GeneralInformation

Hostnames	www13.10219.com prodkm.11222.cn 27gifo.1688.com aonggvnv.1688.com doto.arn.1688.com blingirl.1688.com eag.1688.com gjxahen.1688.com goak02.1688.com grinword.1688.com nvne888.1688.com qionfengsteej.1688.com rvyinooshon90999.1688.com shog05ag1k8416879.1688.com shog1388509015890.1688.com shog141778j891985.1688.com shog151aj73534062.1688.com shog2j628j8o33140.1688.com shog902h910393823.1688.com shop1370624548167.1688.com shop1495170581586.1688.com shop1495299047519.1688.com vidigod.1688.com yidvzy.1688.com yngjostia.1688.com yqgjoss.1688.com zotog168.1688.com basalog.9game.cn epg.alisnm.aisee.tv ynuf.aliapp.org 77.alibaba-inc.com vop.alicom.alibaba-inc.com 17joi.ojibobo-ina.aon.alibaba-inc.com asn.ojibobo-ina.aon.alibaba-inc.com rb.dfjy.ojibobo-ina.aon.alibaba-inc.com fengxing.ojibobo-ina.aon.alibaba-inc.com gvi.ojibobo-ina.aon.alibaba-inc.com hb-ogi.ojibobo-ina.aon.alibaba-inc.com nt2.ojibobo-ina.aon.alibaba-inc.com ogt-ogi.ojibobo-ina.aon.alibaba-inc.com va.stors.ojibobo-ina.aon.alibaba-inc.com tvrkey.ojibobo-ina.aon.alibaba-inc.com yovshv.ojibobo-ina.aon.alibaba-inc.com aproc-gcl.alibaba-inc.com arms.alibaba-inc.com builder.alibaba-inc.com autoumars.cs.daily.alibaba-inc.com mon.alibaba-inc.com pdmsapi.alibaba-inc.com pre-phenix.alibaba-inc.com wap.alibaba-inc.com 0995.bjog.ahino.alibaba.com 08999.blog.china.alibaba.com dvbbo.alibaba.com fijebroker-jzd-gh.alibaba.com fijebroker-jzd-gk.alibaba.com filebroker-lzd-my.alibaba.com n.hebred.alibaba.com os30-sg94.dogbridge.oserver-jozodo.alibaba.com vn.alibaba.com tesla-server.alibaba.net pgw-cld-s.alicdn.com barrnet.aliexpress.com 120.aliexpress.ru api.alihealth.cn file.aliwork.com ron-ovth-test.an-shonghoi.ojiyvn-ina.aon.aliyun-inc.com ase.ojiyvn-ina.aon.aliyun-inc.com sts-internoj.ev-aentroj-1.ojiyvn-ina.aon.aliyun-inc.com gre-aonf-server-an.ojiyvn-ina.aon.aliyun-inc.com grod-obn-taonf.ojiyvn-ina.aon.aliyun-inc.com nst.ojiyvn-ina.aon.aliyun-inc.com oaaovnt-svb-grofije-an-shonghoi-tyjr-shore.ojiyvn-ina.aon.aliyun-inc.com netria-ans.v3.ojiyvn-ina.aon.aliyun-inc.com yvndvn-oen-an-hongzhov.ojiyvn-ina.aon.aliyun-inc.com eci-data-cn-chengdu.aliyun-inc.com oceanbase-cn-zhangjiakou.aliyun-inc.com presto-public.aliyun-inc.com aliyun.com ali-mdm.aliyun.com aliserver.aliyun.com gre-streon.aonsoje.aliyun.com gw.api.aliyun.com asahot-aas.aliyun.com biz.aliyun.com booking-my.aliyun.com cr-private-share.cn-hangzhou.aliyun.com eci-inner.cn-heyuan.aliyun.com yundunnext.console.aliyun.com content.aliyun.com curtainyj.aliyun.com dfxytea.aliyun.com dondong.aliyun.com dsg-an-beijing.doto.aliyun.com noriodi-an-shonghoi.doto.aliyun.com app110835.eapps.aliyun.com api.employees.aliyun.com greener.aliyun.com hadjy.aliyun.com hotel.aliyun.com master.jenkins.aliyun.com shog3vtt9525.norket.aliyun.com pre-hot.aliyun.com pre-onebp.aliyun.com pre-phenix.aliyun.com ups_lazada.security-nash.aliyun.com shop1418229697260.aliyun.com shop1442508391642.aliyun.com shop36279.aliyun.com shop36400926.aliyun.com shop36585113.aliyun.com shop36883874.aliyun.com shop36940336.aliyun.com shop4211v780j6007.aliyun.com shop47q5964m381l6.aliyun.com wenyu.stars.aliyun.com svn.aliyun.com tianjiudz.aliyun.com uw-insight2-green-online.aliyun.com shop362774879.world.aliyun.com wpk.aliyun.com xz.aliyun.com yundun-sddp.aliyun.com adda-inner-shore.aliyuncs.com ean.an-beijing.aliyuncs.com nseog.aliyuncs.com eai-inner.og-sovtheost-2.aliyuncs.com ogi-inner.aliyuncs.com cn-beijing.oss.aliyuncs.com onbori-server.vga.rds.aliyuncs.com sts.aliyuncs.com aongoss-tionyon-inner.vga-groxy.aliyuncs.com xingzhen-shore.aliyuncs.com data-processing-factory.amap.com poi-picture.amap.com poigate.amap.com pre-test-idc-meta-dn-be.amap.com aero.cainiao-inc.com dcc.cainiao-inc.com combine.cainiao.com channel-engine-admin.gfn.cainiao.com management-open.gfn.cainiao.com picasso.cainiao.com cnl-ids-console.sg.cainiao.com thub-sto.cainiao.com partner.wt.cainiao.com www.cfradio.cn hzvs2.cnzz.com z11.cnzz.com acs-m.confong.cn survey.damai.cn alidocs-activity.dingtalk.com login.dingtalk.com app118614.eapps.dingtalkcloud.com wwwadmin.faas.ele.me wwwevents.faas.ele.me wwwproduction.faas.ele.me wwwproxy.faas.ele.me ipassport.ele.me waltz.ele.me proxy.fzwxxcx.com marketplace.hemaos.com mmc-scm-workbench.hemayx.cn www.hetechenergy.com mum.hzchengdun.com gsp-stg.lazada-seller.cn sellercenter-ph-staging.lazada-seller.cn ssc-vn-staging.lazada-seller.cn datafeeds.lazada.co.id university.lazada.co.id api.lazada.co.th cs.lazada.co.th datafeeds.lazada.co.th my-m.lazada.co.th pdpdesc.lazada.co.th pre-c.lazada.co.th www-src.lazada.co.th pre-web.lazada.com affiliate.lazada.com.my union.lazada.com.my admin.lazada.com.ph admin-p.lazada.com.ph education-staging.lazada.com.ph jmacs-m.lazada.com.ph pre-lighthouse.lazada.com.ph adsense.lazada.sg checkout-m.lazada.sg connected.lazada.sg msgacs-wapa.lazada.sg pages.lazada.sg pre.lazada.sg m.sellercenter.lazada.sg member-m.lazada.vn station.lazada.vn map-my.lel.asia map-vn.lel.asia unitedkingdom.lex.in.th www.lex.in.th gsg.lingxigames.com reward-store.lingxigames.com www.llportal.co.id jycm.lydaas.com mail.morningstarnet.com pkcity.com drive-m.quark.cn redmart.com console-aliapi.alpha.redmart.com ricescience.org www1.tarpf.saee.org.cn sui.shuqiapi.com zm.sm-tc.cn chajian.sto.cn 433sgort.taobao.com aovnt.taobao.com svaoi.donggv.taobao.com gonshi.taobao.com i56.taobao.com ishog.taobao.com laobao3366.taobao.com lwst.taobao.com ngd.n.taobao.com shog36205388.taobao.com shog36222363.taobao.com shog36304596.taobao.com shog36306469.taobao.com shog36324138.taobao.com shog36403617.taobao.com shog36584913.taobao.com shog36816146.taobao.com shog36917319.taobao.com shog37073832.taobao.com shog37074687.taobao.com shop36193895.taobao.com shop36203510.taobao.com shop36381602.taobao.com shop36475911.taobao.com redirect.simba.taobao.com syan-seorah.taobao.com shop406198058.world.taobao.com tool-wa.proxy.taobao.org fs-slave-china.tms.taobao.org oiadeb.abbs.tmall.com msc.cbbs.tmall.com order.cbbs.tmall.com dkvon.tmall.com jingzhvongjinyiqi.tmall.com ongfo.tmall.com tengxvnznsb.tmall.com tgyjiojv.tmall.com txynts.tmall.com yunfeifs.tmall.com hudongcheng.tmall.hk www.c.uc.cn m-api.uc.cn www1.4g.xixikf.cn www6.alrouter.xixikf.cn www9.art.xixikf.cn bata.gmz.xixikf.cn pis-pcdn.youku.com v.youku.com apr.yunos-inc.com webapi.yunos-inc.com mail.zushoushou.com
Domains	10219.com 11222.cn 1688.com 9game.cn aisee.tv aliapp.org alibaba-inc.com alibaba.com alibaba.net alicdn.com aliexpress.com aliexpress.ru alihealth.cn aliwork.com aliyun-inc.com aliyun.com aliyuncs.com amap.com cainiao-inc.com cainiao.com cfradio.cn cnzz.com confong.cn damai.cn dingtalk.com dingtalkcloud.com ele.me fzwxxcx.com hemaos.com hemayx.cn hetechenergy.com hzchengdun.com lazada-seller.cn lazada.co.id lazada.co.th lazada.com lazada.com.my lazada.com.ph lazada.sg lazada.vn lel.asia lex.in.th lingxigames.com llportal.co.id lydaas.com morningstarnet.com pkcity.com quark.cn redmart.com ricescience.org saee.org.cn shuqiapi.com sm-tc.cn sto.cn taobao.com taobao.org tmall.com tmall.hk uc.cn xixikf.cn youku.com yunos-inc.com zushoushou.com
Country	China
City	Beijing
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

WebTechnologies

IaaS

Alibaba Cloud Object Storage Service

JavaScript frameworks

Prototype

JavaScript libraries

YUI

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2024-23897	7.5Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.
CVE-2023-51767	OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges.
CVE-2023-51385	In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
CVE-2023-51384	In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key, even if a PKCS#11 token returns multiple keys.
CVE-2023-48795	The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.
CVE-2023-38408	The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVE-2021-41617	4.4sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.
CVE-2021-36368	2.6An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed.
CVE-2020-15778	6.8scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVE-2020-14145	4.3The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.
CVE-2019-6111	5.8An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).
CVE-2019-6110	4.0In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
CVE-2019-6109	4.0An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.
CVE-2019-16905	4.4OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.
CVE-2018-20685	2.6In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.
CVE-2018-15919	5.0Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'
CVE-2018-15473	5.0OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
CVE-2017-15906	5.0The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.
CVE-2016-20012	4.3OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product
CVE-2008-3844	9.3Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known.
CVE-2007-2768	4.3OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.

OpenPorts

11 13 15 17 19 21 23 25 37 43 49 53 70 79 80 83 102 104 110 111 113 119 122 135 143 175 179 180 195 211 221 264 311 389 427 443 444 465 502 503 515 548 554 587 593 666 771 772 789 873 992 993 995 1023 1024 1025 1099 1153 1177 1200 1234 1311 1337 1366 1388 1433 1515 1521 1599 1604 1723 1800 1883 1911 1926 1962 1981 2000 2002 2003 2006 2008 2057 2060 2067 2080 2081 2083 2087 2121 2154 2181 2200 2202 2221 2222 2259 2266 2323 2345 2351 2376 2379 2404 2455 2556 2557 2602 2628 2761 2762 3001 3072 3087 3096 3101 3105 3114 3120 3129 3211 3260 3269 3299 3301 3306 3307 3310 3333 3388 3389 3405 3406 3503 3522 3551 3558 3689 3749 3780 3790 3793 3910 3950 4000 4001 4002 4022 4040 4063 4064 4100 4157 4242 4243 4282 4321 4369 4443 4444 4451 4500 4506 4734 4747 4786 4840 4899 4949 5001 5005 5006 5007 5009 5010 5025 5122 5172 5201 5222 5269 5431 5432 5435 5446 5500 5560 5568 5569 5599 5603 5605 5672 5673 5858 5938 5984 6000 6001 6002 6006 6008 6036 6080 6379 6443 6510 6580 6633 6653 6666 6667 6668 6697 6748 7001 7004 7071 7171 7218 7415 7434 7443 7444 7547 7548 7634 7676 7778 7779 7989 7998 8001 8009 8033 8034 8036 8040 8051 8052 8057 8080 8081 8083 8085 8086 8087 8089 8090 8094 8098 8099 8105 8126 8139 8140 8181 8200 8248 8251 8291 8333 8419 8426 8429 8443 8445 8448 8500 8545 8554 8575 8586 8649 8688 8728 8813 8837 8843 8853 8854 8858 8862 8863 8867 8878 8899 9000 9001 9002 9024 9028 9042 9043 9045 9051 9090 9091 9092 9095 9100 9107 9108 9119 9151 9160 9199 9200 9206 9207 9216 9251 9300 9303 9306 9389 9418 9443 9527 9530 9600 9633 9761 9800 9876 9898 9943 9950 9981 9999 10000 10001 10134 10250 10443 10554 10909 10911 11000 11112 11210 11211 11300 12000 12345 13579 14147 14265 14344 16010 16992 16993 18081 18245 18553 19000 20000 20256 20547 21025 21379 23023 25105 25565 27015 27017 28015 28080 30002 30003 33060 35000 37215 37777 41800 44158 44818 47990 49152 50000 50070 50100 51235 54138 55000 55442 55443 55553 55554 60129 61613 61616 62078

