GeneralInformation

Hostnames	is.autonavi.com
Domains	autonavi.com
Country	China
City	Zhangjiakou
Organization	Zhejiang Taobao Network Co.,Ltd
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 17 20 23 38 49 53 70 80 99 101 102 104 110 111 113 119 135 179 189 211 221 264 311 389 427 443 444 488 502 513 515 541 548 591 593 636 666 771 789 808 811 831 833 873 992 993 995 1023 1119 1177 1200 1234 1283 1337 1365 1377 1433 1443 1456 1515 1521 1723 1800 1801 1830 1958 1969 1980 1987 1990 2000 2002 2003 2008 2020 2048 2053 2059 2060 2067 2081 2083 2087 2108 2130 2154 2181 2209 2222 2266 2323 2332 2345 2351 2352 2376 2404 2443 2444 2628 3001 3013 3014 3058 3075 3077 3082 3086 3089 3097 3110 3142 3150 3151 3159 3167 3170 3179 3181 3193 3200 3260 3268 3269 3299 3301 3310 3388 3389 3405 3407 3408 3479 3522 3551 3558 3567 3569 3790 3793 3794 3842 3922 4000 4063 4064 4080 4085 4150 4157 4172 4242 4282 4321 4431 4434 4435 4444 4451 4466 4488 4500 4510 4573 4786 4911 4949 5001 5009 5025 5070 5201 5222 5223 5231 5256 5273 5274 5278 5435 5440 5454 5503 5543 5607 5608 5620 5630 5672 5680 5858 5914 5984 5992 5996 6000 6001 6002 6003 6007 6060 6161 6264 6331 6352 6379 6443 6464 6505 6510 6511 6622 6633 6755 7001 7005 7014 7071 7080 7172 7325 7415 7434 7443 7480 7634 7654 7657 7676 7773 7776 7788 8009 8014 8024 8028 8029 8033 8043 8062 8065 8076 8078 8081 8083 8085 8087 8089 8094 8095 8096 8111 8114 8125 8134 8143 8155 8177 8178 8181 8196 8200 8280 8282 8291 8322 8333 8384 8414 8420 8428 8429 8434 8442 8451 8466 8467 8470 8500 8501 8502 8513 8525 8530 8532 8545 8553 8554 8575 8577 8578 8584 8588 8598 8599 8649 8723 8732 8779 8815 8826 8834 8850 8867 8868 8876 8885 8887 8901 8911 8916 8991 8993 9011 9018 9038 9040 9042 9046 9051 9066 9070 9075 9077 9091 9092 9098 9099 9100 9104 9107 9116 9118 9135 9139 9151 9154 9160 9163 9168 9171 9175 9176 9184 9192 9203 9204 9213 9215 9242 9248 9250 9251 9306 9307 9308 9310 9333 9350 9398 9410 9447 9458 9600 9633 9754 9761 9802 9898 9926 9928 9943 9950 9998 9999 10000 10001 10006 10031 10034 10037 10044 10050 10051 10084 10087 10093 10134 10250 10251 10302 10444 10480 10554 10911 11112 11211 11288 11443 12125 12136 12139 12156 12165 12168 12173 12176 12182 12187 12191 12193 12202 12214 12224 12241 12249 12258 12295 12319 12326 12351 12365 12376 12390 12404 12432 12433 12439 12441 12459 12469 12470 12476 12489 12494 12530 12532 12534 12536 12556 12558 12615 13047 14026 14265 15001 15044 15084 15123 15443 16004 16019 16022 16025 16029 16034 16067 16071 16086 16096 16316 16464 16601 16993 17020 17770 18001 18010 18015 18030 18033 18040 18051 18068 18075 18080 18081 18092 18094 18095 18097 18102 18106 18245 18368 18443 18553 19000 19090 19200 19902 20000 20020 20040 20184 20440 20547 20880 20892 21025 21243 21253 21254 21260 21263 21279 21280 21285 21293 21294 21299 21304 21309 21322 21357 21379 21381 22000 22067 22070 22222 23023 24245 25001 25105 26656 26657 27015 27016 27036 28015 28017 30002 30010 30022 30122 30222 30301 30303 30322 30422 30522 30622 30718 30722 30822 30892 30894 31017 31022 31122 31222 31443 31522 31622 31822 32022 32222 32422 32622 32722 32764 32822 33022 33060 33322 33338 33422 33522 33722 33822 33922 34222 34322 34722 34922 35000 35101 35241 35322 35522 35524 35822 35922 36022 36222 36422 36505 36522 36622 36822 36922 37022 37215 37222 37322 37777 37822 37922 38322 38522 38722 38822 39222 40471 41443 41800 43080 43221 44158 44336 44520 45111 45555 45666 47990 48888 48899 49121 49152 49501 50000 50001 50002 50011 50050 50100 50104 50122 50257 50500 50997 51106 51235 52200 52881 53413 54138 54444 54984 55000 55055 55350 55443 55470 55553 55554 57780 57781 60001 60129 61613 61616 62078 63210 63256 63257 63260 64477 64738

11 / tcp

-1559123399 | 2025-03-24T08:57:30.947734

500 Permission denied - closing connection.

17 / tcp

-1316491703 | 2025-03-13T22:00:26.268788

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

20 / tcp

51259122 | 2025-04-09T16:52:38.275623

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

23 / tcp

-23362551 | 2025-03-15T01:22:56.095733

\xff\xfb\x01\xff\xfb\x03\xff\xfd\x18

38 / tcp

-1248408558 | 2025-03-21T19:28:54.270740

220 MikroTik FTP server (MikroTik 6.44.3) ready

49 / tcp

-801484042 | 2025-03-20T15:23:02.753685

ERR 27

53 / tcp

1127377266 | 2025-03-17T10:33:59.610329

9\n\\x81\\x80\\x00\\x01\\x00\\x02\\x00\\x00\\x00\\x00\\x08clients1\\x06google\\x03com\\x00\\x00\\x01\\x00\\x01\\xc0\x0c\\x00\\x05\\x00\\x01\\x00\\x00\\x00\\xca\\x00\x0c\\x07clients\\x01l\\xc0\\x15\\xc01\\x00\\x01\\x00\\x01\\x00\\x00\\x00\\x83\\x00\\x04\\xac\xd9\xa0n\n\\x00\\x06\\x81\\x85\\x00\\x01\\x00\\x00\\x00\\x00\\x00

70 / tcp

857710896 | 2025-03-28T10:07:29.484093

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Mon, 27 Nov 2023 21:45:42 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

80 / tcp

-169612178 | 2025-04-03T09:49:21.248667

Hashes

hash

-1797734803

http.dom_hash

-1273619370

http.html_hash

-169612178

HTTP/1.1 404 Not Found
Date: Thu, 03 Apr 2025 09:49:10 GMT
Content-Type: text/html
Content-Length: 73
Connection: keep-alive
ETag: "67c90759-49"

99 / tcp

636169965 | 2025-04-10T02:16:11.255439

HTTP/1.1 400 Bad Request
Server: Jdcloud-FE
Content-Type: application/octet-stream
Connection: keep-alive
Keep-Alive: timeout=20

101 / tcp

1911457608 | 2025-03-31T16:34:33.100732

\x00[\x00\x00\x00\x00\x00\x00

102 / tcp

1911457608 | 2025-03-31T20:44:21.575478

\x00[\x00\x00\x00\x00\x00\x00

104 / tcp

-1248408558 | 2025-04-10T01:16:15.179198

220 MikroTik FTP server (MikroTik 6.44.3) ready

110 / tcp

1911457608 | 2025-03-29T07:38:34.019051

\x00[\x00\x00\x00\x00\x00\x00

111 / tcp

1187188851 | 2025-03-26T15:16:28.839192

Portmap
Program	Version	Protocol	Port

113 / tcp

1412519768 | 2025-04-06T08:54:25.030772

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

119 / tcp

-1958992631 | 2025-03-20T06:29:55.658579

\\xd5\xca\xba\\xc5\\xc8\\xcf\xd6\xa4\xca\xa7\\xb0\\xdc ...\r\nIP \\xb5\\xd8\xd6\xb7: *.*.*.*\r\nMAC \\xb5\\xd8\xd6\xb7: \r\n\\xb7\\xfe\\xce\\xf1\\xb6\\xcb\xca\xb1\\xbc\\xe4: 2024-01-22 16:23:50\r\n\\xd1\\xe9\xd6\xa4\\xbd\\xe1\\xb9\\xfb: \\xce\\xde\xd0\xa7\\xd3\xc3\xbb\\xa7.

135 / tcp

1302177452 | 2025-03-25T01:34:05.747489

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: Lou\n IP2: 192.168.5.66\n IP3: 240e:381:1b0a:900:40eb:cce6:2dc1:4045\n IP4: 240e:381:1b0a:900:504f:3a1f:a682:9ab5\n IP5: 240e:381:1b0a:900::2e6\n\nNTLMSSP:\nTarget_Name: LOU\nProduct_Version: 10.0.22621 Ntlm 15\nOS: Windows 11, Version 22H2\nNetBIOS_Domain_Name: LOU\nNetBIOS_Computer_Name: LOU\nDNS_Domain_Name: Lou\nDNS_Computer_Name: Lou\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 04:06:53 +0000 UTC\n\nDCE

179 / tcp

-399606100 | 2025-03-23T18:05:07.786191

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

189 / tcp

-1375131644 | 2025-04-04T05:12:52.756736

\x00[v\xc3\xbdC\x7f\x00\x00

211 / tcp

1042158273 | 2025-03-21T00:01:18.611119

HTTP/1.1 200 OK
Server: Web Server
Accept-Ranges: bytes
Connection: Keep-Alive
Keep-Alive: timeout=10, max=1000
Content-Type: text/html

221 / tcp

-438503381 | 2025-03-17T15:33:14.557746

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

264 / tcp

-1709030885 | 2025-03-29T02:02:44.401854

SSH-

311 / tcp

-1547976805 | 2025-03-22T18:56:35.511423

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

389 / tcp

-1639129386 | 2025-04-03T15:41:14.663805

0%\\x02\\x01\\x01a \n\\x010\\x04\\x00\\x04\\x19anonymous bind disallowed

427 / tcp

1530390632 | 2025-04-05T08:05:14.717377

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://127.0.0.1\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:cdserver\nservice:fdserver\nservice:hdserver\nservice:adviser\nservice:lighttpd\nB://l:87/x\n\nResponse of service:ipmi SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:ipmi://(none):623\n  Lifetime: 65535\n  URL: service:ipmi://IEI9CC2C4135A27:623\n\n\nResponse of service:ipmi Attr

