GeneralInformation

Country	China
City	Zhangjiakou
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

15 17 21 22 23 24 25 26 37 43 49 70 79 101 102 104 110 111 113 119 122 135 143 175 179 195 211 221 264 311 389 427 443 444 465 502 503 515 548 554 593 636 666 771 789 801 873 886 992 1023 1080 1099 1153 1200 1234 1337 1366 1414 1443 1460 1515 1521 1604 1723 1801 1830 1922 1925 1926 1956 1962 1967 1971 1973 2002 2003 2008 2010 2058 2062 2066 2067 2070 2081 2083 2087 2101 2121 2154 2181 2222 2345 2375 2404 2455 2549 2560 2761 2762 3001 3050 3053 3055 3058 3062 3066 3082 3100 3117 3124 3146 3153 3155 3175 3183 3185 3260 3268 3299 3306 3310 3388 3390 3410 3551 3561 3780 3790 3841 3950 3951 3953 4000 4010 4022 4063 4064 4150 4155 4157 4242 4282 4321 4369 4434 4444 4459 4500 4506 4786 4840 4899 4911 4949 5001 5006 5007 5009 5010 5025 5080 5172 5201 5222 5267 5269 5432 5433 5435 5503 5596 5672 5858 5938 5984 5986 5992 6000 6001 6006 6080 6262 6264 6379 6543 6603 6633 6666 6667 6668 6697 7001 7005 7057 7071 7079 7086 7171 7218 7415 7434 7443 7445 7548 7634 7998 8002 8003 8006 8009 8011 8017 8030 8032 8053 8068 8081 8082 8083 8085 8087 8089 8092 8093 8098 8099 8102 8126 8139 8140 8172 8184 8237 8283 8291 8333 8383 8412 8422 8453 8500 8545 8554 8563 8584 8595 8666 8728 8766 8823 8834 8843 8845 8854 8855 8880 8887 8889 8890 8899 8993 9000 9001 9002 9015 9029 9031 9042 9044 9047 9051 9084 9091 9092 9098 9100 9107 9119 9149 9151 9158 9160 9172 9189 9200 9253 9300 9306 9333 9393 9398 9418 9446 9480 9530 9600 9633 9743 9761 9876 9898 9943 9950 9997 9998 9999 10000 10001 10007 10046 10087 10134 10250 10480 10554 10909 10911 11110 11112 11211 11288 11300 12000 12131 12143 12147 12203 12206 12251 12320 12345 12443 12447 12454 12490 12566 12570 12571 12902 14147 14265 14344 15042 15555 16019 16044 16047 16071 16074 16888 16993 17001 17182 18006 18038 18054 18081 18096 18245 18556 19000 19080 19222 20000 20256 20880 21025 21243 21253 21256 21287 22609 23023 25001 27015 27017 28015 30002 30003 30479 32400 32764 35000 36022 37777 41800 43222 44818 45005 47022 47990 48922 49200 49592 49690 50000 50022 50042 50100 50122 50202 50222 50722 50922 50999 51000 51022 51122 51322 51622 52222 52322 52422 52622 52722 53483 53522 53622 53822 54138 54222 54422 54822 55000 55222 55443 55554 55555 56722 57778 57785 58622 59722 60129 61613 61616 62078 63210 63256 63260

1261582754 | 2025-01-16T01:32:33.472413

15 / tcp

unknown command 
unknown command

-1559123399 | 2025-01-02T21:33:05.141459

17 / tcp

500 Permission denied - closing connection.

1564456597 | 2025-01-08T17:36:25.220354

21 / tcp

220 Firewall Authentication required before proceeding with service

-1346477807 | 2025-01-16T14:48:02.859273

22 / tcp

SSH-2.0-OpenSSH_X.X\r\n

164764193 | 2025-01-08T10:36:14.204004

23 / tcp


(none) login:

-1327660293 | 2025-01-09T02:24:36.110323

24 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

1911457608 | 2025-01-10T06:14:58.221362

25 / tcp

\x00[\x00\x00\x00\x00\x00\x00

165188539 | 2024-12-23T23:24:25.157746

26 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

306859053 | 2025-01-13T02:44:29.588889

37 / tcp

">Applic

-1428621233 | 2024-12-31T18:40:36.466379

43 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

-1101712668 | 2025-01-05T13:50:21.762896

49 / tcp

\\x1e\xc3\x80\\x010\\x02\xc2\xa8\xc3\xa3

-1056270173 | 2024-12-31T19:04:04.733046

70 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

-1264324149 | 2025-01-10T00:52:59.686810

79 / tcp

Siemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready
ÿû\x01ÿû\x03ÿý\x01ÿþ\x01Username:

-1737707071 | 2025-01-16T19:10:11.467593

101 / tcp

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

745343730 | 2025-01-13T18:38:45.369973

102 / tcp

220 smtp.qq.com Esmtp QQ Mail Server

321971019 | 2025-01-13T14:36:17.649524

104 / tcp

-ERR client ip is not in whitelist\r

671605376 | 2025-01-10T15:15:05.135508

110 / tcp

SSH-2.0-OpenSSH_X.X

321971019 | 2025-01-06T02:27:27.970446

111 / tcp

-ERR client ip is not in whitelist\r

-832380282 | 2025-01-10T06:37:24.967175

113 / tcp

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

141730637 | 2025-01-14T21:18:41.625679

119 / tcp

HTTP/1.0 200 OK
Server: Proxy

45131230 | 2025-01-13T22:05:59.597372

122 / tcp

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

1302177452 | 2025-01-09T20:23:02.699019

135 / tcp

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: Lou\n IP2: 192.168.5.66\n IP3: 240e:381:1b0a:900:40eb:cce6:2dc1:4045\n IP4: 240e:381:1b0a:900:504f:3a1f:a682:9ab5\n IP5: 240e:381:1b0a:900::2e6\n\nNTLMSSP:\nTarget_Name: LOU\nProduct_Version: 10.0.22621 Ntlm 15\nOS: Windows 11, Version 22H2\nNetBIOS_Domain_Name: LOU\nNetBIOS_Computer_Name: LOU\nDNS_Domain_Name: Lou\nDNS_Computer_Name: Lou\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 04:06:53 +0000 UTC\n\nDCE

-100373866 | 2025-01-10T13:45:50.032781

143 / tcp

* OK TurboMail IMAP4 Service ready\r\n

-653033013 | 2025-01-10T02:11:22.309679

175 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-399606100 | 2024-12-28T16:49:40.599481

179 / tcp

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

550048729 | 2025-01-15T01:28:19.809451

195 / tcp

ÿÿÿ
0 ...