-1327660293 | 2024-05-14T09:36:04.652484

11 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

1286504516 | 2024-04-30T07:50:52.189005

13 / tcp

CP2E Control Console
Connected to Host: gZI

1267517148 | 2024-05-07T02:03:29.335762

15 / tcp

=Àÿÿ?"<ZDECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6

-390388957 | 2024-05-07T17:25:48.747508

17 / tcp

"A wonderful fact to reflect upon, that every human creature is constituted
 to be that profound secret and mystery to every other."
 Charles Dickens (1812-70)

829384519 | 2024-05-01T09:33:45.248450

19 / tcp

 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV

-1248408558 | 2024-04-30T10:03:19.045043

21 / tcp

220 MikroTik FTP server (MikroTik 6.44.3) ready

-1816600103 | 2024-05-06T20:38:08.903310

23 / tcp

tc login:

-1399940268 | 2024-05-07T15:05:21.958059

25 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2046098166 | 2024-05-11T07:29:28.895357

37 / tcp

HTTP/1.1 302 Found
X-Content-Ty

-2096652808 | 2024-04-20T15:18:09.734735

43 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1909001798 | 2024-05-06T12:12:47.187960

49 / tcp

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Tue, 21 Dec 2021 03:13:39 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

-1511422614 | 2024-04-18T23:43:09.658338

53 / tcp

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00U\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x00\x9d\x00\x04\x8e\xfb*\xee
\x00\x06\x85\x00\x00\x01\x00\x01\x00\x00\

-1763883228 | 2024-05-10T07:07:37.261517

70 / tcp

HTTP/1.1 400 Bad Request
Server: vista/0.7
Content-Type: text/html
Connection: close

-1264324149 | 2024-04-28T03:29:54.561305

79 / tcp

Siemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready
ÿû\x01ÿû\x03ÿý\x01ÿþ\x01Username:

665347273 | 2024-05-10T15:30:03.430936

80 / tcp

HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Fri, 10 May 2024 15:30:03 GMT
Content-Type: application/xml
Content-Length: 347
Connection: keep-alive
x-oss-request-id: 663E3D7BE48B2B39307F1C7E
x-oss-server-time: 0
x-oss-ec: 0003-00001201

550048729 | 2024-05-14T19:11:37.348807

83 / tcp

ÿÿÿ
0 ...

1911457608 | 2024-05-14T22:51:00.508240

102 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-04-28T00:59:37.854264

104 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

745343730 | 2024-04-21T01:10:20.974829

110 / tcp

220 smtp.qq.com Esmtp QQ Mail Server

2087396567 | 2024-04-19T05:27:40.561514

111 / tcp

kjnkjabhbanc283ubcsbhdc72

-1986594217 | 2024-05-14T01:41:47.833829

113 / tcp

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

-1958992631 | 2024-05-02T17:14:30.041464

119 / tcp

\\xd5\xca\xba\\xc5\\xc8\\xcf\xd6\xa4\xca\xa7\\xb0\\xdc ...\r\nIP \\xb5\\xd8\xd6\xb7: *.*.*.*\r\nMAC \\xb5\\xd8\xd6\xb7: \r\n\\xb7\\xfe\\xce\\xf1\\xb6\\xcb\xca\xb1\\xbc\\xe4: 2024-01-22 16:23:50\r\n\\xd1\\xe9\xd6\xa4\\xbd\\xe1\\xb9\\xfb: \\xce\\xde\xd0\xa7\\xd3\xc3\xbb\\xa7.

1763259671 | 2024-05-11T04:35:48.010185

122 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

1141948216 | 2024-04-23T02:33:09.422337

135 / tcp

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: DESKTOP-HL59G5J\n IP2: 169.254.93.199\n IP3: 175.180.100.187\n\nNTLMSSP:\nTarget_Name: DESKTOP-HL59G5J\nProduct_Version: 10.0.19041 Ntlm 15\nOS: Windows 10, Version 2004/Windows Server, Version 2004\nNetBIOS_Domain_Name: DESKTOP-HL59G5J\nNetBIOS_Computer_Name: DESKTOP-HL59G5J\nDNS_Domain_Name: DESKTOP-HL59G5J\nDNS_Computer_Name: DESKTOP-HL59G5J\nSystem_Time: 2024-01-22 06:04:34 +0000 UTC\n\nDCERPC Dump:\n954

219070077 | 2024-05-16T02:49:04.232183

143 / tcp

* OK IMAPrev1\r\n

1911457608 | 2024-05-04T00:15:38.288752

175 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-399606100 | 2024-04-27T17:06:27.574593

179 / tcp

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

-2089734047 | 2024-04-21T13:32:15.917249

180 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

819727972 | 2024-05-10T23:32:00.482520

195 / tcp

SSH-2.0-OpenSSH_7.4

362630950 | 2024-04-17T06:47:06.039738

211 / tcp

J\\x00\\x00\\x00\n8.0.23\\x00H\\xad\\xed\\x0ek\\x146Td\\x16P#\\x00\\xff\\xff-\\x02\\x00\\xff\\xcf\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00Zz+VhH0IL\\x19u(\\x00caching_sha2_password\\x00

-1399940268 | 2024-04-25T15:03:16.072609

221 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1022036431 | 2024-05-02T13:08:12.391543

264 / tcp

CheckPoint\nFirewall Host: CN05FWINT01\nSmartCenter Host: fw-go-mgmt-01..x6vcm5\\x00\n

676753056 | 2024-05-16T23:03:08.463485

311 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html

-1743283776 | 2024-05-08T12:31:09.399761

389 / tcp

0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x04\\x04

928665344 | 2024-05-14T00:22:13.776404

427 / tcp

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://127.0.0.1\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:cdserver\nservice:fdserver\nservice:hdserver\nservice:adviser\nservice:lighttpd\nB://l:87/x\n

-981665732 | 2024-05-16T04:09:48.270217

443 / tcp

HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Thu, 16 May 2024 04:09:47 GMT
Content-Type: application/xml
Content-Length: 347
Connection: keep-alive
x-oss-request-id: 6645870B5C8CDB3839C475DF
x-oss-server-time: 0
x-oss-ec: 0003-00001201

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c2:fa:4a:79:04:be:34:6d:b7:91:6b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: Feb 18 11:45:02 2024 GMT
            Not After : Oct 15 03:16:01 2024 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=cn-beijing.oss.aliyuncs.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cb:fd:cb:7f:5f:49:ee:e8:d9:d0:d6:53:d0:a5:
                    88:fd:fc:56:3c:06:76:2d:ad:ee:c9:65:e1:8c:fd:
                    ee:ef:a1:a2:34:db:d3:65:1e:4a:9c:f7:9d:a6:ad:
                    fa:a7:b3:1a:8b:45:f7:13:2a:26:24:9c:50:28:92:
                    25:54:45:fc:d2:2e:17:7d:c1:47:45:a1:39:bf:ce:
                    7e:f2:8b:d7:69:2c:b6:94:3f:5c:fc:a9:6e:c3:bd:
                    a5:a9:f3:6e:65:55:50:ba:b2:8a:df:ee:e9:50:a7:
                    81:b5:5f:3a:96:f9:74:c3:8a:54:51:d7:eb:02:1c:
                    58:33:e6:a0:ea:12:10:52:63:c9:df:03:84:cf:a3:
                    15:9c:50:7b:5e:6e:42:0f:3d:bd:33:3c:f6:6a:eb:
                    be:30:24:30:72:cb:84:a8:e9:17:aa:6a:45:f8:12:
                    c2:a1:78:0d:31:f0:45:2b:32:2f:ff:98:a3:03:a2:
                    5a:b0:8d:e2:d5:ce:e1:35:56:0b:0a:f8:11:bf:18:
                    44:f7:b8:7b:a0:a0:eb:1d:8d:cf:e8:cc:cf:c4:c5:
                    54:69:59:53:e1:ee:51:79:04:67:86:cf:8b:e5:c6:
                    88:a8:cc:9e:61:75:91:90:b5:8a:af:4c:a2:8d:57:
                    14:8a:f6:54:fb:1e:71:e5:09:e3:0a:12:df:34:8d:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
            X509v3 Subject Alternative Name: 
                DNS:cn-beijing.oss.aliyuncs.com, DNS:*.cn-beijing.oss-console.aliyuncs.com, DNS:*.s3.oss-cn-beijing.aliyuncs.com, DNS:*.s3.oss-cn-beijing-internal.aliyuncs.com, DNS:*.cn-beijing.mgw.aliyuncs.com, DNS:*.oss.cn-beijing.privatelink.aliyuncs.com, DNS:*.oss-cn-beijing.oss-object-process.aliyuncs.com, DNS:*.oss-cn-beijing-internal.oss-object-process.aliyuncs.com, DNS:*.oss-cn-beijing.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-beijing-internal.oss-accesspoint.aliyuncs.com, DNS:*.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-beijing.aliyuncs.com, DNS:*.img-cn-beijing-internal.aliyuncs.com, DNS:*.oss-cn-beijing-internal-cross.aliyuncs.com, DNS:*.oss-cn-beijing-internal.aliyuncs.com, DNS:*.oss-cn-beijing-cross.aliyuncs.com, DNS:*.img-cn-beijing.aliyuncs.com, DNS:*.vpc100-oss-cn-beijing.aliyuncs.com, DNS:*.cn-beijing.oss.aliyuncs.com, DNS:*.oss-cache-cn-beijing-h.aliyuncs.com, DNS:*.oss-cache-cn-beijing-h-cross.aliyuncs.com, DNS:*.oss-cn-beijing-finance-1-pub-internal.aliyuncs.com, DNS:*.oss-cn-beijing-finance-1-pub.aliyuncs.com, DNS:*.cn-beijing-finance.oss.aliyuncs.com, DNS:*.oss-cn-beijing-finance-1-internal.aliyuncs.com, DNS:*.oss-cn-beijing-finance-1.aliyuncs.com, DNS:*.cn-beijing-finance-1.oss.aliyuncs.com, DNS:*.cn-beijing-vpc.oss.aliyuncs.com, DNS:*.oss-enet-cm.aliyuncs.com, DNS:*.oss-enet-cu.aliyuncs.com, DNS:*.oss-enet-ct.aliyuncs.com, DNS:*.oss-enet-cn-north.aliyuncs.com, DNS:*.aliyuncs.com, DNS:*.oss-enet.aliyuncs.com, DNS:*.oss-internal.aliyuncs.com, DNS:*.oss-internal.aliyun-inc.com, DNS:*.oss-accelerate.aliyuncs.com, DNS:*.oss-accelerate-overseas.aliyuncs.com, DNS:*.s3.oss-accelerate.aliyuncs.com, DNS:*.s3.oss-accelerate-overseas.aliyuncs.com, DNS:*.cn-beijing-cross.mgw.aliyuncs.com, DNS:*.oss.aliyuncs.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            X509v3 Subject Key Identifier: 
                C1:58:AC:32:69:71:BB:67:42:6C:42:FE:14:E5:57:72:91:C1:82:D6
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DF:E1:56:EB:AA:05:AF:B5:9C:0F:86:71:8D:A8:C0:32:
                                4E:AE:56:D9:6E:A7:F5:A5:6A:01:D1:C1:3B:BE:52:5C
                    Timestamp : Feb 18 11:45:04.957 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:15:EB:B8:83:D7:F7:A8:EA:1C:1D:44:69:
                                0D:C2:0C:E6:46:F3:EA:4D:D4:BA:C1:F1:33:E5:11:01:
                                3F:3A:60:1F:02:21:00:F9:E3:AA:10:52:02:17:D8:C9:
                                82:69:E9:8F:02:B9:E4:87:FD:81:43:CE:C5:3F:1E:8E:
                                3B:D2:A2:8F:D6:D8:B0
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Feb 18 11:45:04.981 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:83:A9:BA:8E:BC:5C:65:C7:88:3F:9A:
                                1C:0A:68:2A:7B:FE:05:7E:89:8E:C1:AB:BA:6A:D4:41:
                                EF:3D:31:99:EE:02:20:04:46:7E:3B:0A:E2:A2:6F:6B:
                                81:66:9A:A1:A3:D7:9C:5E:BF:EA:7E:1F:D6:F9:28:17:
                                D6:E5:CA:A9:B7:0D:63
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Feb 18 11:45:04.953 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E2:B8:E4:4E:C3:59:23:E0:DB:E4:31:
                                DA:74:71:16:E3:26:46:8F:CA:EB:B2:3F:8D:0B:2F:0D:
                                EF:0A:DA:39:98:02:20:3D:8B:BE:C4:24:72:BE:51:B0:
                                B0:C1:B7:90:B3:9E:C8:F8:75:8C:0D:12:5A:12:87:6E:
                                71:52:1D:BE:A8:3B:96
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        14:86:2a:78:c4:ab:69:86:d0:b2:ec:6c:bf:6f:33:ac:c1:d8:
        18:c7:3e:da:d9:ca:01:a5:54:67:a8:fb:7d:41:6b:f5:9e:ea:
        e3:98:63:ee:3e:b8:87:69:3a:98:8d:dc:62:af:02:c3:0a:b4:
        75:52:90:7e:ae:18:1b:5e:88:27:69:de:15:c1:76:37:96:3b:
        db:c4:ac:43:0b:5b:36:fb:62:b3:d7:8c:66:8f:d3:da:b4:6b:
        86:f5:c6:02:06:3d:dd:5b:01:99:a8:74:7f:af:c3:9c:bb:d6:
        9d:98:cb:3c:3d:12:6e:b1:53:29:1d:6d:a7:0f:4c:82:f7:84:
        4f:57:15:9c:9b:a5:91:4b:1d:33:55:c8:f5:06:7d:74:92:63:
        5c:a8:33:ea:25:43:5d:08:10:87:94:a9:92:b3:13:d2:ce:8d:
        6d:8f:31:ac:5d:06:b9:eb:f7:e1:a7:36:4f:14:4e:3e:a4:e6:
        d2:4d:f8:74:a8:62:a4:84:4a:04:7e:c4:6e:b4:84:83:2c:cc:
        c3:ff:54:0d:9c:3c:8b:5a:22:af:12:b5:7d:e6:24:9d:f5:a6:
        28:60:8b:ff:f2:ce:62:85:c3:4a:a8:40:29:85:07:2e:0b:a4:
        c1:d0:dc:23:02:f4:24:1d:f5:84:c8:73:3e:bf:f9:3d:63:06:
        9f:10:1b:e8

