GeneralInformation

Country	China
City	Shanghai
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 19 23 25 37 38 43 49 53 70 79 80 91 102 104 106 110 111 113 119 135 143 179 189 192 199 221 263 264 311 389 400 427 443 444 465 485 488 491 502 503 513 515 541 548 700 743 771 782 789 830 873 887 902 943 992 993 995 998 1023 1025 1080 1099 1153 1177 1188 1200 1207 1292 1337 1343 1433 1443 1456 1515 1588 1599 1604 1723 1801 1883 1901 1911 1926 1947 1957 1962 1980 1988 2000 2002 2003 2008 2051 2067 2079 2087 2121 2154 2181 2196 2222 2320 2323 2332 2353 2376 2404 2550 2556 2563 2569 2572 2628 2650 2761 2762 3001 3007 3008 3050 3056 3064 3068 3072 3078 3079 3086 3089 3091 3092 3101 3108 3112 3115 3116 3120 3125 3127 3131 3133 3145 3146 3156 3157 3166 3187 3189 3260 3268 3269 3299 3301 3306 3311 3333 3337 3388 3389 3400 3563 3590 3780 3841 3952 4000 4001 4022 4023 4063 4064 4085 4157 4242 4282 4321 4369 4430 4432 4433 4434 4449 4455 4463 4488 4500 4506 4646 4899 4911 4949 5007 5009 5010 5025 5083 5093 5100 5160 5201 5239 5245 5252 5265 5269 5272 5432 5435 5440 5444 5494 5523 5569 5608 5613 5640 5672 5696 5804 5858 5905 5912 5915 5938 5984 5986 5995 6000 6001 6002 6008 6134 6331 6348 6379 6443 6464 6543 6544 6633 6653 6661 6666 6667 6668 6697 6755 6887 7001 7012 7013 7071 7081 7170 7171 7403 7443 7480 7493 7535 7548 7634 7676 7687 7771 7775 7778 8005 8006 8009 8015 8027 8031 8033 8034 8041 8044 8051 8062 8075 8081 8082 8083 8085 8089 8093 8096 8099 8107 8113 8126 8131 8139 8156 8158 8181 8183 8185 8190 8192 8195 8196 8199 8248 8280 8291 8317 8322 8343 8384 8385 8407 8409 8421 8443 8444 8448 8451 8454 8485 8500 8502 8526 8528 8530 8533 8536 8545 8551 8560 8564 8566 8574 8575 8581 8587 8592 8598 8601 8605 8606 8630 8641 8649 8706 8728 8731 8743 8803 8815 8840 8845 8852 8857 8880 8886 8889 8912 8935 8980 9000 9001 9002 9010 9011 9016 9017 9022 9035 9041 9042 9051 9061 9069 9089 9092 9095 9100 9108 9109 9112 9113 9114 9137 9142 9152 9154 9157 9160 9169 9185 9193 9194 9198 9211 9218 9252 9306 9312 9333 9350 9353 9418 9441 9444 9530 9550 9600 9743 9765 9869 9876 9898 9928 9929 9930 9943 9998 9999 10000 10001 10017 10025 10031 10037 10048 10050 10065 10068 10201 10250 10283 10443 10554 10810 10909 10911 10934 11000 11112 11210 11300 11443 11601 12000 12082 12128 12139 12144 12150 12173 12179 12190 12191 12194 12195 12199 12204 12212 12213 12217 12220 12221 12243 12256 12257 12261 12275 12278 12282 12283 12284 12293 12310 12326 12333 12337 12339 12345 12352 12353 12355 12373 12377 12384 12392 12404 12408 12411 12413 12438 12444 12454 12460 12462 12471 12473 12476 12479 12519 12525 12531 12536 12542 12545 12546 12547 12558 12583 12586 12902 13128 14147 14265 14344 14873 15044 16055 16064 16069 16070 16073 16100 16404 16443 16831 16888 16993 17000 17771 17772 17776 17779 17780 18015 18042 18043 18060 18074 18078 18081 18089 18095 18110 18245 19000 19017 19084 19100 19902 20000 20018 20090 20184 20185 20201 20256 20443 20547 20880 20894 21081 21100 21236 21243 21244 21249 21259 21260 21275 21280 21284 21295 21297 21298 21301 21322 21379 22000 22082 22380 22556 23023 23182 24442 24808 25001 25565 27015 27017 28015 29840 30002 30006 30050 30083 30106 30501 31210 31337 32001 32102 32764 33522 34122 34222 34522 34722 35002 35153 35222 35422 35522 35524 35531 35722 35822 36422 36501 36522 37022 37322 37522 37622 37722 37777 37922 38322 38722 38822 39022 39622 39722 40070 40322 40471 41022 41222 41322 41522 41622 41722 41800 42022 42122 42322 42424 42722 42901 42922 43008 43022 43122 43200 43422 44022 44341 44422 44520 44522 44722 44818 44822 44922 45006 45422 45522 45722 45822 45886 45922 46322 46722 46822 46922 47022 47080 47122 47422 47990 48019 48022 48222 48422 48722 49080 49122 49322 49422 49443 49502 49684 50000 50009 50022 50100 50106 50202 50222 50522 50622 50722 50822 50995 51002 51005 51200 51235 51294 51322 51622 51822 52122 52322 53222 53322 54138 54322 54422 54622 55000 55022 55222 55422 55443 55522 55553 55554 55922 56222 56322 56522 56622 56722 57022 57222 57322 57522 57622 57822 58022 58378 58522 58622 58922 59122 59622 60000 60129 61613 61616 61617 62078 62237 62443 63045 63210 63260 65000

11 / tcp

988099889 | 2025-01-14T15:32:41.879670

[ºs

13 / tcp

-1729629024 | 2025-02-03T15:24:44.558535

101 imqbroker =unV

15 / tcp

-971970408 | 2025-02-01T11:19:39.324686

19 / tcp

829384519 | 2025-01-12T18:34:20.982675

 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV

23 / tcp

-23362551 | 2025-01-10T08:07:19.802941

\xff\xfb\x01\xff\xfb\x03\xff\xfd\x18

25 / tcp

-1399940268 | 2025-01-27T01:20:01.248800

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

37 / tcp

306859053 | 2025-01-25T05:55:41.349917

">Applic

38 / tcp

119860953 | 2025-01-19T23:16:34.512602

* OK ArGoSoft Mail Server IMAP Module v.YW at

43 / tcp

671605376 | 2025-02-01T16:01:39.844522

SSH-2.0-OpenSSH_X.X

49 / tcp

1160472910 | 2025-02-04T16:39:36.387960

\xc2\xa5A\\x01,\\x02L\\x08Connectx\\x0857222

53 / tcp

1308081026 | 2025-01-23T12:38:29.120126

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00<\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x00R\x00\x04\xac٣.
\x00\x06\x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x

70 / tcp

857710896 | 2025-01-17T08:25:09.515605

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Mon, 27 Nov 2023 21:45:42 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

79 / tcp

268196945 | 2025-01-09T12:12:13.676764

AB\x01

80 / tcp

-2118655245 | 2025-01-13T10:31:14.700850

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

91 / tcp

-2046514463 | 2025-01-30T08:42:35.449617

AB\x01\t

102 / tcp

-339084706 | 2025-02-01T23:47:36.781622

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

104 / tcp

-1230049476 | 2025-01-10T14:48:33.413952

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

106 / tcp

709622286 | 2025-01-28T00:36:53.495283

OK Welcome <299685> on DirectUpdate server 7286\r\n

110 / tcp

-2096652808 | 2025-01-23T21:49:10.265949

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

111 / tcp

819727972 | 2025-01-14T10:56:06.922638

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

113 / tcp

1921398876 | 2025-02-05T14:41:35.413375

ÿý"
LinuxNode v06953 (ggfks)

login:

119 / tcp

-2107996212 | 2025-02-03T20:32:33.511634

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

135 / tcp

-646274631 | 2025-01-26T03:04:40.461789

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: user-PC\n IP2: 192.168.1.104\n IP3: 220.129.89.73\n IP4: 2001:b011:3009:904e:d83e:3f80:66e3:747\n IP5: 2001:b011:3009:904e:901d:7e1d:524b:cf68\n IP6: 2001:b011:3009:ec00:d8a9:208f:6a7e:b9c3\n\nNTLMSSP:\nTarget_Name: USER-PC\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: USER-PC\nNetBIOS_Computer_Name: USER-PC\nDNS_Domain_Name:

143 / tcp

-1939513550 | 2025-01-31T10:44:07.873014

* OK The Microsoft Exchange IMAP4 service is ready.\r\n\nImap NTLM Info:\nTarget_Name: HEBEIHK\nProduct_Version: 6.0.6003 Ntlm 15\nOS: Windows Server 2008, Service Pack 2, Rollup KB4489887\nNetBIOS_Domain_Name: HEBEIHK\nNetBIOS_Computer_Name: MAILSERVER2\nDNS_Domain_Name: hebeihk.local\nDNS_Computer_Name: MAILSERVER2.hebeihk.local\nMsvAvDnsTreeName: hebeihk.local\nSystem_Time: 2024-01-22 08:26:31 +0000 UTC\n\n

179 / tcp

-399606100 | 2025-01-16T16:54:10.042605

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

189 / tcp

-992671574 | 2025-02-05T02:41:20.812103

@RSYNCD: 26

192 / tcp

-1399940268 | 2025-01-09T10:05:10.579833

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

199 / tcp

1958349741 | 2025-02-04T03:52:55.347821

\xc3\xbf\xc3\xbb\\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

221 / tcp

1911457608 | 2025-02-03T21:46:53.428240

\x00[\x00\x00\x00\x00\x00\x00

263 / tcp

205347087 | 2025-02-04T18:28:50.777304

SSH-25453-Cisco-3524665.35\n

264 / tcp

-1932800090 | 2025-01-26T08:11:57.992984

HTTP

311 / tcp

-1547976805 | 2025-01-18T00:10:42.942777

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

389 / tcp

-1743283776 | 2025-02-03T22:30:42.771732

0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x04\\x04

400 / tcp

-2089734047 | 2025-02-06T05:48:43.186628

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

427 / tcp

1327409218 | 2025-01-28T10:50:20.418174

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://localhost.localdomain\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://localhost.localdomain\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (0

444 / tcp

1817928504 | 2025-01-29T20:31:14.498178

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Wed, 29 Jan 2025 20:31:14 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

