GeneralInformation

Hostnames	reako188.1688.com done.alibaba-inc.com lha-lab-java.alibaba-inc.com barclay.aliexpress.com cainiao-ru.aliexpress.com gre-dvbbo.an-hongzhov.ojiyvn-ina.aon.aliyun-inc.com dh-an-shonghoi.ojiyvn-ina.aon.aliyun-inc.com aliyun.com hojostvdio-an-hongzhov.doto.aliyun.com qr.aliyun.com vone.aliyun.com www.aliyun.com devejogerojiyvnaon.aliyuncs.com eai-inner.og-sovtheost-2.aliyuncs.com wwwnode.daxue.dingtalk.com app75554.eapps.dingtalkcloud.com 0f5c5da9.lex.co.id vt.quark.cn acs-wapa.rmlogistics.sg aodng.taobao.com oovth.taobao.com rosechina.taobao.com shog36284243.taobao.com shop365682614.taobao.com
Domains	1688.com alibaba-inc.com aliexpress.com aliyun-inc.com aliyun.com aliyuncs.com dingtalk.com dingtalkcloud.com lex.co.id quark.cn rmlogistics.sg taobao.com
Country	China
City	Shanghai
Organization	Zhejiang Taobao Network Co.,Ltd
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 17 19 21 23 25 37 43 53 70 79 89 98 102 110 111 119 135 143 175 179 195 199 221 222 264 389 444 465 491 502 503 515 548 554 593 636 646 666 771 772 789 843 873 880 888 943 992 993 994 995 1023 1025 1028 1099 1110 1111 1153 1177 1200 1337 1414 1433 1443 1515 1521 1588 1599 1604 1660 1723 1801 1833 1883 1901 1911 1926 1951 2000 2002 2008 2067 2070 2081 2083 2087 2095 2121 2154 2181 2222 2223 2323 2345 2376 2404 2455 2506 2548 2628 2650 2701 2761 2762 3001 3050 3074 3094 3099 3129 3260 3268 3269 3299 3301 3306 3310 3388 3389 3402 3404 3410 3498 3551 3561 3690 3780 3790 3838 4000 4022 4063 4157 4242 4282 4321 4369 4433 4443 4444 4500 4506 4550 4840 4899 4911 4949 5001 5004 5006 5007 5009 5010 5025 5172 5190 5201 5222 5269 5435 5500 5542 5568 5599 5603 5604 5605 5606 5609 5672 5858 5910 5938 5984 5986 6000 6001 6002 6080 6379 6565 6650 6653 6666 6667 6668 6697 6955 7000 7001 7003 7010 7071 7171 7218 7401 7415 7434 7443 7535 7548 7634 7700 8009 8032 8041 8044 8045 8048 8052 8055 8056 8072 8081 8083 8084 8085 8087 8088 8089 8092 8099 8101 8123 8126 8139 8180 8181 8200 8241 8243 8248 8291 8402 8406 8419 8420 8421 8423 8446 8500 8545 8554 8575 8649 8728 8801 8805 8812 8813 8816 8823 8824 8825 8833 8834 8857 8859 8878 8880 8889 8988 8993 8999 9001 9002 9010 9024 9028 9037 9042 9091 9092 9093 9094 9095 9096 9100 9151 9160 9189 9199 9306 9333 9389 9398 9418 9443 9530 9600 9633 9682 9761 9765 9898 9943 9944 9988 9998 9999 10000 10001 10051 10250 10443 10554 10909 10911 11000 11112 11210 11211 11300 12000 12345 13047 14265 14344 16993 17000 18081 18245 18443 19000 19200 20000 20256 20547 20880 21379 23023 25001 25565 27015 27017 28015 30002 30003 31337 32764 33060 33338 35000 37777 38333 41800 44158 44818 47990 48226 50000 50050 50100 51235 54138 54984 55553 55554 61613 61616 62078 63210 63257

2087396567 | 2024-10-20T18:32:50.672597

11 / tcp

kjnkjabhbanc283ubcsbhdc72

-2127598635 | 2024-10-13T05:32:23.919649

13 / tcp

14:02:51 2024/1/22

-971970408 | 2024-10-07T12:51:04.639450

15 / tcp

366084633 | 2024-09-27T05:25:34.277975

17 / tcp

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

829384519 | 2024-10-05T21:49:42.110087

19 / tcp

 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV

2116898107 | 2024-10-17T09:37:57.500655

21 / tcp

220 (vsFTPd 3.0.2)

164764193 | 2024-10-02T01:34:03.401194

23 / tcp


(none) login:

-2096652808 | 2024-10-15T03:08:41.638119

25 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

900697840 | 2024-10-16T01:55:13.276416

37 / tcp

\xc3\xbf\xc3\xbb\\x01\n\rno data rcvd for versi

-2096652808 | 2024-10-20T03:16:25.833447

43 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1127377266 | 2024-09-29T17:33:48.936679

53 / tcp

9\n\\x81\\x80\\x00\\x01\\x00\\x02\\x00\\x00\\x00\\x00\\x08clients1\\x06google\\x03com\\x00\\x00\\x01\\x00\\x01\\xc0\x0c\\x00\\x05\\x00\\x01\\x00\\x00\\x00\\xca\\x00\x0c\\x07clients\\x01l\\xc0\\x15\\xc01\\x00\\x01\\x00\\x01\\x00\\x00\\x00\\x83\\x00\\x04\\xac\xd9\xa0n\n\\x00\\x06\\x81\\x85\\x00\\x01\\x00\\x00\\x00\\x00\\x00

857710896 | 2024-10-22T11:03:57.252952

70 / tcp

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Mon, 27 Nov 2023 21:45:42 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

-876294238 | 2024-10-22T09:10:35.107845

79 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Content-Type: text/html
Connection: close

1623746877 | 2024-10-17T15:34:06.414245

89 / tcp

500 Permission denied - closing connection.\r\n

671605376 | 2024-10-05T22:51:43.479683

98 / tcp

SSH-2.0-OpenSSH_X.X

1212285915 | 2024-10-18T18:23:46.963003

102 / tcp

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

819727972 | 2024-10-18T06:13:34.073564

110 / tcp

SSH-2.0-OpenSSH_7.4

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-6111 13 moreCVE-2019-6110 CVE-2019-6109 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

819727972 | 2024-10-14T20:00:22.686481

111 / tcp

SSH-2.0-OpenSSH_7.4

-1958992631 | 2024-10-07T05:53:37.536297

119 / tcp

\\xd5\xca\xba\\xc5\\xc8\\xcf\xd6\xa4\xca\xa7\\xb0\\xdc ...\r\nIP \\xb5\\xd8\xd6\xb7: *.*.*.*\r\nMAC \\xb5\\xd8\xd6\xb7: \r\n\\xb7\\xfe\\xce\\xf1\\xb6\\xcb\xca\xb1\\xbc\\xe4: 2024-01-22 16:23:50\r\n\\xd1\\xe9\xd6\xa4\\xbd\\xe1\\xb9\\xfb: \\xce\\xde\xd0\xa7\\xd3\xc3\xbb\\xa7.