-971970408 | 2024-05-12T11:41:51.090763

444 / tcp

897328069 | 2024-05-02T02:24:29.739062

465 / tcp

220 mail.scott000.com ESMTP

-1399940268 | 2024-05-12T17:42:46.202243

502 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

921225407 | 2024-05-15T07:22:49.821863

503 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1690634669 | 2024-05-16T21:27:21.606860

515 / tcp

444328471 | 2024-04-29T16:50:32.842676

548 / tcp

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: SynologyRouter\nMachine Type: \rNetatalk3.1.1\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

-927382641 | 2024-04-20T04:43:16.490711

554 / tcp

RTSP/1.0 200 OK
CSeq: 1
Public: OPTIONS, DESCRIBE, PLAY, PAUSE, SETUP, TEARDOWN, SET_PARAMETER, GET_PARAMETER

745343730 | 2024-05-16T22:12:31.123901

587 / tcp

220 smtp.qq.com Esmtp QQ Mail Server

-1112304903 | 2024-05-13T22:14:18.567534

593 / tcp

HTTP/1.1 403 Forbidden
Server: Apache/2.4.23 (Win64) OpenSSL/1.0.2h PHP/7.4.13
Content-Type: text/html; charset=iso-8859-1

1300162323 | 2024-05-12T05:53:29.532778

666 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

119860953 | 2024-05-17T00:59:31.241484

771 / tcp

* OK ArGoSoft Mail Server IMAP Module v.YW at

921225407 | 2024-05-08T21:05:32.602382

772 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

307999478 | 2024-05-15T20:43:25.190377

789 / tcp

unknown command \r\nunknown command \r\n

-1970692834 | 2024-05-16T04:15:40.403290

873 / tcp

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

-936692830 | 2024-05-01T23:48:33.129720

992 / tcp

HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19

1208318993 | 2024-04-29T19:11:25.580581

993 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

689999346 | 2024-05-04T22:00:32.680034

995 / tcp

+OK The Microsoft Exchange POP3 service is ready. [SgBIADAAUABSADAAMQBDAEEAMAAwADUAMgAuAGEAcABjAHAAcgBkADAAMQAuAHAAcgBvAGQALgBlAHgAYwBoAGEAbgBnAGUAbABhAGIAcwAuAGMAbwBtAA==]\r\n

171352214 | 2024-05-05T02:33:01.351900

1023 / tcp

-ERR client ip is not in whitelist

660175493 | 2024-05-05T12:12:21.289408

1024 / tcp

819727972 | 2024-05-05T15:59:47.978861

1025 / tcp

SSH-2.0-OpenSSH_7.4

-653033013 | 2024-04-29T13:44:38.011914

1099 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

1282941221 | 2024-05-10T23:08:50.506924

1153 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1778988322 | 2024-05-16T09:16:24.250663

1177 / tcp

* OK GroupWise IMAP4rev1 Server Ready

-1969169410 | 2024-04-21T16:33:12.987145

1200 / tcp

ÿû
-> GET / HTTP/1.0
GET / HTTP/1.0
undefined symbol: GET
-> 
->

321971019 | 2024-05-03T01:23:53.801030

1234 / tcp

-ERR client ip is not in whitelist\r

842535728 | 2024-05-10T12:31:12.926399

1311 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

2087396567 | 2024-04-23T15:18:00.849872

1337 / tcp

kjnkjabhbanc283ubcsbhdc72

45131230 | 2024-04-21T21:42:14.434630

1366 / tcp

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

-454087041 | 2024-04-29T21:18:46.064755

1388 / tcp

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

-325802316 | 2024-05-10T18:27:51.274289

1433 / tcp

MSSQL Server\nVersion: 134219767 (0x80007f7)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: PC-20150816MQOM\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: PC-20150816MQOM\nNetBIOS_Computer_Name: PC-20150816MQOM\nDNS_Domain_Name: PC-20150816MQOM\nDNS_Computer_Name: PC-20150816MQOM\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 04:03:26 +0000 UTC\n\n

-1598265216 | 2024-05-09T11:51:21.850456

1515 / tcp

@RSYNCD: 31.0

-805164506 | 2024-05-11T20:36:38.822267

1521 / tcp

\xc3\xbf\xc3\xbd"\r\nL

2087396567 | 2024-05-01T17:37:45.132861

1599 / tcp

kjnkjabhbanc283ubcsbhdc72

-971970408 | 2024-05-03T03:42:01.375160

1604 / tcp

1103582599 | 2024-05-09T04:34:55.051434

1723 / tcp

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

-274082663 | 2024-05-15T20:09:50.721653

1800 / tcp

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

2087396567 | 2024-05-07T02:16:39.883960

1883 / tcp

kjnkjabhbanc283ubcsbhdc72

-180163620 | 2024-04-20T16:34:56.195947

1911 / tcp

NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n

2087396567 | 2024-05-04T16:10:20.924362

1926 / tcp

kjnkjabhbanc283ubcsbhdc72

-1399940268 | 2024-05-14T00:26:52.518139

1962 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

597764502 | 2024-05-14T22:47:47.173387

1981 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

1077013874 | 2024-04-22T02:29:01.021927

2000 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

819727972 | 2024-05-06T03:35:22.910616

2002 / tcp

SSH-2.0-OpenSSH_7.4

-2017887953 | 2024-04-27T10:08:55.120446

2003 / tcp

SSH-2.0-OpenSSH_7.9

632542934 | 2024-05-01T21:48:07.791949

2006 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-79865617 | 2024-05-12T18:24:21.231643

2008 / tcp

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )

1574088840 | 2024-05-08T00:31:56.076350

2057 / tcp

">Application and Content Networking Software 3.9</a>)\n</BODY><

408230060 | 2024-04-27T22:46:46.325964

2060 / tcp

\r\nSorry, that nickname format is invalid.\r\n

660175493 | 2024-04-26T06:30:09.893459

2067 / tcp

398077695 | 2024-05-14T00:05:58.452407

2080 / tcp

1911457608 | 2024-05-09T06:43:53.740935

2081 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1461540015 | 2024-05-05T14:54:14.912156

2083 / tcp

audio 0 RTP/AVP 18 4 3 8 0 101
a

2103111368 | 2024-05-16T10:09:18.680965

2087 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

-459998123 | 2024-05-05T20:00:22.097081

2121 / tcp

220-FileZilla Server version 0.9.46 beta\r\n

819727972 | 2024-04-20T12:19:47.140695

2154 / tcp

SSH-2.0-OpenSSH_7.4

546151771 | 2024-05-01T05:22:12.536754

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

1023953321 | 2024-05-10T01:15:41.485060

2200 / tcp

HTTP/1.0 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm="proxy"
Connection: close
Content-type: text/html; charset=utf-8

819727972 | 2024-04-25T15:43:14.468121

2202 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2024-04-26T01:43:49.778795

2221 / tcp

SSH-2.0-OpenSSH_7.4

372433470 | 2024-05-15T01:34:20.775349

2222 / tcp

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

971933601 | 2024-05-07T17:15:46.766018

2259 / tcp

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

-1399940268 | 2024-05-01T18:14:05.993238

2266 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1662205251 | 2024-05-11T11:06:58.899907

2323 / tcp

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

-1019343788 | 2024-05-08T20:40:17.281706

2345 / tcp

W!\x00\x00\x00\x00

-1375131644 | 2024-04-22T00:37:56.037860

2351 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

2143387245 | 2024-05-14T09:32:04.707224

2376 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

2143387245 | 2024-05-09T06:04:44.598226

2379 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

-1428621233 | 2024-05-11T22:42:41.742632

2404 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

-2033111675 | 2024-05-09T21:47:08.705715

2455 / tcp

~djb

165188539 | 2024-04-25T20:55:37.953178

2556 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-686574797 | 2024-05-02T23:14:32.893606

2557 / tcp

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 13-123953206-0 0NNN RT(1700602574720 0) q(0 -1 -1 -1) r(0 -1)

-2089734047 | 2024-04-21T10:15:17.623382

2602 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2009276894 | 2024-05-15T20:58:15.602422

2628 / tcp

N
5.6.40-logÅTUNEgVX2
¢!xlB...

597764502 | 2024-05-15T04:05:17.566150

2761 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

1332894250 | 2024-05-15T02:32:28.457140

2762 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

1911457608 | 2024-05-16T17:21:35.945679

3001 / tcp

\x00[\x00\x00\x00\x00\x00\x00

632542934 | 2024-05-06T04:17:12.390587

3072 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1327660293 | 2024-05-06T00:27:45.925552

3087 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

1911457608 | 2024-04-21T03:02:36.948281

3096 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1327660293 | 2024-05-13T15:19:54.627426

3101 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-1399940268 | 2024-05-08T20:58:06.082271

3105 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2024-05-10T16:26:20.580737

3114 / tcp

SSH-2.0-OpenSSH_7.4

380146262 | 2024-05-14T18:36:24.218221

3120 / tcp

@RSYNCD: 30.0

-1795027372 | 2024-04-17T05:03:09.772249

3129 / tcp

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

-2046514463 | 2024-04-20T03:24:02.864400

3211 / tcp

AB\x01\t

-862070606 | 2024-04-26T16:16:56.975297

3260 / tcp

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n

-1810987450 | 2024-05-12T21:05:42.511111

3269 / tcp

\xc3\xbf

-971970408 | 2024-05-10T08:29:06.273468

3299 / tcp

921225407 | 2024-05-14T12:18:19.426149

3301 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1000685185 | 2024-05-11T21:24:49.432640

3306 / tcp

Mysql Version: 5.7.44-log \r\nN\\x00\\x00\\x00\n5.7.44-log\\x00r/\\x06\\x00u1Z3=}L\\x04\\x00\\xff\\xff-\\x02\\x00\\xff\\xc1\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00tKb,\\x0eS\\x19\\x7fD\\x15rQ\\x00mysql_native_password\\x00

-904840257 | 2024-04-25T10:45:13.790374

3307 / tcp

572 Relay not authorized\r\n

819727972 | 2024-05-12T00:42:41.293377

3310 / tcp

SSH-2.0-OpenSSH_7.4

-567518421 | 2024-05-12T23:16:11.057349

3333 / tcp

HTTP/1.1 400 Bad Request
Server: CloudWAF
Content-Type: text/html
Connection: close

677934968 | 2024-05-13T20:23:19.250735

3388 / tcp

lm^)Q

1146750585 | 2024-05-13T10:47:48.851203

3389 / tcp

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x0f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: UHYPBIESUENB72Z\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: UHYPBIESUENB72Z\nNetBIOS_Computer_Name: UHYPBIESUENB72Z\nDNS_Domain_Name: uhypbiesuenb72ze\nDNS_Computer_Name: uhypbiesuenb72ze\nSystem_Time: 2023-02-06 08:40:05 +0000 UTC\n\n