465 / tcp

897328069 | 2025-01-24T10:37:54.909766

220 mail.scott000.com ESMTP

485 / tcp

-903067560 | 2025-01-28T16:18:22.021561

\x00[\x13)\xc2\x81\x7f\x00\x00

488 / tcp

-1399940268 | 2025-01-19T03:55:14.297306

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

491 / tcp

-1888448627 | 2025-01-10T04:04:52.307002

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

502 / tcp

-1626979812 | 2025-01-29T07:24:18.776112

220 Service ready for new user.

503 / tcp

819727972 | 2025-01-22T10:34:30.617024

SSH-2.0-OpenSSH_7.4

513 / tcp

321971019 | 2025-01-09T14:07:56.273371

-ERR client ip is not in whitelist\r

515 / tcp

819727972 | 2025-01-25T18:26:20.249455

SSH-2.0-OpenSSH_7.4

541 / tcp

-1299118573 | 2025-01-30T19:27:36.430560

\\x16\\x03\\x01\\x01[\\x01\\x00\\x01W\\x03\\x03\\x89\\xb7a\\xcdh\\xff\\xe7x~\\xc0Z\\x92\\x1f\\xf0\\xd8\xe3\x9f\xb2;\\x92\\x06\\xf9\\xef\\xc7L\\xfa\\x16&#{)` \\xf6k\\x80\\xe6Ylt\\xe8\x0bF\\xa9&?\\xb9!\\xe7\\x93^l\\xb3\\xbe\\x15\\xb1\\xa3n\\x00\\xce\\xde\xcf\x822h\\x002\\x13\\x02\\x13\\x03\\x13\\x01\\x009\\x005\\x00k\\x00=\\xc

548 / tcp

444328471 | 2025-01-29T06:04:57.793547

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: SynologyRouter\nMachine Type: \rNetatalk3.1.1\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

700 / tcp

-2021756999 | 2025-01-13T04:50:30.059806

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Connection: close
Server: Nginx
Expires: 0
Pragma: no-cache
Cache-Control: no-cache
Location: https://portal.ikuai8-wifi.com/templates/default/index.html?timestamp=1705576118&router_ver=3.2.0&firmware=IK-RouterOS&template=default&gwid=12d4c28d07674103aaf242ea477f8666&user_ip=*.*.*.*

743 / tcp

-1996280214 | 2025-02-05T02:19:08.854150

\x06\x04\x05@

771 / tcp

1767345577 | 2025-01-22T11:50:27.459303

Hello, this is Quagga (version 0T).
Copyright 1996-200

782 / tcp

-801484042 | 2025-01-17T09:18:18.047170

ERR 27

789 / tcp

1134517380 | 2025-01-24T17:25:01.502527

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

830 / tcp

103159425 | 2025-01-27T03:10:03.548513

SSH-1.99-RGOS_SSH

873 / tcp

-976882525 | 2025-01-13T22:24:59.114292

HTTP/1.1 400 Bad Request
Server: nginx/1.23.1
Content-Type: text/html
Connection: close

887 / tcp

-1888448627 | 2025-01-23T21:31:22.628336

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

902 / tcp

1956828827 | 2025-01-30T07:13:16.820506

220 VMware Authentication Daemon Version 1.10: SSL Required, Se
rverDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , , NFCSSL supported/t

943 / tcp

-303199180 | 2025-02-01T01:27:01.879285

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

992 / tcp

-936692830 | 2025-02-01T23:12:20.678452

HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19

993 / tcp

709622286 | 2025-02-03T00:01:58.802288

OK Welcome <299685> on DirectUpdate server 7286\r\n

995 / tcp

-1489591880 | 2025-02-01T17:23:03.898066

+OK MS OK\r\n

998 / tcp

398077695 | 2025-01-21T16:50:20.981402

1023 / tcp

819727972 | 2025-01-28T17:52:57.684336

SSH-2.0-OpenSSH_7.4

1025 / tcp

-1399940268 | 2025-01-26T15:39:00.587165

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1080 / tcp

1362344524 | 2025-01-30T23:40:39.174100

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1099 / tcp

205347087 | 2025-01-18T19:50:02.397618

SSH-25453-Cisco-3524665.35\n

1153 / tcp

307999478 | 2025-01-27T07:13:57.341570

unknown command \r\nunknown command \r\n

1177 / tcp

-1231966337 | 2025-02-03T07:32:25.674624

[ºs

1188 / tcp

321971019 | 2025-01-12T23:11:44.982413

-ERR client ip is not in whitelist\r

1200 / tcp

1690634669 | 2025-02-04T20:41:05.541823

1207 / tcp

-2089734047 | 2025-01-19T18:19:48.194005

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1292 / tcp

2103111368 | 2025-01-31T08:11:22.802335

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

1337 / tcp

-971970408 | 2025-01-25T08:34:56.561306

1343 / tcp

-903067560 | 2025-01-16T18:45:33.799801

\x00[\x13)\xc2\x81\x7f\x00\x00

1433 / tcp

-182670276 | 2025-01-20T06:16:24.225829

MSSQL Server\nVersion: 171050560 (0xa320640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: IZJ6FUBS9PLYUOZ\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: IZJ6FUBS9PLYUOZ\nNetBIOS_Computer_Name: IZJ6FUBS9PLYUOZ\nDNS_Domain_Name: iZj6fubs9plyuoZ\nDNS_Computer_Name: iZj6fubs9plyuoZ\nSystem_Time: 2024-01-22 03:53:09 +0000 UTC\n\n

1443 / tcp

-1715152554 | 2025-02-04T06:36:46.712350

Hashes

hash

36584004

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 04 Feb 2025 06:36:46 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.14.207.159:443/

1456 / tcp

921225407 | 2025-02-06T14:37:38.654012

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1515 / tcp

-971970408 | 2025-01-17T10:09:26.978844

1588 / tcp

-904840257 | 2025-02-01T17:08:32.573407

572 Relay not authorized\r\n

1599 / tcp

-1810987450 | 2025-02-01T20:38:00.600159

\xc3\xbf

1604 / tcp

1544300041 | 2025-01-14T10:46:44.266228

SSH-25453-Cisco-3524665.35

1723 / tcp

1103582599 | 2025-01-31T07:14:01.034895

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

1801 / tcp

1692069329 | 2025-01-20T17:21:49.483949

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xe14\\xf0\\xb6\\xb85\x0bB\\x86\\x99B\\xa5\\x07\\xb0\\xf6V92d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1883 / tcp

-824507358 | 2025-02-02T04:29:38.919964

MQTT Connection Code: 4

Topics:

1901 / tcp

-2096652808 | 2025-01-23T19:29:26.212122

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1911 / tcp

632542934 | 2025-01-15T23:28:45.976526

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1926 / tcp

104385780 | 2025-01-13T23:31:59.310630

ceph v2

1947 / tcp

-541569745 | 2025-01-12T13:58:05.616210

HTTP/1.1 403 Forbidden
Server: HASP LM/25.00
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=0;
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
Content-Type: text/html
Connection: Close

1957 / tcp

745343730 | 2025-01-31T17:08:14.456009

220 smtp.qq.com Esmtp QQ Mail Server

1962 / tcp

504717326 | 2025-02-05T14:46:18.230554

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

1980 / tcp

575925250 | 2025-01-26T21:08:46.910923

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

1988 / tcp

-1114821551 | 2025-01-27T17:38:48.257323

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

2000 / tcp

669849225 | 2025-02-05T08:43:47.029597

SSH-98.60-SysaxSSH_81885..42\r\n

2002 / tcp

-747911285 | 2025-02-06T13:20:53.395412

\xc2\xaa

2003 / tcp

-1399940268 | 2025-02-06T01:06:13.136768

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2008 / tcp

114471724 | 2025-01-22T11:40:22.258836

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

2051 / tcp

-1453516345 | 2025-01-13T18:52:49.132132

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

2067 / tcp

1308377066 | 2025-02-02T10:15:52.140864

ncacn_http/1.0

2079 / tcp

-1399940268 | 2025-01-29T06:37:41.562443

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2087 / tcp

422524323 | 2025-01-28T08:24:06.178641

{
"Version": "3.4.18",
"VersionArray": [
3,
4,
18,
0
],
"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",
"OpenSSLVersion": "",
"SysInfo": "",
"Bits": 64,
"Debug": false,
"MaxObjectSize": 16777216
}

2121 / tcp

141730637 | 2025-01-08T00:02:10.530545

HTTP/1.0 200 OK
Server: Proxy

2154 / tcp

539065883 | 2025-01-24T11:39:24.518553

2181 / tcp

546151771 | 2025-01-23T13:54:22.925362

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2196 / tcp

1911457608 | 2025-01-23T00:45:45.253935

\x00[\x00\x00\x00\x00\x00\x00

2222 / tcp

372433470 | 2025-01-26T19:57:47.812200

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

2320 / tcp

819727972 | 2025-01-18T08:02:20.257324

SSH-2.0-OpenSSH_7.4

2323 / tcp

-2112953016 | 2025-01-31T23:21:10.012799

There are too many users,please wait a moment to log in!


TELNET Negotiation:
will: Echo, Suppress Go Ahead
do: Echo, Negotiate About Window Size, Remote Flow Control