362630950 | 2025-01-08T06:02:33.078526

211 / tcp

J\\x00\\x00\\x00\n8.0.23\\x00H\\xad\\xed\\x0ek\\x146Td\\x16P#\\x00\\xff\\xff-\\x02\\x00\\xff\\xcf\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00Zz+VhH0IL\\x19u(\\x00caching_sha2_password\\x00

1911457608 | 2025-01-06T03:00:33.049936

221 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1707068558 | 2025-01-03T15:01:43.087615

264 / tcp

-1547976805 | 2024-12-25T14:22:01.320250

311 / tcp

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

-1907080992 | 2025-01-07T22:20:01.076205

389 / tcp

0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x00\\x04\\x00\\x04\\x00

928665344 | 2024-12-30T14:02:49.153093

427 / tcp

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://127.0.0.1\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:cdserver\nservice:fdserver\nservice:hdserver\nservice:adviser\nservice:lighttpd\nB://l:87/x\n

-1715152554 | 2025-01-16T07:06:11.815580

443 / tcp

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Thu, 16 Jan 2025 07:06:11 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://39.103.172.104:443/

-694627227 | 2024-12-21T03:01:24.159747

444 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Sat, 21 Dec 2024 03:01:19 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

897328069 | 2025-01-08T23:58:53.568617

465 / tcp

220 mail.scott000.com ESMTP

-1839934832 | 2025-01-07T16:04:26.159932

502 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1611764932 | 2025-01-14T17:24:06.952055

503 / tcp

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

1261582754 | 2025-01-09T11:35:42.238965

515 / tcp

unknown command 
unknown command

155249582 | 2024-12-20T14:27:56.602037

548 / tcp

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: NGU\nMachine Type: \rNetatalk3.1.8\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: Cleartxt Passwrd\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

435727587 | 2025-01-03T05:44:51.882252

554 / tcp

RTSP/1.0 200 OK\r\nServer: TVT RTSP Server/1.0.0\r\nCSeq: 1\r\nPublic: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, GET_PARAMETER, SET_PARAMETER\r\n\r\n

-1261053701 | 2025-01-15T13:56:00.799544

593 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

1402312074 | 2024-12-29T19:10:19.439837

636 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 13-51264013-0 0NNN RT(1705909593861 113) q(-1 -1 -1 -1) r(0 -1) b1

1300162323 | 2025-01-06T10:33:46.437468

666 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

632542934 | 2025-01-06T01:31:20.301898

771 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1911457608 | 2024-12-25T16:13:17.627910

789 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1077013874 | 2025-01-03T23:28:17.603360

801 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

-1970692834 | 2024-12-24T22:50:47.415538

873 / tcp

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

1208318993 | 2025-01-10T21:57:22.579506

886 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

-936692830 | 2025-01-17T05:43:14.984026

992 / tcp

HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19

-1508080900 | 2025-01-16T03:27:51.611275

1023 / tcp


0ÿñ

1362344524 | 2025-01-07T06:38:42.346488

1080 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1396488228 | 2024-12-28T11:01:24.367871

1099 / tcp

HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html

-1399940268 | 2024-12-29T04:37:54.719323

1153 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1230049476 | 2025-01-06T12:55:01.023473

1200 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

-801484042 | 2025-01-15T07:11:15.499173

1234 / tcp

ERR 27

2087396567 | 2025-01-11T03:30:10.399051

1337 / tcp

kjnkjabhbanc283ubcsbhdc72

-1399940268 | 2025-01-14T02:22:29.601388

1366 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-136006866 | 2025-01-13T19:11:51.244175

1414 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

-1715152554 | 2025-01-16T07:00:56.899088

1443 / tcp

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Thu, 16 Jan 2025 07:00:53 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://39.103.172.104:443/

-1399940268 | 2025-01-17T18:49:25.823066

1460 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1842524259 | 2025-01-11T05:24:58.922061

1515 / tcp

-805164506 | 2024-12-25T05:53:47.803425

1521 / tcp

\xc3\xbf\xc3\xbd"\r\nL

366084633 | 2024-12-30T17:04:38.451375

1604 / tcp

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

-1608241410 | 2025-01-07T10:27:52.172243

1723 / tcp

Firmware: 1\nHostname: local\nVendor: linux\n

-833635452 | 2025-01-17T00:34:30.079389

1801 / tcp

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x05\xe8\x9b\xb5\\x95E\\x1eJ\\x85\xd5\xb1\\xe4\\xf9\\xba\\xf6+92d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

-303199180 | 2025-01-03T06:29:28.632160

1830 / tcp

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

398077695 | 2025-01-02T00:33:42.299680

1922 / tcp

-119996482 | 2025-01-05T07:23:42.608480

1925 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

819727972 | 2025-01-13T18:34:04.164770

1926 / tcp

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-441419608 | 2025-01-17T02:47:23.311639

1956 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

-146605374 | 2025-01-10T03:56:54.005998

1962 / tcp

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

165188539 | 2025-01-13T18:12:07.577830

1967 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-42767839 | 2025-01-16T03:49:47.180929

1971 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0

-1036370807 | 2025-01-15T00:42:35.626952

1973 / tcp

JDWP-Handshake

-1280833795 | 2024-12-30T15:50:33.649607

2002 / tcp

[¼/

-274082663 | 2024-12-29T23:19:55.532969

2003 / tcp

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

-445721795 | 2025-01-10T00:09:03.684391

2008 / tcp

\x00[\xc3\xaed\x1a\x7f\x00\x00

-1399940268 | 2025-01-17T19:23:13.535971

2010 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2024-12-24T15:09:01.529705

2058 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1504401647 | 2025-01-08T20:03:14.417989

2062 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

819727972 | 2024-12-20T04:25:50.772933

2066 / tcp

SSH-2.0-OpenSSH_7.4

1842524259 | 2025-01-04T06:01:45.028848

2067 / tcp

1543809371 | 2024-12-29T01:19:43.719687

2070 / tcp

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

1911457608 | 2025-01-03T17:07:55.490446

2081 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1842524259 | 2025-01-17T02:19:51.713258

2083 / tcp

-1681927087 | 2025-01-15T06:02:34.840931

2087 / tcp

kjnkjabhbanc283ubcsbhdc72

-653033013 | 2025-01-14T20:09:53.798100

2101 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

141730637 | 2024-12-25T22:56:44.834921

2121 / tcp

HTTP/1.0 200 OK
Server: Proxy

1824169301 | 2024-12-28T04:16:34.656251

2154 / tcp

HÿjHost '101.133.140.114' is not allowed to 
connect to this MySQL server

546151771 | 2025-01-16T21:14:26.196261

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

58083962 | 2024-12-31T12:41:41.735539

2222 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Content-Type: text/html
Connection: close

-801484042 | 2025-01-12T04:31:56.926955

2345 / tcp

ERR 27

-119996482 | 2024-12-31T16:17:14.942744

2375 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

1911457608 | 2024-12-27T15:17:49.792202

2404 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1978059005 | 2025-01-01T12:09:48.031085

2455 / tcp

Sorry, that nickname format is invalid.