599074451 | 2024-05-02T23:06:48.850778

3405 / tcp

msg

-249504111 | 2024-04-24T03:30:28.652430

3406 / tcp

\x00[xU-\x7f\x00\x00

-122096153 | 2024-04-24T01:39:52.701400

3503 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

-1399940268 | 2024-04-18T11:26:15.689512

3522 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

198844676 | 2024-05-16T15:36:10.258916

3551 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

632542934 | 2024-05-04T11:40:10.896271

3558 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1921398876 | 2024-05-14T22:44:16.721665

3689 / tcp

ÿý"
LinuxNode v06953 (ggfks)

login:

-1023516719 | 2024-04-28T11:21:18.817956

3749 / tcp

ã

KvInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

1636811864 | 2024-05-11T18:38:20.893840

3780 / tcp

-971970408 | 2024-05-02T17:58:00.227873

3790 / tcp

-1730858130 | 2024-05-02T02:51:53.744949

3793 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

921225407 | 2024-05-04T08:42:12.166048

3910 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-784071826 | 2024-05-08T11:18:28.228155

3950 / tcp

SSH-2.0-OpenSSH_8.0

1300162323 | 2024-05-08T04:30:53.198600

4000 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

-1733106930 | 2024-04-25T09:57:21.933105

4001 / tcp

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

-339084706 | 2024-04-22T19:07:37.723670

4002 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

-1428621233 | 2024-04-19T09:35:48.571131

4022 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

-1311598826 | 2024-05-01T23:04:12.552501

4040 / tcp

AMQP:
cluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local
copyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.
information:Licensed under the MPL 2.0. Website: https://rabbitmq.com
platform:Erlang/OTP 24.1
product:RabbitMQ
version:3.9.7
Capabilities:
publisher_confirms:true
exchange_exchange_bindings:true
basic.nack:true
consumer_cancel_notify:true
connection.blocked:true
consumer_priorities:true
authentication_failure_close:true
per_consumer_qos:true
direct_reply_to:tru

1984588611 | 2024-05-13T20:50:54.212160

4063 / tcp

-358801646 | 2024-05-16T23:47:22.692251

4064 / tcp

SSH-2.0-OpenSSH_6.6.1

671605376 | 2024-04-27T03:23:36.165666

4100 / tcp

SSH-2.0-OpenSSH_X.X

366084633 | 2024-05-10T01:10:24.831807

4157 / tcp

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

302222687 | 2024-05-08T08:51:39.772779

4242 / tcp

HTTP/1.1 301 Moved Permanently
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close

921225407 | 2024-05-02T02:35:12.033161

4243 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-1230049476 | 2024-04-30T17:35:45.088146

4282 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

-1250504565 | 2024-05-11T05:17:13.173796

4321 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

-1399940268 | 2024-04-24T12:27:50.782447

4369 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1060562267 | 2024-05-06T09:12:41.153901

4443 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae29b6_PS-NKG-01Aqo82_2892-58968

1911457608 | 2024-05-10T03:33:51.535378

4444 / tcp

\x00[\x00\x00\x00\x00\x00\x00

660175493 | 2024-05-16T10:29:41.795813

4451 / tcp

-1327660293 | 2024-04-25T13:15:16.060619

4500 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-1999117212 | 2024-05-08T20:42:08.391267

4506 / tcp

1911457608 | 2024-04-22T11:13:45.428457

4734 / tcp

\x00[\x00\x00\x00\x00\x00\x00

165188539 | 2024-04-24T15:53:15.412254

4747 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

819727972 | 2024-05-06T20:24:46.225182

4786 / tcp

SSH-2.0-OpenSSH_7.4

-1230049476 | 2024-05-13T23:54:04.781770

4840 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

2087396567 | 2024-05-16T02:19:57.472746

4899 / tcp

kjnkjabhbanc283ubcsbhdc72

2087396567 | 2024-05-03T21:43:23.113554

4949 / tcp

kjnkjabhbanc283ubcsbhdc72

597764502 | 2024-05-11T23:12:35.167456

5001 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

-1559123399 | 2024-05-01T06:28:25.292367

5005 / tcp

500 Permission denied - closing connection.

-971970408 | 2024-05-05T13:54:58.326266

5006 / tcp

-1428621233 | 2024-05-08T04:07:42.702830

5007 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

-1413918021 | 2024-05-04T13:32:30.138206

5009 / tcp

acpp\\x00\\x03\\x00\\x01E\\xe2\\x05\\x98\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xff\\xff\\xff\\xf0\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00

1308377066 | 2024-05-04T11:10:48.353269

5010 / tcp

ncacn_http/1.0

-971970408 | 2024-05-07T19:26:38.712188

5025 / tcp

-1099385124 | 2024-04-26T14:42:28.519121

5122 / tcp

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

-1036370807 | 2024-05-14T19:24:08.746416

5172 / tcp

JDWP-Handshake

1332894250 | 2024-05-11T19:41:28.252815

5201 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

2087396567 | 2024-05-14T20:02:45.889975

5222 / tcp

kjnkjabhbanc283ubcsbhdc72

756886313 | 2024-05-16T11:09:55.914822

5269 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html

-582957865 | 2024-05-02T00:16:00.491079

5431 / tcp

HTTP/1.1 404 Not Found
DATE: Fri, 19 Jan 2024 11:56:42 GMT
Connection: Keep-Alive
Server: LINUX/2.4 UPnP/1.0 BRCM400/1.0
Content-Type: text/xml; charset="utf-8"
EXT:

819727972 | 2024-05-15T07:13:19.271039

5432 / tcp

SSH-2.0-OpenSSH_7.4

1213931722 | 2024-05-12T21:16:49.913034

5435 / tcp

ICAP/1.0 501 Other\r\nServer: Traffic Spicer 7788179225\r\n

-2096652808 | 2024-04-17T05:57:41.098371

5446 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1023953321 | 2024-04-23T14:02:09.385077

5500 / tcp

HTTP/1.0 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm="proxy"
Connection: close
Content-type: text/html; charset=utf-8

-321444299 | 2024-05-12T21:00:20.066074

5560 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

-2096652808 | 2024-04-17T19:26:34.532858

5568 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1761482307 | 2024-05-08T10:07:56.453058

5569 / tcp

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

165188539 | 2024-05-10T20:13:59.437875

5599 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

819727972 | 2024-05-11T00:09:23.253939

5603 / tcp

SSH-2.0-OpenSSH_7.4

897328069 | 2024-05-10T20:20:00.654749

5605 / tcp

220 mail.scott000.com ESMTP

575925250 | 2024-05-10T19:03:26.015844

5672 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

1830187220 | 2024-05-13T00:12:21.273125

5673 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

539065883 | 2024-05-16T12:08:59.968409

5858 / tcp

1574088840 | 2024-05-12T06:07:11.442581

5938 / tcp

">Application and Content Networking Software 3.9</a>)\n</BODY><

1999272906 | 2024-05-05T11:11:36.130465

5984 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

120534451 | 2024-05-12T12:59:22.605248

6000 / tcp

X11 access denied

120534451 | 2024-05-04T14:35:54.962951

6001 / tcp

X11 access denied

-1681927087 | 2024-05-14T09:44:20.022001

6002 / tcp

kjnkjabhbanc283ubcsbhdc72

1723769361 | 2024-05-03T02:18:15.874266

6006 / tcp

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

2103111368 | 2024-04-17T21:05:13.367575

6008 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

-2017887953 | 2024-05-01T02:22:44.000136

6036 / tcp

SSH-2.0-OpenSSH_7.9

-1795027372 | 2024-05-03T04:11:09.242036

6080 / tcp

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

1813977069 | 2024-05-02T20:50:53.852821

6379 / tcp

-ERR wrong number of arguments for 'get' command

1624206335 | 2024-05-11T01:29:46.033718

6443 / tcp

HTTP/1.1 200 OK
Date: Sat, 11 May 2024 01:29:45 GMT
Content-Type: text/html
Content-Length: 2905
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
Etag: "3cc65395-ef4"
Server: Tengine
Set-Cookie: SERVERID=90870f4bc07040de485f6597cbb51103|1715390985|1715390985;Path=/
Vary: Accept-Encoding
Location: https://ocs.console.aliyun.com

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:49:b2:86:90:3c:9b:46:7a:60:5b:87
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: May  5 06:21:16 2023 GMT
            Not After : Jun  5 06:21:15 2024 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:1d:59:05:f6:92:ce:95:83:8b:8b:44:8f:29:
                    29:bb:b0:40:3c:2d:fe:35:5a:b8:24:7f:5b:9e:09:
                    ea:95:3b:29:06:35:c0:d7:90:47:11:0c:6e:36:52:
                    d0:45:d3:52:0b:8e:39:92:42:e4:c8:22:7c:3c:cc:
                    3e:e7:06:9c:61:a9:c4:70:eb:23:bb:1c:8a:62:de:
                    11:ef:c1:d4:b7:b9:0c:0f:e1:9e:4c:d7:21:1c:a6:
                    6c:c6:4e:d5:7c:a1:8a:ab:6d:54:ee:77:6c:6e:33:
                    e3:5d:c2:f2:6f:03:fa:7f:65:95:51:09:7f:71:2c:
                    35:b8:08:6a:10:20:fa:1c:10:30:a9:f3:b0:54:3d:
                    3f:10:d2:c4:a3:29:6f:30:d5:6c:56:71:23:ef:96:
                    90:86:06:5a:0e:88:c9:e3:af:6c:2d:b4:70:40:38:
                    69:eb:f3:b8:fe:fe:b6:18:35:4f:0a:12:ac:d9:30:
                    02:ee:ff:99:37:cc:5c:ff:39:14:0f:be:f6:9c:6c:
                    57:a0:d2:a9:7a:dc:e1:38:ad:73:7f:bd:65:48:8e:
                    14:b8:10:17:f6:cc:eb:59:50:e4:32:02:f0:18:f2:
                    9c:72:e7:84:ab:a6:33:c5:3d:c6:14:04:58:02:f2:
                    17:8f:05:c6:0f:b2:37:90:7c:a0:08:c5:90:85:c6:
                    cc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
            X509v3 Subject Alternative Name: 
                DNS:*.aliyun.com, DNS:aliyun.com, DNS:shog36304596.taobao.com, DNS:ynuf.aliapp.org, DNS:gsp-stg.lazada-seller.cn, DNS:gonshi.taobao.com, DNS:wwwproxy.faas.ele.me, DNS:eci-data-cn-chengdu.aliyun-inc.com, DNS:n.hebred.alibaba.com, DNS:education-staging.lazada.com.ph, DNS:sui.shuqiapi.com, DNS:aero.cainiao-inc.com, DNS:mail.zushoushou.com, DNS:mum.hzchengdun.com, DNS:autoumars.cs.daily.alibaba-inc.com, DNS:tgyjiojv.tmall.com, DNS:vn.alibaba.com, DNS:picasso.cainiao.com, DNS:oaaovnt-svb-grofije-an-shonghoi-tyjr-shore.ojiyvn-ina.aon.aliyun-inc.com, DNS:syan-seorah.taobao.com, DNS:master.jenkins.aliyun.com, DNS:svaoi.donggv.taobao.com, DNS:shop36940336.aliyun.com, DNS:shop1370624548167.1688.com, DNS:wap.alibaba-inc.com, DNS:member-m.lazada.vn, DNS:pgw-cld-s.alicdn.com, DNS:dondong.aliyun.com, DNS:marketplace.hemaos.com, DNS:sellercenter-ph-staging.lazada-seller.cn, DNS:fengxing.ojibobo-ina.aon.alibaba-inc.com, DNS:shop1418229697260.aliyun.com, DNS:msc.cbbs.tmall.com, DNS:checkout-m.lazada.sg, DNS:app110835.eapps.aliyun.com, DNS:aliserver.aliyun.com, DNS:os30-sg94.dogbridge.oserver-jozodo.alibaba.com, DNS:drive-m.quark.cn, DNS:sts-internoj.ev-aentroj-1.ojiyvn-ina.aon.aliyun-inc.com, DNS:shop36203510.taobao.com, DNS:shog2j628j8o33140.1688.com, DNS:builder.alibaba-inc.com, DNS:hotel.aliyun.com, DNS:yvndvn-oen-an-hongzhov.ojiyvn-ina.aon.aliyun-inc.com, DNS:poigate.amap.com, DNS:z11.cnzz.com, DNS:presto-public.aliyun-inc.com, DNS:va.stors.ojibobo-ina.aon.alibaba-inc.com, DNS:pages.lazada.sg, DNS:pre-phenix.alibaba-inc.com, DNS:rvyinooshon90999.1688.com, DNS:redmart.com, DNS:os30-sg94.dogbridge.oserver-jozodo.alibaba.com, DNS:admin.lazada.com.ph, DNS:433sgort.taobao.com, DNS:www6.alrouter.xixikf.cn, DNS:reward-store.lingxigames.com, DNS:grod-obn-taonf.ojiyvn-ina.aon.aliyun-inc.com, DNS:www.c.uc.cn, DNS:alidocs-activity.dingtalk.com, DNS:wpk.aliyun.com, DNS:doto.arn.1688.com, DNS:xingzhen-shore.aliyuncs.com, DNS:apr.yunos-inc.com, DNS:tesla-server.alibaba.net, DNS:goak02.1688.com, DNS:zm.sm-tc.cn, DNS:waltz.ele.me, DNS:yqgjoss.1688.com, DNS:ngd.n.taobao.com, DNS:poi-picture.amap.com, DNS:m-api.uc.cn, DNS:shog36222363.taobao.com, DNS:pkcity.com, DNS:adda-inner-shore.aliyuncs.com, DNS:dvbbo.alibaba.com, DNS:nst.ojiyvn-ina.aon.aliyun-inc.com, DNS:cr-private-share.cn-hangzhou.aliyun.com, DNS:datafeeds.lazada.co.id, DNS:booking-my.aliyun.com, DNS:uw-insight2-green-online.aliyun.com, DNS:barrnet.aliexpress.com, DNS:ups_lazada.security-nash.aliyun.com, DNS:netria-ans.v3.ojiyvn-ina.aon.aliyun-inc.com, DNS:file.aliwork.com, DNS:eci-inner.cn-heyuan.aliyun.com, DNS:asahot-aas.aliyun.com, DNS:cs.lazada.co.th, DNS:ron-ovth-test.an-shonghoi.ojiyvn-ina.aon.aliyun-inc.com, DNS:dkvon.tmall.com, DNS:grinword.1688.com, DNS:fijebroker-jzd-gk.alibaba.com, DNS:pre-phenix.aliyun.com, DNS:dfxytea.aliyun.com, DNS:api.alihealth.cn, DNS:wwwproduction.faas.ele.me, DNS:eai-inner.og-sovtheost-2.aliyuncs.com, DNS:management-open.gfn.cainiao.com, DNS:dcc.cainiao-inc.com, DNS:map-my.lel.asia, DNS:i56.taobao.com, DNS:hadjy.aliyun.com, DNS:gre-aonf-server-an.ojiyvn-ina.aon.aliyun-inc.com, DNS:ongfo.tmall.com, DNS:noriodi-an-shonghoi.doto.aliyun.com, DNS:combine.cainiao.com, DNS:pre-hot.aliyun.com, DNS:prodkm.11222.cn, DNS:app118614.eapps.dingtalkcloud.com, DNS:www1.tarpf.saee.org.cn, DNS:zotog168.1688.com, DNS:university.lazada.co.id, DNS:login.dingtalk.com, DNS:filebroker-lzd-my.alibaba.com, DNS:shog141778j891985.1688.com, DNS:www9.art.xixikf.cn, DNS:jingzhvongjinyiqi.tmall.com, DNS:tvrkey.ojibobo-ina.aon.alibaba-inc.com, DNS:tengxvnznsb.tmall.com, DNS:arms.alibaba-inc.com, DNS:0995.bjog.ahino.alibaba.com, DNS:shog37074687.taobao.com, DNS:chajian.sto.cn, DNS:hb-ogi.ojibobo-ina.aon.alibaba-inc.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5d:18:ee:c2:81:14:e9:4f:e1:f0:60:06:04:38:0c:69:8d:af:
        de:6f:38:cf:95:ae:df:44:11:cb:7b:fe:27:95:ad:58:ed:c8:
        7e:72:dc:00:45:49:60:49:e6:da:90:a3:e5:c4:bd:eb:5c:85:
        d6:b4:57:36:16:59:66:1f:b7:b5:f0:a1:ec:aa:2b:2f:e6:75:
        dc:8b:4a:46:af:77:42:41:54:65:88:22:33:0c:f6:75:a8:fd:
        f4:d2:b0:58:a0:2a:fe:08:f7:40:59:aa:9c:4f:73:53:eb:ff:
        e6:44:87:f0:ec:35:7b:f6:88:f8:aa:d6:7a:b3:5a:84:08:ec:
        c9:42:41:4f:25:6f:d8:8d:56:a9:9f:f0:4a:12:c7:e4:6b:da:
        65:b7:3a:34:2b:35:79:23:00:ea:c9:df:65:24:b1:45:96:56:
        de:76:94:57:cf:5e:f0:e7:88:3c:9e:81:d9:45:fa:ce:ff:a4:
        c4:5a:85:83:dd:62:cd:a0:be:42:16:45:1e:65:fb:da:02:ba:
        46:00:35:d3:97:51:fb:63:a4:f3:30:92:30:9c:30:c2:e7:12:
        40:15:4c:6c:d9:11:0b:74:cb:10:6e:cb:e7:61:36:0c:a6:0f:
        30:80:89:27:66:4d:07:92:a2:04:d8:21:30:9c:1c:90:af:ad:
        1a:89:17:74