2332 / tcp

819727972 | 2025-01-09T11:54:42.911610

SSH-2.0-OpenSSH_7.4

2353 / tcp

-441419608 | 2025-01-16T21:05:07.901089

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

2376 / tcp

1332894250 | 2025-01-30T22:16:51.808666

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

2404 / tcp

321971019 | 2025-02-06T12:49:45.792847

-ERR client ip is not in whitelist\r

2550 / tcp

366084633 | 2025-01-28T23:46:23.184090

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

2556 / tcp

1991883981 | 2025-01-23T11:07:37.907953

B\x00\x00\x00\xc3\xbfn\x04Too many connections

2563 / tcp

1189133115 | 2025-01-11T07:35:50.730015

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

2569 / tcp

-358801646 | 2025-01-27T02:53:57.944080

SSH-2.0-OpenSSH_6.6.1

2572 / tcp

819727972 | 2025-01-31T13:06:30.659795

SSH-2.0-OpenSSH_7.4

2628 / tcp

-1316491703 | 2025-01-26T10:38:28.600815

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

2650 / tcp

580340387 | 2025-02-05T14:32:46.718747

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

2761 / tcp

-297128567 | 2025-02-01T20:14:38.459479

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

2762 / tcp

-1737707071 | 2025-02-01T11:06:56.814699

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

3001 / tcp

819727972 | 2025-02-05T07:02:08.473820

SSH-2.0-OpenSSH_7.4

3007 / tcp

1991883981 | 2025-01-15T14:31:08.410105

B\x00\x00\x00\xc3\xbfn\x04Too many connections

3008 / tcp

-1487943323 | 2025-01-31T10:57:38.684046

431 Unable to negotiate secure command connection.\r\n

3050 / tcp

2103111368 | 2025-01-22T06:07:56.162995

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

3056 / tcp

-1839934832 | 2025-01-19T03:58:05.851229

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3064 / tcp

-2017887953 | 2025-01-10T19:23:24.613975

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

3068 / tcp

-1399940268 | 2025-02-03T17:36:30.233558

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3072 / tcp

-801484042 | 2025-02-01T11:49:54.915336

ERR 27

3078 / tcp

-441419608 | 2025-01-11T09:46:29.508158

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

3079 / tcp

-1996280214 | 2025-01-25T12:19:43.057881

\x06\x04\x05@

3086 / tcp

-1375131644 | 2025-01-22T13:42:29.024410

\x00[v\xc3\xbdC\x7f\x00\x00

3089 / tcp

-445721795 | 2025-01-21T17:24:44.743217

\x00[\xc3\xaed\x1a\x7f\x00\x00

3091 / tcp

-249504111 | 2025-01-10T20:59:55.043119

\x00[xU-\x7f\x00\x00

3092 / tcp

-1013082686 | 2025-02-05T05:14:30.989867

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

3101 / tcp

321971019 | 2025-01-09T01:56:18.662818

-ERR client ip is not in whitelist\r

3108 / tcp

165188539 | 2025-01-10T23:11:43.858960

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3112 / tcp

-2089734047 | 2025-01-24T16:25:50.861598

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3115 / tcp

1975288991 | 2025-01-26T21:14:20.883261

OPTI

3116 / tcp

-1399940268 | 2025-02-05T13:10:25.023247

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3120 / tcp

632542934 | 2025-02-01T20:02:49.253182

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

3125 / tcp

-1626979812 | 2025-01-29T10:30:49.852711

220 Service ready for new user.

3127 / tcp

-1399940268 | 2025-02-05T11:55:48.039666

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3131 / tcp

-1036370807 | 2025-02-04T21:42:45.960094

JDWP-Handshake

3133 / tcp

-1839934832 | 2025-01-11T03:24:45.929313

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3145 / tcp

1308377066 | 2025-01-23T21:59:14.959653

ncacn_http/1.0

3146 / tcp

1911457608 | 2025-02-05T20:00:01.391486

\x00[\x00\x00\x00\x00\x00\x00

3156 / tcp

-653033013 | 2025-02-01T04:38:39.252571

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

3157 / tcp

1996932384 | 2025-01-10T22:03:24.278991

"raop" nonce

3166 / tcp

-653033013 | 2025-01-28T19:20:36.548375

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

3187 / tcp

-2089734047 | 2025-02-05T19:54:38.610641

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3189 / tcp

165188539 | 2025-01-31T10:20:32.659941

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3260 / tcp

-862070606 | 2025-02-04T01:42:01.378689

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n

3268 / tcp

-1547976805 | 2025-02-03T21:20:01.436109

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

3269 / tcp

1282941221 | 2025-01-09T19:13:56.358334

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

3299 / tcp

2087396567 | 2025-02-02T23:30:12.241765

kjnkjabhbanc283ubcsbhdc72

3301 / tcp

-146605374 | 2025-01-31T19:28:47.026594

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

3306 / tcp

-1036944024 | 2025-01-28T09:46:42.623196

F\\x00\\x00\\x00\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MySQL server

3311 / tcp

-1888448627 | 2025-01-16T03:05:15.734150

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3333 / tcp

372433470 | 2025-01-08T17:37:47.032559

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

3337 / tcp

1911457608 | 2025-01-31T21:06:13.534710

\x00[\x00\x00\x00\x00\x00\x00

3388 / tcp

709622286 | 2025-02-03T10:36:24.572306

OK Welcome <299685> on DirectUpdate server 7286\r\n

3389 / tcp

740837454 | 2025-01-13T20:03:24.030645

SSH-2.0-OpenSSH_5.3

3400 / tcp

-1399940268 | 2025-01-31T20:09:51.611946

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3563 / tcp

921225407 | 2025-01-11T10:16:02.211172

\x00\x00\x00\x04\x00\x00\x00\x00\x00

3590 / tcp

1504401647 | 2025-01-28T17:26:22.694442

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

3780 / tcp

1286504516 | 2025-01-19T07:31:15.147609

CP2E Control Console
Connected to Host: gZI

3841 / tcp

921225407 | 2025-01-30T21:33:55.658204

\x00\x00\x00\x04\x00\x00\x00\x00\x00

3952 / tcp

-339084706 | 2025-01-15T09:31:47.599408

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

4000 / tcp

470305186 | 2025-02-05T16:10:51.169550

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET

4001 / tcp

-2096652808 | 2025-01-25T22:20:14.496751

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

4022 / tcp

165188539 | 2025-02-01T14:48:37.060159

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

4023 / tcp

-1435414831 | 2025-01-28T06:59:50.502606

roku: ready\r\n

4063 / tcp

745343730 | 2025-01-16T06:45:09.904731

220 smtp.qq.com Esmtp QQ Mail Server

4064 / tcp

-441419608 | 2025-01-16T11:01:59.349343

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

4085 / tcp

819727972 | 2025-01-31T14:05:10.878043

SSH-2.0-OpenSSH_7.4

4157 / tcp

660175493 | 2025-02-04T10:29:13.573976

4242 / tcp

-1341662640 | 2025-01-17T11:55:17.527152

HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

4282 / tcp

819727972 | 2025-01-25T13:02:31.500206

SSH-2.0-OpenSSH_7.4

4321 / tcp

-1250504565 | 2025-02-04T03:42:49.322457

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

4369 / tcp

-904840257 | 2025-01-18T18:06:07.034632

572 Relay not authorized\r\n

4430 / tcp

740837454 | 2025-02-03T22:41:16.222897

SSH-2.0-OpenSSH_5.3

4432 / tcp

-1399940268 | 2025-01-22T12:15:14.842544

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4433 / tcp

-1760806421 | 2025-01-12T02:04:10.571229

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

4434 / tcp

171352214 | 2025-02-05T21:49:42.305949

-ERR client ip is not in whitelist

4449 / tcp

198844676 | 2025-02-01T05:56:14.369988

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

4455 / tcp

-1399940268 | 2025-01-29T16:38:01.093952

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4463 / tcp

-1399940268 | 2025-02-06T03:53:15.590664

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4488 / tcp

1011407350 | 2025-02-02T22:59:00.187084

* OK GroupWise IMAP4rev1 Server Ready\r\n

4500 / tcp

-2089734047 | 2025-02-01T04:45:05.557138

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4506 / tcp

-1316398834 | 2025-02-05T21:48:09.392035

ÿ

4646 / tcp

1911457608 | 2025-02-01T21:28:30.866057

\x00[\x00\x00\x00\x00\x00\x00

4899 / tcp

740837454 | 2025-02-06T12:06:57.369515

SSH-2.0-OpenSSH_5.3

4911 / tcp

-1399940268 | 2025-02-04T08:20:59.326687

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4949 / tcp

-358801646 | 2025-02-04T09:17:28.882810

SSH-2.0-OpenSSH_6.6.1

5007 / tcp

1623746877 | 2025-01-22T13:03:05.143940

500 Permission denied - closing connection.\r\n

5009 / tcp

-2015162143 | 2025-02-02T23:48:34.557577

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1c5f_PStjdxtk16_38859-13702

5010 / tcp

1911457608 | 2025-01-29T08:40:22.427569

\x00[\x00\x00\x00\x00\x00\x00

5025 / tcp

1850902677 | 2025-01-31T11:02:54.925860

W!

5083 / tcp

1208318993 | 2025-01-23T04:17:49.289068

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

5093 / tcp

-2096652808 | 2025-02-06T07:26:37.299468

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5100 / tcp

-2089734047 | 2025-02-04T15:32:13.021055

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5160 / tcp

321971019 | 2025-01-20T17:56:04.752551

-ERR client ip is not in whitelist\r

5201 / tcp

1077013874 | 2025-01-24T23:20:30.087150

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

5239 / tcp

-1428621233 | 2025-01-22T11:20:10.891003

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

5245 / tcp

-1327660293 | 2025-02-01T23:39:59.665712

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

5252 / tcp

1911457608 | 2025-01-16T16:07:37.035952

\x00[\x00\x00\x00\x00\x00\x00

5265 / tcp

1911457608 | 2025-02-02T21:38:11.252500

\x00[\x00\x00\x00\x00\x00\x00

5269 / tcp

-241300778 | 2025-01-13T04:31:51.434126

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938365.72-w-waf02tjgt

5272 / tcp

819727972 | 2025-01-24T10:55:53.403037

SSH-2.0-OpenSSH_7.4

5432 / tcp

-1888448627 | 2025-01-13T12:17:18.357287

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

5435 / tcp

1911457608 | 2025-01-31T12:49:57.764347

\x00[\x00\x00\x00\x00\x00\x00

5440 / tcp

-109488528 | 2025-01-29T04:09:47.595555

HTTP/1.1 200 OK
Connection: close
Cache-Control: no-cache
Content-Type: text/html; charset=utf-8
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff

5444 / tcp

1911457608 | 2025-01-27T22:43:37.003339

\x00[\x00\x00\x00\x00\x00\x00

5494 / tcp

819727972 | 2025-01-24T11:53:09.478019

SSH-2.0-OpenSSH_7.4

5523 / tcp

-1399940268 | 2025-01-27T16:30:06.121933

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5569 / tcp

-1327660293 | 2025-02-01T22:35:34.941899

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

5608 / tcp

-2089734047 | 2025-02-03T10:09:18.677523

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5613 / tcp

-1032713145 | 2025-01-08T21:03:27.412652

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

5640 / tcp

921225407 | 2025-01-22T07:10:51.164670

\x00\x00\x00\x04\x00\x00\x00\x00\x00

5672 / tcp

575925250 | 2025-02-06T13:36:02.753333

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5696 / tcp

-2096652808 | 2025-02-05T16:47:23.213146

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5804 / tcp

819727972 | 2025-01-14T12:02:30.592070

SSH-2.0-OpenSSH_7.4

5858 / tcp

1267517148 | 2025-01-21T23:37:27.977251

=Àÿÿ?"<ZDECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6

5905 / tcp

1543809371 | 2025-01-13T12:41:54.202526

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

5912 / tcp

677934968 | 2025-02-05T20:16:04.307745

lm^)Q

5915 / tcp

-1249500036 | 2025-02-06T16:35:31.631714

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

5938 / tcp

1134517380 | 2025-02-04T04:08:41.063296

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

5984 / tcp

1999272906 | 2025-02-05T04:46:02.646276

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

380146262 | 2025-01-29T01:50:16.613603

@RSYNCD: 30.0

5995 / tcp

-1013082686 | 2025-01-11T04:22:17.400295

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

6000 / tcp

819727972 | 2025-01-31T17:29:00.263771

SSH-2.0-OpenSSH_7.4

6001 / tcp

205347087 | 2025-01-26T21:44:58.773884

SSH-25453-Cisco-3524665.35\n

6002 / tcp

962700458 | 2025-01-30T14:57:49.555960

6008 / tcp

-1399940268 | 2025-01-09T10:55:22.602609

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6134 / tcp

-1453516345 | 2025-02-06T00:12:58.437347

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

6331 / tcp

-303199180 | 2025-01-27T23:22:11.276701

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

6348 / tcp

-1477838366 | 2025-01-19T18:44:05.831201

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

6379 / tcp

321971019 | 2025-01-19T05:18:55.317606

-ERR client ip is not in whitelist\r

6443 / tcp

-1569327420 | 2025-01-27T07:08:44.552048

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Mon, 27 Jan 2025 07:08:44 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.14.207.159:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

6464 / tcp

103159425 | 2025-02-01T17:25:07.104944

SSH-1.99-RGOS_SSH

6543 / tcp

-1040587808 | 2025-01-12T02:48:31.548864

\\xba\\xdc\xcd\xab\\x01#%0C\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xbbX\\x00\\x00\\x00\\x00\\x00\\x00[079][16:08:54.040]\\xc1\\xac\\xbd\xd3\xb3\xc9\xb9\\xa6\\xa3\\xac\\xb1\\xbe\xc4\xa3\\xbf\\xe9 PID \xce\xaa 0x23=35\\x00\\xba\\xdc\xcd\xab\\x01#%0_\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xbbX\\x00\\x00\\x00\\x00\\x00\\x00[080][16:08:54.040]\\xc7\\xeb\xca

6544 / tcp

-1888448627 | 2025-01-31T06:08:21.424760

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

6633 / tcp

-2096652808 | 2025-01-15T07:04:04.511815

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

6653 / tcp

-345718689 | 2025-02-02T13:20:46.799593

Vty password is not set.

