : [
            "rpnet.net.br"
         ],
         "subnet" : "45.5.196.0/22",
         "tld" : [
            "br"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 211.169.207.23:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:52 UTC

    • IP
      211.169.207.23
      Network
      211.169.192.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://211.169.207.23:5800/ 200

      HTTP Title
      [pc023]
      ASN
      AS3786
      Organization
      LG DACOM Corporation
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      60217c214b70eba22680fd207ea0a554
      HTTP Header MD5
      5f57c09195c67827a2bf23194539d5c6
      HTTP Body MD5
      09ad188797f8ba6589b4e5ba8c25588d
    • HTTP/1.0 200 OK
      
      <HTML>
        <HEAD><TITLE> [pc023] </TITLE></HEAD>
        <BODY>
        <SPAN style='position: absolute; top:0px;left:0px'>
      <OBJECT 
          ID='VncViewer'
          classid = 'clsid:8AD9C840-044E-11D1-B3E9-00805F499D93'
          codebase = 'http://java.sun.com/update/1.4.2/jinstall-1_4-windows-i586.cab#Version=1,4,0,0'
          WIDTH = 1920 HEIGHT = 1112 >
          <PARAM NAME = CODE VALUE = VncViewer.class >
          <PARAM NAME = ARCHIVE VALUE = VncViewer.jar >
          <PARAM NAME = 'type' VALUE = 'application/x-java-applet;version=1.4'>
          <PARAM NAME = 'scriptable' VALUE = 'false'>
          <PARAM NAME = PORT VALUE=10348>
          <PARAM NAME = ENCODING VALUE=Tight>
          <PARAM NAME = 'Open New Window' VALUE='Yes'>
          <COMMENT>
      	<EMBED 
                  type = 'application/x-java-applet;version=1.4' \
                  CODE = VncViewer.class \
                  ARCHIVE = VncViewer.jar \
                  WIDTH = 1920 \
                  HEIGHT = 1112 \
                  PORT =10348 \
                  ENCODING =Tight \
      	    scriptable = false \
      	    pluginspage ='http://java.sun.com/products/plugin/index.html#download'>
      	    <NOEMBED>
                  </NOEMBED>
      	</EMBED>
          </COMMENT>
      </OBJECT>
        </SPAN>
        </BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:52.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "sun.com"
               ],
               "hostname" : [
                  "java.sun.com"
               ],
               "url" : [
                  "http://java.sun.com/products/plugin/index.html",
                  "http://java.sun.com/update/1.4.2/jinstall-1_4-windows-i586.cab"
               ]
            },
            "http" : {
               "bodymd5" : "09ad188797f8ba6589b4e5ba8c25588d",
               "bodymmh3" : 1380395032,
               "headermd5" : "5f57c09195c67827a2bf23194539d5c6",
               "headermmh3" : -1031289583,
               "title" : "[pc023]"
            },
            "length" : 1163
         },
         "asn" : "AS3786",
         "city" : "Gunpo",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\n\n<HTML>\n  <HEAD><TITLE> [pc023] </TITLE></HEAD>\n  <BODY>\n  <SPAN style='position: absolute; top:0px;left:0px'>\n<OBJECT \n    ID='VncViewer'\n    classid = 'clsid:8AD9C840-044E-11D1-B3E9-00805F499D93'\n    codebase = 'http://java.sun.com/update/1.4.2/jinstall-1_4-windows-i586.cab#Version=1,4,0,0'\n    WIDTH = 1920 HEIGHT = 1112 >\n    <PARAM NAME = CODE VALUE = VncViewer.class >\n    <PARAM NAME = ARCHIVE VALUE = VncViewer.jar >\n    <PARAM NAME = 'type' VALUE = 'application/x-java-applet;version=1.4'>\n    <PARAM NAME = 'scriptable' VALUE = 'false'>\n    <PARAM NAME = PORT VALUE=10348>\n    <PARAM NAME = ENCODING VALUE=Tight>\n    <PARAM NAME = 'Open New Window' VALUE='Yes'>\n    <COMMENT>\n\t<EMBED \n            type = 'application/x-java-applet;version=1.4' \\\n            CODE = VncViewer.class \\\n            ARCHIVE = VncViewer.jar \\\n            WIDTH = 1920 \\\n            HEIGHT = 1112 \\\n            PORT =10348 \\\n            ENCODING =Tight \\\n\t    scriptable = false \\\n\t    pluginspage ='http://java.sun.com/products/plugin/index.html#download'>\n\t    <NOEMBED>\n            </NOEMBED>\n\t</EMBED>\n    </COMMENT>\n</OBJECT>\n  </SPAN>\n  </BODY>\n</HTML>\n",
         "datamd5" : "60217c214b70eba22680fd207ea0a554",
         "datammh3" : -1539380238,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS3786",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "lguplus.co.kr",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "BORANET-NET-211-169",
            "organization" : "DACOM Corp.",
            "subnet" : "211.169.192.0/20"
         },
         "ip" : "211.169.207.23",
         "ipv6" : "false",
         "latitude" : "37.3666",
         "location" : "37.3666,126.9512",
         "longitude" : "126.9512",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LG DACOM Corporation",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "211.169.192.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 147.32.106.11:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:32 UTC