945910976 | 2025-01-08T10:17:09.191326

2549 / tcp

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

597764502 | 2024-12-20T00:50:50.050292

2560 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

119860953 | 2024-12-28T13:49:59.284379

2761 / tcp

* OK ArGoSoft Mail Server IMAP Module v.YW at

669849225 | 2025-01-06T05:21:04.830884

2762 / tcp

SSH-98.60-SysaxSSH_81885..42\r\n

1504401647 | 2025-01-01T20:20:50.574280

3001 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

921225407 | 2024-12-31T04:15:15.488916

3050 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-1139539254 | 2025-01-15T07:30:26.901449

3053 / tcp

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

-1399940268 | 2025-01-08T22:54:24.790869

3055 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-358801646 | 2024-12-26T17:21:31.297100

3058 / tcp

SSH-2.0-OpenSSH_6.6.1

632542934 | 2025-01-02T04:42:27.719770

3062 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-441419608 | 2025-01-07T17:06:57.962404

3066 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

-1327660293 | 2025-01-07T02:44:22.089390

3082 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-1428621233 | 2024-12-27T10:05:17.830453

3100 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

-1626979812 | 2025-01-03T21:56:53.025248

3117 / tcp

220 Service ready for new user.

1948301213 | 2025-01-15T01:06:39.267553

3124 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

-1399940268 | 2025-01-09T18:52:42.532394

3146 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2089734047 | 2025-01-09T16:16:24.318178

3153 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

921225407 | 2025-01-08T23:59:53.994716

3155 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

2063598737 | 2025-01-13T13:10:59.128911

3175 / tcp

/0 0 L\r\n/0 0 HUH\r\n

-2089734047 | 2025-01-09T20:45:43.729529

3183 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1399940268 | 2025-01-15T20:45:16.348367

3185 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1655023012 | 2024-12-30T17:14:28.497708

3260 / tcp

athinfod: invalid query.\n

-805362002 | 2025-01-13T15:31:16.123597

3268 / tcp

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

-616720387 | 2025-01-03T12:51:23.838156

3299 / tcp

SSH-2.0-SSHD_0.7.6

369808347 | 2024-12-21T06:48:00.924804

3306 / tcp

Mysql Version: 5.7.31-log \r\nN\\x00\\x00\\x00\n5.7.31-log\\x00Ut_\\x02S|d0n0s \\x00\\xff\\xff-\\x02\\x00\\xff\\xc1\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\x0c\\x04&+MJX\n#in8\\x00mysql_native_password\\x00

-992671574 | 2025-01-13T22:43:19.641801

3310 / tcp

@RSYNCD: 26

-1888448627 | 2025-01-13T19:41:23.816356

3388 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1399940268 | 2025-01-12T18:13:55.078680

3390 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2140303521 | 2025-01-02T05:00:02.166553

3410 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

198844676 | 2024-12-22T17:22:13.251809

3551 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

165188539 | 2024-12-26T06:39:31.857925

3561 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

104385780 | 2025-01-01T16:44:01.973624

3780 / tcp

ceph v2

-971970408 | 2025-01-12T00:18:36.539193

3790 / tcp

1911457608 | 2025-01-16T22:51:22.524719

3841 / tcp

\x00[\x00\x00\x00\x00\x00\x00

921225407 | 2024-12-19T03:54:19.518607

3950 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1911457608 | 2025-01-16T14:34:32.356721

3951 / tcp

\x00[\x00\x00\x00\x00\x00\x00

819727972 | 2024-12-23T06:28:17.446280

3953 / tcp

SSH-2.0-OpenSSH_7.4

-801484042 | 2025-01-07T04:39:35.261797

4000 / tcp

ERR 27

-1399940268 | 2024-12-19T23:24:24.895846

4010 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-15T04:48:07.523495

4022 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2025-01-06T02:12:52.227689

4063 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1327660293 | 2024-12-29T11:25:33.974363

4064 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

921225407 | 2025-01-11T08:59:57.357283

4150 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

709622286 | 2025-01-12T20:20:57.592751

4155 / tcp

OK Welcome <299685> on DirectUpdate server 7286\r\n

-805362002 | 2025-01-14T21:51:42.279820

4157 / tcp

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

-1914158197 | 2024-12-31T10:29:46.256581

4242 / tcp

HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

819727972 | 2025-01-11T15:11:21.984303

4282 / tcp

SSH-2.0-OpenSSH_7.4

-1250504565 | 2024-12-26T12:55:57.039515

4321 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

408230060 | 2025-01-11T12:37:30.669493

4369 / tcp

\r\nSorry, that nickname format is invalid.\r\n

2143387245 | 2025-01-11T02:28:28.080236

4434 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

104385780 | 2025-01-06T19:42:38.739017

4444 / tcp

ceph v2

-980525298 | 2025-01-12T02:23:30.806001

4459 / tcp

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1077013874 | 2025-01-02T15:15:19.682096

4500 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

819727972 | 2025-01-17T14:50:40.585345

4506 / tcp

SSH-2.0-OpenSSH_7.4

-339084706 | 2025-01-08T06:43:27.252348

4786 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

-1487943323 | 2024-12-31T09:37:55.830015

4840 / tcp

431 Unable to negotiate secure command connection.\r\n

841014058 | 2025-01-10T03:25:17.188612

4899 / tcp

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

1332894250 | 2025-01-08T10:06:08.682764

4911 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

-971970408 | 2025-01-11T07:27:33.002943

4949 / tcp

-1114821551 | 2025-01-06T17:27:24.172979

5001 / tcp

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

-1136600457 | 2025-01-12T15:07:58.228120

5006 / tcp

HELO:10.3.6.0.false
AS:2048
HL:19

1975288991 | 2025-01-13T14:44:53.239809

5007 / tcp

OPTI

-1122307493 | 2025-01-16T13:50:46.740441

5009 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1ed0_xz202_38367-12424

-1435414831 | 2025-01-15T07:01:45.725299

5010 / tcp

roku: ready\r\n

-1881409212 | 2025-01-05T08:14:12.754001

5025 / tcp

[ò

25420265 | 2025-01-06T00:22:40.404866

5080 / tcp

HTTP/1.1 302 Found
Server: Apache
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: master-only
X-Download-Options: noopen
Strict-Transport-Security: max-age=31536000;include SubDomains
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Access-Control-Allow-Origin: same-origin
X-XSS-Protection: 1
Permissions-Policy: payment 'none';geolocation 'none'; 
Location: ipg/
Content-Type: text/html; charset=UTF-8

550048729 | 2025-01-09T04:45:19.579555

5172 / tcp

ÿÿÿ
0 ...

-1399940268 | 2025-01-01T17:32:13.129199

5201 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2025-01-07T18:06:46.328957

5222 / tcp

SSH-2.0-OpenSSH_7.4

1911457608 | 2025-01-10T05:03:32.763327

5267 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1165098486 | 2025-01-17T10:54:31.901859

5269 / tcp

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938487.609-w-waf02tjgt

819727972 | 2025-01-14T20:23:10.529878

5432 / tcp

SSH-2.0-OpenSSH_7.4

1504401647 | 2025-01-16T04:43:01.272484

5433 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

819727972 | 2025-01-09T22:36:06.308670

5435 / tcp

SSH-2.0-OpenSSH_7.4

-1730858130 | 2025-01-08T23:38:48.352048

5503 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1948301213 | 2025-01-16T03:17:06.361177