6661 / tcp

-1839934832 | 2025-02-04T03:58:30.767925

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

6666 / tcp

-1327849035 | 2025-02-04T04:55:02.747186

HTTP/1.1 200 OK
Server: Webs
X-Frame-Options: SAMEORIGIN
Content-Type: text/html
Connection: keep-alive
Keep-Alive: timeout=60, max=99

6667 / tcp

114471724 | 2025-01-26T08:07:22.176450

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

6668 / tcp

-1839934832 | 2025-02-03T08:18:37.154393

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

6697 / tcp

-1399940268 | 2025-01-30T00:39:01.025254

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6755 / tcp

1830187220 | 2025-01-24T00:29:37.581694

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

6887 / tcp

1911457608 | 2025-01-22T05:39:50.885588

\x00[\x00\x00\x00\x00\x00\x00

7001 / tcp

1634746382 | 2025-01-22T07:46:54.132882

HTTP/1.1 200 OK
X-Current-Requests: 1
Vary: Origin
Content-Type: application/json; charset=utf-8
X-ReadTime: 51
Connection: keep-alive
Keep-Alive: timeout=5

7012 / tcp

-653033013 | 2025-01-13T15:06:19.775119

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

7013 / tcp

-1036370807 | 2025-02-01T16:26:24.931052

JDWP-Handshake

7071 / tcp

1984588611 | 2025-01-22T01:14:53.125471

7081 / tcp

165188539 | 2025-01-21T22:03:25.209996

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

7170 / tcp

671605376 | 2025-01-25T19:26:10.680101

SSH-2.0-OpenSSH_X.X

7171 / tcp

-454087041 | 2025-01-13T02:38:51.586105

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

7403 / tcp

-303199180 | 2025-01-26T17:38:46.342318

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

7443 / tcp

-584993230 | 2025-02-04T12:17:29.684992

HTTP/1.1 400 Bad Request
Server:  
Content-Type: text/html
Connection: close

7480 / tcp

937756010 | 2025-01-20T04:40:47.253923

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

7493 / tcp

-1399940268 | 2025-01-18T10:03:30.550775

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7535 / tcp

740837454 | 2025-01-23T18:16:40.956679

SSH-2.0-OpenSSH_5.3

7548 / tcp

-1428621233 | 2025-01-30T23:40:54.678250

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

7634 / tcp

1852418385 | 2025-02-05T15:29:16.494346

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

7676 / tcp

470305186 | 2025-01-18T06:16:21.784691

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET

7687 / tcp

1911457608 | 2025-01-31T14:06:40.550942

\x00[\x00\x00\x00\x00\x00\x00

7771 / tcp

1370263973 | 2025-02-06T17:45:19.618043

dubbo>

7775 / tcp

819727972 | 2025-01-09T04:42:23.375773

SSH-2.0-OpenSSH_7.4

7778 / tcp

-445721795 | 2025-01-29T17:27:06.994160

\x00[\xc3\xaed\x1a\x7f\x00\x00

8005 / tcp

-1737707071 | 2025-02-03T03:38:17.096019

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

8006 / tcp

1911457608 | 2025-01-09T05:57:24.389165

\x00[\x00\x00\x00\x00\x00\x00

8009 / tcp

-1399940268 | 2025-02-01T11:02:33.554525

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8015 / tcp

819727972 | 2025-01-16T15:01:20.537870

SSH-2.0-OpenSSH_7.4

8027 / tcp

-1399940268 | 2025-01-31T19:30:17.744161

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8031 / tcp

-1825431268 | 2025-01-31T18:45:44.854396

HTTP/1.1 422 Bad Request
Content-Type: text/html

8033 / tcp

165188539 | 2025-01-23T09:04:16.657540

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8034 / tcp

1134517380 | 2025-01-16T15:14:07.561448

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

8041 / tcp

1282941221 | 2025-02-02T02:50:04.129685

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

8044 / tcp

398077695 | 2025-01-31T23:00:52.633037

8051 / tcp

1911457608 | 2025-01-29T07:56:48.076701

\x00[\x00\x00\x00\x00\x00\x00

8062 / tcp

-1189269828 | 2025-02-03T03:25:51.676528

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8075 / tcp

321971019 | 2025-01-21T17:59:00.187109

-ERR client ip is not in whitelist\r

8081 / tcp

1690634669 | 2025-02-04T20:15:01.012875

8082 / tcp

-747911285 | 2025-01-21T11:43:31.381650

\xc2\xaa

8083 / tcp

539065883 | 2025-01-15T13:47:41.372634

8085 / tcp

-971970408 | 2025-02-06T15:53:42.304170

8089 / tcp

546151771 | 2025-01-31T20:05:32.358274

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

8093 / tcp

1400482029 | 2025-01-30T15:29:57.949463

HTTP/1.1 404 Not Found
Connection: Close
Content-Type: text/plain; charset=utf-8
Server: SRS/4.0.81(Leo)

8096 / tcp

1134517380 | 2025-01-12T18:18:11.695966

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

8099 / tcp

-1249500036 | 2025-02-01T17:08:59.601134

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

8107 / tcp

-980525298 | 2025-01-24T19:49:32.188587

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8113 / tcp

1620329124 | 2025-02-04T06:36:56.654582

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

8126 / tcp

2087396567 | 2025-01-29T22:28:31.222604

kjnkjabhbanc283ubcsbhdc72

8131 / tcp

1632932802 | 2025-01-26T08:42:46.603649

8139 / tcp

2087396567 | 2025-01-11T14:09:46.717810

kjnkjabhbanc283ubcsbhdc72

8156 / tcp

-2096652808 | 2025-01-09T21:48:01.583516

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8158 / tcp

-904840257 | 2025-02-01T10:37:09.635472

572 Relay not authorized\r\n

8181 / tcp

410249975 | 2025-01-30T21:40:39.384571

LNS READY<>

8183 / tcp

1282941221 | 2025-01-11T23:58:40.423648

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

8185 / tcp

1396488228 | 2025-01-15T01:26:33.227558

HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html

8190 / tcp

2143387245 | 2025-01-12T11:45:12.409434

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

8192 / tcp

53740977 | 2025-01-29T14:25:36.510905

HTTP/1.1 200 OK
Server: nginx/1.20.1
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

8195 / tcp

1615193817 | 2025-01-17T20:19:07.858986

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

8196 / tcp

1830187220 | 2025-02-01T05:55:55.845946

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

8199 / tcp

-136006866 | 2025-02-02T10:57:01.864244

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

8248 / tcp

1504401647 | 2025-02-01T04:16:20.966446

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

8280 / tcp

-1428621233 | 2025-01-25T18:22:00.484403

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8291 / tcp

307999478 | 2025-01-20T17:24:15.842337

unknown command \r\nunknown command \r\n

8317 / tcp

2098371729 | 2025-01-24T08:08:46.749665

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

8322 / tcp

-1810987450 | 2025-02-01T22:21:49.334994

\xc3\xbf

8343 / tcp

1282941221 | 2025-01-28T23:56:11.400427

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

8384 / tcp

-2089734047 | 2025-01-18T21:40:31.575391

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8385 / tcp

398077695 | 2025-01-25T18:55:01.545081

8407 / tcp

819727972 | 2025-02-01T22:24:44.442407

SSH-2.0-OpenSSH_7.4

8409 / tcp

1911457608 | 2025-01-30T18:43:37.870767

\x00[\x00\x00\x00\x00\x00\x00

8421 / tcp

455076604 | 2025-02-01T14:06:14.256192

!\x07version\x04bind7 t{RPowerDNS Recursor 410

8443 / tcp

-973679136 | 2025-01-12T03:29:50.493282

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 12 Jan 2025 03:29:50 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.14.207.159:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