    • IP
      147.32.106.11
      Network
      147.32.0.0/15
      Device

      <enterprise field>: device.class

      Operating System
      FreeBSD FreeBSD
      URL

      http://147.32.106.11:5800/ 200

      HTTP Title
      TightVNC desktop [utvs-recepce]
      ASN
      AS2852
      Organization
      CESNET z.s.p.o.
      Protocol
      http
      Source
      datascan
    • Operating System
      FreeBSD FreeBSD
      HTTP Component(s)
      TightVNC TightVNC
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      238f746fae80622ef6d068898962b4e6
      HTTP Header MD5
      5f57c09195c67827a2bf23194539d5c6
      HTTP Body MD5
      bf97cfca06c930364dcc0d4d0503134b
    • HTTP/1.0 200 OK
      
      <HTML>
        <HEAD><TITLE>TightVNC desktop [utvs-recepce]</TITLE></HEAD>
        <BODY>
          <APPLET ARCHIVE="tightvnc-jviewer.jar" CODE="com.glavsoft.viewer.Viewer" WIDTH=1 HEIGHT=1>
            <PARAM NAME="PORT" VALUE="5900">
            <PARAM NAME="OpenNewWindow" VALUE="YES">
      
          </APPLET><BR>
          <A HREF="http://www.tightvnc.com/">www.TightVNC.com</A>
        </BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:32.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "tightvnc.com"
               ],
               "hostname" : [
                  "www.tightvnc.com"
               ],
               "url" : [
                  "http://www.tightvnc.com/"
               ]
            },
            "http" : {
               "bodymd5" : "bf97cfca06c930364dcc0d4d0503134b",
               "bodymmh3" : -1738391253,
               "component" : [
                  {
                     "product" : "TightVNC",
                     "productvendor" : "TightVNC"
                  }
               ],
               "headermd5" : "5f57c09195c67827a2bf23194539d5c6",
               "headermmh3" : -1031289583,
               "title" : "TightVNC desktop [utvs-recepce]"
            },
            "length" : 375
         },
         "asn" : "AS2852",
         "city" : "Prague",
         "country" : "CZ",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\n\r\n<HTML>\n  <HEAD><TITLE>TightVNC desktop [utvs-recepce]</TITLE></HEAD>\n  <BODY>\n    <APPLET ARCHIVE=\"tightvnc-jviewer.jar\" CODE=\"com.glavsoft.viewer.Viewer\" WIDTH=1 HEIGHT=1>\n      <PARAM NAME=\"PORT\" VALUE=\"5900\">\n      <PARAM NAME=\"OpenNewWindow\" VALUE=\"YES\">\n\n    </APPLET><BR>\n    <A HREF=\"http://www.tightvnc.com/\">www.TightVNC.com</A>\n  </BODY>\n</HTML>\n",
         "datamd5" : "238f746fae80622ef6d068898962b4e6",
         "datammh3" : 546010986,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS2852",
            "continent" : "EU",
            "continentname" : "Europe",
            "country" : "CZ",
            "countryname" : "Czech Republic",
            "domain" : [
               "cvut.cz"
            ],
            "isineu" : "true",
            "latitude" : "49.817492",
            "location" : "49.817492,15.472962",
            "longitude" : "15.472962",
            "netname" : "CVUT-TCZ",
            "organization" : "Ceske vysoke uceni technicke v Praze",
            "subnet" : "147.32.0.0/15"
         },
         "ip" : "147.32.106.11",
         "ipv6" : "false",
         "latitude" : "50.1242",
         "location" : "50.1242,14.3980",
         "longitude" : "14.3980",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "CESNET z.s.p.o.",
         "os" : "FreeBSD",
         "osvendor" : "FreeBSD",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "147.32.0.0/15",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 210.92.172.204:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:32 UTC