443 / tcp

-169612178 | 2025-04-02T07:54:43.568661

Hashes

hash

-1401645135

http.dom_hash

-1273619370

http.html_hash

-169612178

HTTP/1.1 404 Not Found
Date: Wed, 02 Apr 2025 07:54:43 GMT
Content-Type: text/html
Content-Length: 73
Connection: keep-alive
ETag: "67c90759-49"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:48:d3:20:87:7a:5c:c2:ea:70:75:fd
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R3 OV TLS CA 2024
        Validity
            Not Before: Feb  6 08:12:16 2025 GMT
            Not After : Mar 10 08:01:18 2026 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.is.autonavi.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:60:1c:e9:b6:a0:89:31:ec:14:23:32:81:80:30:
                    89:19:c5:6b:a9:52:57:08:8b:87:ef:9e:a7:15:45:
                    9e:b8:ea:56:c5:42:af:3b:86:bf:2b:4a:91:98:f0:
                    a0:96:bc:e9:fe:e6:bf:97:15:e4:43:ab:e8:e8:85:
                    ae:d1:68:7f:38
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr3ovtlsca2024.crt
                OCSP - URI:http://ocsp.globalsign.com/gsgccr3ovtlsca2024
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.3.6.1.4.1.4146.10.1.2
                  CPS: https://www.globalsign.com/repository/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsgccr3ovtlsca2024.crl
            X509v3 Subject Alternative Name: 
                DNS:*.is.autonavi.com, DNS:is.autonavi.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                DA:D3:A8:08:48:0C:34:37:58:EE:E5:A7:75:2E:59:FC:D6:DC:3C:38
            X509v3 Subject Key Identifier: 
                ED:D7:E8:4C:B4:0D:BD:F7:BA:E7:10:2C:25:DE:7F:86:E0:FF:70:73
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 19:86:D4:C7:28:AA:6F:FE:BA:03:6F:78:2A:4D:01:91:
                                AA:CE:2D:72:31:0F:AE:CE:5D:70:41:2D:25:4C:C7:D4
                    Timestamp : Feb  6 08:12:18.426 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E5:C8:AB:D4:7C:37:17:F0:1F:4B:05:
                                11:D3:DA:AC:CF:51:37:4C:0F:52:1A:E1:D2:C7:60:7B:
                                8E:98:7D:1C:6F:02:21:00:D7:D8:8B:AE:37:74:73:F2:
                                8C:80:37:C1:1A:E5:48:80:0E:5D:A8:D2:1F:74:49:3B:
                                25:D4:1C:89:B6:E6:CE:36
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Feb  6 08:12:18.408 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:41:78:23:1C:4F:CC:65:D7:C6:11:0B:4E:
                                86:84:46:82:61:5D:CD:78:C9:24:58:44:DF:ED:0C:DD:
                                02:7E:AC:17:02:20:22:57:F8:30:12:6D:21:26:0A:0B:
                                00:51:3C:48:60:E7:82:35:36:89:84:61:B5:1A:65:97:
                                7B:77:98:6D:68:BE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Feb  6 08:12:18.388 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:A6:35:7F:BE:50:91:B6:D6:6D:BE:7A:
                                F8:4A:BD:78:0F:8E:19:91:C6:9E:A9:52:32:B4:74:7C:
                                C4:10:0E:92:E5:02:21:00:CD:72:0B:92:18:5E:E0:80:
                                18:48:8C:EE:21:99:C8:8D:05:9E:36:85:8E:8E:FB:A7:
                                77:06:FD:D5:E4:37:F3:63
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        a4:55:6f:80:0b:a0:ff:c1:04:e1:6a:ca:27:2d:c8:a6:e2:40:
        cb:72:06:0f:51:90:7a:1c:cc:3e:f7:e2:93:3e:94:26:a6:03:
        26:8b:c9:dd:72:36:a0:cf:91:d6:58:9f:dc:fa:fd:b4:d4:97:
        53:84:c5:18:0a:45:35:b4:13:2a:45:57:0f:56:4f:ea:30:dc:
        d6:81:b9:a2:8e:55:2d:9b:0e:24:e9:51:e0:bf:c1:c6:38:a1:
        a8:ef:d1:81:24:26:39:80:e5:17:9d:b8:fe:99:e1:42:3b:59:
        2f:0f:71:2c:06:31:bd:19:97:4b:cd:e4:b7:14:74:af:92:87:
        d3:90:fe:bc:7b:c5:73:ed:15:7d:b1:4e:26:5c:69:bc:e7:64:
        4c:2b:b6:07:35:67:5e:c9:da:23:fe:87:be:36:15:07:dd:d4:
        05:c8:1f:83:51:f1:90:9c:fd:15:85:7c:3b:4d:0d:4a:22:c9:
        84:52:aa:a4:fc:e0:c4:b6:c4:0d:3a:04:a4:24:13:de:87:e7:
        fa:41:32:51:d1:eb:dd:8b:ab:89:8b:f5:cb:f0:0b:b1:90:33:
        b7:8e:fc:31:1b:9a:5b:9b:73:73:b7:a4:0d:2d:31:0d:cc:cc:
        70:96:6c:c9:9d:7c:c3:bc:76:3c:95:19:bf:25:81:61:8f:d0:
        74:3d:c4:a3

444 / tcp

-279824099 | 2025-03-27T01:43:15.163055

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Thu, 27 Mar 2025 01:43:15 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

488 / tcp

-2089734047 | 2025-03-17T09:44:16.361378

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

502 / tcp

-653033013 | 2025-04-07T12:35:03.667863

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

513 / tcp

15018106 | 2025-04-09T02:06:56.175674

\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00

515 / tcp

-2017887953 | 2025-03-29T16:30:20.035828

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

541 / tcp

-1577240266 | 2025-04-09T06:43:19.920870

\\x16\\x03\\x01\\x00\\xcb\\x01\\x00\\x00\\xc7\\x03\\x03\\xf5U\\x9e9\\xa3\\x00;%\\xf8r\x0b\\xb3X\\xab+\n\\xee\\x810\\x90\\x90\\xcd\\x19\\x08\\xddlH\\x1c\\xf1\\x1d,\\xa7\\x00\\x00,\\x009\\x005\\x00k\\x00=\\xc00\\xc0,\\xc0(\\xc0$\\xc0\\x14\\xc0\n\\x003\\x00/\\x00g\\x00<\\xc0/\\xc0+\\x00\\x9e\\xc0\'\\xc0#\\xc0\\x13\\xc

548 / tcp

1801869778 | 2025-04-04T10:39:37.989403

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: DS1019Plus\nMachine Type: \rNetatalk3.1.8\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: Cleartxt Passwrd\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

591 / tcp

-1327660293 | 2025-03-15T12:51:30.853380

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

593 / tcp

1308377066 | 2025-03-24T11:56:28.310887

ncacn_http/1.0

636 / tcp

1650594030 | 2025-04-03T07:13:07.149054

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 4-30654152-0 0NNN RT(1705911965960 176) q(-1 -1 -1 -1) r(0 -1) b1

666 / tcp

1300162323 | 2025-04-08T16:06:54.754512

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

771 / tcp

-1399940268 | 2025-03-23T14:54:46.807855

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

789 / tcp

-1399940268 | 2025-04-09T20:47:29.035513

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

808 / tcp

-1166978945 | 2025-03-20T21:51:49.399195

HTTP/1.1 407 Proxy Authentication Required
Server: Proxy
Proxy-Authenticate: Basic realm="CCProxy Authorization"
Connection: Close
Proxy-Connection: Close

811 / tcp

321971019 | 2025-04-02T00:50:38.016749

-ERR client ip is not in whitelist\r

831 / tcp

-1399940268 | 2025-04-05T04:29:55.625264

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

833 / tcp

-457235091 | 2025-03-14T22:46:56.353723

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

873 / tcp

-1970692834 | 2025-04-02T09:11:42.451355

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

992 / tcp

-936692830 | 2025-04-02T21:43:45.354780

HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19

993 / tcp

597764502 | 2025-04-06T22:11:35.196547

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

995 / tcp

-740312032 | 2025-04-05T13:33:35.444840

+OK Dovecot (Ubuntu) ready.\r\n

1023 / tcp

2067064333 | 2025-03-20T00:03:45.180309

athinfod: invalid query.

1119 / tcp

-1713467553 | 2025-03-16T23:26:59.149263

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Connection: close

1177 / tcp

539065883 | 2025-04-07T20:51:39.275636

1200 / tcp

-1316398834 | 2025-04-06T12:16:47.371452

ÿ

1234 / tcp

-2033111675 | 2025-04-06T04:42:59.295457

~djb

1283 / tcp

-1032713145 | 2025-03-16T18:06:45.810805

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

1337 / tcp

819727972 | 2025-03-16T10:26:09.219164

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

1365 / tcp

-1399940268 | 2025-03-24T09:39:55.585657

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1377 / tcp

-1279886438 | 2025-03-16T18:02:37.420114

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

1433 / tcp

-1279739995 | 2025-03-26T21:00:40.293694

MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XINKE20190306\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XINKE20190306\nNetBIOS_Computer_Name: XINKE20190306\nDNS_Domain_Name: xinke20190306\nDNS_Computer_Name: xinke20190306\nSystem_Time: 2024-01-22 04:04:46 +0000 UTC\n\n

1443 / tcp

-1715152554 | 2025-03-15T07:50:05.072362

Hashes

hash

631721007

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sat, 15 Mar 2025 07:50:04 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.11.43.97:443/

1456 / tcp

-2089734047 | 2025-04-06T14:18:58.195686

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1515 / tcp

2087396567 | 2025-03-31T20:03:15.559483

kjnkjabhbanc283ubcsbhdc72

1521 / tcp

-1337747449 | 2025-03-17T11:23:03.532422

Version:12.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=203424000)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

1723 / tcp

1103582599 | 2025-03-22T06:43:44.951302

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

1800 / tcp

921225407 | 2025-03-15T10:50:01.830184

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1801 / tcp

-1139999322 | 2025-04-05T13:30:25.313337

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xf2\\xdby\\x96\\xbb\\xb1LE\\xa1\\x1f.%\xd2\xbft\\xb692d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1830 / tcp

-1737707071 | 2025-04-06T18:03:47.381812

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

1958 / tcp

-1013082686 | 2025-03-16T17:01:09.113509

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

1969 / tcp

-1487943323 | 2025-03-18T06:31:27.084446

431 Unable to negotiate secure command connection.\r\n

1980 / tcp

-2089734047 | 2025-04-06T05:01:20.026949

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1987 / tcp

-1538260461 | 2025-03-20T17:59:16.637191

\x01\x00\x00\x00

1990 / tcp

-1611764932 | 2025-03-13T12:10:53.916330

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

2000 / tcp

2098371729 | 2025-03-17T10:42:24.740420

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

2002 / tcp

-1399940268 | 2025-03-17T13:33:05.825581

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2003 / tcp

1975288991 | 2025-04-05T16:08:11.670375

OPTI

2008 / tcp

-345718689 | 2025-04-04T00:02:06.279240

Vty password is not set.

2020 / tcp

970156442 | 2025-04-03T14:27:42.087713

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1d03_ddx38_34915-4963

2048 / tcp

-1399940268 | 2025-04-02T09:02:28.195516

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2053 / tcp

-1399940268 | 2025-03-18T16:21:04.371412

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2059 / tcp

-1839934832 | 2025-03-29T16:28:38.137659

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

2060 / tcp

-1399940268 | 2025-04-05T15:16:47.719683

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2067 / tcp

-2033111675 | 2025-04-02T20:27:36.647495

~djb

2081 / tcp

-2096652808 | 2025-03-18T14:32:19.459223

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

2083 / tcp

-358801646 | 2025-03-19T23:33:36.987291

SSH-2.0-OpenSSH_6.6.1

2087 / tcp

-1045760528 | 2025-04-06T09:17:00.727554

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

2108 / tcp

-1399940268 | 2025-04-09T18:21:15.724136

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2130 / tcp

-1399940268 | 2025-03-19T06:48:36.842075

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2154 / tcp

-1013082686 | 2025-03-17T10:13:22.767812

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

2181 / tcp

546151771 | 2025-03-19T17:48:33.326211

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2209 / tcp

820958131 | 2025-03-25T20:50:12.487708

kjnkjabhbanc283ubcsbhdc72\x02

2222 / tcp

58083962 | 2025-04-06T16:56:28.072644

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Content-Type: text/html
Connection: close

2266 / tcp

-339084706 | 2025-03-21T21:00:52.545195

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

2323 / tcp

-2112953016 | 2025-04-07T22:34:18.580707

There are too many users,please wait a moment to log in!