378148627 | 2024-04-22T21:18:42.788952

6510 / tcp

HTTP/1.1 497 Http to Https
Server: nginx/1.20.1
Content-Type: text/html; charset=utf-8
Connection: close

-1056270173 | 2024-05-02T13:55:49.884805

6580 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

-832380282 | 2024-05-16T22:32:57.295010

6633 / tcp

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

1830187220 | 2024-05-09T09:17:19.001465

6653 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

-696112747 | 2024-05-07T05:16:06.255452

6666 / tcp

\x00\x0e@\xbdT\xa7\xd0f(*\xd4\x00\x00\x00\x00\x00

819727972 | 2024-05-09T13:23:03.242833

6667 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-05-14T06:11:15.977922

6668 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-445721795 | 2024-05-03T09:48:03.799569

6697 / tcp

\x00[\xc3\xaed\x1a\x7f\x00\x00

-1399940268 | 2024-04-25T15:57:23.170748

6748 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1136600457 | 2024-05-15T18:37:44.588752

7001 / tcp

HELO:10.3.6.0.false
AS:2048
HL:19

-80416702 | 2024-05-13T22:17:06.889049

7004 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25e0_CS-NKG-015sn19_26533-338

2087396567 | 2024-04-21T17:50:21.314013

7071 / tcp

kjnkjabhbanc283ubcsbhdc72

-1399940268 | 2024-05-12T16:10:42.928785

7171 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2071407588 | 2024-05-16T06:54:30.559381

7218 / tcp

ÿ

-1399940268 | 2024-05-16T22:37:33.578800

7415 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2081419599 | 2024-04-26T19:39:34.920915

7434 / tcp

@
03d

-1027277763 | 2024-05-04T10:34:11.308361

7443 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-GLOBAL1-CACHE107[2]
X-CCDN-ERRCODE-SRC: 01
X-CCDN-FORBID-CODE: 040001

-2031152423 | 2024-05-03T20:07:06.286391

7444 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

641705735 | 2024-05-05T14:11:10.917603

7547 / tcp



0
dø...

-971970408 | 2024-05-04T06:10:56.809324

7548 / tcp

-138733098 | 2024-04-19T16:26:55.490827

7634 / tcp

roku: ready

-339084706 | 2024-05-16T06:16:13.331968

7676 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

-1399940268 | 2024-04-25T19:41:52.525311

7778 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

842535728 | 2024-05-12T00:48:34.083573

7779 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

2033888749 | 2024-04-25T15:03:40.796825

7989 / tcp

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

-1399940268 | 2024-04-24T06:18:43.912373

7998 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1072892569 | 2024-05-16T08:11:45.522307

8001 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

-1399940268 | 2024-04-30T01:06:50.987862

8009 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

165188539 | 2024-05-04T21:08:02.857289

8033 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1105333987 | 2024-05-15T15:54:15.308502

8034 / tcp

\x00[KpU\x7f\x00\x00

921225407 | 2024-05-11T10:20:40.212373

8036 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1223115691 | 2024-05-06T23:59:56.398973

8040 / tcp

connect

1911457608 | 2024-05-14T12:01:54.362898

8051 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1648456501 | 2024-05-07T01:54:18.244705

8052 / tcp

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

819727972 | 2024-05-13T09:55:13.873448

8057 / tcp

SSH-2.0-OpenSSH_7.4

-1851048986 | 2024-05-08T16:53:41.889111

8080 / tcp

HTTP/1.1 200 OK
Cache-Control: no-cache,no-store,must-revalidate
Content-Length: 8372
Content-Type: text/html;charset=UTF-8
D-Service-Url: https://system.aliyun.com/storage-obfuscate
Date: Wed, 08 May 2024 16:53:41 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Server: Jetty(9.2.z-SNAPSHOT)
Set-Cookie: JSESSIONID.467fb48f=k70jcb0yis9wew6016p8vjh3;Path=/;HttpOnly
X-Content-Type-Options: nosniff
X-Frame-Options: sameorigin
X-Hudson: 1.395
X-Hudson-Cli-Port: 42375
X-Hudson-Theme: default
X-Instance-Identity: MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyxnXnxDkrsucwL3Ajf6nQ0gQyNSO7UCGFe+lpTkcEfKT9hOGjKGoDOPGFLtaq4petmNi8hKE9MJHLkJh0zfEfLXwcdSPgUqUI52wFk74hb8ugwQdxix3ruef1a5Z9a/06cUDaGskhVRg4/bdjFWaJlCuOH42huE97DYx0X8vt0LlyWgprLYfg62n7gZSb7SuVMTgEbCRiYNf04gTilXCKwWc0rLEr7dtz2QCCzXyKhp9ySyXp5JlQMp4Z44zZoomkmbx8o3khl4TdKFSDegxshPdFL+H8uPG/9AunmqDKNuk8uq4kPDUhQ8HEfnMpSOnYssi6XEE5AfJfllnvBUCQIDAQAB
X-Jenkins: 2.46.1
X-Jenkins-Cli-Port: 42375
X-Jenkins-Cli2-Port: 42375
X-Jenkins-Session: 5a9c13a0
X-Ssh-Endpoint: 59.110.117.150:44573

398077695 | 2024-05-03T03:02:38.626534

8081 / tcp

1189133115 | 2024-05-06T23:53:56.075587

8083 / tcp

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

1741579575 | 2024-05-10T22:55:59.391496

8085 / tcp

1960438949 | 2024-04-20T11:04:28.304474

8086 / tcp

Siemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready
ÿûÿûÿýÿþUsername:

1911457608 | 2024-05-02T06:45:40.221716

8087 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-971970408 | 2024-05-10T00:05:56.279718

8089 / tcp

-1344535834 | 2024-05-14T01:54:56.934098

8090 / tcp

HTTP/1.0 200 OK
Server: Proxy

1911457608 | 2024-04-21T20:26:42.764545

8094 / tcp

\x00[\x00\x00\x00\x00\x00\x00

104385780 | 2024-05-07T07:19:37.125394

8098 / tcp

ceph v2

1115736665 | 2024-05-08T02:40:19.479136

8099 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-AREACMCC2-CACHE15[8]
X-CCDN-FORBID-CODE: 040001

-1399940268 | 2024-04-27T04:30:49.932829

8105 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1960438949 | 2024-05-11T11:55:39.835634

8126 / tcp

Siemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready
ÿûÿûÿýÿþUsername:

1830187220 | 2024-05-06T13:51:39.484254

8139 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

819727972 | 2024-05-09T15:20:01.971808

8140 / tcp

SSH-2.0-OpenSSH_7.4

2087396567 | 2024-04-25T14:17:30.659394

8181 / tcp

kjnkjabhbanc283ubcsbhdc72

1320285193 | 2024-05-13T10:07:17.778040

8200 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

1991883981 | 2024-05-09T19:36:39.063615

8248 / tcp

B\x00\x00\x00\xc3\xbfn\x04Too many connections

1282941221 | 2024-04-30T20:39:58.576618

8251 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1911457608 | 2024-05-05T02:47:38.734427

8291 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1300025046 | 2024-05-08T01:39:26.124053

8333 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705941025.555-waf01bjtp3

1363464823 | 2024-04-29T17:54:58.336202

8419 / tcp

\x00[|ox\x7f\x00\x00

820958131 | 2024-05-05T18:55:27.571785

8426 / tcp

kjnkjabhbanc283ubcsbhdc72\x02

398077695 | 2024-05-09T04:43:46.052722

8429 / tcp

118537495 | 2024-05-08T04:55:52.555145

8443 / tcp

HTTP/1.1 301 Moved Permanently
Date: Wed, 08 May 2024 04:55:51 GMT
Content-Type: text/html
Content-Length: 314
Connection: keep-alive
Eagleeye-Traceid: 4c75e45abb33b05fde705864cd673c
Location: htps://ecs-api-share.cn-shanghai.aliyuncs.com
Server: Tengine/Aserver
Timing-Allow-Origin: *