    • IP
      210.92.172.204
      Network
      210.92.128.0/18
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://210.92.172.204:5800/ 200

      HTTP Title
      TightVNC desktop [pc-074]
      ASN
      AS3786
      Organization
      LG DACOM Corporation
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      HTTP Component(s)
      TightVNC TightVNC
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a3ddce6da191155e6e40bba7c8a4dab3
      HTTP Header MD5
      5f57c09195c67827a2bf23194539d5c6
      HTTP Body MD5
      c69397ee0b91cfce78231e6654fdcad8
    • HTTP/1.0 200 OK
      
      <HTML>
        <HEAD><TITLE>TightVNC desktop [pc-074]</TITLE></HEAD>
        <BODY>
          <APPLET ARCHIVE="tightvnc-jviewer.jar" CODE="com.glavsoft.viewer.Viewer" WIDTH=1 HEIGHT=1>
            <PARAM NAME="PORT" VALUE="49690">
            <PARAM NAME="OpenNewWindow" VALUE="YES">
      
          </APPLET><BR>
          <A HREF="http://www.tightvnc.com/">www.TightVNC.com</A>
        </BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:32.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "tightvnc.com"
               ],
               "hostname" : [
                  "www.tightvnc.com"
               ],
               "url" : [
                  "http://www.tightvnc.com/"
               ]
            },
            "http" : {
               "bodymd5" : "c69397ee0b91cfce78231e6654fdcad8",
               "bodymmh3" : -1167641905,
               "component" : [
                  {
                     "product" : "TightVNC",
                     "productvendor" : "TightVNC"
                  }
               ],
               "headermd5" : "5f57c09195c67827a2bf23194539d5c6",
               "headermmh3" : -1031289583,
               "title" : "TightVNC desktop [pc-074]"
            },
            "length" : 370
         },
         "asn" : "AS3786",
         "city" : "Goyang-si",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\n\r\n<HTML>\n  <HEAD><TITLE>TightVNC desktop [pc-074]</TITLE></HEAD>\n  <BODY>\n    <APPLET ARCHIVE=\"tightvnc-jviewer.jar\" CODE=\"com.glavsoft.viewer.Viewer\" WIDTH=1 HEIGHT=1>\n      <PARAM NAME=\"PORT\" VALUE=\"49690\">\n      <PARAM NAME=\"OpenNewWindow\" VALUE=\"YES\">\n\n    </APPLET><BR>\n    <A HREF=\"http://www.tightvnc.com/\">www.TightVNC.com</A>\n  </BODY>\n</HTML>\n",
         "datamd5" : "a3ddce6da191155e6e40bba7c8a4dab3",
         "datammh3" : -506922595,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS3786",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "bora.net",
               "lguplus.co.kr",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "ELIMNET4025102D",
            "organization" : "ELIMNET",
            "subnet" : "210.92.128.0/18"
         },
         "ip" : "210.92.172.204",
         "ipv6" : "false",
         "latitude" : "37.6400",
         "location" : "37.6400,126.7951",
         "longitude" : "126.7951",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LG DACOM Corporation",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "210.92.128.0/18",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 61.38.22.33:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:32 UTC