1483120365 | 2024-10-03T19:16:25.772578

135 / tcp

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: OP2\n IP2: 192.168.0.20\n IP3: 61.230.135.142\n IP4: 2001:b011:2006:c3ef:18c0:9e02:ef7:84c8\n\nNTLMSSP:\nTarget_Name: OP2\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: OP2\nNetBIOS_Computer_Name: OP2\nDNS_Domain_Name: OP2\nDNS_Computer_Name: OP2\nSystem_Time: 2024-01-22 07:10:42 +0000 UTC\n\nDCERPC Dump:\n4b112204-0e19-11d3-b42b-

-829824006 | 2024-10-20T17:37:08.613232

143 / tcp

* OK Coremail System IMap Server Ready(mispb-5f781434-d784-4cb6-b7ab-91be09a0f2d6-peony.cn[ccf14d07de0680199ac3995dd82c09e7])\r\n

-1538260461 | 2024-10-20T14:42:38.091862

175 / tcp

\x01\x00\x00\x00

-399606100 | 2024-10-21T20:58:28.608637

179 / tcp

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

819727972 | 2024-09-27T21:56:59.496754

195 / tcp

SSH-2.0-OpenSSH_7.4

1726594447 | 2024-09-23T00:48:24.454027

199 / tcp

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

-146605374 | 2024-10-22T00:05:02.259749

221 / tcp

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

-1967791998 | 2024-09-23T20:25:52.124977

222 / tcp

HTTP/1.1 401 Unauthorized
Server: mini_httpd/1.19 19dec2003
Cache-Control: no-cache,no-store
Content-Type: text/html; charset=%s
Connection: close

-1707068558 | 2024-10-18T12:06:59.604200

264 / tcp

-1907080992 | 2024-10-19T16:48:41.609026

389 / tcp

0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x00\\x04\\x00\\x04\\x00

-730178403 | 2024-10-19T07:27:09.794798

444 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Sat, 19 Oct 2024 07:27:09 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

897328069 | 2024-10-03T19:28:03.991715

465 / tcp

220 mail.scott000.com ESMTP

-1839934832 | 2024-10-02T19:32:27.859266

491 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

117101543 | 2024-10-20T11:17:07.662116

502 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

-249504111 | 2024-10-04T15:13:12.436077

503 / tcp

\x00[xU-\x7f\x00\x00

1690634669 | 2024-09-26T17:36:05.039200

515 / tcp

862587784 | 2024-10-21T01:26:48.778735

548 / tcp

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: pangzinas\nMachine Type: \\x0eNetatalk3.1.12\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: Cleartxt Passwrd\\x0f,No User Authent\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

1060450357 | 2024-10-22T06:22:03.327119

554 / tcp

RTSP/1.0 200 OK
CSeq: 1
Keep-Alive: timeout=10, max=1000
Public: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER, GET_PARAMETER
Connection: Keep-Alive

1308377066 | 2024-09-24T23:47:36.930530

593 / tcp

ncacn_http/1.0

4146400 | 2024-10-16T20:18:31.065565

636 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 8-26086461-0 0NNN RT(1705912253915 115) q(-1 -1 -1 -1) r(0 -1) b1

-1206199995 | 2024-10-07T22:42:12.975847

646 / tcp

\\x00\\x01\\x00\\x1c\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x12\\x00\\xa8\\xbf5\\x03\\x00\\x00\n\\x80\\x00\\x00\\x03\\x00\\x00\\x00\\x00\\x00\\x00

1300162323 | 2024-10-22T09:55:38.682714

666 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

819727972 | 2024-10-19T06:54:28.127496

771 / tcp

SSH-2.0-OpenSSH_7.4

1911457608 | 2024-09-28T00:14:23.803686

772 / tcp

\x00[\x00\x00\x00\x00\x00\x00

819727972 | 2024-09-26T14:02:16.395858

789 / tcp

SSH-2.0-OpenSSH_7.4

-2004989248 | 2024-10-07T20:06:46.845284

843 / tcp

<cross-domain-policy>\n   <allow-access-from domain="*" to-po\nrts="*" />\n</cross-domain-policy>

-1970692834 | 2024-10-19T23:59:32.415948

873 / tcp

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

-1256415508 | 2024-10-09T22:55:45.475268

880 / tcp

HTTP/1.1 404 Not Found
Server: TornadoServer/6.1
Content-Type: text/html; charset=UTF-8

-262532376 | 2024-10-16T04:18:02.028086

888 / tcp

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: keep-alive

-1059554316 | 2024-10-21T21:23:09.276523

943 / tcp

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

1814656027 | 2024-10-22T17:53:33.173372

992 / tcp

HTTP/1.1 403 Forbidden
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
Keep-Alive: timeout=15; max=19

-1996280214 | 2024-10-21T12:36:18.500761

993 / tcp

\x06\x04\x05@

1543809371 | 2024-10-03T17:35:44.773918

994 / tcp

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

1356395159 | 2024-10-05T23:53:55.277685

995 / tcp

+OK Welcome to RaidenMAILD POP3 SSL service v4904, Mon, 22 Jan 2024 16:39:07 +0800, (C)2001-2023 <947064546@raidenmaild>\r\n

-1681927087 | 2024-10-16T11:17:07.357010

1023 / tcp

kjnkjabhbanc283ubcsbhdc72

-1730858130 | 2024-10-13T01:35:59.387021

1025 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-457235091 | 2024-10-15T00:38:34.729820

1028 / tcp

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

1948301213 | 2024-10-05T23:48:18.365383

1099 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

456721301 | 2024-10-21T23:31:48.062167

1110 / tcp

HTTP/1.1 200 OK
Server: Citrix-3.2.5.9 'Marshal West'
Content-Type: text/html; charset=UTF-8

-358801646 | 2024-09-25T21:29:37.344738

1111 / tcp

SSH-2.0-OpenSSH_6.6.1

-1399940268 | 2024-10-11T07:53:21.437164

1153 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1887224352 | 2024-10-18T04:39:12.828811

1177 / tcp

2087396567 | 2024-10-01T10:41:16.415500

1200 / tcp

kjnkjabhbanc283ubcsbhdc72

-1013082686 | 2024-10-15T06:47:16.702868

1337 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

-1399940268 | 2024-10-13T11:26:28.037038

1414 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

419886129 | 2024-10-04T06:37:01.808019

1433 / tcp

MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XTZJ-20210317RG\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XTZJ-20210317RG\nNetBIOS_Computer_Name: XTZJ-20210317RG\nDNS_Domain_Name: XTZJ-20210317RG\nDNS_Computer_Name: XTZJ-20210317RG\nSystem_Time: 2024-01-22 04:01:04 +0000 UTC\n\n

-1715152554 | 2024-10-11T09:02:39.184369

1443 / tcp

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 11 Oct 2024 09:02:38 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.11.226.159:443/

2087396567 | 2024-10-16T20:02:44.896354

1515 / tcp

kjnkjabhbanc283ubcsbhdc72

-1337747449 | 2024-10-01T11:02:27.656042

1521 / tcp

Version:12.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=203424000)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

819727972 | 2024-10-13T10:49:34.551807

1588 / tcp

SSH-2.0-OpenSSH_7.4

-345718689 | 2024-10-21T21:14:40.250519

1599 / tcp

Vty password is not set.

-1839934832 | 2024-10-18T18:53:01.879025

1604 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1399940268 | 2024-10-11T17:20:59.768521

1660 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1103582599 | 2024-10-19T00:57:18.136777

1723 / tcp

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

-833635452 | 2024-10-13T08:34:37.399850

1801 / tcp

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x05\xe8\x9b\xb5\\x95E\\x1eJ\\x85\xd5\xb1\\xe4\\xf9\\xba\\xf6+92d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

-2031152423 | 2024-10-10T12:46:18.499865

1833 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

-1872120160 | 2024-10-07T15:42:08.574366

1883 / tcp

">Application and Content Networking Software 3.9</a>)
</BODY><

1282941221 | 2024-10-02T10:26:31.211104

1901 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1278527606 | 2024-10-02T07:24:13.715071

1911 / tcp

SSH-2.0-Teleport

171352214 | 2024-10-16T14:47:43.711063

1926 / tcp

-ERR client ip is not in whitelist

117101543 | 2024-10-19T19:55:37.353855

1951 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

-1375131644 | 2024-10-20T01:49:56.335955

2000 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

-1760806421 | 2024-10-10T06:57:56.195793

2002 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

-1399940268 | 2024-10-16T16:43:20.644152

2008 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-409020351 | 2024-10-10T00:51:59.841656

2067 / tcp

NPC Telnet permit one connection.
 But One connection() already keep alive.
Good Bye !!