5596 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

575925250 | 2024-12-28T05:04:54.279704

5672 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

233634112 | 2024-12-31T21:17:22.081250

5858 / tcp

SSH-98.60-SysaxSSH_81885..42

1363464823 | 2025-01-17T17:42:56.720897

5938 / tcp

\x00[|ox\x7f\x00\x00

1999272906 | 2024-12-22T07:48:32.504306

5984 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

171352214 | 2024-12-31T12:04:20.862496

5986 / tcp

-ERR client ip is not in whitelist

-1375131644 | 2025-01-15T16:28:28.831609

5992 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

120534451 | 2025-01-10T10:41:34.983337

6000 / tcp

X11 access denied

401555314 | 2025-01-12T02:31:22.205972

6001 / tcp

NB[GFXjA^R

117101543 | 2024-12-23T21:34:25.862638

6006 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

-1888448627 | 2024-12-29T23:26:30.963464

6080 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

671605376 | 2025-01-16T18:43:41.121998

6262 / tcp

SSH-2.0-OpenSSH_X.X

1911457608 | 2025-01-15T04:57:15.960102

6264 / tcp

\x00[\x00\x00\x00\x00\x00\x00

321971019 | 2025-01-17T06:04:23.120670

6379 / tcp

-ERR client ip is not in whitelist\r

590585971 | 2025-01-02T13:25:55.435156

6543 / tcp

\\xba\\xdc\xcd\xab\\x01#\\x19\\x10C\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xab\\x18\\x00\\x00\\x00\\x00\\x00\\x00[153][15:47:34.500]\\xc1\\xac\\xbd\xd3\xb3\xc9\xb9\\xa6\\xa3\\xac\\xb1\\xbe\xc4\xa3\\xbf\\xe9 PID \xce\xaa 0x23=35\\x00\\xba\\xdc\xcd\xab\\x01#\\x19\\x10_\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xab\\x18\\x00\\x00\\x00\\x00\\x00\\x00[154][15:4

-1399940268 | 2025-01-13T14:12:59.432834

6603 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-05T18:17:47.228728

6633 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-696112747 | 2024-12-27T05:47:17.275241

6666 / tcp

\x00\x0e@\xbdT\xa7\xd0f(*\xd4\x00\x00\x00\x00\x00

-792826324 | 2025-01-12T04:23:44.194309

6667 / tcp

220 FTP server ready - login please

1830697416 | 2025-01-07T02:57:46.545115

6668 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

-1399940268 | 2024-12-24T06:24:26.952219

6697 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1827807483 | 2025-01-14T08:19:25.381037

7001 / tcp

HTTP/1.1 401 Unauthorized
Server: 
Cache-Control: no-cache,no-store
Content-Type: text/html; charset=%s
Connection: close

1492413928 | 2025-01-07T17:37:07.727328

7005 / tcp

SSH-2.0-OpenSSH_7.5

-1399940268 | 2025-01-16T04:49:22.871663

7057 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-971970408 | 2025-01-14T17:36:01.183399

7071 / tcp

819727972 | 2025-01-17T16:42:17.419383

7079 / tcp

SSH-2.0-OpenSSH_7.4

1996932384 | 2025-01-17T00:42:46.362550

7086 / tcp

"raop" nonce

-653033013 | 2025-01-08T18:04:33.234903

7171 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-1681927087 | 2025-01-12T21:38:35.925836

7218 / tcp

kjnkjabhbanc283ubcsbhdc72

1948301213 | 2025-01-06T21:47:18.175657

7415 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

-222277909 | 2025-01-09T07:38:27.999895

7434 / tcp

0@@

1612309769 | 2025-01-07T14:51:25.736659

7443 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28e1_CS-000-01SZh112_7344-42222

-1399940268 | 2024-12-28T21:55:33.191484

7445 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

171352214 | 2025-01-03T22:20:24.947083

7548 / tcp

-ERR client ip is not in whitelist

-1399940268 | 2024-12-28T04:27:40.321890

7634 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2107996212 | 2024-12-27T07:41:04.522809

7998 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-1888448627 | 2024-12-24T12:34:01.065365

8002 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1730858130 | 2025-01-02T03:54:19.500962

8003 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-1899074860 | 2025-01-13T20:52:58.352648

8006 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

-1399940268 | 2025-01-16T20:53:20.732339

8009 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

632542934 | 2025-01-02T17:57:59.977653

8011 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1399940268 | 2025-01-13T23:48:40.805116

8017 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1839934832 | 2024-12-24T06:15:41.651701

8030 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1839934832 | 2025-01-10T15:26:50.495801

8032 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1032713145 | 2024-12-25T03:10:41.752304

8053 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-2089734047 | 2025-01-12T06:24:32.431722

8068 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-971970408 | 2025-01-17T00:56:05.470424

8081 / tcp

-1373613804 | 2025-01-01T23:59:50.547758

8082 / tcp

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

-971970408 | 2025-01-07T01:22:51.236812

8083 / tcp

-441419608 | 2024-12-26T07:14:56.518663

8085 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

-2096652808 | 2025-01-08T01:07:48.218836

8087 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

819727972 | 2025-01-16T17:21:02.390788

8089 / tcp

SSH-2.0-OpenSSH_7.4

321971019 | 2025-01-13T09:28:20.286819

8092 / tcp

-ERR client ip is not in whitelist\r

-84715459 | 2025-01-12T09:11:53.620137

8093 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1e3a_hlj44_13815-35562

1865391109 | 2025-01-03T01:01:44.023892

8098 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0

1825545421 | 2025-01-01T23:11:18.940501

8099 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-AREACMCC2-CACHE38[0]
X-CCDN-FORBID-CODE: 040001

-1032713145 | 2024-12-25T23:09:13.327563

8102 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-971970408 | 2025-01-09T01:19:30.027958

8126 / tcp

740837454 | 2024-12-18T22:24:27.629322

8139 / tcp

SSH-2.0-OpenSSH_5.3

-616720387 | 2025-01-01T22:50:34.761238

8140 / tcp

SSH-2.0-SSHD_0.7.6

50497985 | 2025-01-12T20:49:31.116400

8172 / tcp

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

-1399940268 | 2025-01-14T06:56:08.974679

8184 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1648456501 | 2024-12-28T05:12:53.524837

8237 / tcp

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

51259122 | 2025-01-17T20:08:23.295687

8283 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

-2089734047 | 2024-12-29T03:54:43.429350

8291 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1487943323 | 2025-01-11T12:19:11.737785

8333 / tcp

431 Unable to negotiate secure command connection.\r\n

1816260150 | 2025-01-03T02:28:10.310828

8383 / tcp

HTTP/1.1 200 OK
Server: nginx/1.22.0
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

-832380282 | 2024-12-20T13:37:35.151339

8412 / tcp

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

-1399940268 | 2025-01-14T05:21:26.513476

8422 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-15T08:06:26.033371

8453 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1929293267 | 2024-12-30T16:00:16.060691

8500 / tcp

HTTP/1.1 404 Not Found
Server: nginx
Content-Type: text/html; charset=utf-8
Connection: keep-alive

165188539 | 2025-01-13T20:14:10.475950

8545 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-971970408 | 2025-01-08T13:00:43.922722

8554 / tcp

-358801646 | 2025-01-11T03:45:08.871052

8563 / tcp

SSH-2.0-OpenSSH_6.6.1

1353260875 | 2025-01-14T18:48:08.516110

8584 / tcp

\x00[g\xc2\x95N\x7f\x00\x00

165188539 | 2025-01-10T18:25:17.513947

8595 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1399940268 | 2025-01-01T21:57:32.870141

8666 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1230049476 | 2025-01-15T20:38:06.770831

8728 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

-1105333987 | 2025-01-05T00:01:02.904639

8766 / tcp

\x00[KpU\x7f\x00\x00

1504401647 | 2025-01-16T19:15:58.256364

8823 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

-784071826 | 2025-01-02T17:08:17.273297

8834 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-1399940268 | 2025-01-10T05:49:29.380066

8843 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1730858130 | 2025-01-11T07:10:40.373589

8845 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-585940771 | 2024-12-25T15:28:35.550620

8854 / tcp

Unknown command\r\n

-2140303521 | 2025-01-08T19:50:33.312781

8855 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

-409020351 | 2025-01-10T06:08:28.529339

8880 / tcp

NPC Telnet permit one connection.
 But One connection() already keep alive.
Good Bye !!