    • IP
      61.38.22.33
      Network
      61.38.20.0/22
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://61.38.22.33:5800/ 200

      HTTP Title
      TightVNC desktop [pc-033]
      ASN
      AS3786
      Organization
      LG DACOM Corporation
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      HTTP Component(s)
      TightVNC TightVNC
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      97ce196cfc60faa0e3ca9a03475778ae
      HTTP Header MD5
      5f57c09195c67827a2bf23194539d5c6
      HTTP Body MD5
      fd0cda0236834741cb708431b7f1b689
    • HTTP/1.0 200 OK
      
      <HTML>
        <HEAD><TITLE>TightVNC desktop [pc-033]</TITLE></HEAD>
        <BODY>
          <APPLET ARCHIVE="tightvnc-jviewer.jar" CODE="com.glavsoft.viewer.Viewer" WIDTH=1 HEIGHT=1>
            <PARAM NAME="PORT" VALUE="49897">
            <PARAM NAME="OpenNewWindow" VALUE="YES">
      
          </APPLET><BR>
          <A HREF="http://www.tightvnc.com/">www.TightVNC.com</A>
        </BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:32.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "tightvnc.com"
               ],
               "hostname" : [
                  "www.tightvnc.com"
               ],
               "url" : [
                  "http://www.tightvnc.com/"
               ]
            },
            "http" : {
               "bodymd5" : "fd0cda0236834741cb708431b7f1b689",
               "bodymmh3" : 612689618,
               "component" : [
                  {
                     "productvendor" : "TightVNC",
                     "product" : "TightVNC"
                  }
               ],
               "headermd5" : "5f57c09195c67827a2bf23194539d5c6",
               "headermmh3" : -1031289583,
               "title" : "TightVNC desktop [pc-033]"
            },
            "length" : 370
         },
         "asn" : "AS3786",
         "city" : "Gimhae",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\r\n\r\n<HTML>\n  <HEAD><TITLE>TightVNC desktop [pc-033]</TITLE></HEAD>\n  <BODY>\n    <APPLET ARCHIVE=\"tightvnc-jviewer.jar\" CODE=\"com.glavsoft.viewer.Viewer\" WIDTH=1 HEIGHT=1>\n      <PARAM NAME=\"PORT\" VALUE=\"49897\">\n      <PARAM NAME=\"OpenNewWindow\" VALUE=\"YES\">\n\n    </APPLET><BR>\n    <A HREF=\"http://www.tightvnc.com/\">www.TightVNC.com</A>\n  </BODY>\n</HTML>\n",
         "datamd5" : "97ce196cfc60faa0e3ca9a03475778ae",
         "datammh3" : 1685451643,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS3786",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "lguplus.co.kr",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "BORANET",
            "organization" : "LG DACOM Corporation",
            "subnet" : "61.38.20.0/22"
         },
         "ip" : "61.38.22.33",
         "ipv6" : "false",
         "latitude" : "35.2342",
         "location" : "35.2342,128.8777",
         "longitude" : "128.8777",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LG DACOM Corporation",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "61.38.20.0/22",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 118.128.70.70:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:28 UTC

    • IP
      118.128.70.70
      Network
      118.128.64.0/20
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://118.128.70.70:5800/ 200

      HTTP Title
      [giant-70]
      ASN
      AS3786
      Organization
      LG DACOM Corporation
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      c7c3fd6d7c232b81549521c5fda3a671
      HTTP Header MD5
      5f57c09195c67827a2bf23194539d5c6
      HTTP Body MD5
      2396d9b93b0396b23da08bfc6b9d07d8
    • HTTP/1.0 200 OK
      