-1733106930 | 2024-10-01T07:39:20.304072

2070 / tcp

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

639175818 | 2024-10-04T16:27:20.656230

2081 / tcp

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

819727972 | 2024-10-22T21:00:43.252850

2083 / tcp

SSH-2.0-OpenSSH_7.4

104385780 | 2024-10-13T19:49:16.597485

2087 / tcp

ceph v2

-2046514463 | 2024-10-07T23:44:38.243679

2095 / tcp

AB\x01\t

141730637 | 2024-10-22T05:00:25.089011

2121 / tcp

HTTP/1.0 200 OK
Server: Proxy

2067064333 | 2024-10-04T21:16:38.053111

2154 / tcp

athinfod: invalid query.

546151771 | 2024-10-14T16:09:17.655648

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

58083962 | 2024-10-21T22:13:51.840266

2222 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Content-Type: text/html
Connection: close

-1399940268 | 2024-10-15T22:54:15.067129

2223 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1662205251 | 2024-10-13T07:53:46.661637

2323 / tcp

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

-1399940268 | 2024-10-17T21:40:27.481963

2345 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1529979118 | 2024-10-07T23:41:43.523203

2376 / tcp

inv2W

-1399940268 | 2024-10-14T09:27:52.712799

2404 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1212921144 | 2024-10-05T21:18:27.230357

2455 / tcp

0@

-1399940268 | 2024-10-16T23:40:14.194986

2506 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-122096153 | 2024-10-19T06:26:58.824048

2548 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

2087396567 | 2024-10-17T11:45:35.930974

2628 / tcp

kjnkjabhbanc283ubcsbhdc72

-1399940268 | 2024-10-02T19:47:18.625597

2650 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1944032451 | 2024-10-19T00:44:55.425461

2701 / tcp

K\\x02%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

1161309183 | 2024-10-11T09:10:28.665964

2761 / tcp

ProxyServer is ready

1911457608 | 2024-10-20T07:16:18.714631

2762 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-971970408 | 2024-10-22T19:06:39.836149

3001 / tcp

819727972 | 2024-10-19T01:50:39.885634

3050 / tcp

SSH-2.0-OpenSSH_7.4

-1839934832 | 2024-09-29T17:58:02.088368

3074 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

1574088840 | 2024-10-13T21:36:53.906563

3094 / tcp

">Application and Content Networking Software 3.9</a>)\n</BODY><

-1036370807 | 2024-10-02T21:51:24.133907

3099 / tcp

JDWP-Handshake

1911457608 | 2024-10-17T15:17:32.918749

3129 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-862070606 | 2024-10-12T17:46:27.062252

3260 / tcp

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n

-805362002 | 2024-10-13T14:44:09.460390

3268 / tcp

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

-1327660293 | 2024-09-27T10:38:12.410475

3269 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

740837454 | 2024-10-06T20:49:58.174970

3299 / tcp

SSH-2.0-OpenSSH_5.3

921225407 | 2024-10-15T15:09:40.123979

3301 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

849822411 | 2024-10-16T09:18:20.335281

3306 / tcp

Mysql Version: 5.7.44-log \r\nN\\x00\\x00\\x00\n5.7.44-log\\x00s/\\x06\\x00(o>\\x1c`\\x18*a\\x00\\xff\\xff-\\x02\\x00\\xff\\xc1\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00fFU\\x07_\\x1ay\\x14i}\\x02E\\x00mysql_native_password\\x00

-2031152423 | 2024-09-28T00:59:30.351521

3310 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

-1399940268 | 2024-10-14T21:44:47.054627

3388 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

521595461 | 2024-10-13T14:01:25.853214

3389 / tcp

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x03\\x00\\x08\\x00\\x02\\x00\\x00\\x00\n\nGuess_OS:Windows Server 2003 or 2008\nFlag: PROTOCOL_HYBRID\n

1615193817 | 2024-10-15T16:30:43.306410

3402 / tcp

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

-1227409554 | 2024-10-20T22:09:10.140621

3404 / tcp

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

-1399940268 | 2024-09-28T05:32:02.493472

3410 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

632542934 | 2024-10-11T16:10:40.310815

3498 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

198844676 | 2024-10-18T18:28:21.433417

3551 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

921225407 | 2024-10-11T00:46:36.621392

3561 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-891714208 | 2024-09-24T07:27:27.735232

3690 / tcp

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

-1729629024 | 2024-10-15T14:18:46.530787

3780 / tcp

101 imqbroker =unV

-2107996212 | 2024-10-19T21:12:36.192475

3790 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

1975288991 | 2024-09-24T15:46:04.603760

3838 / tcp

OPTI

-1148803158 | 2024-10-13T00:55:58.711716

4000 / tcp

Mysql Version: 8.0.34 \r\nJ\\x00\\x00\\x00\n8.0.34\\x009L\\x01\\x00NJSz;\\x01\\x19y\\x00\\xff\\xff!\\x02\\x00\\xff\\xdf\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00k\\x13VT\\x10\\x14YfV~^z\\x00caching_sha2_password\\x00

-2089734047 | 2024-10-05T02:17:21.832393

4022 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1282941221 | 2024-10-21T21:37:04.565133

4063 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-971970408 | 2024-10-22T00:20:52.454770

4157 / tcp

-1879056922 | 2024-10-22T18:38:17.550426

4242 / tcp

HTTP/1.1 403 Forbidden
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close

-2089734047 | 2024-10-15T03:44:17.808112

4282 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-269926141 | 2024-10-13T22:47:03.634667

4321 / tcp

\\x00\\x00\\x12\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\x00\\x00\\x00\\x80\\x00\\x04\\x00\\x01\\x00\\x00\\x00\\x05\\x00\\xff\\xff\\xff\\x00\\x00\\x04\\x08\\x00\\x00\\x00\\x00\\x00\\x7f\\xff\\x00\\x00\\x00\\x00\\x08\\x07\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01

-122096153 | 2024-10-20T15:57:27.718103

4369 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

671605376 | 2024-10-05T00:00:33.536358

4433 / tcp

SSH-2.0-OpenSSH_X.X

594761768 | 2024-10-19T17:18:24.583233

4443 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2a00_PS-NKG-01Aqo82_2843-52437

2087396567 | 2024-10-09T15:54:13.120480

4444 / tcp

kjnkjabhbanc283ubcsbhdc72

-1329831334 | 2024-10-18T09:58:11.098149

4500 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

-1036370807 | 2024-10-21T11:16:43.072551

4506 / tcp

JDWP-Handshake

-660019401 | 2024-10-01T17:05:06.889449

4550 / tcp

\\x8e!\\x00\\x00

-2140303521 | 2024-10-10T01:30:17.662534

4840 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

2033888749 | 2024-10-10T23:24:25.041606

4899 / tcp

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

632542934 | 2024-10-16T19:28:52.520382

4911 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1778988322 | 2024-10-18T01:51:36.033563

4949 / tcp

* OK GroupWise IMAP4rev1 Server Ready

-1045760528 | 2024-10-10T05:54:29.926393

5001 / tcp

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

921225407 | 2024-09-26T04:59:10.791745

5004 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-288825733 | 2024-10-09T17:12:44.453789

5006 / tcp

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

-1399940268 | 2024-10-08T06:29:55.436775

5007 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1017429513 | 2024-10-22T14:53:36.879191

5009 / tcp

HTTP/1.1 403 Forbidden
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET

-146605374 | 2024-10-20T23:35:43.484718

5010 / tcp

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

988099889 | 2024-09-28T11:55:43.452409

5025 / tcp

[ºs

550048729 | 2024-10-09T16:04:13.715282

5172 / tcp

ÿÿÿ
0 ...

