Cyber Defense Search Engine

IP
210.123.124.121

Network
210.123.112.0/20

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

ASN
AS4766

Organization
Korea Telecom

Protocol
vnc

Source
datascan
Operating System
Microsoft Windows

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8b03f7104e89ee4a73adec68629f866d
```
RFB 003.008
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:53:24.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS4766",
   "city" : "Gangnam-gu",
   "country" : "KR",
   "data" : "RFB 003.008\n",
   "datamd5" : "8b03f7104e89ee4a73adec68629f866d",
   "datammh3" : -1800413357,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "iscon.co.kr",
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "210.123.112.0/20"
   },
   "ip" : "210.123.124.121",
   "ipv6" : "false",
   "latitude" : "37.4838",
   "location" : "37.4838,127.0501",
   "longitude" : "127.0501",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 5900,
   "protocol" : "vnc",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "210.123.112.0/20",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
210.179.66.71

Network
210.179.64.0/20

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

ASN
AS4766

Organization
Korea Telecom

Protocol
vnc

Source
datascan
Operating System
Microsoft Windows

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8b03f7104e89ee4a73adec68629f866d
```
RFB 003.008
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:52:23.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS4766",
   "city" : "Goyang-si",
   "country" : "KR",
   "data" : "RFB 003.008\n",
   "datamd5" : "8b03f7104e89ee4a73adec68629f866d",
   "datammh3" : -1800413357,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "210.179.64.0/20"
   },
   "ip" : "210.179.66.71",
   "ipv6" : "false",
   "latitude" : "37.6400",
   "location" : "37.6400,126.7951",
   "longitude" : "126.7951",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 5900,
   "protocol" : "vnc",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "210.179.64.0/20",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
211.217.196.135

Network
211.217.196.0/22

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

URL

http://211.217.196.135:5900/ 200

HTTP Title
WS server test page

ASN
AS4766

Organization
Korea Telecom

Protocol
http

Source
datascan
Operating System
Linux Linux Kernel

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
994e4e66247b0588af7303d1905bb770

HTTP Header MD5
aa0d2d5229be6fdb425dd3a6e3ff5f7b

HTTP Body MD5
a70c12efba3c997b9b9648b509454501

HTTP/1.1 200 OK
Server: APS
Content-Type: text/html
Cache-Control: no-cache, no-store, must-revalidate, private
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: default-src 'self'; connect-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; child-src 'self'; object-src 'none'
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
Content-Length: 3585

<!DOCTYPE html>
<html lang="en">
<head>
  <title>WS server test page</title>
  <meta charset=utf-8 http-equiv="Content-Language" content="en"/>
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />

  <style type="text/css">
	div.title { font-size:18pt; font: Arial; font-weight:normal; text-align:center; color:#000000; }
	.browser { font-size:18pt; font: Arial; font-weight:normal; text-align:center; color:#ffff00; vertical-align:middle; text-align:center; background:#d0b070; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px;}
	.group2 { width:600px; vertical-align:middle; text-align:center; background:#f0f0e0; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px; }
	.explain { vertical-align:middle; text-align:center; background:#f0f0c0; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px; color:#404000; }
	.content { vertical-align:top; text-align:center; background:#fffff0; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px; }
	.canvas { vertical-align:top; text-align:center; background:#efefd0; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px; }
 </style>
    <script type="text/javascript">

    var origin = window.location.origin;
    console.log("origin:: "+origin);

    window.onload = function()
    {
        console.log('WebSocket servers index.html: onload function entered');
		if (document.location.search.indexOf("nopop=1") > 0)
		{
			var x = document.getElementById("CloseButton");
			if (x) { x.style.display = "none"; }
			var x = document.getElementById("CloseText");
			if (x) { x.style.display = "none"; }
			var x = document.getElementById("MovingText");
			if (x) { x.style.display = "block"; }
		}

		moveAlong();