819727972 | 2025-01-02T17:34:33.309839

8887 / tcp

SSH-2.0-OpenSSH_7.4

1690634669 | 2025-01-13T06:23:26.742509

8889 / tcp

921225407 | 2025-01-10T15:55:53.092851

8890 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-1885525731 | 2024-12-29T10:20:20.740133

8899 / tcp

\\xab\xca\xa5]\\x00\\x00\\x00\\x18\\xc0\\x00\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xab\xca\xa5]\\x00\\x00\\x00\\x18\\xc0\\x00\\x00\\x04\\xff\\xff\\xff\\xb9\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00

-1399940268 | 2024-12-22T01:58:41.905493

8993 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2067028711 | 2025-01-03T18:44:34.577320

9000 / tcp

\x15\x03\x01\x00\x02\x02F

-1026951088 | 2025-01-16T06:16:42.597779

9001 / tcp

erro ip

-2096652808 | 2025-01-09T19:14:43.023071

9002 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

117101543 | 2025-01-17T11:03:09.583721

9015 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

1911457608 | 2025-01-08T17:38:10.907739

9029 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-2107996212 | 2025-01-16T06:01:25.894617

9031 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

1830697416 | 2025-01-12T02:31:53.952260

9042 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

1911457608 | 2024-12-25T19:26:03.529007

9044 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1810987450 | 2025-01-05T18:40:05.617196

9047 / tcp

\xc3\xbf

1690634669 | 2025-01-14T09:43:46.458348

9051 / tcp

165188539 | 2025-01-12T07:42:57.808137

9084 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-2031152423 | 2025-01-14T15:37:25.000455

9091 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

2143387245 | 2024-12-30T10:25:33.861342

9092 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

-1839934832 | 2024-12-26T21:35:09.187370

9098 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1114821551 | 2025-01-10T21:20:50.363340

9100 / tcp

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

2143387245 | 2024-12-29T12:12:06.241757

9107 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

1911457608 | 2025-01-14T08:29:13.445799

9119 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2025-01-13T19:54:35.658214

9149 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2103111368 | 2025-01-05T17:13:48.501539

9151 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

-1888448627 | 2025-01-17T03:00:29.010419

9158 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

51259122 | 2025-01-17T05:56:35.763782

9160 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

-1399940268 | 2025-01-12T09:01:12.704417

9172 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-303199180 | 2025-01-13T19:53:20.169883

9189 / tcp

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

-1163346640 | 2024-12-24T11:44:31.295047

9200 / tcp

HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
content-length: 215

-1399940268 | 2025-01-16T19:11:54.061750

9253 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

165188539 | 2025-01-14T21:13:25.353884

9300 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1011407350 | 2025-01-07T05:08:24.579748

9306 / tcp

* OK GroupWise IMAP4rev1 Server Ready\r\n

632542934 | 2025-01-11T16:50:46.920489

9333 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1399940268 | 2025-01-17T09:41:34.327764

9393 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1842524259 | 2025-01-14T13:56:38.697112

9398 / tcp

-1261053701 | 2025-01-10T09:14:39.812236

9418 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

-1399940268 | 2025-01-09T20:24:33.566951

9446 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

205347087 | 2025-01-11T08:26:15.646611

9480 / tcp

SSH-25453-Cisco-3524665.35\n

-1835475271 | 2024-12-21T18:57:34.496019

9530 / tcp

200 NOD32SS 99 (3318497116)\r\n

103159425 | 2025-01-16T00:53:55.027744

9600 / tcp

SSH-1.99-RGOS_SSH

1778988322 | 2025-01-16T19:40:12.141997

9633 / tcp

* OK GroupWise IMAP4rev1 Server Ready

1189133115 | 2024-12-28T01:09:45.295263

9743 / tcp

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

165188539 | 2024-12-28T16:55:56.452746

9761 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1977569953 | 2025-01-04T17:27:17.960418

9876 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2987_PS-SHA-01Jtm19_12756-43634

1320285193 | 2025-01-16T21:55:12.012590

9898 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

56005235 | 2025-01-12T02:41:39.758539

9943 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705935860.556-s5jhg

-1297953727 | 2025-01-09T02:56:20.079871

9950 / tcp

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

-616720387 | 2025-01-12T19:50:18.441081

9997 / tcp

SSH-2.0-SSHD_0.7.6

-1340128872 | 2025-01-17T05:23:43.730337

9998 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25d2_PS-PEK-010xV14_15533-12109

1161309183 | 2025-01-13T22:04:18.327907

9999 / tcp

ProxyServer is ready

-971970408 | 2025-01-04T02:03:28.519081

10000 / tcp

1492413928 | 2024-12-31T23:49:07.998440

10001 / tcp

SSH-2.0-OpenSSH_7.5

1767345577 | 2025-01-14T17:34:40.693460

10007 / tcp

Hello, this is Quagga (version 0T).
Copyright 1996-200

-358801646 | 2025-01-14T21:45:14.605800

10046 / tcp

SSH-2.0-OpenSSH_6.6.1

-1279886438 | 2025-01-11T17:43:20.839561

10087 / tcp

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

-1327660293 | 2025-01-16T20:27:39.836666

10134 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

2087396567 | 2025-01-03T23:32:39.028468

10250 / tcp

kjnkjabhbanc283ubcsbhdc72

-1779118422 | 2025-01-09T01:45:39.024865

10480 / tcp

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

819727972 | 2025-01-08T21:51:52.330438

10554 / tcp

SSH-2.0-OpenSSH_7.4

-1279886438 | 2024-12-21T23:06:55.993657

10909 / tcp

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

-1487943323 | 2025-01-04T20:32:20.920582

10911 / tcp

431 Unable to negotiate secure command connection.\r\n

-1648456501 | 2025-01-10T05:03:28.077358

11110 / tcp

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

-1399940268 | 2025-01-10T11:58:36.868222

11112 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-136006866 | 2025-01-05T04:59:19.095600

11211 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

-180163620 | 2025-01-13T17:42:37.787559

11288 / tcp

NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n

819727972 | 2025-01-14T20:24:51.335286

11300 / tcp

SSH-2.0-OpenSSH_7.4

1734465113 | 2025-01-10T13:36:58.587086

12000 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705938548.385-w-waf05cqt

1911457608 | 2025-01-11T22:22:35.242864

12131 / tcp

\x00[\x00\x00\x00\x00\x00\x00

455076604 | 2025-01-17T06:22:53.457779

12143 / tcp

!\x07version\x04bind7 t{RPowerDNS Recursor 410

165188539 | 2025-01-10T14:56:06.657390

12147 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1399940268 | 2025-01-11T10:45:28.869327

12203 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-784071826 | 2025-01-13T11:28:36.837265

12206 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-2089734047 | 2025-01-10T02:24:54.286071

12251 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1428621233 | 2025-01-12T22:29:04.861357

12320 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

296364507 | 2025-01-10T17:23:08.802260

12345 / tcp

HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

1212285915 | 2025-01-14T00:12:16.217000

12443 / tcp

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

-1399940268 | 2025-01-16T08:05:22.949980

12447 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1623746877 | 2025-01-11T20:10:01.211338