-362921160 | 2024-10-20T15:08:34.285700

5190 / tcp

RTSP/1.0 400 Bad Request\r\nCSeq: 0\r\n\r\n

-438503381 | 2024-10-17T15:09:25.470421

5201 / tcp

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

-1304843095 | 2024-10-12T12:17:54.098299

5222 / tcp

[Ý

1743272246 | 2024-10-16T02:39:20.726755

5269 / tcp

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705940324.547-w-waf01nbzt

-784071826 | 2024-10-20T16:19:57.769230

5435 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-16905 7 moreCVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368

1023953321 | 2024-10-10T14:29:48.250070

5500 / tcp

HTTP/1.0 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm="proxy"
Connection: close
Content-type: text/html; charset=utf-8

-1399940268 | 2024-09-30T23:08:12.844934

5542 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1888448627 | 2024-10-03T18:39:12.382121

5568 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-358801646 | 2024-10-15T14:34:41.886347

5599 / tcp

SSH-2.0-OpenSSH_6.6.1

-2096652808 | 2024-09-25T23:29:14.900126

5603 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-904840257 | 2024-10-20T13:44:34.943581

5604 / tcp

572 Relay not authorized\r\n

921225407 | 2024-09-29T18:12:34.565906

5605 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-904840257 | 2024-09-24T19:48:04.144442

5606 / tcp

572 Relay not authorized\r\n

-1399940268 | 2024-09-28T18:06:40.363021

5609 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

575925250 | 2024-10-20T21:37:47.698380

5672 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

-1230049476 | 2024-10-22T13:30:42.743220

5858 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

175144872 | 2024-09-30T11:41:19.615297

5910 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html
Connection: keep-alive
Location: https://222.174.85.210:5910/webclient

-2096652808 | 2024-10-01T19:50:12.623791

5938 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1999272906 | 2024-10-20T08:00:34.495390

5984 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

-441419608 | 2024-10-20T22:37:00.889763

5986 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

120534451 | 2024-10-22T04:02:56.317485

6000 / tcp

X11 access denied

-1795027372 | 2024-10-15T07:18:46.380800

6001 / tcp

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

-1681927087 | 2024-10-12T15:15:55.581832

6002 / tcp

kjnkjabhbanc283ubcsbhdc72

-2118655245 | 2024-10-21T17:46:44.664612

6080 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

321971019 | 2024-09-25T13:41:42.276275

6379 / tcp

-ERR client ip is not in whitelist\r

-367607324 | 2024-10-04T12:01:04.009397

6565 / tcp

\\x12\\x04\\x03\\x7f\xc3\xbf\xc3\xbf\xc3\xbf\n0\\x04\\x10\\x06 \\x04\\x08...\n

819727972 | 2024-10-22T01:27:19.043577

6650 / tcp

SSH-2.0-OpenSSH_7.4

-1888448627 | 2024-10-10T22:49:07.034651

6653 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

4935895 | 2024-10-21T05:29:33.723483

6666 / tcp

HTTP/1.1 400 Bad Request
Server: CloudWAF

-1598265216 | 2024-10-07T12:03:02.731996

6667 / tcp

@RSYNCD: 31.0

-1399940268 | 2024-10-22T21:35:47.656454

6668 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

599074451 | 2024-09-24T06:21:55.422144

6697 / tcp

msg

-2089734047 | 2024-10-13T17:19:37.325930

6955 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-579195550 | 2024-09-30T11:34:07.951133

7000 / tcp

HTTP/1.1 407 Proxy Authentication Required 
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm="proxy"

-1136600457 | 2024-09-26T17:08:12.947652

7001 / tcp

HELO:10.3.6.0.false
AS:2048
HL:19

1911457608 | 2024-10-01T01:27:01.208673

7003 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-09-30T12:21:43.196709

7010 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1990350878 | 2024-10-16T03:26:50.707879

7071 / tcp

 
04 \...

1308377066 | 2024-10-11T11:37:06.122789

7171 / tcp

ncacn_http/1.0

819727972 | 2024-10-10T21:25:03.887555

7218 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-10-17T02:38:55.968420

7401 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1761482307 | 2024-10-09T01:12:21.538642

7415 / tcp

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

1741579575 | 2024-10-18T03:46:24.936336

7434 / tcp

-1027277763 | 2024-10-15T13:28:26.515090

7443 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-GLOBAL1-CACHE107[2]
X-CCDN-ERRCODE-SRC: 01
X-CCDN-FORBID-CODE: 040001

-1399940268 | 2024-10-08T04:44:31.604996

7535 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1636811864 | 2024-10-13T03:32:30.551703

7548 / tcp

1842524259 | 2024-10-19T20:17:31.735477

7634 / tcp

1761482307 | 2024-10-17T02:01:22.122692

7700 / tcp

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

1741579575 | 2024-10-11T02:25:02.799853

8009 / tcp

-1839934832 | 2024-10-01T09:03:44.956645

8032 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1399940268 | 2024-10-07T18:15:09.826405

8041 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-438503381 | 2024-10-08T02:15:41.323202

8044 / tcp

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

1980904624 | 2024-10-01T14:38:10.929254

8045 / tcp

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 10-27528207-0 0NNN RT(1700824088343 0) q(0 -1 -1 -1) r(0 -1)

-1730858130 | 2024-10-01T16:45:26.263502

8048 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1308377066 | 2024-10-20T23:26:45.548808

8052 / tcp

ncacn_http/1.0

-1487943323 | 2024-09-25T23:41:15.508820

8055 / tcp

431 Unable to negotiate secure command connection.\r\n

-2096652808 | 2024-10-17T01:31:46.821559

8056 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1541211644 | 2024-10-18T18:48:20.776863

8072 / tcp

[\xc2\xba\x7fs\x7f

1850902677 | 2024-10-07T23:30:31.128732

8081 / tcp

W!

1778988322 | 2024-10-19T08:29:11.506249

8083 / tcp

* OK GroupWise IMAP4rev1 Server Ready

-249504111 | 2024-10-14T08:33:40.305278

8084 / tcp

\x00[xU-\x7f\x00\x00

-1713437100 | 2024-10-18T07:34:46.201607

8085 / tcp

\xc3\xbf\xc3\xbb\x01\r\nWelcome to NetLinx v94 Copyright AMX Corp. 34395-49007\r\n>

819727972 | 2024-10-04T23:28:52.482430

8087 / tcp

SSH-2.0-OpenSSH_7.4

921225407 | 2024-10-15T12:45:37.818945

8088 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1690634669 | 2024-10-13T18:29:30.882323

8089 / tcp

-1839934832 | 2024-09-23T18:03:31.427589

8092 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

623236583 | 2024-10-10T15:56:38.930206

8099 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae293a_dedxin34_19677-349

-1265999252 | 2024-10-11T13:11:54.438787

8101 / tcp

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

-119996482 | 2024-10-08T01:51:17.202516

8123 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

1004056929 | 2024-10-21T21:03:38.510236

8126 / tcp

Invalid request string: Request string is: "
"