TELNET Negotiation:
will: Echo, Suppress Go Ahead
do: Echo, Negotiate About Window Size, Remote Flow Control

2332 / tcp

-1730858130 | 2025-03-19T21:53:04.096232

RFB 003.008
VNC:
  Protocol Version: 3.8

2345 / tcp

-1399940268 | 2025-03-28T06:44:52.104667

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2351 / tcp

1911457608 | 2025-03-14T18:11:55.193533

\x00[\x00\x00\x00\x00\x00\x00

2352 / tcp

1911457608 | 2025-04-09T02:21:27.096835

\x00[\x00\x00\x00\x00\x00\x00

2376 / tcp

2087396567 | 2025-04-09T22:22:37.150571

kjnkjabhbanc283ubcsbhdc72

2404 / tcp

580340387 | 2025-04-10T13:47:48.780479

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

2443 / tcp

-1399940268 | 2025-03-18T06:36:35.766926

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2444 / tcp

-1059554316 | 2025-03-23T16:13:32.599162

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

2628 / tcp

2087396567 | 2025-04-01T13:52:44.372359

kjnkjabhbanc283ubcsbhdc72

3001 / tcp

-1032713145 | 2025-04-04T15:54:26.008879

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

3013 / tcp

-1568680103 | 2025-03-25T07:01:04.749807

HTTP/1.1 301 Moved Permanently
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3014 / tcp

320677201 | 2025-04-01T15:44:15.842459

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

3058 / tcp

820958131 | 2025-04-03T18:26:11.113848

kjnkjabhbanc283ubcsbhdc72\x02

3075 / tcp

1615193817 | 2025-03-14T21:52:37.943581

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

3077 / tcp

198844676 | 2025-03-16T01:34:32.409534

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3082 / tcp

819727972 | 2025-04-01T19:59:08.412096

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3086 / tcp

-1148066627 | 2025-03-20T19:14:20.130545

\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00

3089 / tcp

2063598737 | 2025-03-18T12:33:25.003147

/0 0 L\r\n/0 0 HUH\r\n

3097 / tcp

1911457608 | 2025-04-07T12:17:56.421956

\x00[\x00\x00\x00\x00\x00\x00

3110 / tcp

-1399940268 | 2025-03-15T13:48:00.045842

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3142 / tcp

117101543 | 2025-04-06T01:33:56.705582

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

3150 / tcp

819727972 | 2025-03-29T00:18:17.666824

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3151 / tcp

1726594447 | 2025-03-14T20:18:40.273909

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

3159 / tcp

1911457608 | 2025-03-11T20:09:03.290432

\x00[\x00\x00\x00\x00\x00\x00

3167 / tcp

1332894250 | 2025-04-01T18:44:26.882970

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

3170 / tcp

-1248408558 | 2025-03-28T14:43:35.061160

220 MikroTik FTP server (MikroTik 6.44.3) ready

3179 / tcp

819727972 | 2025-04-06T20:47:28.347486

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3181 / tcp

-445721795 | 2025-03-22T09:40:43.149788

\x00[\xc3\xaed\x1a\x7f\x00\x00

3193 / tcp

-1730858130 | 2025-04-02T08:42:03.783661

RFB 003.008
VNC:
  Protocol Version: 3.8

3200 / tcp

580340387 | 2025-03-25T21:17:10.531424

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

3260 / tcp

-271466677 | 2025-03-29T09:37:55.378118

RIFA\\x00\\x00\\x00\\x00\\x10\\x88\\x81\\x00\\x00\\x00\\x00\\x00\\x00\x0b\\x00\\x05\\x00\\x00\\x00:\\x00HD316\\x00\\x01\\x00

3268 / tcp

-2031078612 | 2025-04-05T23:30:26.558605

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: http://proxy.ces.org.tw:3000/login?url=http%3A%2F%2Floginbyurl.wanfangdata.com.cn%2F

3269 / tcp

-1399940268 | 2025-04-05T21:13:41.622538

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3299 / tcp

1636811864 | 2025-03-23T20:05:33.347552

3301 / tcp

-2096652808 | 2025-03-22T08:03:06.821157

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

3310 / tcp

-1399940268 | 2025-04-09T22:58:59.789933

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3388 / tcp

1332894250 | 2025-03-11T17:19:59.662046

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

3389 / tcp

-6645672 | 2025-04-06T02:18:54.039489

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x0f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: 172_16_0_11\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: 172_16_0_11\nNetBIOS_Computer_Name: 172_16_0_11\nDNS_Domain_Name: 172_16_0_11\nDNS_Computer_Name: 172_16_0_11\nSystem_Time: 2024-01-22 08:42:27 +0000 UTC\n\n

3405 / tcp

-1399940268 | 2025-04-01T16:20:58.948512

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3407 / tcp

-1399940268 | 2025-03-15T00:50:57.274148

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3408 / tcp

2103111368 | 2025-03-24T22:38:32.876655

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

3479 / tcp

-1730858130 | 2025-03-12T12:29:04.301120

RFB 003.008
VNC:
  Protocol Version: 3.8

3522 / tcp

50497985 | 2025-04-08T13:43:40.392444

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

3551 / tcp

198844676 | 2025-04-01T11:22:15.037132

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3558 / tcp

1911457608 | 2025-03-18T00:25:20.208756

\x00[\x00\x00\x00\x00\x00\x00

3567 / tcp

-1399940268 | 2025-03-11T18:44:52.008686

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3569 / tcp

1948301213 | 2025-04-05T12:22:10.566862

RFB 003.003
VNC:
  Protocol Version: 3.3

3790 / tcp

171352214 | 2025-03-11T19:39:31.287890

-ERR client ip is not in whitelist

3793 / tcp

-2080784861 | 2025-03-12T00:57:41.491529

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

3794 / tcp

-2096652808 | 2025-03-31T10:09:37.316364

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

3842 / tcp

-1327660293 | 2025-04-06T21:14:38.150274

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3922 / tcp

-1013082686 | 2025-03-13T13:37:53.352127

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

4000 / tcp

1300162323 | 2025-03-29T20:37:42.499586

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

4063 / tcp

1321679546 | 2025-04-06T00:03:42.810182

ÿÿÿ
0 ...

4064 / tcp

205347087 | 2025-03-22T20:02:35.766864

SSH-25453-Cisco-3524665.35\n

4080 / tcp

819727972 | 2025-04-07T15:29:36.896361

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4085 / tcp

1975288991 | 2025-03-16T00:41:32.478617

OPTI

4150 / tcp

819727972 | 2025-03-31T14:17:02.774841

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4157 / tcp

-971970408 | 2025-04-05T18:30:39.221853

4172 / tcp

408230060 | 2025-04-05T16:25:53.084694

\r\nSorry, that nickname format is invalid.\r\n

4242 / tcp

-1914158197 | 2025-04-10T03:09:42.270444

HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

4282 / tcp

2087396567 | 2025-04-01T20:37:09.424742

kjnkjabhbanc283ubcsbhdc72

4321 / tcp

-1250504565 | 2025-03-18T01:28:56.372075

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

4431 / tcp

1189133115 | 2025-03-28T15:00:09.541564

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

4434 / tcp

-1316491703 | 2025-04-05T18:30:39.073654

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

4435 / tcp

-1598265216 | 2025-03-16T14:37:32.654427

@RSYNCD: 31.0

4444 / tcp

-1230049476 | 2025-04-06T19:30:33.149346

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

4451 / tcp

897328069 | 2025-04-07T14:57:45.767606

220 mail.scott000.com ESMTP

4466 / tcp

-1140468363 | 2025-03-13T15:59:57.571339

\x02\t\x01

4488 / tcp

1282941221 | 2025-03-17T18:02:02.491073

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

4500 / tcp

-375604792 | 2025-04-09T22:57:39.627338

220 Microsoft FTP Service

4510 / tcp

2103111368 | 2025-04-10T00:24:00.007961

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

4573 / tcp

819727972 | 2025-04-09T09:59:56.207691

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4786 / tcp

707919486 | 2025-04-06T18:08:13.654265

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

4911 / tcp

-616720387 | 2025-03-21T06:18:48.006852

SSH-2.0-SSHD_0.7.6

4949 / tcp

-546659243 | 2025-03-15T12:54:54.589671

ôInternal Server ErrorAB

5001 / tcp

2087396567 | 2025-04-05T10:01:30.555492

kjnkjabhbanc283ubcsbhdc72

5009 / tcp

-1338936697 | 2025-03-18T07:10:22.656416

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2109_PStjdxtk16_38957-48596

5025 / tcp

-801484042 | 2025-04-09T16:50:00.933074

ERR 27

5070 / tcp

-1399940268 | 2025-03-17T07:19:48.496178

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5201 / tcp

1991883981 | 2025-04-03T17:19:58.628646

B\x00\x00\x00\xc3\xbfn\x04Too many connections

5222 / tcp

-1265999252 | 2025-04-08T13:32:32.495154

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

5223 / tcp

-1019343788 | 2025-04-08T16:19:03.507267

W!\x00\x00\x00\x00

5231 / tcp

-1733106930 | 2025-04-06T00:38:19.285515

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

5256 / tcp

1948301213 | 2025-03-16T22:53:42.092668

RFB 003.003
VNC:
  Protocol Version: 3.3

5273 / tcp

-1399940268 | 2025-04-05T18:33:31.482702

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5274 / tcp

1911457608 | 2025-03-21T11:18:59.224265

\x00[\x00\x00\x00\x00\x00\x00

5278 / tcp

1948301213 | 2025-03-23T02:39:29.065408

RFB 003.003
VNC:
  Protocol Version: 3.3

5435 / tcp

-303199180 | 2025-03-16T06:51:21.719430

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

5440 / tcp

-1143770003 | 2025-03-12T11:43:48.217240

HTTP/1.1 200 OK
Server: bsa/1.2
Connection: close
Content-Type: text/html

5454 / tcp

-1327660293 | 2025-04-08T22:45:36.875465

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

5503 / tcp

-1453516345 | 2025-03-13T10:25:10.496501

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

5543 / tcp

1948301213 | 2025-03-29T18:11:42.743248

RFB 003.003
VNC:
  Protocol Version: 3.3

5607 / tcp

-1045760528 | 2025-03-25T20:22:45.824226

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

5608 / tcp

1911457608 | 2025-03-27T20:50:30.613322

\x00[\x00\x00\x00\x00\x00\x00

5620 / tcp

1011407350 | 2025-03-23T05:58:31.285369

* OK GroupWise IMAP4rev1 Server Ready\r\n

5630 / tcp

-2096652808 | 2025-03-19T07:09:34.411424

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5672 / tcp

575925250 | 2025-03-19T01:43:40.427380

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5680 / tcp

-1399940268 | 2025-04-10T07:00:53.906472

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5858 / tcp

60948681 | 2025-04-03T04:47:04.200528

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).