      <HTML>
        <HEAD><TITLE> [giant-70] </TITLE></HEAD>
        <BODY>
        <SPAN style='position: absolute; top:0px;left:0px'>
      <OBJECT 
          ID='VncViewer'
          classid = 'clsid:8AD9C840-044E-11D1-B3E9-00805F499D93'
          codebase = 'http://java.sun.com/update/1.4.2/jinstall-1_4-windows-i586.cab#Version=1,4,0,0'
          WIDTH = 1920 HEIGHT = 1112 >
          <PARAM NAME = CODE VALUE = VncViewer.class >
          <PARAM NAME = ARCHIVE VALUE = VncViewer.jar >
          <PARAM NAME = 'type' VALUE = 'application/x-java-applet;version=1.4'>
          <PARAM NAME = 'scriptable' VALUE = 'false'>
          <PARAM NAME = PORT VALUE=10348>
          <PARAM NAME = ENCODING VALUE=Tight>
          <PARAM NAME = 'Open New Window' VALUE='Yes'>
          <COMMENT>
      	<EMBED 
                  type = 'application/x-java-applet;version=1.4' \
                  CODE = VncViewer.class \
                  ARCHIVE = VncViewer.jar \
                  WIDTH = 1920 \
                  HEIGHT = 1112 \
                  PORT =10348 \
                  ENCODING =Tight \
      	    scriptable = false \
      	    pluginspage ='http://java.sun.com/products/plugin/index.html#download'>
      	    <NOEMBED>
                  </NOEMBED>
      	</EMBED>
          </COMMENT>
      </OBJECT>
        </SPAN>
        </BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:28.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "sun.com"
               ],
               "hostname" : [
                  "java.sun.com"
               ],
               "url" : [
                  "http://java.sun.com/products/plugin/index.html",
                  "http://java.sun.com/update/1.4.2/jinstall-1_4-windows-i586.cab"
               ]
            },
            "http" : {
               "bodymd5" : "2396d9b93b0396b23da08bfc6b9d07d8",
               "bodymmh3" : -547414874,
               "headermd5" : "5f57c09195c67827a2bf23194539d5c6",
               "headermmh3" : -1031289583,
               "title" : "[giant-70]"
            },
            "length" : 1166
         },
         "asn" : "AS3786",
         "city" : "Busan",
         "country" : "KR",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\n\n<HTML>\n  <HEAD><TITLE> [giant-70] </TITLE></HEAD>\n  <BODY>\n  <SPAN style='position: absolute; top:0px;left:0px'>\n<OBJECT \n    ID='VncViewer'\n    classid = 'clsid:8AD9C840-044E-11D1-B3E9-00805F499D93'\n    codebase = 'http://java.sun.com/update/1.4.2/jinstall-1_4-windows-i586.cab#Version=1,4,0,0'\n    WIDTH = 1920 HEIGHT = 1112 >\n    <PARAM NAME = CODE VALUE = VncViewer.class >\n    <PARAM NAME = ARCHIVE VALUE = VncViewer.jar >\n    <PARAM NAME = 'type' VALUE = 'application/x-java-applet;version=1.4'>\n    <PARAM NAME = 'scriptable' VALUE = 'false'>\n    <PARAM NAME = PORT VALUE=10348>\n    <PARAM NAME = ENCODING VALUE=Tight>\n    <PARAM NAME = 'Open New Window' VALUE='Yes'>\n    <COMMENT>\n\t<EMBED \n            type = 'application/x-java-applet;version=1.4' \\\n            CODE = VncViewer.class \\\n            ARCHIVE = VncViewer.jar \\\n            WIDTH = 1920 \\\n            HEIGHT = 1112 \\\n            PORT =10348 \\\n            ENCODING =Tight \\\n\t    scriptable = false \\\n\t    pluginspage ='http://java.sun.com/products/plugin/index.html#download'>\n\t    <NOEMBED>\n            </NOEMBED>\n\t</EMBED>\n    </COMMENT>\n</OBJECT>\n  </SPAN>\n  </BODY>\n</HTML>\n",
         "datamd5" : "c7c3fd6d7c232b81549521c5fda3a671",
         "datammh3" : 1593919651,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "geolocus" : {
            "asn" : "AS3786",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "KR",
            "countryname" : "South Korea",
            "domain" : [
               "lguplus.co.kr",
               "nic.or.kr"
            ],
            "isineu" : "false",
            "latitude" : "35.907757",
            "location" : "35.907757,127.766922",
            "longitude" : "127.766922",
            "netname" : "BORANET",
            "organization" : "LG DACOM Corporation",
            "subnet" : "118.128.64.0/18"
         },
         "ip" : "118.128.70.70",
         "ipv6" : "false",
         "latitude" : "35.1025",
         "location" : "35.1025,129.0394",
         "longitude" : "129.0394",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "LG DACOM Corporation",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "118.128.64.0/20",
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 134.90.241.2:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:28 UTC