12454 / tcp

500 Permission denied - closing connection.\r\n

1911457608 | 2025-01-14T15:59:49.782391

12490 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2025-01-16T16:09:13.600290

12566 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-13T19:32:06.811956

12570 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

820958131 | 2025-01-13T02:48:49.008839

12571 / tcp

kjnkjabhbanc283ubcsbhdc72\x02

-1399940268 | 2025-01-09T04:57:35.404153

12902 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-792826324 | 2025-01-08T15:33:34.859468

14147 / tcp

220 FTP server ready - login please

103159425 | 2025-01-10T10:27:32.756855

14265 / tcp

SSH-1.99-RGOS_SSH

321971019 | 2025-01-13T22:31:28.856103

14344 / tcp

-ERR client ip is not in whitelist\r

-1399940268 | 2025-01-09T07:38:48.394957

15042 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1059554316 | 2025-01-11T02:50:45.493876

15555 / tcp

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

-1428621233 | 2025-01-11T09:34:53.049662

16019 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

632542934 | 2025-01-16T05:58:08.059275

16044 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1911457608 | 2025-01-12T19:45:48.836717

16047 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1013082686 | 2025-01-16T22:21:26.054348

16071 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

1308377066 | 2025-01-16T06:36:30.625892

16074 / tcp

ncacn_http/1.0

819727972 | 2025-01-16T00:15:18.906461

16888 / tcp

SSH-2.0-OpenSSH_7.4

-1248408558 | 2025-01-14T05:11:21.398335

16993 / tcp

220 MikroTik FTP server (MikroTik 6.44.3) ready

-1810987450 | 2025-01-12T19:31:13.321877

17001 / tcp

\xc3\xbf

-297128567 | 2025-01-17T20:04:05.259295

17182 / tcp

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

-407828767 | 2025-01-09T14:22:18.143728

18006 / tcp

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

165188539 | 2025-01-13T18:53:46.576609

18038 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1911457608 | 2025-01-10T21:54:40.907757

18054 / tcp

\x00[\x00\x00\x00\x00\x00\x00

709622286 | 2024-12-24T16:34:28.905552

18081 / tcp

OK Welcome <299685> on DirectUpdate server 7286\r\n

1911457608 | 2025-01-09T16:59:35.768947

18096 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1911457608 | 2025-01-17T21:14:35.009582

18245 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1713437100 | 2025-01-09T21:30:42.694749

18556 / tcp

\xc3\xbf\xc3\xbb\x01\r\nWelcome to NetLinx v94 Copyright AMX Corp. 34395-49007\r\n>

321971019 | 2025-01-12T03:40:09.191176

19000 / tcp

-ERR client ip is not in whitelist\r

1210754493 | 2025-01-16T18:17:54.305880

19080 / tcp

0\x0c\x02\x01\x01a\x07\n\x01\x00\x04\x00\x04\x00

1975288991 | 2025-01-12T00:07:05.331201

19222 / tcp

OPTI

1900503736 | 2025-01-11T08:33:38.611085

20000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

103159425 | 2024-12-27T21:00:03.058390

20256 / tcp

SSH-1.99-RGOS_SSH

1370263973 | 2024-12-30T06:33:03.774966

20880 / tcp

dubbo>

-2031152423 | 2025-01-16T12:09:01.305954

21025 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

-1399940268 | 2025-01-12T19:25:00.151331

21243 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-16T09:28:37.210230

21253 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1208318993 | 2025-01-14T06:14:42.071005

21256 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

1077013874 | 2025-01-15T22:34:11.709504

21287 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

-2096652808 | 2025-01-09T14:45:56.605836

22609 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1632932802 | 2024-12-20T16:14:49.291153

23023 / tcp

-792826324 | 2025-01-07T05:27:53.386057

25001 / tcp

220 FTP server ready - login please

-1516219311 | 2024-12-29T23:24:08.199622

27015 / tcp

Command: None
Size: 67502080
ID: 0
Type: 327680

1763259671 | 2025-01-02T22:20:22.724060

27017 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

819727972 | 2025-01-01T21:48:03.169324

28015 / tcp

SSH-2.0-OpenSSH_7.4

380146262 | 2024-12-27T20:14:38.167782

30002 / tcp

@RSYNCD: 30.0

1632932802 | 2025-01-04T15:49:46.624042

30003 / tcp

-1045760528 | 2025-01-17T21:16:46.949074

30479 / tcp

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

-119996482 | 2024-12-31T04:34:30.680332

32400 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

366084633 | 2025-01-10T02:39:59.442548

32764 / tcp

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

1911457608 | 2024-12-28T07:38:24.841369

35000 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1308377066 | 2025-01-06T17:40:36.067871

36022 / tcp

ncacn_http/1.0

-1013082686 | 2025-01-01T22:15:10.953839

37777 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

-1888448627 | 2025-01-15T05:36:50.983953

41800 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-971970408 | 2025-01-06T16:01:42.419625

43222 / tcp

921225407 | 2024-12-28T07:17:34.689025

44818 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-1329831334 | 2025-01-17T05:53:07.284878

45005 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

410249975 | 2024-12-20T19:41:39.007989

47022 / tcp

LNS READY<>

-971970408 | 2025-01-01T03:04:16.977641

47990 / tcp

539065883 | 2024-12-20T20:05:10.321701

48922 / tcp

-136006866 | 2025-01-11T11:28:10.118032

49200 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

-2017887953 | 2025-01-12T00:56:30.746736

49592 / tcp

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-2089734047 | 2025-01-09T21:30:35.996636

49690 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1282941221 | 2025-01-17T16:50:58.882600

50000 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

819727972 | 2025-01-16T06:44:32.436661

50022 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2025-01-13T22:52:20.815750

50042 / tcp

SSH-2.0-OpenSSH_7.4

-992671574 | 2025-01-09T21:12:06.110270

50100 / tcp

@RSYNCD: 26

1208318993 | 2025-01-15T09:24:26.198847

50122 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

165188539 | 2025-01-11T21:55:42.296280

50202 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1082732927 | 2024-12-20T11:49:49.976094

50222 / tcp

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

-1810987450 | 2024-12-20T02:12:48.657239

50722 / tcp

\xc3\xbf

1412519768 | 2024-12-20T05:57:49.891011

50922 / tcp

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

-358801646 | 2025-01-14T11:04:15.559688

50999 / tcp

SSH-2.0-OpenSSH_6.6.1

1975288991 | 2025-01-15T17:35:54.249982

51000 / tcp

OPTI

-1730858130 | 2024-12-20T03:38:17.062392

51022 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-1730858130 | 2024-12-20T03:27:56.614110

51122 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

996960436 | 2024-12-20T00:58:00.255478

51322 / tcp

572 Relay not authorized

-79865617 | 2024-12-19T23:12:10.785509

51622 / tcp

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )

539065883 | 2024-12-19T18:34:50.951530

52222 / tcp

-527005584 | 2024-12-19T19:20:30.165508

52322 / tcp

/0 0 L
/0 0 HUH

-1810987450 | 2024-12-19T17:13:39.963646

52422 / tcp

\xc3\xbf

1842524259 | 2024-12-19T16:40:03.366889

52622 / tcp

1189133115 | 2024-12-19T14:32:48.211838

52722 / tcp

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

165188539 | 2025-01-10T19:32:01.212922

53483 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1810987450 | 2024-12-19T09:00:46.790211