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a7:27:29:07:10:52:7c:ae:c7:4a:96
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2
        Validity
            Not Before: Sep 12 07:56:08 2023 GMT
            Not After : Feb 20 10:00:00 2024 GMT
        Subject: CN=*.aliyuncs.com, O=Alibaba (China) Technology Co., Ltd., L=Hangzhou, ST=Zhejiang, C=CN
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:09:11:5f:ab:90:6d:62:07:27:05:6a:9e:
                    c8:80:6c:be:79:f4:b3:19:53:5d:e5:c4:7c:8a:2a:
                    2c:18:d0:5d:2d:3b:ff:f6:a3:1f:f6:b5:48:03:92:
                    d1:fc:f8:ce:42:25:6b:a4:23:31:4d:9b:76:6f:7d:
                    8b:18:e2:09:df:cb:95:8d:a9:b8:27:4f:b6:58:ad:
                    e5:be:54:77:ef:22:42:47:6d:cc:d8:a1:04:66:0d:
                    2c:3c:13:b5:5c:57:bf:e2:5a:38:99:99:4b:28:f0:
                    79:8c:ef:8e:cb:12:87:5d:4b:89:0f:70:27:d0:de:
                    f0:91:41:d5:5b:54:2c:20:93:74:fd:7e:64:64:bc:
                    03:81:a2:d6:07:62:5e:c9:51:8f:ab:48:cb:4f:28:
                    f3:40:f6:46:51:bd:83:b8:e2:81:f9:df:bb:4c:f6:
                    9d:2f:f6:22:f9:f9:4b:5c:ce:0a:55:25:d1:55:28:
                    d9:dc:51:a9:5b:c3:81:19:c5:11:3e:8c:d8:d9:c3:
                    9e:b6:74:0c:64:f1:e0:2c:be:e8:7d:0b:c0:b1:c1:
                    e2:69:4d:a7:d3:de:b6:3b:e2:aa:06:bb:d2:61:d1:
                    83:93:3d:92:96:bd:64:4d:d8:fd:75:42:d3:63:9f:
                    3f:00:ee:4e:bf:14:33:dd:cf:c3:9f:ce:34:a5:f9:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                BD:22:FF:00:93:D9:9B:FA:87:FC:C5:14:21:44:0A:DD:BF:4A:AA:A6
            X509v3 Authority Key Identifier: 
                96:DE:61:F1:BD:1C:16:29:53:1C:C0:CC:7D:3B:83:00:40:E6:1A:7C
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g2
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
            X509v3 Subject Alternative Name: 
                DNS:*.aliyuncs.com, DNS:*.cn-hangzhou-mybk.aliyuncs.com, DNS:*.cn-nantong.aliyuncs.com, DNS:*.cn-shenzhen-finance-1.aliyuncs.com, DNS:*.cn-sichuan.aliyuncs.com, DNS:*.jp-fudao.aliyuncs.com, DNS:*.ap-south-1.aliyuncs.com, DNS:*.cn-wulanchabu.aliyuncs.com, DNS:*.cn-huhehaote.aliyuncs.com, DNS:*.cn-chengdu.aliyuncs.com, DNS:*.rus-west-1.aliyuncs.com, DNS:*.ap-southeast-1.aliyuncs.com, DNS:*.in-mumbai.aliyuncs.com, DNS:*.cn-guangzhou.aliyuncs.com, DNS:*.cn-hangzhou.aliyuncs.com, DNS:union.lazada.com.my, DNS:shog36403617.taobao.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        08:44:5c:57:1a:a9:f3:fa:db:51:45:8b:4d:04:56:19:fa:c2:
        a7:25:81:89:33:9f:45:05:6d:b2:cc:9c:04:78:ab:d8:d9:95:
        05:ee:90:5f:4c:eb:4f:d5:4e:c1:ab:48:9e:8d:59:6b:f5:37:
        c6:20:3d:cf:97:d5:b8:66:b9:82:17:26:db:60:34:95:1b:d8:
        32:ca:00:fd:08:46:c0:e9:d9:6a:d0:2d:bf:28:6c:27:93:6b:
        d6:ca:5d:d6:01:cc:18:6e:a6:fb:be:fd:e9:1c:7a:d8:58:ca:
        ea:db:a4:db:42:f6:14:4d:24:ad:8f:2d:4e:f5:5c:b1:8d:df:
        83:af:29:09:a7:7b:c1:bd:b6:c1:b0:31:04:3c:8c:b0:07:d4:
        a2:bf:e0:08:3b:e4:5f:f8:2d:72:d9:de:f1:b8:d2:7c:d1:b3:
        4a:e8:53:97:0f:94:f5:dc:b8:70:57:88:72:81:d8:06:a2:d0:
        7c:61:91:21:68:41:76:f0:2f:8f:d7:32:4e:36:7a:77:83:64:
        a4:fd:10:be:52:43:a8:48:0b:9b:d8:ed:93:7a:80:1e:65:53:
        47:cf:20:d2:31:61:72:78:92:7b:d4:fd:96:21:d8:59:dc:b6:
        be:18:9a:80:43:9a:79:eb:45:47:fd:bd:ce:2a:dd:0b:9e:ef:
        94:36:a5:87

1948301213 | 2024-05-08T06:47:20.982680

8445 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

1911457608 | 2024-04-26T08:06:34.053167

8448 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1929293267 | 2024-05-08T18:35:51.059608

8500 / tcp

HTTP/1.1 404 Not Found
Server: nginx
Content-Type: text/html; charset=utf-8
Connection: keep-alive

550048729 | 2024-05-04T17:33:30.949319

8545 / tcp

ÿÿÿ
0 ...

819727972 | 2024-05-14T13:46:06.241849

8554 / tcp

SSH-2.0-OpenSSH_7.4

-1888448627 | 2024-05-02T21:06:48.652506

8575 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1733645023 | 2024-05-02T00:24:26.829652

8586 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

842535728 | 2024-05-13T03:01:56.200689

8649 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

-1399940268 | 2024-05-13T00:21:44.797598

8688 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1948301213 | 2024-05-10T21:46:37.355101

8728 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

819727972 | 2024-04-22T12:06:04.776897

8813 / tcp

SSH-2.0-OpenSSH_7.4

1208318993 | 2024-05-05T02:40:21.066619

8837 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

-1746074029 | 2024-05-09T11:54:09.829855

8843 / tcp

101 imqbroker =unV\r\n

-339084706 | 2024-04-18T22:19:05.274029

8853 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

-1476017887 | 2024-04-27T20:28:59.754346

8854 / tcp

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

1332894250 | 2024-04-22T16:16:39.876132

8858 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

-2140303521 | 2024-05-11T05:52:51.880553

8862 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

-1399940268 | 2024-05-10T21:27:03.649125

8863 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

321971019 | 2024-04-22T03:30:54.205646

8867 / tcp

-ERR client ip is not in whitelist\r

-1888448627 | 2024-05-12T18:33:00.383767

8878 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1885525731 | 2024-05-08T06:39:07.485325

8899 / tcp

\\xab\xca\xa5]\\x00\\x00\\x00\\x18\\xc0\\x00\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xab\xca\xa5]\\x00\\x00\\x00\\x18\\xc0\\x00\\x00\\x04\\xff\\xff\\xff\\xb9\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00

1966849516 | 2024-05-15T01:59:05.531312

9000 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65adecfe_CS-000-01NFs233_3728-19750

-1026951088 | 2024-05-11T23:00:49.463195

9001 / tcp

erro ip

117101543 | 2024-04-28T14:01:33.935992

9002 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

165188539 | 2024-05-02T13:32:55.043639

9024 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1428621233 | 2024-04-28T11:11:38.629472

9028 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

745343730 | 2024-05-15T07:44:42.820177

9042 / tcp

220 smtp.qq.com Esmtp QQ Mail Server

1911457608 | 2024-04-28T15:04:49.271074

9043 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-358801646 | 2024-05-16T20:06:10.383106

9045 / tcp

SSH-2.0-OpenSSH_6.6.1

1824169301 | 2024-05-09T01:36:05.918776

9051 / tcp

HÿjHost '101.133.140.114' is not allowed to 
connect to this MySQL server

1082239536 | 2024-05-10T18:46:33.249837

9090 / tcp

HTTP/1.1 302 Found
Content-Length: 0
Date: Fri, 10 May 2024 18:46:32 GMT
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://cmpg-saas.aliyuncs.com/stop/transform
Set-Cookie: JSESSIONID=node0v845mtfddebfd8llaswsmt1u625.node0; Path=/; HttpOnly
X-Frame-Options: SAMEORIGIN

1690634669 | 2024-04-17T21:20:01.164650

9091 / tcp

-2089734047 | 2024-05-02T04:12:12.583728

9092 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1461540015 | 2024-05-17T00:37:57.988122

9095 / tcp

audio 0 RTP/AVP 18 4 3 8 0 101
a

-1399940268 | 2024-05-12T20:05:19.764252

9100 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1426971893 | 2024-04-21T02:24:30.236904

9107 / tcp

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

-891714208 | 2024-05-11T22:45:07.707252

9108 / tcp

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

1161309183 | 2024-05-05T19:16:56.053461

9119 / tcp

ProxyServer is ready

-1316398834 | 2024-05-13T23:51:45.197308

9151 / tcp

ÿ

2103111368 | 2024-05-13T21:36:37.791859

9160 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

819727972 | 2024-04-20T18:24:08.699996

9199 / tcp

SSH-2.0-OpenSSH_7.4

1119512965 | 2024-05-15T23:00:48.473031

9200 / tcp

HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
content-encoding: gzip
content-length: 171

671605376 | 2024-05-11T13:56:19.981706

9206 / tcp

SSH-2.0-OpenSSH_X.X

-1399940268 | 2024-04-24T12:31:18.916248

9207 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

408230060 | 2024-04-19T23:26:29.138635

9216 / tcp

\r\nSorry, that nickname format is invalid.\r\n

1308377066 | 2024-04-22T18:41:20.266572

9251 / tcp

ncacn_http/1.0

1308377066 | 2024-05-01T19:50:08.439426

9300 / tcp

ncacn_http/1.0

-1399940268 | 2024-04-23T02:46:34.248876

9303 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1327660293 | 2024-05-15T00:54:31.475207

9306 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

819727972 | 2024-04-29T17:23:45.850798

9389 / tcp

SSH-2.0-OpenSSH_7.4

1909672637 | 2024-04-30T12:31:56.115685

9418 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff

1282941221 | 2024-05-09T04:43:11.385619

9443 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-1399940268 | 2024-04-26T04:50:48.116250

9527 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1011407350 | 2024-05-09T08:38:07.757287

9530 / tcp

* OK GroupWise IMAP4rev1 Server Ready\r\n

1308377066 | 2024-05-07T13:47:42.945903

9600 / tcp

ncacn_http/1.0

550048729 | 2024-05-16T05:24:44.196484

9633 / tcp

ÿÿÿ
0 ...

-1477838366 | 2024-05-12T08:28:17.401286

9761 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

-527005584 | 2024-05-06T12:13:29.591873

9800 / tcp

/0 0 L
/0 0 HUH

-1451615933 | 2024-05-02T15:41:35.325707

9876 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705941912.469-s5jhg

1304012963 | 2024-05-16T12:14:40.562062

9898 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: close

-1839864261 | 2024-05-05T11:04:15.758656

9943 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25a5_PS-TNH-01Vm9154_3387-14536

-1399940268 | 2024-04-25T23:23:18.123870

9950 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

104385780 | 2024-05-11T05:52:20.561654

9981 / tcp

ceph v2

1161309183 | 2024-05-16T20:25:13.557815

9999 / tcp

ProxyServer is ready

677934968 | 2024-05-09T05:41:29.655789

10000 / tcp

lm^)Q

1492413928 | 2024-05-01T07:02:39.639047

10001 / tcp

SSH-2.0-OpenSSH_7.5

-1375131644 | 2024-05-10T04:25:07.920583

10134 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

89282912 | 2024-05-13T13:33:35.002620

10250 / tcp

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto
col:SOAP, MKSDisplayProtocol:VNC , ,

-2071036981 | 2024-05-10T05:55:25.196006

10443 / tcp

HTTP/1.1 403 Forbidden
Date: Fri, 10 May 2024 05:55:25 GMT
Content-Type: text/html
Content-Length: 238
Connection: keep-alive
Server: Tengine
Location: https://f3400a2.umindex.com
Via: live93.cn2317[,0]