233634112 | 2024-10-03T12:58:58.953643

8139 / tcp

SSH-98.60-SysaxSSH_81885..42

1234106376 | 2024-09-29T15:59:48.622625

8180 / tcp

HTTP/1.1 200 
Server: nginx
Content-Type: text/html;charset=UTF-8
Accept-Ranges: bytes
Content-Language: en-US

-903067560 | 2024-09-23T06:47:52.967626

8181 / tcp

\x00[\x13)\xc2\x81\x7f\x00\x00

1320285193 | 2024-10-21T12:10:05.522662

8200 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

-1399940268 | 2024-09-28T16:59:53.162790

8241 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2089734047 | 2024-10-14T19:00:08.169916

8243 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1013082686 | 2024-10-21T01:52:05.202002

8248 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

819727972 | 2024-10-10T02:59:52.784877

8291 / tcp

SSH-2.0-OpenSSH_7.4

-1046119860 | 2024-10-15T14:06:07.760946

8402 / tcp

\\x19\\x02\\x02\\x07Protocol version mismatch

-1476017887 | 2024-10-03T11:28:21.258782

8406 / tcp

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

1011407350 | 2024-09-27T08:07:41.973219

8419 / tcp

* OK GroupWise IMAP4rev1 Server Ready\r\n

1208318993 | 2024-09-29T21:17:19.524418

8420 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

51259122 | 2024-10-17T22:43:22.112259

8421 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

-1399940268 | 2024-10-13T21:15:56.551743

8423 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-10-11T10:00:45.384663

8446 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1529351907 | 2024-10-15T18:28:56.677257

8500 / tcp

HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive

please add white ip *.*.*.*

-2031152423 | 2024-10-06T12:57:45.564946

8545 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

1741579575 | 2024-09-26T07:19:58.214005

8554 / tcp

165188539 | 2024-10-11T00:22:57.083385

8575 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

842535728 | 2024-10-08T06:58:41.750605

8649 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

599074451 | 2024-10-09T16:44:26.792729

8728 / tcp

msg

-1888448627 | 2024-10-06T12:29:53.576339

8801 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-2096652808 | 2024-10-01T10:08:08.425687

8805 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1899074860 | 2024-10-03T09:27:26.483940

8812 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

-358801646 | 2024-10-21T22:26:10.215595

8813 / tcp

SSH-2.0-OpenSSH_6.6.1

819727972 | 2024-09-26T03:46:46.344771

8816 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2024-10-13T19:45:13.041538

8823 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-10-22T16:17:18.611558

8824 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2046514463 | 2024-09-24T07:04:44.658237

8825 / tcp

AB\x01\t

-1888448627 | 2024-10-04T00:01:50.179889

8833 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1830187220 | 2024-10-12T19:08:43.467967

8834 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

-2096652808 | 2024-10-15T21:39:54.614862

8857 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

819727972 | 2024-10-21T13:19:55.842820

8859 / tcp

SSH-2.0-OpenSSH_7.4

-358801646 | 2024-09-30T04:19:33.022276

8878 / tcp

SSH-2.0-OpenSSH_6.6.1

-1428621233 | 2024-10-04T03:28:44.475138

8880 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

171352214 | 2024-10-22T16:08:19.915891

8889 / tcp

-ERR client ip is not in whitelist

-1399940268 | 2024-10-03T10:52:43.786069

8988 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1148066627 | 2024-10-19T04:24:44.064428

8993 / tcp

\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00

410249975 | 2024-10-10T23:48:49.755954

8999 / tcp

LNS READY<>

-1026951088 | 2024-10-21T17:00:27.733317

9001 / tcp

erro ip

-746114901 | 2024-09-25T17:24:59.316684

9002 / tcp

[KpU

-1399940268 | 2024-10-09T00:03:05.108972

9010 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-616720387 | 2024-10-03T14:05:18.118478

9024 / tcp

SSH-2.0-SSHD_0.7.6

-1399940268 | 2024-10-15T20:21:21.613915

9028 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1830697416 | 2024-10-13T07:11:45.031689

9037 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

1690634669 | 2024-10-12T16:48:03.476843

9042 / tcp

1741579575 | 2024-10-21T22:29:16.456462

9091 / tcp

-1399940268 | 2024-09-24T23:22:29.877879

9092 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1099385124 | 2024-09-29T22:50:52.508805

9093 / tcp

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

-1327660293 | 2024-10-13T23:59:53.752422

9094 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

2087396567 | 2024-10-16T14:03:08.134983

9095 / tcp

kjnkjabhbanc283ubcsbhdc72

1126993057 | 2024-10-09T21:30:22.829683

9096 / tcp

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

-1261090339 | 2024-10-14T00:08:50.550321

9100 / tcp

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

2087396567 | 2024-10-18T08:15:33.377805

9151 / tcp

kjnkjabhbanc283ubcsbhdc72

-1795027372 | 2024-09-27T19:48:20.948938

9160 / tcp

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

677934968 | 2024-10-04T20:39:48.937797

9189 / tcp

lm^)Q

-1105333987 | 2024-10-14T19:12:46.186714

9199 / tcp

\x00[KpU\x7f\x00\x00

-2096652808 | 2024-10-22T04:10:50.948788

9306 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-971970408 | 2024-10-18T13:04:35.262220

9333 / tcp

1911457608 | 2024-10-06T08:34:57.235746

9389 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1681927087 | 2024-10-11T01:24:30.638630

9398 / tcp

kjnkjabhbanc283ubcsbhdc72

-833168972 | 2024-10-05T09:59:20.411721

9418 / tcp

HTTP/1.1 200 
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked

-949358166 | 2024-10-12T13:33:32.410635

9443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sat, 12 Oct 2024 13:33:32 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.11.226.159:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

-2107996212 | 2024-10-15T19:53:17.128162

9530 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-1327660293 | 2024-10-15T21:13:33.795229

9600 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

539065883 | 2024-10-14T00:00:45.152103

9633 / tcp

-1598265216 | 2024-10-22T18:36:02.094448

9682 / tcp

@RSYNCD: 31.0

1624217396 | 2024-09-28T12:39:28.897965

9761 / tcp

HELO:10.3.6.0.false\nAS:2048\nHL:19

320677201 | 2024-10-11T22:11:41.253601

9765 / tcp

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

-1056270173 | 2024-10-18T21:34:51.501345

9898 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

-659335736 | 2024-10-05T22:05:18.436597

9943 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2864_xyd119_11675-57009

2087396567 | 2024-10-17T01:31:48.759002

9944 / tcp

kjnkjabhbanc283ubcsbhdc72

-1810987450 | 2024-10-03T11:08:29.258877

9988 / tcp

\xc3\xbf

-1340128872 | 2024-10-18T04:20:40.307754

9998 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25d2_PS-PEK-010xV14_15533-12109