    • IP
      134.90.241.2
      Network
      134.90.240.0/21
      Domain(s)
      novaquadri.it
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://134.90.241.2:5800/ 301

      Reverse DNS
      host-134-90-241-2.net.novaquadri.it
      ASN
      AS198380
      Organization
      Blunova S.r.l.
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      a837f55d84a0d096ad68958908f4cbdf
      HTTP Header MD5
      8e517c58bdb803cbc43bfc1199163bff
      HTTP Body MD5
      d41d8cd98f00b204e9800998ecf8427e
    • HTTP/1.1 301 Moved Permanently
      location: https://<ip>:5800/
      
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:28.000Z",
         "app" : {
            "http" : {
               "bodymd5" : "d41d8cd98f00b204e9800998ecf8427e",
               "bodymmh3" : -1,
               "headermd5" : "8e517c58bdb803cbc43bfc1199163bff",
               "headermmh3" : -1764525710
            },
            "length" : 64
         },
         "asn" : "AS198380",
         "city" : "Ragusa",
         "country" : "IT",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.1 301 Moved Permanently\r\nlocation: https://<ip>:5800/\r\n\r\n",
         "datamd5" : "a837f55d84a0d096ad68958908f4cbdf",
         "datammh3" : -952321274,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "novaquadri.it"
         ],
         "host" : [
            "host-134-90-241-2"
         ],
         "hostname" : [
            "host-134-90-241-2.net.novaquadri.it"
         ],
         "ip" : "134.90.241.2",
         "ipv6" : "false",
         "latitude" : "36.9232",
         "location" : "36.9232,14.7278",
         "longitude" : "14.7278",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Blunova S.r.l.",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.1",
         "reason" : "Moved Permanently",
         "reverse" : [
            "host-134-90-241-2.net.novaquadri.it"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 301,
         "subdomains" : [
            "net.novaquadri.it"
         ],
         "subnet" : "134.90.240.0/21",
         "tld" : [
            "it"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }
      
  • 120.114.78.92:5800 (tcp/http) - last seen on 2024-11-21 at 10:25:27 UTC

    • IP
      120.114.78.92
      Network
      120.112.0.0/13
      Domain(s)
      ksu.edu.tw
      Device

      <enterprise field>: device.class

      Operating System
      Microsoft Windows
      URL

      http://120.114.78.92:5800/ 200

      HTTP Title
      TightVNC desktop [pc14]
      Reverse DNS
      120-114-78-92.ksu.edu.tw
      ASN
      AS1659
      Organization
      Taiwan Academic Network TANet Information Center
      Protocol
      http
      Source
      datascan
    • Operating System
      Microsoft Windows
      HTTP Component(s)
      TightVNC TightVNC
      CPE(s)

      <enterprise field>: cpe

    • This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

    • Data MD5
      d9bba1443505a36f8d81edcf4ac82564
      HTTP Header MD5
      5f57c09195c67827a2bf23194539d5c6
      HTTP Body MD5
      a5f1220cc46ff35018f6c15c0cb89140
    • HTTP/1.0 200 OK
      