5914 / tcp

-1737707071 | 2025-03-13T13:53:55.579404

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

5984 / tcp

1999272906 | 2025-03-20T02:09:52.102462

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5992 / tcp

1126993057 | 2025-03-29T18:53:03.029139

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

5996 / tcp

-1399940268 | 2025-04-08T22:45:33.689595

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6000 / tcp

1975288991 | 2025-04-03T02:36:27.288136

OPTI

6001 / tcp

120534451 | 2025-04-07T00:58:35.828393

X11 access denied

6002 / tcp

2071407588 | 2025-04-01T05:55:29.103179

ÿ

6003 / tcp

-358801646 | 2025-04-08T22:26:22.230017

SSH-2.0-OpenSSH_6.6.1

6007 / tcp

-801484042 | 2025-03-16T10:27:30.934443

ERR 27

6060 / tcp

-1399940268 | 2025-03-13T09:43:09.963523

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6161 / tcp

-1435414831 | 2025-03-23T07:56:41.591375

roku: ready\r\n

6264 / tcp

819727972 | 2025-03-25T11:32:54.989322

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

6331 / tcp

1620329124 | 2025-03-25T13:10:52.368482

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

6352 / tcp

1282941221 | 2025-04-09T05:09:13.503776

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

6379 / tcp

321971019 | 2025-03-19T05:10:24.874545

-ERR client ip is not in whitelist\r

6443 / tcp

1607515550 | 2025-03-26T13:33:39.448522

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Wed, 26 Mar 2025 13:33:39 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.11.43.97:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

6464 / tcp

1624217396 | 2025-04-06T18:19:23.034297

HELO:10.3.6.0.false\nAS:2048\nHL:19

6505 / tcp

-1399940268 | 2025-04-09T22:48:14.083249

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6510 / tcp

-444830029 | 2025-03-15T20:14:21.821966

HTTP/1.1 401 Unauthorized
Server: xhmmhttpsv130-20200310
Cache-Control: no-cache,no-store
Content-Type: text/html; charset=%s
Connection: close

6511 / tcp

-1730858130 | 2025-04-09T07:21:40.900966

RFB 003.008
VNC:
  Protocol Version: 3.8

6622 / tcp

-1733645023 | 2025-04-01T04:05:19.734001

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

6633 / tcp

722711397 | 2025-04-04T09:33:14.623307

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

6755 / tcp

632542934 | 2025-04-03T17:59:03.172815

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

7001 / tcp

1634746382 | 2025-03-23T20:32:30.731696

HTTP/1.1 200 OK
X-Current-Requests: 1
Vary: Origin
Content-Type: application/json; charset=utf-8
X-ReadTime: 51
Connection: keep-alive
Keep-Alive: timeout=5

7005 / tcp

1492413928 | 2025-03-16T01:18:55.091039

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

7014 / tcp

-1899074860 | 2025-03-19T23:26:20.784846

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

7071 / tcp

-952165951 | 2025-03-27T13:43:56.774268

AB

7080 / tcp

119860953 | 2025-03-12T11:26:22.139797

* OK ArGoSoft Mail Server IMAP Module v.YW at

7172 / tcp

-1795027372 | 2025-04-09T14:38:52.598918

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

7325 / tcp

-1810987450 | 2025-03-18T09:54:34.479708

\xc3\xbf

7415 / tcp

-1888448627 | 2025-04-09T00:48:35.349275

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

7434 / tcp

171352214 | 2025-04-09T17:04:57.448821

-ERR client ip is not in whitelist

7443 / tcp

-1006110807 | 2025-04-01T00:52:03.974016

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-GLOBAL1-CACHE20[3]
X-CCDN-ERRCODE-SRC: 01
X-CCDN-FORBID-CODE: 040001

7480 / tcp

1911457608 | 2025-04-02T23:05:45.198491

\x00[\x00\x00\x00\x00\x00\x00

7634 / tcp

1282941221 | 2025-04-04T18:17:22.015475

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

7654 / tcp

-1399940268 | 2025-03-31T07:11:52.352597

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7657 / tcp

-2118655245 | 2025-04-01T21:31:12.444433

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

7676 / tcp

1100205395 | 2025-03-18T01:33:13.689946

HTTP/1.1 200 OK
Cache-Control: private, max-age=300

7773 / tcp

1989907056 | 2025-03-17T07:55:24.601783

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

7776 / tcp

671605376 | 2025-04-05T23:09:10.291843

SSH-2.0-OpenSSH_X.X

7788 / tcp

-441419608 | 2025-03-19T17:26:21.006815

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

8009 / tcp

819727972 | 2025-03-15T21:42:10.024294

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8014 / tcp

599074451 | 2025-03-12T22:33:15.324921

msg

8024 / tcp

-2033111675 | 2025-03-13T05:50:03.485523

~djb

8028 / tcp

2143387245 | 2025-03-15T18:43:35.989651

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

8029 / tcp

1919228981 | 2025-03-31T10:39:34.479819

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

8033 / tcp

819727972 | 2025-03-14T16:05:19.920893

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8043 / tcp

1726594447 | 2025-03-21T03:03:08.278546

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

8062 / tcp

-2031152423 | 2025-03-15T00:37:41.429852

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8065 / tcp

-2089734047 | 2025-03-14T04:19:25.759019

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8076 / tcp

677934968 | 2025-04-01T19:35:49.020737

lm^)Q

8078 / tcp

677934968 | 2025-04-08T19:30:08.500128

lm^)Q

8081 / tcp

-653033013 | 2025-04-08T05:03:58.226537

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

8083 / tcp

-1032713145 | 2025-03-31T07:19:08.234841

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8085 / tcp

-1148066627 | 2025-03-29T22:09:15.505622

\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00

8087 / tcp

-2140303521 | 2025-04-10T11:30:38.339015

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

8089 / tcp

-146605374 | 2025-04-07T12:58:55.258515

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

8094 / tcp

-2089734047 | 2025-03-23T22:44:31.247304

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8095 / tcp

-2089734047 | 2025-03-25T02:49:55.444926

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8096 / tcp

-375604792 | 2025-04-07T21:35:18.429795

220 Microsoft FTP Service

8111 / tcp

-249504111 | 2025-04-02T18:43:25.284319

\x00[xU-\x7f\x00\x00

8114 / tcp

-445721795 | 2025-04-06T14:08:33.276981

\x00[\xc3\xaed\x1a\x7f\x00\x00

8125 / tcp

-792826324 | 2025-03-26T18:43:01.435461

220 FTP server ready - login please

8134 / tcp

401555314 | 2025-03-18T19:00:41.905291

NB[GFXjA^R

8143 / tcp

1189133115 | 2025-04-02T16:57:24.678528

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

8155 / tcp

-1399940268 | 2025-04-05T05:39:23.662727

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8177 / tcp

-801484042 | 2025-03-21T12:35:25.248532

ERR 27

8178 / tcp

819727972 | 2025-04-07T15:09:51.663310

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8181 / tcp

1984588611 | 2025-03-21T21:03:58.660708

8196 / tcp

-1399940268 | 2025-03-12T01:50:16.932481

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8200 / tcp

-877598700 | 2025-03-29T05:27:35.152277

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\\x01\xc3\xbf\xc3\xbb\\x03\xc3\xbf\xc3\xbd\\x01\xc3\xbf\xc3\xbe\\x01Username:

8280 / tcp

-2031152423 | 2025-04-01T08:00:47.814140

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8282 / tcp

-1399940268 | 2025-04-01T23:13:09.088616

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8291 / tcp

-1399940268 | 2025-03-22T16:04:45.032457

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8322 / tcp

819727972 | 2025-04-06T22:14:56.715176

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8333 / tcp

1944032451 | 2025-04-01T10:14:26.075976

K\\x02%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

8384 / tcp

819727972 | 2025-04-04T06:49:32.085364

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8414 / tcp

-445721795 | 2025-03-20T09:06:54.434925

\x00[\xc3\xaed\x1a\x7f\x00\x00

8420 / tcp

632542934 | 2025-04-10T13:07:41.050843

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8428 / tcp

937756010 | 2025-03-27T11:07:06.637541

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8429 / tcp

1212285915 | 2025-04-03T20:12:01.916794

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

8434 / tcp

-2089734047 | 2025-04-05T14:37:16.540099

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8442 / tcp

575925250 | 2025-04-09T18:15:14.265778

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

8451 / tcp

-1399940268 | 2025-03-27T17:15:41.800544

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8466 / tcp

165188539 | 2025-04-07T17:28:47.907475

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8467 / tcp

-2046514463 | 2025-03-21T21:18:49.170915

AB\x01\t

8470 / tcp

320677201 | 2025-04-03T20:40:16.817504

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

8500 / tcp

-684625978 | 2025-04-01T04:57:43.980990

{Datacenter:dc1 NodeName:consul-dev NodeID:e61aec6b-e338-67fa-3b08-f8185bd5b528 Revision:db839f18b Server:true Version:1.10.1}

8501 / tcp

-1032713145 | 2025-03-17T13:57:55.475165

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8502 / tcp

-358801646 | 2025-03-17T15:40:27.864835

SSH-2.0-OpenSSH_6.6.1

8513 / tcp

819727972 | 2025-04-02T00:59:15.736478

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8525 / tcp

819727972 | 2025-04-05T08:49:42.720296

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8530 / tcp

-146605374 | 2025-03-26T02:48:44.899796

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

8532 / tcp

819727972 | 2025-04-03T19:20:51.955018

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8545 / tcp

-1013082686 | 2025-04-01T17:09:00.035968

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

8553 / tcp

-1019343788 | 2025-04-08T07:33:49.770430

W!\x00\x00\x00\x00

8554 / tcp

819727972 | 2025-04-04T18:39:57.553296

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8575 / tcp

-1399940268 | 2025-04-04T18:31:33.968783

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8577 / tcp

408230060 | 2025-03-17T16:26:13.234531

\r\nSorry, that nickname format is invalid.\r\n

8578 / tcp

-1888448627 | 2025-04-06T09:27:56.082107

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8584 / tcp

2098371729 | 2025-04-01T03:20:47.655043

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

8588 / tcp

-1013082686 | 2025-04-08T16:08:34.417650

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

8598 / tcp

455076604 | 2025-03-13T02:07:30.935084

!\x07version\x04bind7 t{RPowerDNS Recursor 410

8599 / tcp

455076604 | 2025-03-17T02:25:21.317628

!\x07version\x04bind7 t{RPowerDNS Recursor 410

8649 / tcp

842535728 | 2025-03-15T18:55:06.854580

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

8723 / tcp

-802143704 | 2025-03-25T04:41:11.422759

HTTP/1.0 500 Internal Server Error
D
Connection: close

Command server error

8732 / tcp

-2031152423 | 2025-04-01T09:14:07.544746

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8779 / tcp

921225407 | 2025-03-13T20:17:45.263276

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8815 / tcp

-653033013 | 2025-03-24T14:15:35.502903

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

8826 / tcp

-1399940268 | 2025-03-15T18:12:49.065301

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8834 / tcp

1741579575 | 2025-03-27T09:44:21.614405

8850 / tcp

-1453516345 | 2025-03-31T18:20:35.155077

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

8867 / tcp

-1399940268 | 2025-03-25T23:16:16.499130

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8868 / tcp

-441419608 | 2025-04-05T20:51:15.482827

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

8876 / tcp

-1327660293 | 2025-04-07T12:16:59.675955

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

8885 / tcp

-358801646 | 2025-03-31T19:22:19.793286

SSH-2.0-OpenSSH_6.6.1

8887 / tcp

-2096652808 | 2025-04-10T08:00:46.725410

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8901 / tcp

165188539 | 2025-03-25T19:49:56.352883

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8911 / tcp

1189133115 | 2025-03-17T00:04:19.125280

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

8916 / tcp

1911457608 | 2025-03-28T08:24:14.667106

\x00[\x00\x00\x00\x00\x00\x00

8991 / tcp

722711397 | 2025-04-01T19:46:13.772575

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

8993 / tcp

321971019 | 2025-03-28T11:24:08.357157

-ERR client ip is not in whitelist\r

9011 / tcp

-407828767 | 2025-04-10T07:48:55.398811

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

9018 / tcp

-2089734047 | 2025-04-01T11:58:18.044153

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9038 / tcp

-1730858130 | 2025-04-10T10:33:26.748048

RFB 003.008
VNC:
  Protocol Version: 3.8

9040 / tcp

1130179067 | 2025-03-14T02:25:58.942473

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65aa15a9_PS-000-01k7g70_22621-61633

9042 / tcp

1741579575 | 2025-04-03T12:39:47.544929

9046 / tcp

-303199180 | 2025-03-15T04:02:18.156485

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

9051 / tcp

-971970408 | 2025-04-06T14:37:42.092594

9066 / tcp

-457235091 | 2025-03-24T23:05:37.804271

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

9070 / tcp

-1399940268 | 2025-04-05T18:35:51.063745

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9075 / tcp

-358801646 | 2025-04-05T01:42:15.916060

SSH-2.0-OpenSSH_6.6.1

9077 / tcp

-1399940268 | 2025-04-01T21:09:35.920665

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9091 / tcp

-345718689 | 2025-03-21T11:19:54.448075

Vty password is not set.