1161309183 | 2024-10-15T05:09:51.769963

9999 / tcp

ProxyServer is ready

539065883 | 2024-10-15T07:01:12.639578

10000 / tcp

1492413928 | 2024-10-12T11:17:07.382247

10001 / tcp

SSH-2.0-OpenSSH_7.5

-1810987450 | 2024-10-21T15:28:08.274620

10051 / tcp

\xc3\xbf

677934968 | 2024-10-20T23:18:08.463676

10250 / tcp

lm^)Q

1410783704 | 2024-09-27T00:41:27.751643

10443 / tcp

HTTP/1.1 200 OK
Date: Fri, 27 Sep 2024 00:41:27 GMT
Content-Type: application/json
Content-Length: 559
Connection: keep-alive
Ali-Swift-Global-Savetime: 1727397687
Eagleeye-Traceid: fe044d02ef167a481f49ef1f8c
Eagleid: fe044d02ef167a481f49ef1f8c
S_group: tao-session
S_ip: c7e76f7f34f8ad3b1a7b90fb1ec2749c
S_status: STATUS_SYS_ERR
S_tag: 639931265558243|228432165^|^^
S_tid: fe044d02ef167a481f49ef1f8c
S_ucode: CN:CENTER
S_v: 1.3.5.3
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://ecs-buy-cn-zhangjiakou.aliyun.com
Ufe-Result: A2
Via: kunlun55.d5kunlun7[121,453,674-0,M], kunlun47.kunlun90[821,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Fri, 27 Sep 2024 00:41:27 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:49:b2:86:90:3c:9b:46:7a:60:5b:87
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: May  5 06:21:16 2023 GMT
            Not After : Jun  5 06:21:15 2024 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:b4:e6:ec:59:0e:17:e4:45:57:82:09:a8:
                    51:4a:92:a5:84:e3:da:81:83:c5:6c:d1:8e:90:66:
                    15:6d:1b:a1:15:18:cc:d8:0d:db:93:10:70:27:7a:
                    01:9f:56:2b:b5:6c:0e:f4:1f:c9:8c:c9:b9:61:58:
                    7c:1e:3b:5a:83:c1:c3:ad:76:19:75:8b:6d:c7:0f:
                    c7:38:1d:7b:e9:aa:2b:eb:31:38:c6:8c:d7:52:d9:
                    29:e1:3d:e1:ad:30:fd:7d:21:f0:c4:ca:3d:9f:d3:
                    5c:b9:9f:17:81:c2:24:88:a1:82:bc:70:01:82:83:
                    49:79:62:0e:81:d6:5d:56:b1:17:c9:88:6c:c5:61:
                    4f:b7:5f:f9:ce:92:3c:0d:8b:3d:ad:06:28:d0:dc:
                    1c:b5:d3:cf:f2:ff:7d:06:07:fc:9e:11:c1:b0:0c:
                    4e:bf:93:da:c7:a4:f3:5c:ed:24:c9:95:4d:67:24:
                    2d:c9:41:da:50:a7:40:3e:b4:cb:2f:9b:12:cd:06:
                    c8:58:69:28:10:b0:53:9c:26:0e:b6:eb:b5:50:41:
                    7a:2a:fb:a1:a9:29:2f:34:84:bf:04:cb:20:f8:c1:
                    c1:3e:5e:82:b9:f6:f1:c0:e5:08:b1:21:7a:d3:fe:
                    8b:0a:0d:7b:71:76:7f:ae:7d:25:01:e1:6f:c0:d3:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
            X509v3 Subject Alternative Name: 
                DNS:*.aliyun.com, DNS:aliyun.com, DNS:rosechina.taobao.com, DNS:barclay.aliexpress.com, DNS:qr.aliyun.com, DNS:shop365682614.taobao.com, DNS:0f5c5da9.lex.co.id, DNS:cainiao-ru.aliexpress.com, DNS:acs-wapa.rmlogistics.sg, DNS:lha-lab-java.alibaba-inc.com, DNS:gre-dvbbo.an-hongzhov.ojiyvn-ina.aon.aliyun-inc.com, DNS:reako188.1688.com, DNS:dh-an-shonghoi.ojiyvn-ina.aon.aliyun-inc.com, DNS:vone.aliyun.com, DNS:app75554.eapps.dingtalkcloud.com, DNS:oovth.taobao.com, DNS:wwwnode.daxue.dingtalk.com, DNS:shog36284243.taobao.com, DNS:eai-inner.og-sovtheost-2.aliyuncs.com, DNS:devejogerojiyvnaon.aliyuncs.com, DNS:hojostvdio-an-hongzhov.doto.aliyun.com, DNS:vt.quark.cn, DNS:done.alibaba-inc.com, DNS:aodng.taobao.com, DNS:www.aliyun.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        78:03:66:2a:00:19:32:e4:35:e8:58:18:4d:b5:58:0b:b5:3b:
        da:47:99:a0:30:ee:18:76:b3:b1:68:ba:fd:f8:e3:1e:3a:c7:
        7a:a8:6b:7d:dc:cc:c5:30:af:91:fc:23:c1:e6:e9:d9:c2:8e:
        1a:a6:4e:59:2b:fb:f1:08:b6:69:95:a3:36:81:62:1e:e1:36:
        e2:7b:a8:3c:7c:87:0d:c7:94:8e:14:0a:0e:b8:64:17:8d:06:
        cf:a8:d8:7c:15:17:fe:ad:ed:60:08:51:24:fb:1f:4f:62:05:
        ab:6b:3c:1b:20:ca:77:3d:df:09:65:75:03:db:95:97:57:6c:
        92:e9:f4:ec:b2:5f:8e:4e:ef:ec:25:db:1c:98:87:b9:81:24:
        16:7b:07:26:b9:3c:39:d1:b3:eb:e8:ed:0b:b9:d3:d9:8c:f3:
        9b:35:00:38:71:24:f2:69:d4:07:a7:ec:78:a7:28:0c:f3:b4:
        ca:76:c6:af:64:78:84:e6:23:79:cb:83:44:6c:66:ba:f1:52:
        bb:78:87:7b:d8:dc:b0:4b:f4:8e:83:a7:16:03:18:cd:d2:28:
        97:d4:a8:bb:f7:1a:6c:c3:77:fb:e4:89:4a:7c:c7:bb:91:f3:
        12:5c:8e:56:18:a3:33:6a:77:8d:3e:9c:41:a0:94:4a:0f:7b:
        dc:8e:f1:fc

-303199180 | 2024-10-13T16:10:28.244108

10554 / tcp

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

-1399940268 | 2024-10-16T10:53:33.555387

10909 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1888448627 | 2024-10-21T10:10:23.709920

10911 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-445721795 | 2024-10-19T21:54:37.245220

11000 / tcp

\x00[\xc3\xaed\x1a\x7f\x00\x00

819727972 | 2024-09-30T02:17:00.552859

11112 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2024-10-12T08:32:39.516162

11210 / tcp

SSH-2.0-OpenSSH_7.4

-136006866 | 2024-10-17T13:53:35.444702

11211 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

-2096652808 | 2024-10-04T22:18:14.533833

11300 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1368104760 | 2024-10-20T23:42:57.153726

12000 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1d31_PS-TNA-01mQW36_7416-41955

296364507 | 2024-10-17T13:12:20.516147

12345 / tcp

HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

-1839934832 | 2024-10-19T13:06:55.279531

13047 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

259745872 | 2024-10-02T14:56:51.864732

14265 / tcp

1762042191 | 2024-10-12T18:13:28.053150

14344 / tcp

\x7f\x7fICA\x00

1208318993 | 2024-10-09T17:53:31.073099

16993 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

-1810987450 | 2024-10-19T09:49:44.068162

17000 / tcp

\xc3\xbf

1911457608 | 2024-10-11T06:21:04.990244

18081 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1453516345 | 2024-10-09T03:31:57.458821

18245 / tcp

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

-321444299 | 2024-10-18T02:18:55.447975

18443 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

1830187220 | 2024-10-05T22:35:47.358487

19000 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

819727972 | 2024-10-17T08:16:47.707811

19200 / tcp

SSH-2.0-OpenSSH_7.4

1900503736 | 2024-10-06T01:17:00.232495

20000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

819727972 | 2024-10-14T20:02:23.919416

20256 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-10-16T22:51:17.273826

20547 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1370263973 | 2024-10-12T17:55:23.594643

20880 / tcp

dubbo>

-2096652808 | 2024-10-11T16:35:07.484625

21379 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-358801646 | 2024-10-10T15:56:23.940897