8444 / tcp

1723769361 | 2025-01-21T20:44:15.027371

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

8448 / tcp

-1435414831 | 2025-01-20T05:54:48.552434

roku: ready\r\n

8451 / tcp

-457235091 | 2025-01-23T16:24:18.876097

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

8454 / tcp

-122096153 | 2025-01-12T06:47:02.592387

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

8485 / tcp

1332894250 | 2025-02-05T11:37:08.682998

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

8500 / tcp

1529351907 | 2025-01-18T15:19:44.893710

HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive

please add white ip *.*.*.*

8502 / tcp

-1261090339 | 2025-01-24T05:15:28.290317

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

8526 / tcp

-1114821551 | 2025-01-21T00:05:49.036132

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

8528 / tcp

921225407 | 2025-02-02T23:43:30.865868

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8530 / tcp

-303199180 | 2025-01-22T16:56:32.889153

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

8533 / tcp

921225407 | 2025-01-20T19:30:20.538426

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8536 / tcp

-180163620 | 2025-01-26T21:35:44.882343

NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n

8545 / tcp

-2089734047 | 2025-02-01T20:26:46.573329

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8551 / tcp

1911457608 | 2025-01-30T18:49:38.104478

\x00[\x00\x00\x00\x00\x00\x00

8560 / tcp

1282941221 | 2025-01-31T22:23:48.976798

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

8564 / tcp

-1839934832 | 2025-01-23T23:54:53.184188

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8566 / tcp

1975288991 | 2025-02-04T19:26:36.673174

OPTI

8574 / tcp

1911457608 | 2025-01-26T09:49:45.105783

\x00[\x00\x00\x00\x00\x00\x00

8575 / tcp

-1399940268 | 2025-02-05T21:57:25.173007

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8581 / tcp

117101543 | 2025-01-29T02:34:46.375483

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

8587 / tcp

-1375131644 | 2025-01-09T02:59:12.598354

\x00[v\xc3\xbdC\x7f\x00\x00

8592 / tcp

117101543 | 2025-01-16T17:43:47.068099

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

8598 / tcp

-1839934832 | 2025-01-13T03:37:54.493289

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8601 / tcp

-1399940268 | 2025-01-30T11:16:02.386559

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8605 / tcp

-2089734047 | 2025-02-03T08:44:23.218983

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8606 / tcp

-1105333987 | 2025-01-23T01:25:29.802185

\x00[KpU\x7f\x00\x00

8630 / tcp

819727972 | 2025-01-31T17:37:28.071444

SSH-2.0-OpenSSH_7.4

8641 / tcp

165188539 | 2025-02-01T16:32:20.941151

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8649 / tcp

-42767839 | 2025-02-04T06:42:29.904980

RFB 005.000

VNC:
  Protocol Version: 5.0

8706 / tcp

1911457608 | 2025-01-23T09:08:25.494606

\x00[\x00\x00\x00\x00\x00\x00

8728 / tcp

-1996280214 | 2025-02-05T02:47:13.811044

\x06\x04\x05@

8731 / tcp

-1248408558 | 2025-01-11T20:19:52.751997

220 MikroTik FTP server (MikroTik 6.44.3) ready

8743 / tcp

-1399940268 | 2025-01-09T16:54:39.604983

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8803 / tcp

-1399940268 | 2025-01-08T10:53:01.146615

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8815 / tcp

1282941221 | 2025-02-02T02:50:49.956216

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

8840 / tcp

819727972 | 2025-01-12T20:57:57.755982

SSH-2.0-OpenSSH_7.4

8845 / tcp

745343730 | 2025-01-30T21:53:31.599450

220 smtp.qq.com Esmtp QQ Mail Server

8852 / tcp

1911457608 | 2025-01-19T10:31:39.134758

\x00[\x00\x00\x00\x00\x00\x00

8857 / tcp

-1399940268 | 2025-01-11T00:13:46.258572

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8880 / tcp

-2096652808 | 2025-01-28T21:51:52.639809

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8886 / tcp

-1327660293 | 2025-02-02T14:45:53.737046

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

8889 / tcp

2087396567 | 2025-02-04T05:46:49.433829

kjnkjabhbanc283ubcsbhdc72

8912 / tcp

1426971893 | 2025-02-06T05:32:28.196538

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

8935 / tcp

1543809371 | 2025-01-08T21:44:07.607424

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

8980 / tcp

1911457608 | 2025-01-25T12:42:58.777248

\x00[\x00\x00\x00\x00\x00\x00

9000 / tcp

-2067028711 | 2025-01-12T19:10:18.933817

\x15\x03\x01\x00\x02\x02F

9001 / tcp

-1026951088 | 2025-02-03T15:40:19.351584

erro ip

9002 / tcp

819727972 | 2025-01-29T16:17:39.015437

SSH-2.0-OpenSSH_7.4

9010 / tcp

1077013874 | 2025-02-01T22:13:55.262080

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

9011 / tcp

-457235091 | 2025-01-25T17:45:33.621753

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

9016 / tcp

1208318993 | 2025-02-01T17:37:47.140728

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

9017 / tcp

-1399940268 | 2025-01-28T16:28:05.830789

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9022 / tcp

-1470145161 | 2025-01-19T07:57:58.905510

SSH-2.0-ROSSSH\r\n

9035 / tcp

740837454 | 2025-02-02T17:54:58.890167

SSH-2.0-OpenSSH_5.3

9041 / tcp

-1399940268 | 2025-01-28T16:33:27.677620

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9042 / tcp

1741579575 | 2025-02-03T10:11:44.774824

9051 / tcp

1690634669 | 2025-01-31T20:21:21.917120

9061 / tcp

1624217396 | 2025-01-26T08:18:41.154412

HELO:10.3.6.0.false\nAS:2048\nHL:19

9069 / tcp

-1888448627 | 2025-02-06T16:10:14.643954

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9089 / tcp

1948301213 | 2025-01-28T19:26:13.001264

RFB 003.003
VNC:
  Protocol Version: 3.3

9092 / tcp

-358801646 | 2025-01-19T23:06:06.890929

SSH-2.0-OpenSSH_6.6.1

9095 / tcp

-407828767 | 2025-01-22T22:03:07.634158

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

9100 / tcp

165188539 | 2025-02-02T05:31:03.868286

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9108 / tcp

-1733645023 | 2025-01-31T10:38:26.536209

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

9109 / tcp

-1399940268 | 2025-01-09T20:09:30.308010

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9112 / tcp

-1399940268 | 2025-01-25T12:34:07.759041

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9113 / tcp

-1888448627 | 2025-01-10T00:38:43.230721

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9114 / tcp

1989907056 | 2025-01-22T10:45:19.968916

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

9137 / tcp

-1036370807 | 2025-01-15T05:19:15.190681

JDWP-Handshake

9142 / tcp

819727972 | 2025-01-13T19:41:30.356772

SSH-2.0-OpenSSH_7.4

9152 / tcp

410249975 | 2025-01-09T09:28:35.718882

LNS READY<>

9154 / tcp

707919486 | 2025-01-20T08:40:20.597133

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

9157 / tcp

819727972 | 2025-01-15T16:15:46.764803

SSH-2.0-OpenSSH_7.4

9160 / tcp

-1399940268 | 2025-02-02T05:49:32.948716

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9169 / tcp

1911457608 | 2025-01-28T13:11:35.397322

\x00[\x00\x00\x00\x00\x00\x00

9185 / tcp

1332894250 | 2025-01-12T23:10:59.250391

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

9193 / tcp

-1045760528 | 2025-01-16T17:21:31.344803

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

9194 / tcp

1911457608 | 2025-01-10T00:09:12.488190

\x00[\x00\x00\x00\x00\x00\x00

9198 / tcp

-1019343788 | 2025-01-29T12:19:08.578249

W!\x00\x00\x00\x00

9211 / tcp

45131230 | 2025-01-23T06:31:47.746459

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

9218 / tcp

971933601 | 2025-01-31T00:41:49.573574

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

9252 / tcp

-2089734047 | 2025-01-12T23:28:35.126087

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9306 / tcp

819727972 | 2025-01-30T04:46:24.187191

SSH-2.0-OpenSSH_7.4

9312 / tcp

707919486 | 2025-01-15T07:24:57.696361

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

9333 / tcp

307999478 | 2025-01-24T17:28:56.806093

unknown command \r\nunknown command \r\n

9350 / tcp

493955023 | 2025-02-01T22:54:50.036045

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

9353 / tcp

819727972 | 2025-02-01T03:18:55.692225

SSH-2.0-OpenSSH_7.4

9418 / tcp

1529351907 | 2025-02-03T02:46:26.607900

HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive

please add white ip *.*.*.*

9441 / tcp

-1779118422 | 2025-01-15T12:46:28.991659

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

9444 / tcp

-1279886438 | 2025-01-07T21:19:28.865742

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

9530 / tcp

-1399940268 | 2025-02-05T15:33:58.871592

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9550 / tcp

1948301213 | 2025-01-27T23:25:38.366002

RFB 003.003
VNC:
  Protocol Version: 3.3

9600 / tcp

-2089734047 | 2025-01-31T13:48:22.673158

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9743 / tcp

1911457608 | 2025-01-08T01:42:52.251921

\x00[\x00\x00\x00\x00\x00\x00

9765 / tcp

-303199180 | 2025-01-14T20:05:10.807221

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

9869 / tcp

0 | 2025-02-02T03:44:10.631792

Hashes

hash

1865391109

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
content-length: 0

9876 / tcp

2109639173 | 2025-01-14T18:36:40.915446

\\x00\\x00\\x01\\xb8\\x00\\x00\\x00_{"code":0,"flag":1,"language":"JAVA","opaque":0,"serializeTypeCurrentRPC":"JSON","version":401}{"brokerAddrTable":{"rocketmq-cnng0d8ee3802629-broker-0":{"brokerAddrs":{0:"180.184.35.245:30950",2:"180.184.35.245:30951",3:"180.184.35.245:30952"},"brokerName":"rocketmq-cnng0d8ee3802629-broker-0","cluster":"rocketmq-cnng0d8ee3802629-broker"}},"clusterAddrTable":{"rocketmq-cnng0d8ee3802629-broker":["rocketmq-cnng0d8ee3802629-broker-0"]}}

9898 / tcp

1304012963 | 2025-02-03T12:09:59.093962

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: close

9928 / tcp

-2031152423 | 2025-02-03T06:27:59.413421

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

9929 / tcp

1011407350 | 2025-01-29T05:47:49.481198

* OK GroupWise IMAP4rev1 Server Ready\r\n

9930 / tcp

-1248408558 | 2025-01-16T22:28:35.127008

220 MikroTik FTP server (MikroTik 6.44.3) ready

9943 / tcp

-726580714 | 2025-02-03T19:14:52.045451

\\x03\\x10\\x08\\x02\\xc2\\x80}\\x08\\x02\\xc2\\x80\xc3\xa2\\x14\\x01

9998 / tcp

-1340128872 | 2025-01-27T11:41:31.190524

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25d2_PS-PEK-010xV14_15533-12109

9999 / tcp

1161309183 | 2025-01-31T15:58:52.350438

ProxyServer is ready

10000 / tcp

-1026951088 | 2025-02-01T22:15:12.659929

erro ip

10001 / tcp

1492413928 | 2025-02-04T18:10:19.614355

SSH-2.0-OpenSSH_7.5

10017 / tcp

-1399940268 | 2025-01-22T18:15:11.534413

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10025 / tcp

1911457608 | 2025-01-10T06:28:32.619989

\x00[\x00\x00\x00\x00\x00\x00

10031 / tcp

-1375131644 | 2025-01-10T05:50:36.063961

\x00[v\xc3\xbdC\x7f\x00\x00

10037 / tcp

819727972 | 2025-02-01T21:44:47.672757

SSH-2.0-OpenSSH_7.4

10048 / tcp

897328069 | 2025-01-16T18:23:09.025768

220 mail.scott000.com ESMTP

10050 / tcp

-1327660293 | 2025-01-25T22:01:26.200130

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

10065 / tcp

15018106 | 2025-01-21T11:09:23.007116

\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00

10068 / tcp

1077013874 | 2025-01-14T20:25:09.554412

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

10201 / tcp

921225407 | 2025-02-04T01:33:57.110784

\x00\x00\x00\x04\x00\x00\x00\x00\x00

10250 / tcp

1852418385 | 2025-01-15T22:59:46.377674

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

10283 / tcp

1911457608 | 2025-01-15T17:46:44.826123

\x00[\x00\x00\x00\x00\x00\x00

10443 / tcp

1872331747 | 2025-01-19T01:24:09.166993

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 19 Jan 2025 01:24:09 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.14.207.159:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

10554 / tcp

2087396567 | 2025-01-31T06:03:17.195919

kjnkjabhbanc283ubcsbhdc72

10810 / tcp

307999478 | 2025-01-26T13:31:16.623263

unknown command \r\nunknown command \r\n

10909 / tcp

-438503381 | 2025-01-18T12:46:18.919266

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

10911 / tcp

-274082663 | 2025-02-03T05:27:07.361339

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

10934 / tcp

-653033013 | 2025-01-19T15:09:03.124749

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

11000 / tcp

-2017887953 | 2025-01-25T01:40:32.576367

SSH-2.0-OpenSSH_7.9

11112 / tcp

-1140468363 | 2025-02-05T04:15:51.096283

\x02\t\x01

11210 / tcp

-339084706 | 2025-01-16T02:54:27.527126

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

11300 / tcp

-136006866 | 2025-01-23T16:57:54.109905

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11443 / tcp

599074451 | 2025-01-16T13:40:35.220647

msg

11601 / tcp

-1248408558 | 2025-01-18T18:11:03.854812

220 MikroTik FTP server (MikroTik 6.44.3) ready

12000 / tcp

-2046909074 | 2025-02-01T11:25:31.720681

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae217c_PS-000-01mL925_24271-10054