9092 / tcp

1353260875 | 2025-04-10T00:03:35.980620

\x00[g\xc2\x95N\x7f\x00\x00

9098 / tcp

-1399940268 | 2025-04-04T11:10:18.822172

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9099 / tcp

-1914711518 | 2025-03-21T00:46:18.476309

HTTP/1.1 400 Bad Request
Connection: close
Server: Lego Server

9100 / tcp

-2089734047 | 2025-04-01T23:58:37.234192

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9104 / tcp

-249504111 | 2025-03-20T17:15:13.712558

\x00[xU-\x7f\x00\x00

9107 / tcp

819727972 | 2025-03-16T08:37:03.370132

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9116 / tcp

-1329831334 | 2025-03-24T16:29:50.081293

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

9118 / tcp

-1888448627 | 2025-03-22T08:06:03.583095

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9135 / tcp

-1097188123 | 2025-04-03T18:40:50.847425

[g\xc2\x95N\x7f

9139 / tcp

-441419608 | 2025-03-14T06:57:37.199673

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

9151 / tcp

-971970408 | 2025-03-31T21:09:55.600314

9154 / tcp

819727972 | 2025-04-02T18:32:48.169947

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9160 / tcp

1363464823 | 2025-03-26T17:44:50.439585

\x00[|ox\x7f\x00\x00

9163 / tcp

2103111368 | 2025-03-25T17:02:03.236708

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

9168 / tcp

819727972 | 2025-03-18T12:40:02.947873

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9171 / tcp

819727972 | 2025-03-13T16:18:27.116275

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9175 / tcp

-1476017887 | 2025-03-15T20:27:32.609300

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

9176 / tcp

2143387245 | 2025-03-28T18:42:44.673895

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

9184 / tcp

-1099385124 | 2025-03-31T15:05:10.510966

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

9192 / tcp

45131230 | 2025-03-25T16:26:55.367220

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

9203 / tcp

-1248408558 | 2025-03-25T16:32:14.947168

220 MikroTik FTP server (MikroTik 6.44.3) ready

9204 / tcp

971933601 | 2025-03-31T15:04:40.829692

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

9213 / tcp

945910976 | 2025-03-31T12:25:50.026546

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

9215 / tcp

819727972 | 2025-04-06T21:02:54.078472

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9242 / tcp

-992671574 | 2025-03-13T08:45:42.648651

@RSYNCD: 26

9248 / tcp

-358801646 | 2025-03-29T10:17:48.862895

SSH-2.0-OpenSSH_6.6.1

9250 / tcp

1308377066 | 2025-03-31T11:27:44.772099

ncacn_http/1.0

9251 / tcp

165188539 | 2025-03-12T16:33:44.629334

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9306 / tcp

-1888448627 | 2025-04-09T09:42:55.211349

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9307 / tcp

632542934 | 2025-03-13T18:30:36.371845

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

9308 / tcp

1308377066 | 2025-03-12T20:19:52.866285

ncacn_http/1.0

9310 / tcp

1911457608 | 2025-04-02T17:01:09.199684

\x00[\x00\x00\x00\x00\x00\x00

9333 / tcp

819727972 | 2025-03-26T05:06:28.268450

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9350 / tcp

-1888448627 | 2025-04-01T18:00:51.532961

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9398 / tcp

1332894250 | 2025-04-03T22:06:17.482753

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

9410 / tcp

-1538260461 | 2025-03-27T21:26:56.094095

\x01\x00\x00\x00

9447 / tcp

1911457608 | 2025-04-07T21:06:15.193065

\x00[\x00\x00\x00\x00\x00\x00

9458 / tcp

-1888448627 | 2025-04-08T15:57:48.064216

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9600 / tcp

1911457608 | 2025-03-18T02:16:37.654417

\x00[\x00\x00\x00\x00\x00\x00

9633 / tcp

1741579575 | 2025-03-15T19:35:17.117052

9754 / tcp

-2017887953 | 2025-03-21T04:55:19.372264

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

9761 / tcp

-1399940268 | 2025-03-18T04:12:40.756068

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9802 / tcp

-1189269828 | 2025-03-28T08:34:17.380878

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

9898 / tcp

-1056270173 | 2025-03-13T18:19:46.231019

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

9926 / tcp

1911457608 | 2025-04-10T12:04:32.527948

\x00[\x00\x00\x00\x00\x00\x00

9928 / tcp

1363464823 | 2025-03-20T12:31:55.752913

\x00[|ox\x7f\x00\x00

9943 / tcp

248249138 | 2025-03-29T16:42:19.546584

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24d3_xyd116_25356-2749

9950 / tcp

-249504111 | 2025-03-15T17:43:46.216275

\x00[xU-\x7f\x00\x00

9998 / tcp

-1901729922 | 2025-03-29T10:49:38.542076

HTTP/1.1 404 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/json
Transfer-Encoding: chunked

9999 / tcp

1161309183 | 2025-03-29T15:27:36.299952

ProxyServer is ready

10000 / tcp

1690634669 | 2025-04-09T05:47:01.294777

10001 / tcp

1492413928 | 2025-04-02T20:05:49.731789

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

10006 / tcp

117101543 | 2025-03-20T21:44:51.644449

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

10031 / tcp

1282941221 | 2025-04-09T04:29:38.645372

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

10034 / tcp

165188539 | 2025-03-26T14:28:05.465848

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

10037 / tcp

1077013874 | 2025-03-23T05:28:42.039058

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

10044 / tcp

1911457608 | 2025-03-29T01:17:08.122438

\x00[\x00\x00\x00\x00\x00\x00

10050 / tcp

-746114901 | 2025-03-12T12:39:49.286466

[KpU

10051 / tcp

819727972 | 2025-04-06T11:09:41.370086

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

10084 / tcp

-1399940268 | 2025-03-26T18:43:20.686831

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10087 / tcp

-1327660293 | 2025-03-19T18:54:15.255277

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

10093 / tcp

-1399940268 | 2025-03-23T13:21:32.713707

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10134 / tcp

1911457608 | 2025-03-27T10:19:03.453553

\x00[\x00\x00\x00\x00\x00\x00

10250 / tcp

-358801646 | 2025-03-29T21:57:46.731138

SSH-2.0-OpenSSH_6.6.1

10251 / tcp

-1399940268 | 2025-03-26T23:34:13.494070

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10302 / tcp

1911457608 | 2025-03-21T08:02:49.710809

\x00[\x00\x00\x00\x00\x00\x00

10444 / tcp

1911457608 | 2025-04-09T01:33:45.114198

\x00[\x00\x00\x00\x00\x00\x00

10480 / tcp

-1097188123 | 2025-03-31T08:59:21.394345

[g\xc2\x95N\x7f

10554 / tcp

1921398876 | 2025-03-15T14:15:56.285816

ÿý"
LinuxNode v06953 (ggfks)

login:

10911 / tcp

-1399940268 | 2025-03-16T21:55:43.202500

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11112 / tcp

-1399940268 | 2025-03-13T15:31:04.079755

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11211 / tcp

-136006866 | 2025-03-18T13:03:33.103024

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11288 / tcp

51259122 | 2025-03-19T12:13:23.382047

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

11443 / tcp

599074451 | 2025-04-03T06:11:10.469751

msg

12125 / tcp

-1399940268 | 2025-04-01T21:53:59.441693

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12136 / tcp

-2140303521 | 2025-03-24T18:48:15.545984

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

12139 / tcp

-1399940268 | 2025-04-03T02:28:42.537451

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12156 / tcp

-1399940268 | 2025-04-09T17:06:38.598610

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12165 / tcp

677934968 | 2025-04-09T17:14:02.189971

lm^)Q

12168 / tcp

-2089734047 | 2025-03-15T09:56:04.031362

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12173 / tcp

1911457608 | 2025-04-04T15:41:24.247623

\x00[\x00\x00\x00\x00\x00\x00

12176 / tcp

1911457608 | 2025-03-29T19:05:46.058372

\x00[\x00\x00\x00\x00\x00\x00

12182 / tcp

1762042191 | 2025-03-24T04:28:49.739504

\x7f\x7fICA\x00

12187 / tcp

-1399940268 | 2025-03-23T04:37:45.896310

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12191 / tcp

-1839934832 | 2025-03-18T03:55:41.190439

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12193 / tcp

1308377066 | 2025-03-26T14:54:05.081194

ncacn_http/1.0

12202 / tcp

-1399940268 | 2025-03-25T20:20:23.115345

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12214 / tcp

-1399940268 | 2025-04-08T08:58:58.252176

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12224 / tcp

-1399940268 | 2025-04-05T03:45:39.075398

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12241 / tcp

1911457608 | 2025-04-02T01:30:55.266453

\x00[\x00\x00\x00\x00\x00\x00

12249 / tcp

-1045760528 | 2025-03-17T14:14:11.336565

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

12258 / tcp

-653033013 | 2025-03-26T22:41:58.484358

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

12295 / tcp

-345718689 | 2025-03-18T06:24:21.283070

Vty password is not set.

12319 / tcp

-1399940268 | 2025-03-16T11:02:06.482803

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12326 / tcp

-2089734047 | 2025-04-05T23:49:48.943001

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12351 / tcp

-2046514463 | 2025-03-20T17:38:14.063217

AB\x01\t

12365 / tcp

1504401647 | 2025-03-31T07:20:52.984806

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

12376 / tcp

-1835475271 | 2025-04-08T15:52:51.125537

200 NOD32SS 99 (3318497116)\r\n

12390 / tcp

1370263973 | 2025-04-08T23:59:04.574955

dubbo>

12404 / tcp

-1399940268 | 2025-04-09T18:07:55.725223

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12432 / tcp

2103111368 | 2025-03-21T11:27:00.295078

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

12433 / tcp

-297128567 | 2025-03-13T22:58:26.375773

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

12439 / tcp

-1476017887 | 2025-03-21T18:08:11.301488

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

12441 / tcp

-1453516345 | 2025-03-12T06:57:48.093676

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

12459 / tcp

-1032713145 | 2025-03-13T10:50:13.943924

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

12469 / tcp

-1114821551 | 2025-03-16T13:19:34.601358

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

12470 / tcp

-1626979812 | 2025-03-23T06:09:10.434667

220 Service ready for new user.

12476 / tcp

-1032713145 | 2025-03-17T00:22:19.692580

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

12489 / tcp

-1399940268 | 2025-04-04T00:34:26.817917

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12494 / tcp

819727972 | 2025-03-25T02:45:32.078295

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12530 / tcp

-1839934832 | 2025-03-25T16:01:32.884727

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12532 / tcp

740837454 | 2025-04-05T22:36:49.163732

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

12534 / tcp

366084633 | 2025-04-02T16:52:16.189614

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

12536 / tcp

-784071826 | 2025-03-29T04:34:33.961588

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

12556 / tcp

-1399940268 | 2025-03-21T21:40:41.883836

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12558 / tcp

1911457608 | 2025-04-10T13:35:28.242741

\x00[\x00\x00\x00\x00\x00\x00

12615 / tcp

-616720387 | 2025-04-06T00:21:16.789027

SSH-2.0-SSHD_0.7.6

13047 / tcp

-1441741890 | 2025-04-06T18:36:28.035501

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2
0181212])

14026 / tcp

-345718689 | 2025-04-06T13:42:42.831988

Vty password is not set.