        function receiver(event) 
        {
            console.log('WebSocket servers index.html: reciever event:'+ event.data + "  "+event.origin);
//            if (origin.indexOf(event.origin)==0)
//            {
                event.source.postMessage('Hello', event.origin);
                window.close();
//            }i
        }

        window.addEventListener("message",receiver);
        console.log('WebSocket servers index.html:: performed addEventListener');
    }

    function closeThis(){
        console.log('WebSocket servers index.html:: closeThis');
        self.close();
    }

	function moveAlong(){
		var SearchParameters = document.location.search;
		var viewerURL = "";
		console.log( SearchParameters );
		if ( SearchParameters.indexOf("nopop=1") > 0 )
		{
			var nstart = SearchParameters.indexOf("viewerURL=");
			if (nstart >= 0)
			{
				var nend   = SearchParameters.indexOf("&", nstart);
				if ( nend <= 0 ) nend = SearchParameters.length;
				viewerURL = SearchParameters.slice(nstart+10, nend);
				var newURL = unescape(viewerURL) + SearchParameters;

				window.location.href = newURL;
			}
		}
	}

  </script>
</head>

<body>
    <article>
        <table>
            <tr id="CloseText"><td>
                You have a SSL certificate for remote presence port. You should close this window now.
            </td></tr>
            <tr id="MovingText" style="display: none;" ><td>
                You are now being redirected to the remote presence viewer.
            </td></tr>
            <tr id="CloseButton"><td align="middle">
                <input id="btnClose" type="button" onclick="closeThis()" value="Close" />
            </td></tr>
        </table>
    </article>
</body>
</html>