23023 / tcp

SSH-2.0-OpenSSH_6.6.1

1282941221 | 2024-10-07T07:32:35.208855

25001 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1161309183 | 2024-10-16T15:57:37.065464

25565 / tcp

ProxyServer is ready

-2031760963 | 2024-10-15T21:33:49.753452

27015 / tcp

Command: None
Size: 1852534389
ID: 544110447
Type: 1835888483

1763259671 | 2024-10-16T03:29:04.838868

27017 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

-1795027372 | 2024-10-20T08:36:13.089667

28015 / tcp

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

1286504516 | 2024-10-16T03:15:10.866000

30002 / tcp

CP2E Control Console
Connected to Host: gZI

-1013082686 | 2024-10-22T20:25:08.076185

30003 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

-1835577706 | 2024-10-04T16:04:27.990099

31337 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

1690634669 | 2024-10-07T09:11:19.471413

32764 / tcp

1741579575 | 2024-10-02T19:42:18.105180

33060 / tcp

117101543 | 2024-10-18T09:11:28.694108

33338 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

408230060 | 2024-10-20T10:57:59.626402

35000 / tcp

\r\nSorry, that nickname format is invalid.\r\n

677934968 | 2024-10-22T11:39:48.509729

37777 / tcp

lm^)Q

-358801646 | 2024-10-21T00:08:34.695183

38333 / tcp

SSH-2.0-OpenSSH_6.6.1

-891714208 | 2024-10-16T07:14:55.358174

41800 / tcp

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

-433302150 | 2024-10-17T03:32:10.050445

44158 / tcp

/multistream/1.0.0

1741579575 | 2024-10-21T03:59:27.831109

44818 / tcp

1544300041 | 2024-10-09T04:05:18.050210

47990 / tcp

SSH-25453-Cisco-3524665.35

-1189269828 | 2024-10-14T19:23:14.961960

48226 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

808560482 | 2024-10-17T04:54:04.205101

50000 / tcp

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP
 : USERID : UNIX : Cr8

-971970408 | 2024-10-19T16:29:31.625255

50050 / tcp

1231376952 | 2024-10-17T13:24:58.439804

50100 / tcp

-1746074029 | 2024-10-21T20:11:52.118144

51235 / tcp

101 imqbroker =unV\r\n

1911457608 | 2024-10-21T13:19:01.459047

54138 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2024-10-17T17:55:38.923494

54984 / tcp

kjnkjabhbanc283ubcsbhdc72

2087396567 | 2024-10-02T16:35:09.426817

55553 / tcp

kjnkjabhbanc283ubcsbhdc72

171352214 | 2024-10-19T11:00:08.196219

55554 / tcp

-ERR client ip is not in whitelist

1911457608 | 2024-10-01T14:50:26.841903

61613 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1887224352 | 2024-10-22T01:56:35.175881

61616 / tcp

-860824904 | 2024-10-18T16:49:51.424159

62078 / tcp

\x00\x01)

2087396567 | 2024-10-22T02:08:39.114363

63210 / tcp

kjnkjabhbanc283ubcsbhdc72

819727972 | 2024-10-18T17:07:34.616871

63257 / tcp

SSH-2.0-OpenSSH_7.4

106.11.226.159

Last Seen: 2024-10-22

Tags:

GeneralInformation

Vulnerabilities All ports Port 110 Port 111 Port 195 Port 771 Port 789 Port 1588 Port 2083 Port 3050 Port 3299 Port 5435 Port 6650 Port 7218 Port 8087 Port 8291 Port 8816 Port 8823 Port 8859 Port 10001 Port 11112 Port 11210 Port 19200 Port 20256 Port 63257 Latest CVSS