14265 / tcp

1911457608 | 2025-04-09T17:37:28.948374

\x00[\x00\x00\x00\x00\x00\x00

15001 / tcp

819727972 | 2025-04-06T01:15:14.660150

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

15044 / tcp

2063598737 | 2025-03-20T07:06:17.605854

/0 0 L\r\n/0 0 HUH\r\n

15084 / tcp

-1399940268 | 2025-03-20T12:06:13.791189

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

15123 / tcp

-1730858130 | 2025-04-04T13:41:22.544844

RFB 003.008
VNC:
  Protocol Version: 3.8

15443 / tcp

-409020351 | 2025-03-14T05:17:44.113556

NPC Telnet permit one connection.
 But One connection() already keep alive.
Good Bye !!

16004 / tcp

921225407 | 2025-03-12T04:51:51.964832

\x00\x00\x00\x04\x00\x00\x00\x00\x00

16019 / tcp

-1737707071 | 2025-04-06T16:20:57.148670

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

16022 / tcp

819727972 | 2025-04-07T04:47:43.907520

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

16025 / tcp

398077695 | 2025-03-20T02:30:52.306167

16029 / tcp

380146262 | 2025-04-09T21:49:15.285180

@RSYNCD: 30.0

16034 / tcp

-2089734047 | 2025-04-06T17:30:32.835010

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

16067 / tcp

-2017887953 | 2025-03-31T19:20:35.219086

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

16071 / tcp

1911457608 | 2025-04-08T20:54:39.388959

\x00[\x00\x00\x00\x00\x00\x00

16086 / tcp

819727972 | 2025-03-20T19:42:45.688378

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

16096 / tcp

1282941221 | 2025-04-09T14:34:25.005904

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

16316 / tcp

1911457608 | 2025-03-15T17:09:41.462197

\x00[\x00\x00\x00\x00\x00\x00

16464 / tcp

1842524259 | 2025-04-02T09:23:48.762993

16601 / tcp

897328069 | 2025-03-23T03:15:56.800298

220 mail.scott000.com ESMTP

16993 / tcp

472902042 | 2025-03-16T11:11:44.258923

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

17020 / tcp

1911457608 | 2025-03-31T11:53:04.195476

\x00[\x00\x00\x00\x00\x00\x00

17770 / tcp

321971019 | 2025-04-04T17:34:37.547657

-ERR client ip is not in whitelist\r

18001 / tcp

1996932384 | 2025-04-08T05:59:43.886404

"raop" nonce

18010 / tcp

1996932384 | 2025-03-20T08:35:09.424777

"raop" nonce

18015 / tcp

-1297953727 | 2025-03-26T18:02:24.276413

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

18030 / tcp

1830187220 | 2025-03-18T10:32:09.543283

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

18033 / tcp

-2089734047 | 2025-03-15T02:42:50.633940

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

18040 / tcp

1148421955 | 2025-03-19T18:11:34.490212

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65a1140e_PSfjfzdx2wz88_25283-62185

18051 / tcp

-2096652808 | 2025-03-12T20:31:11.708639

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

18068 / tcp

-1013082686 | 2025-03-29T03:23:00.470746

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

18075 / tcp

117101543 | 2025-03-14T02:12:42.793092

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

18080 / tcp

171352214 | 2025-04-08T19:12:13.545614

-ERR client ip is not in whitelist

18081 / tcp

-1399940268 | 2025-03-31T07:02:39.451747

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18092 / tcp

321971019 | 2025-03-22T05:09:22.538716

-ERR client ip is not in whitelist\r

18094 / tcp

1761482307 | 2025-03-24T19:19:06.798422

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

18095 / tcp

1911457608 | 2025-03-21T08:21:55.597388

\x00[\x00\x00\x00\x00\x00\x00

18097 / tcp

-1487943323 | 2025-03-15T21:29:38.159549

431 Unable to negotiate secure command connection.\r\n

18102 / tcp

-1375131644 | 2025-04-02T17:02:16.491000

\x00[v\xc3\xbdC\x7f\x00\x00

18106 / tcp

-1730858130 | 2025-04-09T19:05:48.093326

RFB 003.008
VNC:
  Protocol Version: 3.8

18245 / tcp

-971970408 | 2025-03-21T19:05:43.615977

18368 / tcp

-585940771 | 2025-03-16T06:04:04.998938

Unknown command\r\n

18443 / tcp

-1810987450 | 2025-04-08T00:25:48.482146

\xc3\xbf

18553 / tcp

539065883 | 2025-03-26T21:20:37.397295

19000 / tcp

-1839934832 | 2025-03-13T05:08:57.511460

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

19090 / tcp

-136006866 | 2025-03-18T17:29:43.909279

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

19200 / tcp

539065883 | 2025-03-27T19:23:51.139222

19902 / tcp

1308377066 | 2025-03-12T16:35:07.121100

ncacn_http/1.0

20000 / tcp

1900503736 | 2025-03-27T01:38:29.671505

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20020 / tcp

-2096652808 | 2025-03-18T05:16:51.117553

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

20040 / tcp

-1032713145 | 2025-04-05T19:14:17.034416

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

20184 / tcp

1911457608 | 2025-03-16T11:08:28.414319

\x00[\x00\x00\x00\x00\x00\x00

20440 / tcp

1620329124 | 2025-04-09T13:27:38.910953

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

20547 / tcp

-1399940268 | 2025-04-04T12:17:17.051001

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20880 / tcp

1370263973 | 2025-03-29T12:05:42.889871

dubbo>

20892 / tcp

819727972 | 2025-03-18T19:46:24.898500

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

21025 / tcp

-1428621233 | 2025-04-03T12:31:20.659888

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

21243 / tcp

165188539 | 2025-03-18T05:34:21.851854

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21253 / tcp

-1888448627 | 2025-03-16T23:09:17.295306

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

21254 / tcp

1370263973 | 2025-04-04T22:40:01.618233

dubbo>

21260 / tcp

597764502 | 2025-03-19T18:25:59.197488

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

21263 / tcp

-1399940268 | 2025-03-23T09:04:06.481156

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21279 / tcp

-1399940268 | 2025-04-01T19:18:14.533839

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21280 / tcp

1911457608 | 2025-03-13T04:46:43.480141

\x00[\x00\x00\x00\x00\x00\x00

21285 / tcp

-339084706 | 2025-03-12T15:34:20.499291

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

21293 / tcp

2098371729 | 2025-04-06T23:34:18.781844

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

21294 / tcp

-2089734047 | 2025-03-20T15:23:24.720512

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

21299 / tcp

-339084706 | 2025-03-13T14:42:55.508662

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

21304 / tcp

-339084706 | 2025-03-17T08:19:29.430426

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

21309 / tcp

-1230049476 | 2025-03-27T21:49:34.593106

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

21322 / tcp

-438503381 | 2025-03-25T16:57:34.209097

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

21357 / tcp

1282941221 | 2025-03-20T08:51:21.612424

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

21379 / tcp

1911457608 | 2025-04-05T23:15:24.741362

\x00[\x00\x00\x00\x00\x00\x00

21381 / tcp

1208318993 | 2025-04-04T10:27:12.380864

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

22000 / tcp

2087396567 | 2025-04-01T17:31:34.940242

kjnkjabhbanc283ubcsbhdc72

22067 / tcp

171352214 | 2025-04-02T03:25:43.120679

-ERR client ip is not in whitelist

22070 / tcp

660175493 | 2025-04-04T02:06:36.135956

22222 / tcp

-358801646 | 2025-04-03T09:01:13.500569

SSH-2.0-OpenSSH_6.6.1

23023 / tcp

819727972 | 2025-03-19T07:18:34.044438

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

24245 / tcp

-1760806421 | 2025-03-14T14:23:02.288259

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

25001 / tcp

693973426 | 2025-04-05T23:23:32.795580

220 VMware Authentication Daemon Version 1.10: SSL Required, Se\nrverDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , , NFCSSL supported/t

25105 / tcp

819727972 | 2025-03-22T21:03:25.457835

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

26656 / tcp

401555314 | 2025-03-13T06:13:12.659711

NB[GFXjA^R

26657 / tcp

-1013082686 | 2025-04-07T14:48:48.592427

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

27015 / tcp

-1579561773 | 2025-04-06T22:08:53.457906

Command: None
Size: 1869759010
ID: 1633838177
Type: 1377854574

27016 / tcp

171352214 | 2025-03-29T09:19:59.387842

-ERR client ip is not in whitelist

27036 / tcp

-971970408 | 2025-03-25T08:43:56.194933

28015 / tcp

-801484042 | 2025-04-01T19:48:00.622154

ERR 27

28017 / tcp

-1611764932 | 2025-04-02T11:06:34.151695

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

30002 / tcp

-1856918252 | 2025-03-20T22:58:13.020051

[ÈÝS

30010 / tcp

1723769361 | 2025-03-28T15:20:06.894858

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

30022 / tcp

2087396567 | 2025-03-14T21:19:52.769655

kjnkjabhbanc283ubcsbhdc72

30122 / tcp

2087396567 | 2025-03-19T20:22:27.808609

kjnkjabhbanc283ubcsbhdc72

30222 / tcp

-971970408 | 2025-04-05T19:55:43.114442

30301 / tcp

740837454 | 2025-04-09T06:18:29.423055

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

30303 / tcp

-1733645023 | 2025-03-19T21:59:53.104743

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

30322 / tcp

1412519768 | 2025-04-06T01:57:06.561785

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

30422 / tcp

819727972 | 2025-04-05T20:44:23.635821

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

30522 / tcp

819727972 | 2025-03-26T07:16:25.033358

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

30622 / tcp

-971970408 | 2025-04-05T12:05:31.895493

30718 / tcp

-305970756 | 2025-04-02T22:27:14.069693

MAC Addr:00:80:a3:fd:5f:0d

30722 / tcp

819727972 | 2025-04-05T05:12:23.037160

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

30822 / tcp

472902042 | 2025-04-05T15:30:47.179212

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

30892 / tcp

819727972 | 2025-03-23T20:07:01.245891

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

30894 / tcp

-2096652808 | 2025-03-15T05:27:44.549700

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

31017 / tcp

366084633 | 2025-04-01T20:14:07.078029

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

31022 / tcp

2087396567 | 2025-04-05T17:15:00.741250

kjnkjabhbanc283ubcsbhdc72

31122 / tcp

-971970408 | 2025-03-25T18:07:54.274321

31222 / tcp

2087396567 | 2025-03-24T02:14:47.756733

kjnkjabhbanc283ubcsbhdc72

31443 / tcp

1852418385 | 2025-04-07T16:37:03.612391

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

31522 / tcp

1690634669 | 2025-04-04T23:44:28.176127

31622 / tcp

-971970408 | 2025-03-23T09:53:44.254845

31822 / tcp

-441419608 | 2025-03-20T18:54:19.046581

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

32022 / tcp

-1032713145 | 2025-03-23T19:05:40.614068

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

32222 / tcp

-1713437100 | 2025-03-23T17:42:58.119371

\xc3\xbf\xc3\xbb\x01\r\nWelcome to NetLinx v94 Copyright AMX Corp. 34395-49007\r\n>