53522 / tcp

\xc3\xbf

-319440554 | 2024-12-19T10:32:27.071818

53622 / tcp

-1872120160 | 2024-12-19T04:16:14.256952

53822 / tcp

">Application and Content Networking Software 3.9</a>)
</BODY><

-438503381 | 2025-01-10T08:10:43.031596

54138 / tcp

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

-1428621233 | 2024-12-19T04:49:32.521307

54222 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

-358801646 | 2024-12-19T00:55:43.722382

54422 / tcp

SSH-2.0-OpenSSH_6.6.1

171352214 | 2024-12-19T01:22:08.049665

54822 / tcp

-ERR client ip is not in whitelist

-1795027372 | 2024-12-21T06:26:48.738790

55000 / tcp

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

-2096652808 | 2024-12-18T22:29:28.265050

55222 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1373613804 | 2024-12-23T17:34:41.833932

55443 / tcp

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

2087396567 | 2025-01-14T20:01:40.513505

55554 / tcp

kjnkjabhbanc283ubcsbhdc72

-147424911 | 2025-01-11T20:48:31.025387

55555 / tcp

HTTP/1.1 404 Not Found
Content Length: 0

178736976 | 2025-01-03T21:07:32.896583

56722 / tcp

SSH-58-Ingrian_SSH

1308377066 | 2025-01-14T21:49:53.139623

57778 / tcp

ncacn_http/1.0

819727972 | 2025-01-16T18:32:22.594415

57785 / tcp

SSH-2.0-OpenSSH_7.4

2033888749 | 2025-01-16T17:53:31.782072

58622 / tcp

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

-971970408 | 2025-01-17T15:04:25.154415

59722 / tcp

2087396567 | 2025-01-08T06:41:49.595412

60129 / tcp

kjnkjabhbanc283ubcsbhdc72

-1476017887 | 2025-01-15T13:02:39.681426

61613 / tcp

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

1996932384 | 2025-01-04T09:46:01.542509

61616 / tcp

"raop" nonce

1842317374 | 2025-01-08T11:57:03.072694

62078 / tcp

/1.1 400 Bad Request
Server: nginx/1.13.0
Content-Type: text/html
Connection: close

-1230049476 | 2024-12-25T16:08:59.740800

63210 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

1632932802 | 2025-01-06T20:32:01.376297

63256 / tcp

1492413928 | 2025-01-05T08:16:11.144838

63260 / tcp

SSH-2.0-OpenSSH_7.5

39.103.172.104

Last Seen: 2025-01-17

Tags:

GeneralInformation

Vulnerabilities All ports Port 1926 Port 2066 Port 3953 Port 4282 Port 4506 Port 5222 Port 5432 Port 5435 Port 7005 Port 7079 Port 8089 Port 8139 Port 8834 Port 8887 Port 10001 Port 10554 Port 11300 Port 12206 Port 16888 Port 28015 Port 49592 Port 50022 Port 50042 Port 57785 Port 63260 Latest CVSS