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:41:49.000Z",
   "app" : {
      "http" : {
         "bodymd5" : "a70c12efba3c997b9b9648b509454501",
         "bodymmh3" : 1266841730,
         "headermd5" : "aa0d2d5229be6fdb425dd3a6e3ff5f7b",
         "headermmh3" : 25065219,
         "title" : "WS server test page"
      },
      "length" : 4180
   },
   "asn" : "AS4766",
   "city" : "Goyang-si",
   "country" : "KR",
   "data" : "HTTP/1.1 200 OK\r\nServer: APS\r\nContent-Type: text/html\r\nCache-Control: no-cache, no-store, must-revalidate, private\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self'; connect-src *; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; child-src 'self'; object-src 'none'\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Permitted-Cross-Domain-Policies: none\r\nReferrer-Policy: no-referrer\r\nContent-Length: 3585\r\n\r\n<!DOCTYPE html>\n<html lang=\"en\">\n<head>\n  <title>WS server test page</title>\n  <meta charset=utf-8 http-equiv=\"Content-Language\" content=\"en\"/>\n  <meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-8\" />\n\n  <style type=\"text/css\">\n\tdiv.title { font-size:18pt; font: Arial; font-weight:normal; text-align:center; color:#000000; }\n\t.browser { font-size:18pt; font: Arial; font-weight:normal; text-align:center; color:#ffff00; vertical-align:middle; text-align:center; background:#d0b070; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px;}\n\t.group2 { width:600px; vertical-align:middle; text-align:center; background:#f0f0e0; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px; }\n\t.explain { vertical-align:middle; text-align:center; background:#f0f0c0; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px; color:#404000; }\n\t.content { vertical-align:top; text-align:center; background:#fffff0; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px; }\n\t.canvas { vertical-align:top; text-align:center; background:#efefd0; padding:12px; -webkit-border-radius:10px; -moz-border-radius:10px; border-radius:10px; }\n </style>\n    <script type=\"text/javascript\">\n\n    var origin = window.location.origin;\n    console.log(\"origin:: \"+origin);\n\n    window.onload = function()\n    {\n        console.log('WebSocket servers index.html: onload function entered');\n\t\tif (document.location.search.indexOf(\"nopop=1\") > 0)\n\t\t{\n\t\t\tvar x = document.getElementById(\"CloseButton\");\n\t\t\tif (x) { x.style.display = \"none\"; }\n\t\t\tvar x = document.getElementById(\"CloseText\");\n\t\t\tif (x) { x.style.display = \"none\"; }\n\t\t\tvar x = document.getElementById(\"MovingText\");\n\t\t\tif (x) { x.style.display = \"block\"; }\n\t\t}\n\n\t\tmoveAlong();\n\n        function receiver(event) \n        {\n            console.log('WebSocket servers index.html: reciever event:'+ event.data + \"  \"+event.origin);\n//            if (origin.indexOf(event.origin)==0)\n//            {\n                event.source.postMessage('Hello', event.origin);\n                window.close();\n//            }i\n        }\n\n        window.addEventListener(\"message\",receiver);\n        console.log('WebSocket servers index.html:: performed addEventListener');\n    }\n\n    function closeThis(){\n        console.log('WebSocket servers index.html:: closeThis');\n        self.close();\n    }\n\n\tfunction moveAlong(){\n\t\tvar SearchParameters = document.location.search;\n\t\tvar viewerURL = \"\";\n\t\tconsole.log( SearchParameters );\n\t\tif ( SearchParameters.indexOf(\"nopop=1\") > 0 )\n\t\t{\n\t\t\tvar nstart = SearchParameters.indexOf(\"viewerURL=\");\n\t\t\tif (nstart >= 0)\n\t\t\t{\n\t\t\t\tvar nend   = SearchParameters.indexOf(\"&\", nstart);\n\t\t\t\tif ( nend <= 0 ) nend = SearchParameters.length;\n\t\t\t\tviewerURL = SearchParameters.slice(nstart+10, nend);\n\t\t\t\tvar newURL = unescape(viewerURL) + SearchParameters;\n\n\t\t\t\twindow.location.href = newURL;\n\t\t\t}\n\t\t}\n\t}\n\n  </script>\n</head>\n\n<body>\n    <article>\n        <table>\n            <tr id=\"CloseText\"><td>\n                You have a SSL certificate for remote presence port. You should close this window now.\n            </td></tr>\n            <tr id=\"MovingText\" style=\"display: none;\" ><td>\n                You are now being redirected to the remote presence viewer.\n            </td></tr>\n            <tr id=\"CloseButton\"><td align=\"middle\">\n                <input id=\"btnClose\" type=\"button\" onclick=\"closeThis()\" value=\"Close\" />\n            </td></tr>\n        </table>\n    </article>\n</body>\n</html>\n",
   "datamd5" : "994e4e66247b0588af7303d1905bb770",
   "datammh3" : -1732394455,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "211.217.196.0/22"
   },
   "ip" : "211.217.196.135",
   "ipv6" : "false",
   "latitude" : "37.6468",
   "location" : "37.6468,126.8843",
   "longitude" : "126.8843",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 5900,
   "protocol" : "http",
   "protocolversion" : "1.1",
   "reason" : "OK",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "status" : 200,
   "subnet" : "211.217.196.0/22",
   "tls" : "false",
   "transport" : "tcp",
   "url" : "/"
}