      <HTML>
        <HEAD><TITLE>TightVNC desktop [pc14]</TITLE></HEAD>
        <BODY>
          <APPLET CODE=VncViewer.class ARCHIVE=VncViewer.jar WIDTH=0 HEIGHT=32>
            <PARAM NAME="PORT" VALUE="5900">
          </APPLET><BR>
          <A HREF="http://www.tightvnc.com/">www.TightVNC.com</A>
        </BODY>
      </HTML>
      
    • {
         "@category" : "datascan",
         "@timestamp" : "2024-11-21T10:25:27.000Z",
         "app" : {
            "extract" : {
               "domain" : [
                  "tightvnc.com"
               ],
               "hostname" : [
                  "www.tightvnc.com"
               ],
               "url" : [
                  "http://www.tightvnc.com/"
               ]
            },
            "http" : {
               "bodymd5" : "a5f1220cc46ff35018f6c15c0cb89140",
               "bodymmh3" : -1578878296,
               "component" : [
                  {
                     "product" : "TightVNC",
                     "productvendor" : "TightVNC"
                  }
               ],
               "headermd5" : "5f57c09195c67827a2bf23194539d5c6",
               "headermmh3" : -1031289583,
               "title" : "TightVNC desktop [pc14]"
            },
            "length" : 296
         },
         "asn" : "AS1659",
         "city" : "Tainan City",
         "country" : "TW",
         "cpe" : "<enterprise field>: cpe",
         "cpecount" : "<enterprise field>: cpecount",
         "data" : "HTTP/1.0 200 OK\n\n<HTML>\n  <HEAD><TITLE>TightVNC desktop [pc14]</TITLE></HEAD>\n  <BODY>\n    <APPLET CODE=VncViewer.class ARCHIVE=VncViewer.jar WIDTH=0 HEIGHT=32>\n      <PARAM NAME=\"PORT\" VALUE=\"5900\">\n    </APPLET><BR>\n    <A HREF=\"http://www.tightvnc.com/\">www.TightVNC.com</A>\n  </BODY>\n</HTML>\n",
         "datamd5" : "d9bba1443505a36f8d81edcf4ac82564",
         "datammh3" : -794178169,
         "device" : {
            "class" : "<enterprise field>: device.class"
         },
         "domain" : [
            "ksu.edu.tw"
         ],
         "geolocus" : {
            "asn" : "AS1659",
            "continent" : "AS",
            "continentname" : "Asia",
            "country" : "TW",
            "countryname" : "Taiwan",
            "domain" : [
               "ksu.edu.tw",
               "moe.gov.tw",
               "twnic.net",
               "twnic.net.tw"
            ],
            "isineu" : "false",
            "latitude" : "23.69781",
            "location" : "23.69781,120.960515",
            "longitude" : "120.960515",
            "netname" : "TANET-NET",
            "organization" : "Ministry of Education Computer Center",
            "subnet" : "120.114.78.0/24"
         },
         "host" : [
            "120-114-78-92"
         ],
         "hostname" : [
            "120-114-78-92.ksu.edu.tw"
         ],
         "ip" : "120.114.78.92",
         "ipv6" : "false",
         "latitude" : "22.9917",
         "location" : "22.9917,120.2148",
         "longitude" : "120.2148",
         "node" : {
            "country" : "<enterprise field>: node.country",
            "groupid" : "<enterprise field>: node.groupid",
            "id" : "<enterprise field>: node.id",
            "physicalcountry" : "<enterprise field>: node.physicalcountry"
         },
         "organization" : "Taiwan Academic Network TANet Information Center",
         "os" : "Windows",
         "osvendor" : "Microsoft",
         "port" : 5800,
         "protocol" : "http",
         "protocolversion" : "1.0",
         "reason" : "OK",
         "reverse" : [
            "120-114-78-92.ksu.edu.tw"
         ],
         "seen_date" : "2024-11-21",
         "source" : "datascan",
         "status" : 200,
         "subnet" : "120.112.0.0/13",
         "tld" : [
            "edu.tw"
         ],
         "tls" : "false",
         "transport" : "tcp",
         "url" : "/"
      }