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:35:2e:4a:35:dc:34:ed:3b:e8:9c:38
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: Apr 12 23:17:04 2023 GMT
            Not After : May 13 23:11:02 2024 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.alibabacorp.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:10:6f:92:40:56:2e:1e:ab:26:e9:14:b4:f0:44:
                    d3:3a:39:60:aa:93:f0:80:59:6f:4a:6c:91:38:cb:
                    70:67:30:f4:3c:7f:5c:16:81:df:30:3c:18:e2:4d:
                    0c:b6:66:c7:84:7a:f6:49:35:b4:27:ed:d7:6e:52:
                    ca:f8:ba:54:4a
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                EB:3E:07:A3:E1:1B:8B:BD:B5:1C:00:D6:2C:14:E5:3E:32:B8:48:18
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
            X509v3 Subject Alternative Name: 
                DNS:*.alibabacorp.com, DNS:*.56.cainiao-inc.com, DNS:*.56.cainiao.com, DNS:*.9game.cn, DNS:*.a.alibaba-inc.com, DNS:*.abs.alibaba-inc.com, DNS:*.acc.alibaba-inc.com, DNS:*.acds.taobao.org, DNS:*.acp.alibaba-inc.com, DNS:*.acs.alibabaplanet.com, DNS:*.addr.cainiao-inc.com, DNS:*.admin.alibaba-inc.com, DNS:*.admin.alitrip.com, DNS:*.admin.cainiao-inc.com, DNS:*.admin.fliggy.com, DNS:biz.aliyun.com, DNS:ogi-inner.aliyuncs.com, DNS:shop36279.aliyun.com, DNS:hudongcheng.tmall.hk, DNS:jmacs-m.lazada.com.ph, DNS:m.sellercenter.lazada.sg, DNS:hzvs2.cnzz.com, DNS:08999.blog.china.alibaba.com, DNS:blingirl.1688.com, DNS:shog36816146.taobao.com, DNS:ssc-vn-staging.lazada-seller.cn, DNS:www.hetechenergy.com, DNS:shop362774879.world.aliyun.com, DNS:svn.aliyun.com, DNS:qionfengsteej.1688.com, DNS:ipassport.ele.me, DNS:pre-c.lazada.co.th, DNS:120.aliexpress.ru, DNS:aproc-gcl.alibaba-inc.com, DNS:basalog.9game.cn, DNS:www13.10219.com, DNS:channel-engine-admin.gfn.cainiao.com, DNS:shog36324138.taobao.com, DNS:mmc-scm-workbench.hemayx.cn, DNS:tool-wa.proxy.taobao.org, DNS:aonggvnv.1688.com, DNS:yundunnext.console.aliyun.com, DNS:datafeeds.lazada.co.th, DNS:shop406198058.world.taobao.com, DNS:pre-test-idc-meta-dn-be.amap.com, DNS:greener.aliyun.com, DNS:gsg.lingxigames.com, DNS:pre-onebp.aliyun.com, DNS:ogt-ogi.ojibobo-ina.aon.alibaba-inc.com, DNS:affiliate.lazada.com.my, DNS:proxy.fzwxxcx.com, DNS:tianjiudz.aliyun.com, DNS:cnl-ids-console.sg.cainiao.com, DNS:console-aliapi.alpha.redmart.com, DNS:www.cfradio.cn, DNS:17joi.ojibobo-ina.aon.alibaba-inc.com, DNS:shog36205388.taobao.com, DNS:webapi.yunos-inc.com, DNS:partner.wt.cainiao.com, DNS:connected.lazada.sg, DNS:vidigod.1688.com, DNS:laobao3366.taobao.com, DNS:pdmsapi.alibaba-inc.com, DNS:shop1495170581586.1688.com, DNS:www.llportal.co.id, DNS:aongoss-tionyon-inner.vga-groxy.aliyuncs.com, DNS:shog3vtt9525.norket.aliyun.com, DNS:redirect.simba.taobao.com, DNS:rb.dfjy.ojibobo-ina.aon.alibaba-inc.com, DNS:oceanbase-cn-zhangjiakou.aliyun-inc.com, DNS:yngjostia.1688.com, DNS:pre-web.lazada.com, DNS:shop36381602.taobao.com, DNS:gw.api.aliyun.com, DNS:mon.alibaba-inc.com, DNS:fijebroker-jzd-gh.alibaba.com, DNS:gre-streon.aonsoje.aliyun.com, DNS:shop36475911.taobao.com, DNS:yundun-sddp.aliyun.com, DNS:yidvzy.1688.com, DNS:shop36883874.aliyun.com, DNS:shog36306469.taobao.com, DNS:asn.ojibobo-ina.aon.alibaba-inc.com, DNS:fs-slave-china.tms.taobao.org, DNS:ase.ojiyvn-ina.aon.aliyun-inc.com, DNS:api.lazada.co.th, DNS:shop1442508391642.aliyun.com, DNS:shop36193895.taobao.com, DNS:ishog.taobao.com, DNS:wwwadmin.faas.ele.me, DNS:map-vn.lel.asia, DNS:gjxahen.1688.com, DNS:admin-p.lazada.com.ph, DNS:dsg-an-beijing.doto.aliyun.com, DNS:77.alibaba-inc.com, DNS:pis-pcdn.youku.com, DNS:wwwevents.faas.ele.me, DNS:drive-m.quark.cn, DNS:my-m.lazada.co.th, DNS:www-src.lazada.co.th, DNS:epg.alisnm.aisee.tv, DNS:shog36584913.taobao.com, DNS:mail.morningstarnet.com, DNS:lwst.taobao.com, DNS:yovshv.ojibobo-ina.aon.alibaba-inc.com, DNS:nseog.aliyuncs.com, DNS:pdpdesc.lazada.co.th, DNS:gvi.ojibobo-ina.aon.alibaba-inc.com, DNS:www1.4g.xixikf.cn, DNS:ean.an-beijing.aliyuncs.com, DNS:pre-lighthouse.lazada.com.ph, DNS:txynts.tmall.com, DNS:pre.lazada.sg, DNS:shop1495299047519.1688.com, DNS:xz.aliyun.com, DNS:onbori-server.vga.rds.aliyuncs.com, DNS:www.lex.in.th, DNS:unitedkingdom.lex.in.th, DNS:eag.1688.com, DNS:adsense.lazada.sg, DNS:shog37073832.taobao.com, DNS:shog902h910393823.1688.com, DNS:aovnt.taobao.com, DNS:sts.aliyuncs.com, DNS:ricescience.org, DNS:jycm.lydaas.com, DNS:shog36917319.taobao.com, DNS:station.lazada.vn, DNS:shop47q5964m381l6.aliyun.com, DNS:wenyu.stars.aliyun.com, DNS:yunfeifs.tmall.com, DNS:shog1388509015890.1688.com, DNS:shop36585113.aliyun.com, DNS:api.employees.aliyun.com, DNS:curtainyj.aliyun.com, DNS:bata.gmz.xixikf.cn, DNS:v.youku.com, DNS:survey.damai.cn, DNS:shog05ag1k8416879.1688.com, DNS:shop36400926.aliyun.com, DNS:data-processing-factory.amap.com, DNS:acs-m.confong.cn, DNS:27gifo.1688.com, DNS:oiadeb.abbs.tmall.com, DNS:shog151aj73534062.1688.com, DNS:content.aliyun.com, DNS:vop.alicom.alibaba-inc.com, DNS:shop4211v780j6007.aliyun.com, DNS:msgacs-wapa.lazada.sg, DNS:nt2.ojibobo-ina.aon.alibaba-inc.com, DNS:order.cbbs.tmall.com, DNS:ali-mdm.aliyun.com, DNS:nvne888.1688.com, DNS:thub-sto.cainiao.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9d:99:9b:3b:80:da:f5:43:f3:cb:c4:52:c1:f2:fc:a8:bb:40:
        f3:93:7b:a3:ff:97:f9:04:12:25:69:37:b0:79:5b:f5:30:f8:
        a9:a6:b3:12:08:ef:dc:a3:b3:d3:d7:57:a1:53:11:25:61:de:
        cc:04:72:3f:71:12:29:36:d5:ba:b0:46:b3:52:12:89:f5:f3:
        d6:aa:49:42:6f:71:93:39:6b:d1:83:2d:af:50:6e:98:61:6a:
        e9:91:19:8a:76:71:30:73:a5:70:ca:be:87:65:1e:1f:17:0e:
        0d:39:33:bc:0c:c2:75:4f:e8:d9:81:77:d9:94:65:ff:a5:99:
        bd:6d:20:b4:6d:99:a1:3f:ea:10:1f:a2:39:a2:a3:28:b0:a3:
        75:20:46:01:bf:25:b3:97:2b:71:d9:46:68:4f:e0:ff:53:99:
        45:3c:9f:f2:4d:97:49:95:c4:9b:77:c0:31:2b:26:c6:c4:db:
        f4:e3:ad:19:d6:54:82:0d:04:3f:99:b5:c0:fd:25:e2:bd:9d:
        6a:21:b8:18:b4:75:24:3d:0e:ec:8b:b5:c4:84:07:6f:b6:f2:
        1e:ed:7f:c2:00:d9:e2:ad:f7:32:ad:ba:ea:6a:ab:52:40:fa:
        e3:42:d0:9f:98:6b:67:b6:4f:93:12:3b:36:90:be:95:5c:13:
        b7:f7:5a:cf

1690634669 | 2024-05-12T16:06:18.456500

10554 / tcp

2115448635 | 2024-04-26T11:12:20.273782

10909 / tcp

Toshiba e-STUDIO 233 copier/printer/fax http config

709622286 | 2024-04-17T18:42:50.917080

10911 / tcp

OK Welcome <299685> on DirectUpdate server 7286\r\n

-2089734047 | 2024-04-22T08:48:53.718294

11000 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-2089734047 | 2024-05-05T20:58:18.432959

11112 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

921225407 | 2024-05-02T10:35:18.213848

11210 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-136006866 | 2024-05-03T07:19:28.362761

11211 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

-1327660293 | 2024-04-24T16:13:11.247605

11300 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-1245716040 | 2024-05-14T11:59:15.849101

12000 / tcp

220 welcome to connecting FTP server

488204803 | 2024-05-15T04:42:35.020401

12345 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae263c_CS-000-01Avv40_829-3172

-1344535834 | 2024-05-03T04:31:19.145945

13579 / tcp

HTTP/1.0 200 OK
Server: Proxy

-1399940268 | 2024-05-10T02:58:34.026801

14147 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1948301213 | 2024-05-14T21:33:09.740462

14265 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

-1611764932 | 2024-05-13T10:36:14.377104

14344 / tcp

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

-1311598826 | 2024-04-19T15:20:50.426314

16010 / tcp

AMQP:
cluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local
copyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.
information:Licensed under the MPL 2.0. Website: https://rabbitmq.com
platform:Erlang/OTP 24.1
product:RabbitMQ
version:3.9.7
Capabilities:
publisher_confirms:true
exchange_exchange_bindings:true
basic.nack:true
consumer_cancel_notify:true
connection.blocked:true
consumer_priorities:true
authentication_failure_close:true
per_consumer_qos:true
direct_reply_to:tru

-1840324437 | 2024-05-13T17:56:43.259272

16992 / tcp

-1428621233 | 2024-05-14T16:13:56.501838

16993 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

1282941221 | 2024-05-14T08:04:27.163816

18081 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-375604792 | 2024-05-06T05:29:12.894700

18245 / tcp

220 Microsoft FTP Service

-971970408 | 2024-05-01T20:23:18.704670

18553 / tcp

-1375131644 | 2024-04-29T19:09:35.791614

19000 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

1900503736 | 2024-05-15T09:37:09.795253

20000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

841014058 | 2024-05-13T07:32:11.519574

20256 / tcp

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

1363464823 | 2024-04-21T22:22:00.620703

20547 / tcp

\x00[|ox\x7f\x00\x00

-1399940268 | 2024-05-15T21:33:11.387645

21025 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2024-05-16T19:19:08.123466

21379 / tcp

SSH-2.0-OpenSSH_7.4

-1914935523 | 2024-05-08T05:26:05.197139

23023 / tcp

ceph v2

550048729 | 2024-04-30T15:08:54.163097

25105 / tcp

ÿÿÿ
0 ...

-1329831334 | 2024-05-09T04:04:31.699228

25565 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

1911457608 | 2024-05-16T15:29:07.924321

27015 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1763259671 | 2024-05-13T04:12:44.900614

27017 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

103159425 | 2024-05-14T16:56:39.762265

28015 / tcp

SSH-1.99-RGOS_SSH

-641479109 | 2024-05-02T01:28:46.549172

28080 / tcp

[xU-

842535728 | 2024-05-03T06:37:39.996935

30002 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

1887224352 | 2024-05-04T20:06:22.536179

30003 / tcp

2087396567 | 2024-05-08T20:26:17.756412

33060 / tcp

kjnkjabhbanc283ubcsbhdc72

819727972 | 2024-05-06T00:26:58.486001

35000 / tcp

SSH-2.0-OpenSSH_7.4

472902042 | 2024-05-11T20:18:23.075544

37215 / tcp

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

-1746074029 | 2024-05-11T16:41:23.464181

37777 / tcp

101 imqbroker =unV\r\n

-1399940268 | 2024-05-08T03:09:26.507572

41800 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-433302150 | 2024-05-10T17:16:55.572140

44158 / tcp

/multistream/1.0.0

51259122 | 2024-05-15T15:41:33.570445

44818 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

2087396567 | 2024-04-30T05:24:37.955254

47990 / tcp

kjnkjabhbanc283ubcsbhdc72

1758994290 | 2024-04-19T13:20:52.577818

49152 / tcp

HTTP/1.1 500 Internal Server Error
CONTENT-LENGTH: 411
CONTENT-TYPE: text/xml; charset="utf-8"
DATE: Mon, 22 Jan 2024 14:56:01 GMT
EXT:
SERVER: Linux/3.10.0, UPnP/1.0, Portable SDK for UPnP devices/1.6.18
X-User-Agent: redsonic

996960436 | 2024-05-12T21:42:58.612546

50000 / tcp

572 Relay not authorized

-1136600457 | 2024-05-07T18:00:20.768088

50070 / tcp

HELO:10.3.6.0.false
AS:2048
HL:19

-1681927087 | 2024-05-14T23:28:08.462668

50100 / tcp

kjnkjabhbanc283ubcsbhdc72

819727972 | 2024-05-09T06:31:43.371192

51235 / tcp

SSH-2.0-OpenSSH_7.4

1011407350 | 2024-05-14T05:22:56.719049

54138 / tcp

* OK GroupWise IMAP4rev1 Server Ready\r\n

-1888448627 | 2024-05-14T15:09:35.032661

55000 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

104385780 | 2024-05-12T00:29:24.060201

55442 / tcp

ceph v2

677934968 | 2024-04-24T07:08:50.117324

55443 / tcp

lm^)Q

-1032713145 | 2024-05-11T04:16:30.691287

55553 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

1308377066 | 2024-05-01T12:36:52.690358

55554 / tcp

ncacn_http/1.0

-1316398834 | 2024-05-08T22:11:21.007678

60129 / tcp

ÿ

165188539 | 2024-04-23T15:44:05.164608

61613 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

819727972 | 2024-04-21T11:55:20.877417

61616 / tcp

SSH-2.0-OpenSSH_7.4

980478633 | 2024-05-12T16:11:22.481429

62078 / tcp

rry, that nickname format is invalid.