IP
61.83.253.15

Network
61.83.240.0/20

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

ASN
AS4766

Organization
Korea Telecom

Protocol
vnc

Source
datascan
Operating System
Linux Linux Kernel

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8b03f7104e89ee4a73adec68629f866d
```
RFB 003.008
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:21:08.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS4766",
   "city" : "Seocho-gu",
   "country" : "KR",
   "data" : "RFB 003.008\n",
   "datamd5" : "8b03f7104e89ee4a73adec68629f866d",
   "datammh3" : -1800413357,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "61.83.240.0/20"
   },
   "ip" : "61.83.253.15",
   "ipv6" : "false",
   "latitude" : "37.4816",
   "location" : "37.4816,127.0464",
   "longitude" : "127.0464",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 5900,
   "protocol" : "vnc",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "61.83.240.0/20",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
39.17.1.64

Network
39.16.0.0/12

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

ASN
AS4766

Organization
Korea Telecom

Protocol
vnc

Source
datascan
Operating System
Microsoft Windows

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
54fb0706b9c6638090c8e47bb51262f3
```
RFB 004.001
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:20:41.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS4766",
   "city" : "Seoul",
   "country" : "KR",
   "data" : "RFB 004.001\n",
   "datamd5" : "54fb0706b9c6638090c8e47bb51262f3",
   "datammh3" : -1270016146,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "39.16.0.0/12"
   },
   "ip" : "39.17.1.64",
   "ipv6" : "false",
   "latitude" : "37.5794",
   "location" : "37.5794,126.9754",
   "longitude" : "126.9754",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 5900,
   "protocol" : "vnc",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "39.16.0.0/12",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
218.154.216.43

Network
218.154.192.0/18

Device

<enterprise field>: device.class

Operating System
Linux Linux Kernel

ASN
AS4766

Organization
Korea Telecom

Protocol
vnc

Source
datascan
Operating System
Linux Linux Kernel

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8b03f7104e89ee4a73adec68629f866d
```
RFB 003.008
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:19:02.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS4766",
   "city" : "Namhae-gun",
   "country" : "KR",
   "data" : "RFB 003.008\n",
   "datamd5" : "8b03f7104e89ee4a73adec68629f866d",
   "datammh3" : -1800413357,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "218.154.0.0/16"
   },
   "ip" : "218.154.216.43",
   "ipv6" : "false",
   "latitude" : "34.8341",
   "location" : "34.8341,127.8917",
   "longitude" : "127.8917",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Linux Kernel",
   "osvendor" : "Linux",
   "port" : 5900,
   "protocol" : "vnc",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "218.154.192.0/18",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
221.163.128.91

Network
221.163.128.0/17

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

ASN
AS4766

Organization
Korea Telecom

Protocol
vnc

Source
datascan
Operating System
Microsoft Windows

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8b03f7104e89ee4a73adec68629f866d
```
RFB 003.008
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:16:34.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS4766",
   "city" : "Gunpo",
   "country" : "KR",
   "data" : "RFB 003.008\n",
   "datamd5" : "8b03f7104e89ee4a73adec68629f866d",
   "datammh3" : -1800413357,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "221.163.128.0/17"
   },
   "ip" : "221.163.128.91",
   "ipv6" : "false",
   "latitude" : "37.3666",
   "location" : "37.3666,126.9512",
   "longitude" : "126.9512",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 5900,
   "protocol" : "vnc",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "221.163.128.0/17",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
211.106.83.93

Network
211.106.64.0/19

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

ASN
AS4766

Organization
Korea Telecom

Protocol
vnc

Source
datascan
Operating System
Microsoft Windows

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8b03f7104e89ee4a73adec68629f866d
```
RFB 003.008
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:16:02.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS4766",
   "city" : "Ulsan",
   "country" : "KR",
   "data" : "RFB 003.008\n",
   "datamd5" : "8b03f7104e89ee4a73adec68629f866d",
   "datammh3" : -1800413357,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "211.106.64.0/18"
   },
   "ip" : "211.106.83.93",
   "ipv6" : "false",
   "latitude" : "35.5335",
   "location" : "35.5335,129.3173",
   "longitude" : "129.3173",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 5900,
   "protocol" : "vnc",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "211.106.64.0/19",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
119.197.84.62

Network
119.197.80.0/21

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

ASN
AS4766

Organization
Korea Telecom

Protocol
vnc

Source
datascan
Operating System
Microsoft Windows

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
6e60270830ad7a9e96fa8ecc2c49394e
```
RFB 003.006
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:15:39.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS4766",
   "city" : "Seo-gu",
   "country" : "KR",
   "data" : "RFB 003.006\n",
   "datamd5" : "6e60270830ad7a9e96fa8ecc2c49394e",
   "datammh3" : 1032108497,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "119.197.64.0/19"
   },
   "ip" : "119.197.84.62",
   "ipv6" : "false",
   "latitude" : "37.6042",
   "location" : "37.6042,126.6729",
   "longitude" : "126.6729",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 5900,
   "protocol" : "vnc",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "119.197.80.0/21",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