12082 / tcp

632542934 | 2025-01-17T03:09:07.600751

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12128 / tcp

205347087 | 2025-01-30T08:04:38.144667

SSH-25453-Cisco-3524665.35\n

12139 / tcp

1911457608 | 2025-01-18T21:28:14.770394

\x00[\x00\x00\x00\x00\x00\x00

12144 / tcp

-1399940268 | 2025-02-01T01:53:05.515187

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12150 / tcp

165188539 | 2025-01-27T23:10:26.461725

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12173 / tcp

-1888448627 | 2025-01-19T19:12:31.406073

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12179 / tcp

1332894250 | 2025-01-13T02:57:52.922051

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

12190 / tcp

819727972 | 2025-01-29T02:46:04.066894

SSH-2.0-OpenSSH_7.4

12191 / tcp

1911457608 | 2025-01-13T09:18:34.400805

\x00[\x00\x00\x00\x00\x00\x00

12194 / tcp

-1435414831 | 2025-01-21T16:00:06.192113

roku: ready\r\n

12195 / tcp

1134517380 | 2025-01-17T05:58:59.690364

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

12199 / tcp

-980525298 | 2025-01-30T03:27:34.731444

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12204 / tcp

1911457608 | 2025-01-30T15:37:52.420214

\x00[\x00\x00\x00\x00\x00\x00

12212 / tcp

-1839934832 | 2025-01-31T01:22:40.639429

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12213 / tcp

1208318993 | 2025-01-31T09:18:15.343045

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

12217 / tcp

-1399940268 | 2025-01-27T09:43:26.583024

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12220 / tcp

-1888448627 | 2025-01-11T12:05:50.321321

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12221 / tcp

-1435414831 | 2025-01-15T04:30:02.818073

roku: ready\r\n

12243 / tcp

1911457608 | 2025-01-29T09:45:54.956901

\x00[\x00\x00\x00\x00\x00\x00

12256 / tcp

-1105333987 | 2025-02-03T04:36:01.838203

\x00[KpU\x7f\x00\x00

12257 / tcp

1996932384 | 2025-01-27T14:11:27.040716

"raop" nonce

12261 / tcp

819727972 | 2025-01-28T21:32:33.254128

SSH-2.0-OpenSSH_7.4

12275 / tcp

-1036370807 | 2025-02-05T14:49:14.290742

JDWP-Handshake

12278 / tcp

709622286 | 2025-01-26T05:37:46.346316

OK Welcome <299685> on DirectUpdate server 7286\r\n

12282 / tcp

-375604792 | 2025-01-19T10:33:21.573489

220 Microsoft FTP Service

12283 / tcp

-1032713145 | 2025-02-06T17:06:27.283521

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

12284 / tcp

-1399940268 | 2025-01-31T07:37:44.163162

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12293 / tcp

455076604 | 2025-02-02T18:17:29.978825

!\x07version\x04bind7 t{RPowerDNS Recursor 410

12310 / tcp

-1888448627 | 2025-02-02T17:06:04.471161

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12326 / tcp

-1399940268 | 2025-01-14T14:25:24.409751

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12333 / tcp

1504401647 | 2025-02-02T00:59:47.134972

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

12337 / tcp

1911457608 | 2025-01-30T07:23:51.306736

\x00[\x00\x00\x00\x00\x00\x00

12339 / tcp

-1399940268 | 2025-01-28T04:41:52.171056

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12345 / tcp

1748152518 | 2025-02-03T11:49:07.666718

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae26f8_hwt112_4105-46187

12352 / tcp

1911457608 | 2025-01-25T01:26:49.551993

\x00[\x00\x00\x00\x00\x00\x00

12353 / tcp

-1399940268 | 2025-01-21T04:53:42.686685

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12355 / tcp

-1327660293 | 2025-02-03T20:57:26.729639

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12373 / tcp

921225407 | 2025-01-11T19:58:58.642076

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12377 / tcp

1911457608 | 2025-02-02T20:51:45.499869

\x00[\x00\x00\x00\x00\x00\x00

12384 / tcp

-1730858130 | 2025-01-10T05:00:07.446843

RFB 003.008
VNC:
  Protocol Version: 3.8

12392 / tcp

1492413928 | 2025-01-11T02:31:28.764961

SSH-2.0-OpenSSH_7.5

12404 / tcp

320677201 | 2025-01-15T10:17:17.498254

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

12408 / tcp

-1019343788 | 2025-02-04T22:02:59.737368

W!\x00\x00\x00\x00

12411 / tcp

1426971893 | 2025-01-15T01:03:46.041440

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

12413 / tcp

-1399940268 | 2025-01-29T05:20:02.089281

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12438 / tcp

1492413928 | 2025-01-14T22:13:52.338903

SSH-2.0-OpenSSH_7.5

12444 / tcp

1282941221 | 2025-02-03T13:49:42.148812

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

12454 / tcp

1543809371 | 2025-01-11T01:19:16.005847

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

12460 / tcp

493955023 | 2025-02-04T22:15:10.517656

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

12462 / tcp

1996932384 | 2025-01-09T16:53:46.340017

"raop" nonce

12471 / tcp

-1399940268 | 2025-01-18T23:37:31.725849

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12473 / tcp

1189133115 | 2025-01-10T20:59:16.965834

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

12476 / tcp

-345718689 | 2025-01-28T09:29:08.741321

Vty password is not set.