OpenPorts

1261582754 | 2025-01-16T01:32:33.472413 15 / tcp

-1559123399 | 2025-01-02T21:33:05.141459 17 / tcp

1564456597 | 2025-01-08T17:36:25.220354 21 / tcp

-1346477807 | 2025-01-16T14:48:02.859273 22 / tcp

164764193 | 2025-01-08T10:36:14.204004 23 / tcp

-1327660293 | 2025-01-09T02:24:36.110323 24 / tcp

1911457608 | 2025-01-10T06:14:58.221362 25 / tcp

165188539 | 2024-12-23T23:24:25.157746 26 / tcp

306859053 | 2025-01-13T02:44:29.588889 37 / tcp

-1428621233 | 2024-12-31T18:40:36.466379 43 / tcp

-1101712668 | 2025-01-05T13:50:21.762896 49 / tcp

-1056270173 | 2024-12-31T19:04:04.733046 70 / tcp

-1264324149 | 2025-01-10T00:52:59.686810 79 / tcp

-1737707071 | 2025-01-16T19:10:11.467593 101 / tcp

745343730 | 2025-01-13T18:38:45.369973 102 / tcp

321971019 | 2025-01-13T14:36:17.649524 104 / tcp

671605376 | 2025-01-10T15:15:05.135508 110 / tcp

321971019 | 2025-01-06T02:27:27.970446 111 / tcp

-832380282 | 2025-01-10T06:37:24.967175 113 / tcp

141730637 | 2025-01-14T21:18:41.625679 119 / tcp

45131230 | 2025-01-13T22:05:59.597372 122 / tcp

1302177452 | 2025-01-09T20:23:02.699019 135 / tcp

-100373866 | 2025-01-10T13:45:50.032781 143 / tcp

-653033013 | 2025-01-10T02:11:22.309679 175 / tcp

-399606100 | 2024-12-28T16:49:40.599481 179 / tcp

550048729 | 2025-01-15T01:28:19.809451 195 / tcp

362630950 | 2025-01-08T06:02:33.078526 211 / tcp

1911457608 | 2025-01-06T03:00:33.049936 221 / tcp

-1707068558 | 2025-01-03T15:01:43.087615 264 / tcp

-1547976805 | 2024-12-25T14:22:01.320250 311 / tcp

-1907080992 | 2025-01-07T22:20:01.076205 389 / tcp

928665344 | 2024-12-30T14:02:49.153093 427 / tcp

-1715152554 | 2025-01-16T07:06:11.815580 443 / tcp

-694627227 | 2024-12-21T03:01:24.159747 444 / tcp

897328069 | 2025-01-08T23:58:53.568617 465 / tcp

-1839934832 | 2025-01-07T16:04:26.159932 502 / tcp

-1611764932 | 2025-01-14T17:24:06.952055 503 / tcp

1261582754 | 2025-01-09T11:35:42.238965 515 / tcp

155249582 | 2024-12-20T14:27:56.602037 548 / tcp

435727587 | 2025-01-03T05:44:51.882252 554 / tcp

-1261053701 | 2025-01-15T13:56:00.799544 593 / tcp

1402312074 | 2024-12-29T19:10:19.439837 636 / tcp

1300162323 | 2025-01-06T10:33:46.437468 666 / tcp

632542934 | 2025-01-06T01:31:20.301898 771 / tcp

1911457608 | 2024-12-25T16:13:17.627910 789 / tcp

1077013874 | 2025-01-03T23:28:17.603360 801 / tcp

-1970692834 | 2024-12-24T22:50:47.415538 873 / tcp

1208318993 | 2025-01-10T21:57:22.579506 886 / tcp

-936692830 | 2025-01-17T05:43:14.984026 992 / tcp

-1508080900 | 2025-01-16T03:27:51.611275 1023 / tcp

1362344524 | 2025-01-07T06:38:42.346488 1080 / tcp

1396488228 | 2024-12-28T11:01:24.367871 1099 / tcp

-1399940268 | 2024-12-29T04:37:54.719323 1153 / tcp

-1230049476 | 2025-01-06T12:55:01.023473 1200 / tcp

-801484042 | 2025-01-15T07:11:15.499173 1234 / tcp

2087396567 | 2025-01-11T03:30:10.399051 1337 / tcp

-1399940268 | 2025-01-14T02:22:29.601388 1366 / tcp

-136006866 | 2025-01-13T19:11:51.244175 1414 / tcp

-1715152554 | 2025-01-16T07:00:56.899088 1443 / tcp

-1399940268 | 2025-01-17T18:49:25.823066 1460 / tcp

1842524259 | 2025-01-11T05:24:58.922061 1515 / tcp

-805164506 | 2024-12-25T05:53:47.803425 1521 / tcp

366084633 | 2024-12-30T17:04:38.451375 1604 / tcp

-1608241410 | 2025-01-07T10:27:52.172243 1723 / tcp

-833635452 | 2025-01-17T00:34:30.079389 1801 / tcp

-303199180 | 2025-01-03T06:29:28.632160 1830 / tcp

398077695 | 2025-01-02T00:33:42.299680 1922 / tcp

-119996482 | 2025-01-05T07:23:42.608480 1925 / tcp

819727972 | 2025-01-13T18:34:04.164770 1926 / tcp

-441419608 | 2025-01-17T02:47:23.311639 1956 / tcp

-146605374 | 2025-01-10T03:56:54.005998 1962 / tcp

165188539 | 2025-01-13T18:12:07.577830 1967 / tcp

-42767839 | 2025-01-16T03:49:47.180929 1971 / tcp

-1036370807 | 2025-01-15T00:42:35.626952 1973 / tcp

Vulnerabilities

1261582754 | 2025-01-16T01:32:33.472413
15 / tcp

-1559123399 | 2025-01-02T21:33:05.141459
17 / tcp

1564456597 | 2025-01-08T17:36:25.220354
21 / tcp

-1346477807 | 2025-01-16T14:48:02.859273
22 / tcp

164764193 | 2025-01-08T10:36:14.204004
23 / tcp

-1327660293 | 2025-01-09T02:24:36.110323
24 / tcp

1911457608 | 2025-01-10T06:14:58.221362
25 / tcp

165188539 | 2024-12-23T23:24:25.157746
26 / tcp

306859053 | 2025-01-13T02:44:29.588889
37 / tcp

-1428621233 | 2024-12-31T18:40:36.466379
43 / tcp

-1101712668 | 2025-01-05T13:50:21.762896
49 / tcp

-1056270173 | 2024-12-31T19:04:04.733046
70 / tcp

-1264324149 | 2025-01-10T00:52:59.686810
79 / tcp

-1737707071 | 2025-01-16T19:10:11.467593
101 / tcp

745343730 | 2025-01-13T18:38:45.369973
102 / tcp

321971019 | 2025-01-13T14:36:17.649524
104 / tcp

671605376 | 2025-01-10T15:15:05.135508
110 / tcp

321971019 | 2025-01-06T02:27:27.970446
111 / tcp

-832380282 | 2025-01-10T06:37:24.967175
113 / tcp

141730637 | 2025-01-14T21:18:41.625679
119 / tcp

45131230 | 2025-01-13T22:05:59.597372
122 / tcp

1302177452 | 2025-01-09T20:23:02.699019
135 / tcp

-100373866 | 2025-01-10T13:45:50.032781
143 / tcp

-653033013 | 2025-01-10T02:11:22.309679
175 / tcp

-399606100 | 2024-12-28T16:49:40.599481
179 / tcp

550048729 | 2025-01-15T01:28:19.809451
195 / tcp

362630950 | 2025-01-08T06:02:33.078526
211 / tcp

1911457608 | 2025-01-06T03:00:33.049936
221 / tcp

-1707068558 | 2025-01-03T15:01:43.087615
264 / tcp

-1547976805 | 2024-12-25T14:22:01.320250
311 / tcp

-1907080992 | 2025-01-07T22:20:01.076205
389 / tcp

928665344 | 2024-12-30T14:02:49.153093
427 / tcp

-1715152554 | 2025-01-16T07:06:11.815580
443 / tcp

-694627227 | 2024-12-21T03:01:24.159747
444 / tcp

897328069 | 2025-01-08T23:58:53.568617
465 / tcp

-1839934832 | 2025-01-07T16:04:26.159932
502 / tcp

-1611764932 | 2025-01-14T17:24:06.952055
503 / tcp

1261582754 | 2025-01-09T11:35:42.238965
515 / tcp

155249582 | 2024-12-20T14:27:56.602037
548 / tcp

435727587 | 2025-01-03T05:44:51.882252
554 / tcp

-1261053701 | 2025-01-15T13:56:00.799544
593 / tcp

1402312074 | 2024-12-29T19:10:19.439837
636 / tcp

1300162323 | 2025-01-06T10:33:46.437468
666 / tcp

632542934 | 2025-01-06T01:31:20.301898
771 / tcp

1911457608 | 2024-12-25T16:13:17.627910
789 / tcp

1077013874 | 2025-01-03T23:28:17.603360
801 / tcp

-1970692834 | 2024-12-24T22:50:47.415538
873 / tcp

1208318993 | 2025-01-10T21:57:22.579506
886 / tcp

-936692830 | 2025-01-17T05:43:14.984026
992 / tcp

-1508080900 | 2025-01-16T03:27:51.611275
1023 / tcp

1362344524 | 2025-01-07T06:38:42.346488
1080 / tcp

1396488228 | 2024-12-28T11:01:24.367871
1099 / tcp

-1399940268 | 2024-12-29T04:37:54.719323
1153 / tcp

-1230049476 | 2025-01-06T12:55:01.023473
1200 / tcp

-801484042 | 2025-01-15T07:11:15.499173
1234 / tcp

2087396567 | 2025-01-11T03:30:10.399051
1337 / tcp

-1399940268 | 2025-01-14T02:22:29.601388
1366 / tcp

-136006866 | 2025-01-13T19:11:51.244175
1414 / tcp

-1715152554 | 2025-01-16T07:00:56.899088
1443 / tcp

-1399940268 | 2025-01-17T18:49:25.823066
1460 / tcp

1842524259 | 2025-01-11T05:24:58.922061
1515 / tcp

-805164506 | 2024-12-25T05:53:47.803425
1521 / tcp

366084633 | 2024-12-30T17:04:38.451375
1604 / tcp

-1608241410 | 2025-01-07T10:27:52.172243
1723 / tcp

-833635452 | 2025-01-17T00:34:30.079389
1801 / tcp

-303199180 | 2025-01-03T06:29:28.632160
1830 / tcp

398077695 | 2025-01-02T00:33:42.299680
1922 / tcp

-119996482 | 2025-01-05T07:23:42.608480
1925 / tcp

819727972 | 2025-01-13T18:34:04.164770
1926 / tcp

-441419608 | 2025-01-17T02:47:23.311639
1956 / tcp

-146605374 | 2025-01-10T03:56:54.005998
1962 / tcp

165188539 | 2025-01-13T18:12:07.577830
1967 / tcp

-42767839 | 2025-01-16T03:49:47.180929
1971 / tcp

-1036370807 | 2025-01-15T00:42:35.626952
1973 / tcp

-1280833795 | 2024-12-30T15:50:33.649607
2002 / tcp

-274082663 | 2024-12-29T23:19:55.532969
2003 / tcp

-445721795 | 2025-01-10T00:09:03.684391
2008 / tcp

-1399940268 | 2025-01-17T19:23:13.535971
2010 / tcp

1911457608 | 2024-12-24T15:09:01.529705
2058 / tcp