OpenPorts

2087396567 | 2024-10-20T18:32:50.672597 11 / tcp

-2127598635 | 2024-10-13T05:32:23.919649 13 / tcp

-971970408 | 2024-10-07T12:51:04.639450 15 / tcp

366084633 | 2024-09-27T05:25:34.277975 17 / tcp

829384519 | 2024-10-05T21:49:42.110087 19 / tcp

2116898107 | 2024-10-17T09:37:57.500655 21 / tcp

164764193 | 2024-10-02T01:34:03.401194 23 / tcp

-2096652808 | 2024-10-15T03:08:41.638119 25 / tcp

900697840 | 2024-10-16T01:55:13.276416 37 / tcp

-2096652808 | 2024-10-20T03:16:25.833447 43 / tcp

1127377266 | 2024-09-29T17:33:48.936679 53 / tcp

857710896 | 2024-10-22T11:03:57.252952 70 / tcp

-876294238 | 2024-10-22T09:10:35.107845 79 / tcp

1623746877 | 2024-10-17T15:34:06.414245 89 / tcp

671605376 | 2024-10-05T22:51:43.479683 98 / tcp

1212285915 | 2024-10-18T18:23:46.963003 102 / tcp

819727972 | 2024-10-18T06:13:34.073564 110 / tcp

819727972 | 2024-10-14T20:00:22.686481 111 / tcp

-1958992631 | 2024-10-07T05:53:37.536297 119 / tcp

1483120365 | 2024-10-03T19:16:25.772578 135 / tcp

-829824006 | 2024-10-20T17:37:08.613232 143 / tcp

-1538260461 | 2024-10-20T14:42:38.091862 175 / tcp

-399606100 | 2024-10-21T20:58:28.608637 179 / tcp

819727972 | 2024-09-27T21:56:59.496754 195 / tcp

1726594447 | 2024-09-23T00:48:24.454027 199 / tcp

-146605374 | 2024-10-22T00:05:02.259749 221 / tcp

-1967791998 | 2024-09-23T20:25:52.124977 222 / tcp

-1707068558 | 2024-10-18T12:06:59.604200 264 / tcp

-1907080992 | 2024-10-19T16:48:41.609026 389 / tcp

-730178403 | 2024-10-19T07:27:09.794798 444 / tcp

897328069 | 2024-10-03T19:28:03.991715 465 / tcp

-1839934832 | 2024-10-02T19:32:27.859266 491 / tcp

117101543 | 2024-10-20T11:17:07.662116 502 / tcp

-249504111 | 2024-10-04T15:13:12.436077 503 / tcp

1690634669 | 2024-09-26T17:36:05.039200 515 / tcp

862587784 | 2024-10-21T01:26:48.778735 548 / tcp

1060450357 | 2024-10-22T06:22:03.327119 554 / tcp

1308377066 | 2024-09-24T23:47:36.930530 593 / tcp

4146400 | 2024-10-16T20:18:31.065565 636 / tcp

-1206199995 | 2024-10-07T22:42:12.975847 646 / tcp

1300162323 | 2024-10-22T09:55:38.682714 666 / tcp

819727972 | 2024-10-19T06:54:28.127496 771 / tcp

1911457608 | 2024-09-28T00:14:23.803686 772 / tcp

819727972 | 2024-09-26T14:02:16.395858 789 / tcp

-2004989248 | 2024-10-07T20:06:46.845284 843 / tcp

-1970692834 | 2024-10-19T23:59:32.415948 873 / tcp

-1256415508 | 2024-10-09T22:55:45.475268 880 / tcp

-262532376 | 2024-10-16T04:18:02.028086 888 / tcp

-1059554316 | 2024-10-21T21:23:09.276523 943 / tcp

1814656027 | 2024-10-22T17:53:33.173372 992 / tcp

-1996280214 | 2024-10-21T12:36:18.500761 993 / tcp

1543809371 | 2024-10-03T17:35:44.773918 994 / tcp

1356395159 | 2024-10-05T23:53:55.277685 995 / tcp

-1681927087 | 2024-10-16T11:17:07.357010 1023 / tcp

-1730858130 | 2024-10-13T01:35:59.387021 1025 / tcp

-457235091 | 2024-10-15T00:38:34.729820 1028 / tcp

1948301213 | 2024-10-05T23:48:18.365383 1099 / tcp

456721301 | 2024-10-21T23:31:48.062167 1110 / tcp

-358801646 | 2024-09-25T21:29:37.344738 1111 / tcp

-1399940268 | 2024-10-11T07:53:21.437164 1153 / tcp

1887224352 | 2024-10-18T04:39:12.828811 1177 / tcp

2087396567 | 2024-10-01T10:41:16.415500 1200 / tcp

-1013082686 | 2024-10-15T06:47:16.702868 1337 / tcp

-1399940268 | 2024-10-13T11:26:28.037038 1414 / tcp

419886129 | 2024-10-04T06:37:01.808019 1433 / tcp

-1715152554 | 2024-10-11T09:02:39.184369 1443 / tcp

2087396567 | 2024-10-16T20:02:44.896354 1515 / tcp

-1337747449 | 2024-10-01T11:02:27.656042 1521 / tcp

819727972 | 2024-10-13T10:49:34.551807 1588 / tcp

-345718689 | 2024-10-21T21:14:40.250519 1599 / tcp

-1839934832 | 2024-10-18T18:53:01.879025 1604 / tcp

-1399940268 | 2024-10-11T17:20:59.768521 1660 / tcp

1103582599 | 2024-10-19T00:57:18.136777 1723 / tcp

-833635452 | 2024-10-13T08:34:37.399850 1801 / tcp

Vulnerabilities

2087396567 | 2024-10-20T18:32:50.672597
11 / tcp

-2127598635 | 2024-10-13T05:32:23.919649
13 / tcp

-971970408 | 2024-10-07T12:51:04.639450
15 / tcp

366084633 | 2024-09-27T05:25:34.277975
17 / tcp

829384519 | 2024-10-05T21:49:42.110087
19 / tcp

2116898107 | 2024-10-17T09:37:57.500655
21 / tcp

164764193 | 2024-10-02T01:34:03.401194
23 / tcp

-2096652808 | 2024-10-15T03:08:41.638119
25 / tcp

900697840 | 2024-10-16T01:55:13.276416
37 / tcp

-2096652808 | 2024-10-20T03:16:25.833447
43 / tcp

1127377266 | 2024-09-29T17:33:48.936679
53 / tcp

857710896 | 2024-10-22T11:03:57.252952
70 / tcp

-876294238 | 2024-10-22T09:10:35.107845
79 / tcp

1623746877 | 2024-10-17T15:34:06.414245
89 / tcp

671605376 | 2024-10-05T22:51:43.479683
98 / tcp

1212285915 | 2024-10-18T18:23:46.963003
102 / tcp

819727972 | 2024-10-18T06:13:34.073564
110 / tcp

819727972 | 2024-10-14T20:00:22.686481
111 / tcp

-1958992631 | 2024-10-07T05:53:37.536297
119 / tcp

1483120365 | 2024-10-03T19:16:25.772578
135 / tcp

-829824006 | 2024-10-20T17:37:08.613232
143 / tcp

-1538260461 | 2024-10-20T14:42:38.091862
175 / tcp

-399606100 | 2024-10-21T20:58:28.608637
179 / tcp

819727972 | 2024-09-27T21:56:59.496754
195 / tcp

1726594447 | 2024-09-23T00:48:24.454027
199 / tcp

-146605374 | 2024-10-22T00:05:02.259749
221 / tcp

-1967791998 | 2024-09-23T20:25:52.124977
222 / tcp

-1707068558 | 2024-10-18T12:06:59.604200
264 / tcp

-1907080992 | 2024-10-19T16:48:41.609026
389 / tcp

-730178403 | 2024-10-19T07:27:09.794798
444 / tcp

897328069 | 2024-10-03T19:28:03.991715
465 / tcp

-1839934832 | 2024-10-02T19:32:27.859266
491 / tcp

117101543 | 2024-10-20T11:17:07.662116
502 / tcp

-249504111 | 2024-10-04T15:13:12.436077
503 / tcp

1690634669 | 2024-09-26T17:36:05.039200
515 / tcp

862587784 | 2024-10-21T01:26:48.778735
548 / tcp

1060450357 | 2024-10-22T06:22:03.327119
554 / tcp

1308377066 | 2024-09-24T23:47:36.930530
593 / tcp

4146400 | 2024-10-16T20:18:31.065565
636 / tcp

-1206199995 | 2024-10-07T22:42:12.975847
646 / tcp

1300162323 | 2024-10-22T09:55:38.682714
666 / tcp

819727972 | 2024-10-19T06:54:28.127496
771 / tcp

1911457608 | 2024-09-28T00:14:23.803686
772 / tcp

819727972 | 2024-09-26T14:02:16.395858
789 / tcp

-2004989248 | 2024-10-07T20:06:46.845284
843 / tcp

-1970692834 | 2024-10-19T23:59:32.415948
873 / tcp

-1256415508 | 2024-10-09T22:55:45.475268
880 / tcp

-262532376 | 2024-10-16T04:18:02.028086
888 / tcp

-1059554316 | 2024-10-21T21:23:09.276523
943 / tcp

1814656027 | 2024-10-22T17:53:33.173372
992 / tcp

-1996280214 | 2024-10-21T12:36:18.500761
993 / tcp

1543809371 | 2024-10-03T17:35:44.773918
994 / tcp

1356395159 | 2024-10-05T23:53:55.277685
995 / tcp

-1681927087 | 2024-10-16T11:17:07.357010
1023 / tcp

-1730858130 | 2024-10-13T01:35:59.387021
1025 / tcp

-457235091 | 2024-10-15T00:38:34.729820
1028 / tcp

1948301213 | 2024-10-05T23:48:18.365383
1099 / tcp

456721301 | 2024-10-21T23:31:48.062167
1110 / tcp

-358801646 | 2024-09-25T21:29:37.344738
1111 / tcp

-1399940268 | 2024-10-11T07:53:21.437164
1153 / tcp

1887224352 | 2024-10-18T04:39:12.828811
1177 / tcp

2087396567 | 2024-10-01T10:41:16.415500
1200 / tcp

-1013082686 | 2024-10-15T06:47:16.702868
1337 / tcp

-1399940268 | 2024-10-13T11:26:28.037038
1414 / tcp

419886129 | 2024-10-04T06:37:01.808019
1433 / tcp

-1715152554 | 2024-10-11T09:02:39.184369
1443 / tcp

2087396567 | 2024-10-16T20:02:44.896354
1515 / tcp

-1337747449 | 2024-10-01T11:02:27.656042
1521 / tcp

819727972 | 2024-10-13T10:49:34.551807
1588 / tcp

-345718689 | 2024-10-21T21:14:40.250519
1599 / tcp

-1839934832 | 2024-10-18T18:53:01.879025
1604 / tcp

-1399940268 | 2024-10-11T17:20:59.768521
1660 / tcp

1103582599 | 2024-10-19T00:57:18.136777
1723 / tcp

-833635452 | 2024-10-13T08:34:37.399850
1801 / tcp

-2031152423 | 2024-10-10T12:46:18.499865
1833 / tcp

-1872120160 | 2024-10-07T15:42:08.574366
1883 / tcp

1282941221 | 2024-10-02T10:26:31.211104
1901 / tcp

1278527606 | 2024-10-02T07:24:13.715071
1911 / tcp

171352214 | 2024-10-16T14:47:43.711063
1926 / tcp