12479 / tcp

-1032713145 | 2025-01-17T22:50:57.193559

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

12519 / tcp

-441419608 | 2025-01-21T00:36:30.636221

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

12525 / tcp

819727972 | 2025-02-04T09:55:24.604058

SSH-2.0-OpenSSH_7.4

12531 / tcp

819727972 | 2025-01-09T16:03:50.947437

SSH-2.0-OpenSSH_7.4

12536 / tcp

1911457608 | 2025-01-27T16:58:00.868249

\x00[\x00\x00\x00\x00\x00\x00

12542 / tcp

1911457608 | 2025-01-24T23:22:45.066880

\x00[\x00\x00\x00\x00\x00\x00

12545 / tcp

-1399940268 | 2025-01-27T20:02:07.424042

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12546 / tcp

-1598265216 | 2025-02-02T19:53:48.938613

@RSYNCD: 31.0

12547 / tcp

1134517380 | 2025-02-04T16:55:50.894021

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

12558 / tcp

-1399940268 | 2025-01-24T08:22:59.490508

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12583 / tcp

-1888448627 | 2025-01-31T14:04:17.764510

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12586 / tcp

-1888448627 | 2025-01-24T01:29:04.105562

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12902 / tcp

-441419608 | 2025-02-06T13:41:17.077010

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

13128 / tcp

2098371729 | 2025-01-26T12:55:00.067705

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

14147 / tcp

165188539 | 2025-01-27T17:11:54.205161

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

14265 / tcp

-1839934832 | 2025-01-14T08:08:00.806373

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

14344 / tcp

937756010 | 2025-01-23T21:27:46.509888

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

14873 / tcp

-1032713145 | 2025-01-19T02:05:24.367617

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

15044 / tcp

-2080784861 | 2025-01-25T00:16:19.150915

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

16055 / tcp

-1399940268 | 2025-02-05T23:01:46.385990

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16064 / tcp

671605376 | 2025-01-23T03:57:24.150919

SSH-2.0-OpenSSH_X.X

16069 / tcp

-1888448627 | 2025-02-04T22:09:40.455879

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

16070 / tcp

-358801646 | 2025-01-28T13:42:07.772669

SSH-2.0-OpenSSH_6.6.1

16073 / tcp

-454087041 | 2025-02-03T07:54:46.643776

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

16100 / tcp

1911457608 | 2025-01-19T18:06:51.783625

\x00[\x00\x00\x00\x00\x00\x00

16404 / tcp

-249504111 | 2025-01-22T15:44:10.499804

\x00[xU-\x7f\x00\x00

16443 / tcp

-2089734047 | 2025-02-02T16:21:30.297174

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

16831 / tcp

1543809371 | 2025-01-27T16:26:24.458684

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

16888 / tcp

819727972 | 2025-01-25T06:36:27.302734

SSH-2.0-OpenSSH_7.4

16993 / tcp

1212921144 | 2025-01-12T07:39:44.405272

0@

17000 / tcp

-1810987450 | 2025-01-17T17:52:06.703575

\xc3\xbf

17771 / tcp

1615193817 | 2025-01-16T22:01:30.572486

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

17772 / tcp

-2089734047 | 2025-02-01T11:54:58.762418

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

17776 / tcp

-1329831334 | 2025-01-28T16:20:49.008522

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

17779 / tcp

819727972 | 2025-01-27T06:36:31.464839

SSH-2.0-OpenSSH_7.4

17780 / tcp

-1399940268 | 2025-02-03T00:58:37.326520

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18015 / tcp

165188539 | 2025-02-03T01:29:59.057967

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

18042 / tcp

-1399940268 | 2025-01-19T19:20:58.259463

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18043 / tcp

1911457608 | 2025-01-20T22:46:13.479396

\x00[\x00\x00\x00\x00\x00\x00

18060 / tcp

165188539 | 2025-01-10T21:22:19.810675

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

18074 / tcp

-784071826 | 2025-01-13T20:43:01.157437

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

18078 / tcp

-2017887953 | 2025-01-31T11:22:12.477382

SSH-2.0-OpenSSH_7.9

18081 / tcp

-1059554316 | 2025-01-14T11:18:40.373254

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

18089 / tcp

119860953 | 2025-02-04T11:41:28.206216

* OK ArGoSoft Mail Server IMAP Module v.YW at

18095 / tcp

321971019 | 2025-01-14T14:13:50.849673

-ERR client ip is not in whitelist\r

18110 / tcp

-1487943323 | 2025-01-18T05:09:13.949532

431 Unable to negotiate secure command connection.\r\n

18245 / tcp

-1737707071 | 2025-01-30T19:52:31.714418

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

19000 / tcp

1396488228 | 2025-01-25T02:24:46.978647

HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html

19017 / tcp

-1888448627 | 2025-02-06T14:49:52.972564

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

19084 / tcp

-1399940268 | 2025-01-21T22:04:34.677346

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

19100 / tcp

-1839934832 | 2025-01-13T23:04:05.998716

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

19902 / tcp

1911457608 | 2025-01-10T03:19:48.224021

\x00[\x00\x00\x00\x00\x00\x00

20000 / tcp

1900503736 | 2025-02-03T04:00:26.468071

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20018 / tcp

-2089734047 | 2025-01-14T19:35:53.556530

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

20090 / tcp

-1746074029 | 2025-01-21T21:35:48.511408

101 imqbroker =unV\r\n

20184 / tcp

-2089734047 | 2025-01-25T00:43:39.771571

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

20185 / tcp

1911457608 | 2025-01-22T05:34:56.201344

\x00[\x00\x00\x00\x00\x00\x00

20201 / tcp

1911457608 | 2025-01-22T09:52:14.813226

\x00[\x00\x00\x00\x00\x00\x00

20256 / tcp

808560482 | 2025-01-17T15:19:25.630203

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP
 : USERID : UNIX : Cr8

20443 / tcp

-1399940268 | 2025-01-17T20:58:02.110976

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20547 / tcp

1911457608 | 2025-02-03T06:45:07.007082

\x00[\x00\x00\x00\x00\x00\x00

20880 / tcp

1370263973 | 2025-01-25T06:23:26.790738

dubbo>

20894 / tcp

-1099385124 | 2025-01-17T03:44:17.562283

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

21081 / tcp

-1730858130 | 2025-01-14T06:56:47.520867

RFB 003.008
VNC:
  Protocol Version: 3.8

21100 / tcp

740837454 | 2025-01-20T00:17:50.578976

SSH-2.0-OpenSSH_5.3

21236 / tcp

-653033013 | 2025-01-26T08:17:48.677799

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

21243 / tcp

-1399940268 | 2025-01-15T07:20:18.940627

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21244 / tcp

-1888448627 | 2025-02-06T05:30:19.766438

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

21249 / tcp

-2096652808 | 2025-01-22T18:35:20.721041

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

21259 / tcp

1911457608 | 2025-01-29T06:33:48.591392

\x00[\x00\x00\x00\x00\x00\x00

21260 / tcp

-1399940268 | 2025-01-12T22:41:47.808172

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21275 / tcp

-2089734047 | 2025-02-01T08:23:20.302688

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

21280 / tcp

321971019 | 2025-01-15T05:11:21.009132

-ERR client ip is not in whitelist\r

21284 / tcp

-1399940268 | 2025-02-06T11:32:46.550855

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21295 / tcp

2098371729 | 2025-01-24T21:00:15.973669

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

21297 / tcp

165188539 | 2025-01-15T20:56:08.351155

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21298 / tcp

2098371729 | 2025-02-04T17:00:10.365959

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

21301 / tcp

-1399940268 | 2025-01-29T09:31:57.020897

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21322 / tcp

-1730858130 | 2025-01-25T15:44:40.745756

RFB 003.008
VNC:
  Protocol Version: 3.8

21379 / tcp

103159425 | 2025-02-03T19:52:54.310296

SSH-1.99-RGOS_SSH

22000 / tcp

-407828767 | 2025-01-11T07:21:12.523010

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

22082 / tcp

1504401647 | 2025-01-26T00:21:02.532528

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

22380 / tcp

819727972 | 2025-01-25T13:07:27.054992

SSH-2.0-OpenSSH_7.4

22556 / tcp

-784071826 | 2025-01-30T11:19:38.819124

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

23023 / tcp

1911457608 | 2025-01-29T23:48:32.068046

\x00[\x00\x00\x00\x00\x00\x00

23182 / tcp

-1730858130 | 2025-01-13T00:53:06.243223

RFB 003.008
VNC:
  Protocol Version: 3.8

24442 / tcp

1282941221 | 2025-01-31T17:50:10.586567

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

24808 / tcp

-1399940268 | 2025-01-10T10:57:22.793314

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

25001 / tcp

-303199180 | 2025-01-22T12:26:33.532681

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

25565 / tcp

1308377066 | 2025-01-28T12:56:04.491362

ncacn_http/1.0

27015 / tcp

819727972 | 2025-01-13T23:44:06.661948

SSH-2.0-OpenSSH_7.4

27017 / tcp

1763259671 | 2025-02-01T18:32:50.251346

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

28015 / tcp

1911457608 | 2025-01-30T00:17:29.595106

\x00[\x00\x00\x00\x00\x00\x00

29840 / tcp

819727972 | 2025-02-01T23:14:24.194512

SSH-2.0-OpenSSH_7.4

30002 / tcp

-801484042 | 2025-02-03T21:10:57.288994

ERR 27

30006 / tcp

-1839934832 | 2025-01-14T23:04:48.242142

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

30050 / tcp

-454087041 | 2025-01-21T06:51:23.824048

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

30083 / tcp

1911457608 | 2025-01-15T23:44:37.432146

\x00[\x00\x00\x00\x00\x00\x00

30106 / tcp

819727972 | 2025-01-30T08:39:14.259194

SSH-2.0-OpenSSH_7.4

30501 / tcp

971933601 | 2025-01-17T11:10:24.505501

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

31210 / tcp

-2089734047 | 2025-01-15T19:22:55.720421

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

31337 / tcp

-2133761335 | 2025-02-01T05:11:13.988228

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.21

32001 / tcp

740837454 | 2025-01-15T08:25:46.803922

SSH-2.0-OpenSSH_5.3

32102 / tcp

819727972 | 2025-02-03T23:16:01.101721

SSH-2.0-OpenSSH_7.4

32764 / tcp

819727972 | 2025-02-05T08:27:53.180854

SSH-2.0-OpenSSH_7.4

33522 / tcp

-1839934832 | 2025-02-06T19:00:27.342118

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

34122 / tcp

539065883 | 2025-02-06T14:45:39.743338

34222 / tcp

-1026951088 | 2025-02-06T16:18:14.059832

erro ip

34522 / tcp

2087396567 | 2025-02-05T21:05:37.343616

kjnkjabhbanc283ubcsbhdc72

34722 / tcp

1842524259 | 2025-02-05T11:21:23.053456

35002 / tcp

819727972 | 2025-01-20T17:49:44.512000

SSH-2.0-OpenSSH_7.4

35153 / tcp

-1888448627 | 2025-01-20T02:02:19.083996

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

35222 / tcp

-1730858130 | 2025-02-05T19:19:13.553427

RFB 003.008
VNC:
  Protocol Version: 3.8

35422 / tcp

-1189269828 | 2025-02-05T13:48:02.510226

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

35522 / tcp

539065883 | 2025-02-05T17:48:23.429133

35524 / tcp

-1399940268 | 2025-01-22T14:01:36.032600

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

35531 / tcp

-1737707071 | 2025-01-17T08:16:29.544399

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

35722 / tcp

740837454 | 2025-02-05T05:16:40.662945

SSH-2.0-OpenSSH_5.3

35822 / tcp

971933601 | 2025-02-05T07:01:53.571663

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

36422 / tcp

-2107996212 | 2025-02-04T23:59:59.083714

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

36501 / tcp

-903067560 | 2025-01-16T22:32:59.037345

\x00[\x13)\xc2\x81\x7f\x00\x00

36522 / tcp

819727972 | 2025-02-04T22:06:58.401624

SSH-2.0-OpenSSH_7.4

37022 / tcp

-1810987450 | 2025-02-04T09:49:52.529672

\xc3\xbf

37322 / tcp

660175493 | 2025-02-04T05:07:52.272149

37522 / tcp

1948301213 | 2025-02-04T03:22:34.374978

RFB 003.003
VNC:
  Protocol Version: 3.3

37622 / tcp

-142686627 | 2025-02-03T17:50:41.533300

\x00[\xc2\xba\x7fs\x7f\x00\x00

37722 / tcp

104385780 | 2025-02-03T21:21:16.349662

ceph v2

37777 / tcp

-904840257 | 2025-01-30T20:09:25.148222

572 Relay not authorized\r\n

37922 / tcp

-971970408 | 2025-02-03T17:11:00.494313

38322 / tcp

-2081419599 | 2025-02-03T00:12:33.310104

@
03d

38722 / tcp

-358801646 | 2025-02-03T03:44:53.144354

SSH-2.0-OpenSSH_6.6.1

38822 / tcp

-1733645023 | 2025-02-02T13:32:30.994822

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

39022 / tcp

-1611764932 | 2025-02-02T22:26:43.861697

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

39622 / tcp

-971970408 | 2025-02-01T21:24:56.476188

39722 / tcp

-2017887953 | 2025-02-02T11:58:29.120583

SSH-2.0-OpenSSH_7.9

40070 / tcp

-1399940268 | 2025-01-18T00:13:37.771342

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

40322 / tcp

-358801646 | 2025-02-02T00:58:41.390661

SSH-2.0-OpenSSH_6.6.1

40471 / tcp

-2089734047 | 2025-01-22T05:19:42.219079

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

41022 / tcp

-146605374 | 2025-02-01T09:22:02.434972

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

41222 / tcp

2087396567 | 2025-02-01T05:41:52.616454

kjnkjabhbanc283ubcsbhdc72

41322 / tcp

660175493 | 2025-02-01T04:33:47.335834

41522 / tcp

1632932802 | 2025-01-31T20:45:39.536885

41622 / tcp

-1036370807 | 2025-01-31T22:33:06.239851

JDWP-Handshake

41722 / tcp

996960436 | 2025-01-31T18:59:12.373906

572 Relay not authorized

41800 / tcp

-1399940268 | 2025-01-13T10:28:17.154575

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

42022 / tcp

819727972 | 2025-01-31T10:12:40.229119

SSH-2.0-OpenSSH_7.4

42122 / tcp

-971970408 | 2025-01-31T15:39:53.260620

42322 / tcp

2087396567 | 2025-01-30T22:32:03.370404

kjnkjabhbanc283ubcsbhdc72

42424 / tcp

1911457608 | 2025-01-16T13:12:40.307330

\x00[\x00\x00\x00\x00\x00\x00

42722 / tcp

366084633 | 2025-01-31T04:57:11.124424

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

42901 / tcp

1278527606 | 2025-01-14T10:15:42.013527

SSH-2.0-Teleport

42922 / tcp

1282941221 | 2025-01-31T01:26:16.283973

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

43008 / tcp

-1399940268 | 2025-01-28T22:46:27.214988

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

43022 / tcp

2087396567 | 2025-01-30T06:25:29.533742

kjnkjabhbanc283ubcsbhdc72

43122 / tcp

-1681927087 | 2025-01-30T15:28:24.633017

kjnkjabhbanc283ubcsbhdc72

43200 / tcp

-653033013 | 2025-01-27T19:38:49.534412

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

43422 / tcp

504717326 | 2025-01-30T19:00:13.682595

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

44022 / tcp

2087396567 | 2025-01-29T23:28:42.936888

kjnkjabhbanc283ubcsbhdc72

44341 / tcp

-1399940268 | 2025-01-29T12:21:29.327496

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44422 / tcp

-1990350878 | 2025-01-29T21:40:41.528481

 
04 \...