59.110.117.150

Last Seen: 2024-05-17

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1327660293 | 2024-05-14T09:36:04.652484 11 / tcp

1286504516 | 2024-04-30T07:50:52.189005 13 / tcp

1267517148 | 2024-05-07T02:03:29.335762 15 / tcp

-390388957 | 2024-05-07T17:25:48.747508 17 / tcp

829384519 | 2024-05-01T09:33:45.248450 19 / tcp

-1248408558 | 2024-04-30T10:03:19.045043 21 / tcp

-1816600103 | 2024-05-06T20:38:08.903310 23 / tcp

-1399940268 | 2024-05-07T15:05:21.958059 25 / tcp

2046098166 | 2024-05-11T07:29:28.895357 37 / tcp

-2096652808 | 2024-04-20T15:18:09.734735 43 / tcp

-1909001798 | 2024-05-06T12:12:47.187960 49 / tcp

-1511422614 | 2024-04-18T23:43:09.658338 53 / tcp

-1763883228 | 2024-05-10T07:07:37.261517 70 / tcp

-1264324149 | 2024-04-28T03:29:54.561305 79 / tcp

665347273 | 2024-05-10T15:30:03.430936 80 / tcp

550048729 | 2024-05-14T19:11:37.348807 83 / tcp

1911457608 | 2024-05-14T22:51:00.508240 102 / tcp

-1399940268 | 2024-04-28T00:59:37.854264 104 / tcp

745343730 | 2024-04-21T01:10:20.974829 110 / tcp

2087396567 | 2024-04-19T05:27:40.561514 111 / tcp

-1986594217 | 2024-05-14T01:41:47.833829 113 / tcp

-1958992631 | 2024-05-02T17:14:30.041464 119 / tcp

1763259671 | 2024-05-11T04:35:48.010185 122 / tcp

1141948216 | 2024-04-23T02:33:09.422337 135 / tcp

219070077 | 2024-05-16T02:49:04.232183 143 / tcp

1911457608 | 2024-05-04T00:15:38.288752 175 / tcp

-399606100 | 2024-04-27T17:06:27.574593 179 / tcp

-2089734047 | 2024-04-21T13:32:15.917249 180 / tcp

819727972 | 2024-05-10T23:32:00.482520 195 / tcp

362630950 | 2024-04-17T06:47:06.039738 211 / tcp

-1399940268 | 2024-04-25T15:03:16.072609 221 / tcp

-1022036431 | 2024-05-02T13:08:12.391543 264 / tcp

676753056 | 2024-05-16T23:03:08.463485 311 / tcp

-1743283776 | 2024-05-08T12:31:09.399761 389 / tcp

928665344 | 2024-05-14T00:22:13.776404 427 / tcp

-981665732 | 2024-05-16T04:09:48.270217 443 / tcp

-971970408 | 2024-05-12T11:41:51.090763 444 / tcp

897328069 | 2024-05-02T02:24:29.739062 465 / tcp

-1399940268 | 2024-05-12T17:42:46.202243 502 / tcp

921225407 | 2024-05-15T07:22:49.821863 503 / tcp

1690634669 | 2024-05-16T21:27:21.606860 515 / tcp

444328471 | 2024-04-29T16:50:32.842676 548 / tcp

-927382641 | 2024-04-20T04:43:16.490711 554 / tcp

745343730 | 2024-05-16T22:12:31.123901 587 / tcp

-1112304903 | 2024-05-13T22:14:18.567534 593 / tcp

1300162323 | 2024-05-12T05:53:29.532778 666 / tcp

119860953 | 2024-05-17T00:59:31.241484 771 / tcp

921225407 | 2024-05-08T21:05:32.602382 772 / tcp

307999478 | 2024-05-15T20:43:25.190377 789 / tcp

-1970692834 | 2024-05-16T04:15:40.403290 873 / tcp

-936692830 | 2024-05-01T23:48:33.129720 992 / tcp

1208318993 | 2024-04-29T19:11:25.580581 993 / tcp

689999346 | 2024-05-04T22:00:32.680034 995 / tcp

171352214 | 2024-05-05T02:33:01.351900 1023 / tcp

660175493 | 2024-05-05T12:12:21.289408 1024 / tcp

819727972 | 2024-05-05T15:59:47.978861 1025 / tcp

-653033013 | 2024-04-29T13:44:38.011914 1099 / tcp

1282941221 | 2024-05-10T23:08:50.506924 1153 / tcp

1778988322 | 2024-05-16T09:16:24.250663 1177 / tcp

-1969169410 | 2024-04-21T16:33:12.987145 1200 / tcp

321971019 | 2024-05-03T01:23:53.801030 1234 / tcp

842535728 | 2024-05-10T12:31:12.926399 1311 / tcp

2087396567 | 2024-04-23T15:18:00.849872 1337 / tcp

45131230 | 2024-04-21T21:42:14.434630 1366 / tcp

-454087041 | 2024-04-29T21:18:46.064755 1388 / tcp

-325802316 | 2024-05-10T18:27:51.274289 1433 / tcp

-1598265216 | 2024-05-09T11:51:21.850456 1515 / tcp

-805164506 | 2024-05-11T20:36:38.822267 1521 / tcp

2087396567 | 2024-05-01T17:37:45.132861 1599 / tcp

-971970408 | 2024-05-03T03:42:01.375160 1604 / tcp

1103582599 | 2024-05-09T04:34:55.051434 1723 / tcp

-274082663 | 2024-05-15T20:09:50.721653 1800 / tcp

2087396567 | 2024-05-07T02:16:39.883960 1883 / tcp

-1327660293 | 2024-05-14T09:36:04.652484
11 / tcp

1286504516 | 2024-04-30T07:50:52.189005
13 / tcp

1267517148 | 2024-05-07T02:03:29.335762
15 / tcp

-390388957 | 2024-05-07T17:25:48.747508
17 / tcp

829384519 | 2024-05-01T09:33:45.248450
19 / tcp

-1248408558 | 2024-04-30T10:03:19.045043
21 / tcp

-1816600103 | 2024-05-06T20:38:08.903310
23 / tcp

-1399940268 | 2024-05-07T15:05:21.958059
25 / tcp

2046098166 | 2024-05-11T07:29:28.895357
37 / tcp

-2096652808 | 2024-04-20T15:18:09.734735
43 / tcp

-1909001798 | 2024-05-06T12:12:47.187960
49 / tcp

-1511422614 | 2024-04-18T23:43:09.658338
53 / tcp

-1763883228 | 2024-05-10T07:07:37.261517
70 / tcp

-1264324149 | 2024-04-28T03:29:54.561305
79 / tcp

665347273 | 2024-05-10T15:30:03.430936
80 / tcp

550048729 | 2024-05-14T19:11:37.348807
83 / tcp

1911457608 | 2024-05-14T22:51:00.508240
102 / tcp

-1399940268 | 2024-04-28T00:59:37.854264
104 / tcp

745343730 | 2024-04-21T01:10:20.974829
110 / tcp

2087396567 | 2024-04-19T05:27:40.561514
111 / tcp

-1986594217 | 2024-05-14T01:41:47.833829
113 / tcp

-1958992631 | 2024-05-02T17:14:30.041464
119 / tcp

1763259671 | 2024-05-11T04:35:48.010185
122 / tcp

1141948216 | 2024-04-23T02:33:09.422337
135 / tcp

219070077 | 2024-05-16T02:49:04.232183
143 / tcp

1911457608 | 2024-05-04T00:15:38.288752
175 / tcp

-399606100 | 2024-04-27T17:06:27.574593
179 / tcp

-2089734047 | 2024-04-21T13:32:15.917249
180 / tcp

819727972 | 2024-05-10T23:32:00.482520
195 / tcp

362630950 | 2024-04-17T06:47:06.039738
211 / tcp

-1399940268 | 2024-04-25T15:03:16.072609
221 / tcp

-1022036431 | 2024-05-02T13:08:12.391543
264 / tcp

676753056 | 2024-05-16T23:03:08.463485
311 / tcp

-1743283776 | 2024-05-08T12:31:09.399761
389 / tcp

928665344 | 2024-05-14T00:22:13.776404
427 / tcp

-981665732 | 2024-05-16T04:09:48.270217
443 / tcp

-971970408 | 2024-05-12T11:41:51.090763
444 / tcp

897328069 | 2024-05-02T02:24:29.739062
465 / tcp

-1399940268 | 2024-05-12T17:42:46.202243
502 / tcp

921225407 | 2024-05-15T07:22:49.821863
503 / tcp

1690634669 | 2024-05-16T21:27:21.606860
515 / tcp

444328471 | 2024-04-29T16:50:32.842676
548 / tcp

-927382641 | 2024-04-20T04:43:16.490711
554 / tcp

745343730 | 2024-05-16T22:12:31.123901
587 / tcp

-1112304903 | 2024-05-13T22:14:18.567534
593 / tcp

1300162323 | 2024-05-12T05:53:29.532778
666 / tcp

119860953 | 2024-05-17T00:59:31.241484
771 / tcp

921225407 | 2024-05-08T21:05:32.602382
772 / tcp

307999478 | 2024-05-15T20:43:25.190377
789 / tcp

-1970692834 | 2024-05-16T04:15:40.403290
873 / tcp

-936692830 | 2024-05-01T23:48:33.129720
992 / tcp

1208318993 | 2024-04-29T19:11:25.580581
993 / tcp

689999346 | 2024-05-04T22:00:32.680034
995 / tcp

171352214 | 2024-05-05T02:33:01.351900
1023 / tcp

660175493 | 2024-05-05T12:12:21.289408
1024 / tcp

819727972 | 2024-05-05T15:59:47.978861
1025 / tcp

-653033013 | 2024-04-29T13:44:38.011914
1099 / tcp

1282941221 | 2024-05-10T23:08:50.506924
1153 / tcp

1778988322 | 2024-05-16T09:16:24.250663
1177 / tcp

-1969169410 | 2024-04-21T16:33:12.987145
1200 / tcp

321971019 | 2024-05-03T01:23:53.801030
1234 / tcp

842535728 | 2024-05-10T12:31:12.926399
1311 / tcp

2087396567 | 2024-04-23T15:18:00.849872
1337 / tcp

45131230 | 2024-04-21T21:42:14.434630
1366 / tcp

-454087041 | 2024-04-29T21:18:46.064755
1388 / tcp

-325802316 | 2024-05-10T18:27:51.274289
1433 / tcp

-1598265216 | 2024-05-09T11:51:21.850456
1515 / tcp

-805164506 | 2024-05-11T20:36:38.822267
1521 / tcp

2087396567 | 2024-05-01T17:37:45.132861
1599 / tcp

-971970408 | 2024-05-03T03:42:01.375160
1604 / tcp

1103582599 | 2024-05-09T04:34:55.051434
1723 / tcp

-274082663 | 2024-05-15T20:09:50.721653
1800 / tcp

2087396567 | 2024-05-07T02:16:39.883960
1883 / tcp

-180163620 | 2024-04-20T16:34:56.195947
1911 / tcp

2087396567 | 2024-05-04T16:10:20.924362
1926 / tcp

-1399940268 | 2024-05-14T00:26:52.518139
1962 / tcp

597764502 | 2024-05-14T22:47:47.173387
1981 / tcp

1077013874 | 2024-04-22T02:29:01.021927
2000 / tcp

819727972 | 2024-05-06T03:35:22.910616
2002 / tcp

-2017887953 | 2024-04-27T10:08:55.120446
2003 / tcp