IP
211.227.110.225

Network
211.227.0.0/17

Device

<enterprise field>: device.class

Operating System
Microsoft Windows

ASN
AS4766

Organization
Korea Telecom

Protocol
vnc

Source
datascan
Operating System
Microsoft Windows

This feature requires at least a "Lion View" to unlock. Go to our Pricing page for more.

Data MD5
8b03f7104e89ee4a73adec68629f866d
```
RFB 003.008
```

{
   "@category" : "datascan",
   "@timestamp" : "2024-11-07T05:15:20.000Z",
   "app" : {
      "length" : 12
   },
   "asn" : "AS4766",
   "city" : "Goyang-si",
   "country" : "KR",
   "data" : "RFB 003.008\n",
   "datamd5" : "8b03f7104e89ee4a73adec68629f866d",
   "datammh3" : -1800413357,
   "device" : {
      "class" : "<enterprise field>: device.class"
   },
   "geolocus" : {
      "asn" : "AS4766",
      "continent" : "AS",
      "continentname" : "Asia",
      "country" : "KR",
      "countryname" : "South Korea",
      "domain" : [
         "kt.com",
         "nic.or.kr"
      ],
      "isineu" : "false",
      "latitude" : "35.907757",
      "location" : "35.907757,127.766922",
      "longitude" : "127.766922",
      "netname" : "KORNET",
      "organization" : "Korea Telecom",
      "subnet" : "211.227.0.0/17"
   },
   "ip" : "211.227.110.225",
   "ipv6" : "false",
   "latitude" : "37.6400",
   "location" : "37.6400,126.7951",
   "longitude" : "126.7951",
   "node" : {
      "country" : "<enterprise field>: node.country",
      "groupid" : "<enterprise field>: node.groupid",
      "id" : "<enterprise field>: node.id",
      "physicalcountry" : "<enterprise field>: node.physicalcountry"
   },
   "organization" : "Korea Telecom",
   "os" : "Windows",
   "osvendor" : "Microsoft",
   "port" : 5900,
   "protocol" : "vnc",
   "seen_date" : "2024-11-07",
   "source" : "datascan",
   "subnet" : "211.227.0.0/17",
   "tag" : "<enterprise field>: tag",
   "tls" : "false",
   "transport" : "tcp"
}

Returning 10 result(s) out of 11,947 in 0.192 second(s)

210.123.124.121:5900 (tcp/vnc) - last seen on 2024-11-07 at 05:53:24 UTC

210.179.66.71:5900 (tcp/vnc) - last seen on 2024-11-07 at 05:52:23 UTC

211.217.196.135:5900 (tcp/http) - last seen on 2024-11-07 at 05:41:49 UTC

61.83.253.15:5900 (tcp/vnc) - last seen on 2024-11-07 at 05:21:08 UTC

39.17.1.64:5900 (tcp/vnc) - last seen on 2024-11-07 at 05:20:41 UTC

218.154.216.43:5900 (tcp/vnc) - last seen on 2024-11-07 at 05:19:02 UTC

221.163.128.91:5900 (tcp/vnc) - last seen on 2024-11-07 at 05:16:34 UTC

211.106.83.93:5900 (tcp/vnc) - last seen on 2024-11-07 at 05:16:02 UTC

119.197.84.62:5900 (tcp/vnc) - last seen on 2024-11-07 at 05:15:39 UTC

211.227.110.225:5900 (tcp/vnc) - last seen on 2024-11-07 at 05:15:20 UTC