32422 / tcp

2087396567 | 2025-03-23T13:24:25.214796

kjnkjabhbanc283ubcsbhdc72

32622 / tcp

2087396567 | 2025-04-04T12:59:44.619488

kjnkjabhbanc283ubcsbhdc72

32722 / tcp

2087396567 | 2025-04-04T09:57:48.742385

kjnkjabhbanc283ubcsbhdc72

32764 / tcp

1267517148 | 2025-04-05T23:30:33.467721

=Àÿÿ?"<ZDECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6

32822 / tcp

1842524259 | 2025-03-23T03:57:36.388750

33022 / tcp

104385780 | 2025-03-23T00:31:29.068267

ceph v2

33060 / tcp

808560482 | 2025-04-01T21:29:21.668233

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP
 : USERID : UNIX : Cr8

33322 / tcp

-1477838366 | 2025-03-22T07:28:44.573048

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

33338 / tcp

50497985 | 2025-03-24T07:30:04.010543

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

33422 / tcp

-314039103 | 2025-03-19T16:46:48.381924

Surnom.
Sorry, that nickname format is invalid.

33522 / tcp

104385780 | 2025-03-20T14:01:12.217850

ceph v2

33722 / tcp

398077695 | 2025-03-18T04:12:27.260428

33822 / tcp

2087396567 | 2025-03-18T11:09:44.913559

kjnkjabhbanc283ubcsbhdc72

33922 / tcp

819727972 | 2025-03-18T02:25:22.834634

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

34222 / tcp

-784071826 | 2025-03-20T01:30:52.468661

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

34322 / tcp

1852418385 | 2025-03-19T18:28:07.693356

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

34722 / tcp

-805362002 | 2025-03-19T08:01:07.868837

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

34922 / tcp

841014058 | 2025-03-18T20:17:47.862389

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

35000 / tcp

321971019 | 2025-03-25T00:45:07.688078

-ERR client ip is not in whitelist\r

35101 / tcp

-1099385124 | 2025-03-15T02:06:21.941476

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

35241 / tcp

-274082663 | 2025-03-18T07:59:35.336364

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

35322 / tcp

366084633 | 2025-03-17T08:54:48.573233

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

35522 / tcp

677934968 | 2025-03-17T00:59:04.393943

lm^)Q

35524 / tcp

-2089734047 | 2025-03-22T00:41:31.223196

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

35822 / tcp

2087396567 | 2025-03-17T17:58:28.631728

kjnkjabhbanc283ubcsbhdc72

35922 / tcp

320677201 | 2025-03-16T21:21:00.893256

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

36022 / tcp

1830697416 | 2025-03-17T21:09:10.624107

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

36222 / tcp

-375604792 | 2025-03-17T19:27:31.815574

220 Microsoft FTP Service

36422 / tcp

2087396567 | 2025-03-15T08:25:49.114894

kjnkjabhbanc283ubcsbhdc72

36505 / tcp

-2096652808 | 2025-04-02T12:16:02.877276

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

36522 / tcp

2087396567 | 2025-03-18T16:21:17.906062

kjnkjabhbanc283ubcsbhdc72

36622 / tcp

-68075478 | 2025-03-16T08:36:10.860854

36822 / tcp

-971970408 | 2025-03-18T14:36:18.725674

36922 / tcp

1308377066 | 2025-03-18T12:54:17.196926

ncacn_http/1.0

37022 / tcp

2087396567 | 2025-03-16T19:29:13.100506

kjnkjabhbanc283ubcsbhdc72

37215 / tcp

-1013082686 | 2025-04-02T15:37:42.187788

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

37222 / tcp

671605376 | 2025-03-14T21:41:28.948845

SSH-2.0-OpenSSH_X.X

37322 / tcp

1690634669 | 2025-03-16T11:10:44.519397

37777 / tcp

-445721795 | 2025-04-02T12:27:38.535612

\x00[\xc3\xaed\x1a\x7f\x00\x00

37822 / tcp

-1872120160 | 2025-03-14T01:36:49.906589

">Application and Content Networking Software 3.9</a>)
</BODY><

37922 / tcp

-1461540015 | 2025-03-18T00:35:41.579624

audio 0 RTP/AVP 18 4 3 8 0 101
a

38322 / tcp

2087396567 | 2025-03-15T13:59:40.085948

kjnkjabhbanc283ubcsbhdc72

38522 / tcp

-2096652808 | 2025-03-13T23:51:01.942134

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

38722 / tcp

2087396567 | 2025-03-14T02:47:53.737632

kjnkjabhbanc283ubcsbhdc72

38822 / tcp

-1810987450 | 2025-03-12T16:04:14.403294

\xc3\xbf

39222 / tcp

2087396567 | 2025-03-13T16:52:47.735141

kjnkjabhbanc283ubcsbhdc72

40471 / tcp

-792826324 | 2025-03-16T21:07:12.885524

220 FTP server ready - login please

41443 / tcp

1308377066 | 2025-04-07T20:10:18.135872

ncacn_http/1.0

41800 / tcp

-2089734047 | 2025-03-17T03:13:11.647876

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

43080 / tcp

321971019 | 2025-03-20T03:55:25.019333

-ERR client ip is not in whitelist\r

43221 / tcp

669849225 | 2025-03-22T09:57:33.806009

SSH-98.60-SysaxSSH_81885..42\r\n

44158 / tcp

-433302150 | 2025-03-22T20:13:19.303372

/multistream/1.0.0

44336 / tcp

819727972 | 2025-04-08T00:03:44.481707

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

44520 / tcp

1911457608 | 2025-03-24T01:36:57.417654

\x00[\x00\x00\x00\x00\x00\x00

45111 / tcp

493955023 | 2025-03-28T23:51:43.434474

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

45555 / tcp

-904840257 | 2025-03-25T19:33:55.742057

572 Relay not authorized\r\n

45666 / tcp

1911457608 | 2025-04-05T18:52:54.650329

\x00[\x00\x00\x00\x00\x00\x00

47990 / tcp

2087396567 | 2025-03-17T17:19:34.639708

kjnkjabhbanc283ubcsbhdc72

48888 / tcp

1726594447 | 2025-03-14T04:46:33.248945

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

48899 / tcp

-971970408 | 2025-03-31T09:06:50.669304

49121 / tcp

103159425 | 2025-03-15T20:10:30.679845

SSH-1.99-RGOS_SSH

49152 / tcp

-999794581 | 2025-03-20T07:55:04.871421

HTTP/1.1 404 Error
Connection: close

<?xml version="1.0"?>
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<s:Body>
<s:Fault>
<faultcode>s:Client</faultcode>
<faultstring>UPnPError</faultstring>
<detail>
<UPnPError xmlns="urn:schemas-upnp-org:control-1-0">
<errorCode>404</errorCode>
<errorDescription>Error</errorDescription>
</UPnPError>
</detail>
</s:Fault>
</s:Body>
</s:Envelope>

49501 / tcp

-1888448627 | 2025-03-24T17:38:20.462529

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

50000 / tcp

-1559123399 | 2025-03-26T13:02:54.862124

500 Permission denied - closing connection.

50001 / tcp

-1399940268 | 2025-04-10T00:16:40.872824

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

50002 / tcp

-1399940268 | 2025-04-07T21:13:18.758331

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

50011 / tcp

819727972 | 2025-03-22T13:52:59.060879

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

50050 / tcp

819727972 | 2025-03-29T04:05:59.359141

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

50100 / tcp

-893477759 | 2025-03-20T22:28:39.064368

!versionbind7 t{RPowerDNS Recursor 410

50104 / tcp

-1399940268 | 2025-03-24T19:28:11.211343

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

50122 / tcp

-2096652808 | 2025-04-08T17:50:19.283097

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

50257 / tcp

-1327660293 | 2025-03-31T10:26:06.640985

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

50500 / tcp

1342742850 | 2025-04-02T15:02:14.966593

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 11-95441870-0 0NNN RT(1701249031731 8) q(0 -1 -1 -1) r(0 -1)

50997 / tcp

1911457608 | 2025-04-06T11:53:45.814775

\x00[\x00\x00\x00\x00\x00\x00

51106 / tcp

1741579575 | 2025-03-20T10:40:30.358986

51235 / tcp

1308377066 | 2025-04-01T19:26:59.095811

ncacn_http/1.0

52200 / tcp

-1399940268 | 2025-03-29T05:39:05.180841

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

52881 / tcp

709622286 | 2025-04-05T22:33:15.490437

OK Welcome <299685> on DirectUpdate server 7286\r\n

53413 / tcp

-454087041 | 2025-03-29T07:35:17.452549

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

54138 / tcp

-1626979812 | 2025-04-09T20:07:16.898846

220 Service ready for new user.

54444 / tcp

740837454 | 2025-04-07T23:30:52.100830

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

54984 / tcp

-1681927087 | 2025-04-10T07:04:22.984787

kjnkjabhbanc283ubcsbhdc72

55000 / tcp

632542934 | 2025-04-06T02:41:12.011180

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

55055 / tcp

1472866667 | 2025-03-19T08:08:08.463112

AB\\x01\t

55350 / tcp

575925250 | 2025-04-06T21:36:52.735864

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

55443 / tcp

171352214 | 2025-04-01T14:01:58.802715

-ERR client ip is not in whitelist

55470 / tcp

-2107996212 | 2025-04-10T00:24:17.237247

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

55553 / tcp

2087396567 | 2025-04-04T11:09:17.593806

kjnkjabhbanc283ubcsbhdc72

55554 / tcp

819727972 | 2025-03-20T08:41:05.215495

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

57780 / tcp

-1399940268 | 2025-04-05T18:33:58.938391

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

57781 / tcp

819727972 | 2025-04-01T18:37:55.345195

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

60001 / tcp

2087396567 | 2025-03-15T02:58:28.673424

kjnkjabhbanc283ubcsbhdc72

60129 / tcp

-1626979812 | 2025-04-09T14:45:41.512850

220 Service ready for new user.

61613 / tcp

1370263973 | 2025-04-03T22:40:00.336606

dubbo>

61616 / tcp

-971970408 | 2025-03-23T21:57:05.274440

62078 / tcp

-860824904 | 2025-03-13T21:21:23.523214

\x00\x01)

63210 / tcp

1492413928 | 2025-03-14T23:01:54.210074

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

63256 / tcp

171352214 | 2025-04-07T03:32:11.029821

-ERR client ip is not in whitelist

63257 / tcp

1948301213 | 2025-03-27T09:50:28.750422

RFB 003.003
VNC:
  Protocol Version: 3.3

63260 / tcp

-2107996212 | 2025-04-03T04:21:59.517425

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

64477 / tcp

-1399940268 | 2025-04-06T11:21:37.589155

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

64738 / tcp

504717326 | 2025-04-09T22:39:06.039611

SSH-2.0-OpenSSH_8.6

Vulnerabilities

2 3 6 1

106.11.43.97

Last Seen: 2025-04-10

Tags:

GeneralInformation

OpenPorts

11 / tcp -1559123399 | 2025-03-24T08:57:30.947734

17 / tcp -1316491703 | 2025-03-13T22:00:26.268788

20 / tcp 51259122 | 2025-04-09T16:52:38.275623

23 / tcp -23362551 | 2025-03-15T01:22:56.095733

38 / tcp -1248408558 | 2025-03-21T19:28:54.270740

49 / tcp -801484042 | 2025-03-20T15:23:02.753685

53 / tcp 1127377266 | 2025-03-17T10:33:59.610329

70 / tcp 857710896 | 2025-03-28T10:07:29.484093

80 / tcp -169612178 | 2025-04-03T09:49:21.248667

Hashes

99 / tcp 636169965 | 2025-04-10T02:16:11.255439

101 / tcp 1911457608 | 2025-03-31T16:34:33.100732

102 / tcp 1911457608 | 2025-03-31T20:44:21.575478

104 / tcp -1248408558 | 2025-04-10T01:16:15.179198

110 / tcp 1911457608 | 2025-03-29T07:38:34.019051

111 / tcp 1187188851 | 2025-03-26T15:16:28.839192

113 / tcp 1412519768 | 2025-04-06T08:54:25.030772

119 / tcp -1958992631 | 2025-03-20T06:29:55.658579

135 / tcp 1302177452 | 2025-03-25T01:34:05.747489

179 / tcp -399606100 | 2025-03-23T18:05:07.786191

189 / tcp -1375131644 | 2025-04-04T05:12:52.756736

211 / tcp 1042158273 | 2025-03-21T00:01:18.611119

221 / tcp -438503381 | 2025-03-17T15:33:14.557746

264 / tcp -1709030885 | 2025-03-29T02:02:44.401854

311 / tcp -1547976805 | 2025-03-22T18:56:35.511423

389 / tcp -1639129386 | 2025-04-03T15:41:14.663805

427 / tcp 1530390632 | 2025-04-05T08:05:14.717377

443 / tcp -169612178 | 2025-04-02T07:54:43.568661

Hashes

444 / tcp -279824099 | 2025-03-27T01:43:15.163055

488 / tcp -2089734047 | 2025-03-17T09:44:16.361378

502 / tcp -653033013 | 2025-04-07T12:35:03.667863

513 / tcp 15018106 | 2025-04-09T02:06:56.175674

515 / tcp -2017887953 | 2025-03-29T16:30:20.035828

541 / tcp -1577240266 | 2025-04-09T06:43:19.920870

548 / tcp 1801869778 | 2025-04-04T10:39:37.989403

591 / tcp -1327660293 | 2025-03-15T12:51:30.853380

593 / tcp 1308377066 | 2025-03-24T11:56:28.310887

636 / tcp 1650594030 | 2025-04-03T07:13:07.149054

666 / tcp 1300162323 | 2025-04-08T16:06:54.754512

771 / tcp -1399940268 | 2025-03-23T14:54:46.807855

789 / tcp -1399940268 | 2025-04-09T20:47:29.035513

808 / tcp -1166978945 | 2025-03-20T21:51:49.399195

811 / tcp 321971019 | 2025-04-02T00:50:38.016749

831 / tcp -1399940268 | 2025-04-05T04:29:55.625264

833 / tcp -457235091 | 2025-03-14T22:46:56.353723

873 / tcp -1970692834 | 2025-04-02T09:11:42.451355

992 / tcp -936692830 | 2025-04-02T21:43:45.354780

993 / tcp 597764502 | 2025-04-06T22:11:35.196547

995 / tcp -740312032 | 2025-04-05T13:33:35.444840

1023 / tcp 2067064333 | 2025-03-20T00:03:45.180309

1119 / tcp -1713467553 | 2025-03-16T23:26:59.149263

1177 / tcp 539065883 | 2025-04-07T20:51:39.275636

1200 / tcp -1316398834 | 2025-04-06T12:16:47.371452

1234 / tcp -2033111675 | 2025-04-06T04:42:59.295457

1283 / tcp -1032713145 | 2025-03-16T18:06:45.810805

1337 / tcp 819727972 | 2025-03-16T10:26:09.219164

1365 / tcp -1399940268 | 2025-03-24T09:39:55.585657

1377 / tcp -1279886438 | 2025-03-16T18:02:37.420114

1433 / tcp -1279739995 | 2025-03-26T21:00:40.293694

1443 / tcp -1715152554 | 2025-03-15T07:50:05.072362

Hashes

1456 / tcp -2089734047 | 2025-04-06T14:18:58.195686

1515 / tcp 2087396567 | 2025-03-31T20:03:15.559483

1521 / tcp -1337747449 | 2025-03-17T11:23:03.532422

1723 / tcp 1103582599 | 2025-03-22T06:43:44.951302

1800 / tcp 921225407 | 2025-03-15T10:50:01.830184

1801 / tcp -1139999322 | 2025-04-05T13:30:25.313337

1830 / tcp -1737707071 | 2025-04-06T18:03:47.381812

1958 / tcp -1013082686 | 2025-03-16T17:01:09.113509

1969 / tcp -1487943323 | 2025-03-18T06:31:27.084446

1980 / tcp -2089734047 | 2025-04-06T05:01:20.026949

1987 / tcp -1538260461 | 2025-03-20T17:59:16.637191

1990 / tcp -1611764932 | 2025-03-13T12:10:53.916330

2000 / tcp 2098371729 | 2025-03-17T10:42:24.740420

11 / tcp

-1559123399 | 2025-03-24T08:57:30.947734

17 / tcp

-1316491703 | 2025-03-13T22:00:26.268788

20 / tcp

51259122 | 2025-04-09T16:52:38.275623

23 / tcp

-23362551 | 2025-03-15T01:22:56.095733

38 / tcp

-1248408558 | 2025-03-21T19:28:54.270740

49 / tcp

-801484042 | 2025-03-20T15:23:02.753685

53 / tcp

1127377266 | 2025-03-17T10:33:59.610329

70 / tcp

857710896 | 2025-03-28T10:07:29.484093

80 / tcp

-169612178 | 2025-04-03T09:49:21.248667

99 / tcp

636169965 | 2025-04-10T02:16:11.255439

101 / tcp

1911457608 | 2025-03-31T16:34:33.100732

102 / tcp

1911457608 | 2025-03-31T20:44:21.575478

104 / tcp

-1248408558 | 2025-04-10T01:16:15.179198

110 / tcp

1911457608 | 2025-03-29T07:38:34.019051

111 / tcp

1187188851 | 2025-03-26T15:16:28.839192

113 / tcp

1412519768 | 2025-04-06T08:54:25.030772

119 / tcp

-1958992631 | 2025-03-20T06:29:55.658579

135 / tcp

1302177452 | 2025-03-25T01:34:05.747489

179 / tcp

-399606100 | 2025-03-23T18:05:07.786191

189 / tcp

-1375131644 | 2025-04-04T05:12:52.756736

211 / tcp

1042158273 | 2025-03-21T00:01:18.611119

221 / tcp

-438503381 | 2025-03-17T15:33:14.557746

264 / tcp

-1709030885 | 2025-03-29T02:02:44.401854

311 / tcp

-1547976805 | 2025-03-22T18:56:35.511423

389 / tcp

-1639129386 | 2025-04-03T15:41:14.663805

427 / tcp

1530390632 | 2025-04-05T08:05:14.717377

443 / tcp

-169612178 | 2025-04-02T07:54:43.568661

444 / tcp

-279824099 | 2025-03-27T01:43:15.163055

488 / tcp

-2089734047 | 2025-03-17T09:44:16.361378

502 / tcp

-653033013 | 2025-04-07T12:35:03.667863

513 / tcp

15018106 | 2025-04-09T02:06:56.175674

515 / tcp

-2017887953 | 2025-03-29T16:30:20.035828

541 / tcp

-1577240266 | 2025-04-09T06:43:19.920870

548 / tcp

1801869778 | 2025-04-04T10:39:37.989403

591 / tcp

-1327660293 | 2025-03-15T12:51:30.853380

593 / tcp

1308377066 | 2025-03-24T11:56:28.310887

636 / tcp

1650594030 | 2025-04-03T07:13:07.149054

666 / tcp

1300162323 | 2025-04-08T16:06:54.754512

771 / tcp

-1399940268 | 2025-03-23T14:54:46.807855

789 / tcp

-1399940268 | 2025-04-09T20:47:29.035513

808 / tcp

-1166978945 | 2025-03-20T21:51:49.399195

811 / tcp

321971019 | 2025-04-02T00:50:38.016749

831 / tcp

-1399940268 | 2025-04-05T04:29:55.625264

833 / tcp

-457235091 | 2025-03-14T22:46:56.353723

873 / tcp

-1970692834 | 2025-04-02T09:11:42.451355

992 / tcp

-936692830 | 2025-04-02T21:43:45.354780

993 / tcp

597764502 | 2025-04-06T22:11:35.196547

995 / tcp

-740312032 | 2025-04-05T13:33:35.444840

1023 / tcp

2067064333 | 2025-03-20T00:03:45.180309

1119 / tcp

-1713467553 | 2025-03-16T23:26:59.149263

1177 / tcp

539065883 | 2025-04-07T20:51:39.275636

1200 / tcp

-1316398834 | 2025-04-06T12:16:47.371452

1234 / tcp

-2033111675 | 2025-04-06T04:42:59.295457

1283 / tcp

-1032713145 | 2025-03-16T18:06:45.810805

1337 / tcp

819727972 | 2025-03-16T10:26:09.219164

1365 / tcp

-1399940268 | 2025-03-24T09:39:55.585657

1377 / tcp

-1279886438 | 2025-03-16T18:02:37.420114

1433 / tcp

-1279739995 | 2025-03-26T21:00:40.293694

1443 / tcp

-1715152554 | 2025-03-15T07:50:05.072362

1456 / tcp

-2089734047 | 2025-04-06T14:18:58.195686

1515 / tcp

2087396567 | 2025-03-31T20:03:15.559483

1521 / tcp

-1337747449 | 2025-03-17T11:23:03.532422

1723 / tcp

1103582599 | 2025-03-22T06:43:44.951302

1800 / tcp

921225407 | 2025-03-15T10:50:01.830184

1801 / tcp

-1139999322 | 2025-04-05T13:30:25.313337

1830 / tcp

-1737707071 | 2025-04-06T18:03:47.381812

1958 / tcp

-1013082686 | 2025-03-16T17:01:09.113509

1969 / tcp

-1487943323 | 2025-03-18T06:31:27.084446

1980 / tcp

-2089734047 | 2025-04-06T05:01:20.026949

1987 / tcp

-1538260461 | 2025-03-20T17:59:16.637191

1990 / tcp

-1611764932 | 2025-03-13T12:10:53.916330

2000 / tcp

2098371729 | 2025-03-17T10:42:24.740420

2002 / tcp

-1399940268 | 2025-03-17T13:33:05.825581

2003 / tcp

1975288991 | 2025-04-05T16:08:11.670375

2008 / tcp

-345718689 | 2025-04-04T00:02:06.279240

2020 / tcp

970156442 | 2025-04-03T14:27:42.087713

2048 / tcp

-1399940268 | 2025-04-02T09:02:28.195516

2053 / tcp

-1399940268 | 2025-03-18T16:21:04.371412

2059 / tcp

-1839934832 | 2025-03-29T16:28:38.137659

2060 / tcp

-1399940268 | 2025-04-05T15:16:47.719683