44520 / tcp

401555314 | 2025-02-02T10:40:05.309464

NB[GFXjA^R

44522 / tcp

2087396567 | 2025-01-29T18:05:37.700826

kjnkjabhbanc283ubcsbhdc72

44722 / tcp

740837454 | 2025-01-30T01:32:22.179015

SSH-2.0-OpenSSH_5.3

44818 / tcp

-1538260461 | 2025-02-05T18:30:08.504490

\x01\x00\x00\x00

44822 / tcp

89282912 | 2025-01-28T15:32:01.601549

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto
col:SOAP, MKSDisplayProtocol:VNC , ,

44922 / tcp

1212921144 | 2025-01-29T13:52:02.526812

0@

45006 / tcp

321971019 | 2025-01-12T15:17:30.648474

-ERR client ip is not in whitelist\r

45422 / tcp

1332894250 | 2025-01-28T04:53:13.864343

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

45522 / tcp

1741579575 | 2025-01-28T23:07:07.545352

45722 / tcp

1286504516 | 2025-01-28T19:08:13.577661

CP2E Control Console
Connected to Host: gZI

45822 / tcp

819727972 | 2025-01-28T20:56:31.750795

SSH-2.0-OpenSSH_7.4

45886 / tcp

-180163620 | 2025-02-05T13:01:11.385808

NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n

45922 / tcp

971933601 | 2025-01-27T21:21:17.325227

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

46322 / tcp

819727972 | 2025-01-28T10:07:34.845449

SSH-2.0-OpenSSH_7.4

46722 / tcp

-1476017887 | 2025-01-28T03:51:54.796575

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

46822 / tcp

1189133115 | 2025-01-27T17:31:10.052979

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

46922 / tcp

-2096652808 | 2025-01-27T18:37:37.324029

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

47022 / tcp

-288825733 | 2025-01-27T10:27:52.332095

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

47080 / tcp

599074451 | 2025-01-23T22:41:49.479011

msg

47122 / tcp

-1529979118 | 2025-01-27T19:32:23.583086

inv2W

47422 / tcp

-971970408 | 2025-01-27T12:17:46.012171

47990 / tcp

-1032713145 | 2025-02-06T18:38:42.597648

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

48019 / tcp

321971019 | 2025-01-31T11:26:29.663744

-ERR client ip is not in whitelist\r

48022 / tcp

2087396567 | 2025-01-26T16:25:45.386502

kjnkjabhbanc283ubcsbhdc72

48222 / tcp

2087396567 | 2025-01-26T14:40:09.764433

kjnkjabhbanc283ubcsbhdc72

48422 / tcp

2087396567 | 2025-01-26T18:14:31.431689

kjnkjabhbanc283ubcsbhdc72

48722 / tcp

-905685638 | 2025-01-26T11:05:59.532596

bxz437

49080 / tcp

1911457608 | 2025-01-29T11:25:31.047731

\x00[\x00\x00\x00\x00\x00\x00

49122 / tcp

-1392039491 | 2025-01-25T22:26:56.317494

"Broadband Router"

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

49322 / tcp

-2096652808 | 2025-01-26T02:04:08.850207

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

49422 / tcp

-1139539254 | 2025-01-25T13:30:15.152073

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

49443 / tcp

320677201 | 2025-02-03T00:51:11.126478

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

49502 / tcp

1278527606 | 2025-02-05T05:21:07.679559

SSH-2.0-Teleport

49684 / tcp

671605376 | 2025-02-04T05:12:08.162253

SSH-2.0-OpenSSH_X.X

50000 / tcp

1282941221 | 2025-01-14T18:24:57.526280

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

50009 / tcp

2098371729 | 2025-01-21T19:56:18.074585

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

50022 / tcp

819727972 | 2025-01-25T04:47:49.622680

SSH-2.0-OpenSSH_7.4

50100 / tcp

533875950 | 2025-01-19T18:24:31.263192

GBPKû÷nW¯x@©Ê*S

50106 / tcp

-1399940268 | 2025-02-02T18:09:34.606825

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

50202 / tcp

1911457608 | 2025-01-30T03:28:50.242528

\x00[\x00\x00\x00\x00\x00\x00

50222 / tcp

2087396567 | 2025-01-25T07:54:36.373452

kjnkjabhbanc283ubcsbhdc72

50522 / tcp

2067064333 | 2025-01-25T06:00:04.000173

athinfod: invalid query.

50622 / tcp

1492413928 | 2025-01-24T07:52:44.927717

SSH-2.0-OpenSSH_7.5

50722 / tcp

1842524259 | 2025-01-25T01:11:27.299037

50822 / tcp

2087396567 | 2025-01-24T22:31:11.828655

kjnkjabhbanc283ubcsbhdc72

50995 / tcp

1911457608 | 2025-01-27T04:22:05.597231

\x00[\x00\x00\x00\x00\x00\x00

51002 / tcp

1911457608 | 2025-01-27T10:00:26.961032

\x00[\x00\x00\x00\x00\x00\x00

51005 / tcp

-1114821551 | 2025-02-03T10:46:36.339946

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

51200 / tcp

-1839934832 | 2025-01-30T22:25:09.075111

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

51235 / tcp

-441419608 | 2025-01-17T11:29:47.628305

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

51294 / tcp

-1453516345 | 2025-02-05T11:07:54.482688

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

51322 / tcp

1887224352 | 2025-01-24T09:43:45.334958

51622 / tcp

1741579575 | 2025-01-24T12:28:12.564303

51822 / tcp

1852418385 | 2025-01-23T22:09:52.477294

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

52122 / tcp

1542849631 | 2025-01-24T01:17:44.725261

* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at

52322 / tcp

-1428621233 | 2025-01-23T18:27:36.896499

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

53222 / tcp

819727972 | 2025-01-23T00:13:05.170919

SSH-2.0-OpenSSH_7.4

53322 / tcp

-1598265216 | 2025-01-22T19:10:45.719251

@RSYNCD: 31.0

54138 / tcp

398077695 | 2025-01-29T02:20:30.835600

54322 / tcp

171352214 | 2025-01-22T00:12:40.054720

-ERR client ip is not in whitelist

54422 / tcp

-971970408 | 2025-01-21T18:34:41.922856

54622 / tcp

1741579575 | 2025-01-21T16:44:41.692559

55000 / tcp

307999478 | 2025-02-04T08:49:06.696972

unknown command \r\nunknown command \r\n

55022 / tcp

-971970408 | 2025-01-21T22:13:36.787020

55222 / tcp

103159425 | 2025-01-21T10:48:34.791176

SSH-1.99-RGOS_SSH

55422 / tcp

751496153 | 2025-01-21T08:57:15.088381

* OK TeamXchange IMAP4rev1 server (otyUg) ready.

55443 / tcp

-1428621233 | 2025-01-12T19:25:03.272881

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

55522 / tcp

104385780 | 2025-01-20T16:34:53.386751

ceph v2

55553 / tcp

-746114901 | 2025-02-02T11:12:49.200015

[KpU

55554 / tcp

550048729 | 2025-02-06T02:38:24.610185

ÿÿÿ
0 ...

55922 / tcp

819727972 | 2025-01-20T18:37:25.088985

SSH-2.0-OpenSSH_7.4

56222 / tcp

-971970408 | 2025-01-20T05:23:33.060084

56322 / tcp

-358801646 | 2025-01-20T14:41:32.501981

SSH-2.0-OpenSSH_6.6.1

56522 / tcp

2087396567 | 2025-01-20T09:06:11.804684

kjnkjabhbanc283ubcsbhdc72

56622 / tcp

-1428621233 | 2025-01-19T20:03:32.220513

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

56722 / tcp

2087396567 | 2025-01-20T03:51:18.868525

kjnkjabhbanc283ubcsbhdc72

57022 / tcp

-527005584 | 2025-01-19T16:28:52.978396

/0 0 L
/0 0 HUH

57222 / tcp

819727972 | 2025-01-19T23:15:47.406450

SSH-2.0-OpenSSH_7.4

57322 / tcp

-905685638 | 2025-01-19T10:41:06.500186

bxz437

57522 / tcp

104385780 | 2025-01-19T06:58:05.074566

ceph v2

57622 / tcp

539065883 | 2025-01-19T12:31:14.973704

57822 / tcp

-2096652808 | 2025-01-19T03:47:36.124144

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

58022 / tcp

-971970408 | 2025-01-19T05:06:29.330264

58378 / tcp

165188539 | 2025-01-21T03:24:32.718467

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

58522 / tcp

2087396567 | 2025-01-18T12:22:22.173044

kjnkjabhbanc283ubcsbhdc72

58622 / tcp

-1476017887 | 2025-01-16T17:28:01.553550

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

58922 / tcp

171352214 | 2025-01-18T13:07:09.808266

-ERR client ip is not in whitelist

59122 / tcp

-1036370807 | 2025-01-18T06:44:47.631523

JDWP-Handshake

59622 / tcp

1996932384 | 2025-01-17T17:41:57.640106

"raop" nonce

60000 / tcp

-1839934832 | 2025-01-22T19:32:45.218876

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

60129 / tcp

-971970408 | 2025-01-30T05:57:18.681083

61613 / tcp

-1399940268 | 2025-01-25T20:55:35.123875

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

61616 / tcp

2087396567 | 2025-02-05T14:26:57.756423

kjnkjabhbanc283ubcsbhdc72

61617 / tcp

-1399940268 | 2025-01-17T08:42:33.167385

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

62078 / tcp

-1113435755 | 2025-01-26T07:15:15.893133

/1.1 404 Not Found
Content Length: 0

62237 / tcp

819727972 | 2025-01-16T09:33:27.981310

SSH-2.0-OpenSSH_7.4

62443 / tcp

-1399940268 | 2025-01-31T11:55:51.775719

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

63045 / tcp

-454087041 | 2025-01-23T16:31:10.902677

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

63210 / tcp

1231376952 | 2025-01-13T12:01:05.627999

63260 / tcp

-146605374 | 2025-01-14T11:54:19.540883

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

65000 / tcp

464630599 | 2025-01-18T05:15:38.999660

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 657ca37e_fzh120_18651-14165

106.14.207.159

Last Seen: 2025-02-06

Tags:

GeneralInformation

OpenPorts

11 / tcp 988099889 | 2025-01-14T15:32:41.879670

13 / tcp -1729629024 | 2025-02-03T15:24:44.558535

15 / tcp -971970408 | 2025-02-01T11:19:39.324686

19 / tcp 829384519 | 2025-01-12T18:34:20.982675

23 / tcp -23362551 | 2025-01-10T08:07:19.802941

25 / tcp -1399940268 | 2025-01-27T01:20:01.248800

37 / tcp 306859053 | 2025-01-25T05:55:41.349917

38 / tcp 119860953 | 2025-01-19T23:16:34.512602

43 / tcp 671605376 | 2025-02-01T16:01:39.844522

49 / tcp 1160472910 | 2025-02-04T16:39:36.387960

53 / tcp 1308081026 | 2025-01-23T12:38:29.120126

70 / tcp 857710896 | 2025-01-17T08:25:09.515605

79 / tcp 268196945 | 2025-01-09T12:12:13.676764

80 / tcp -2118655245 | 2025-01-13T10:31:14.700850

Hashes

91 / tcp -2046514463 | 2025-01-30T08:42:35.449617

102 / tcp -339084706 | 2025-02-01T23:47:36.781622

104 / tcp -1230049476 | 2025-01-10T14:48:33.413952

106 / tcp 709622286 | 2025-01-28T00:36:53.495283

110 / tcp -2096652808 | 2025-01-23T21:49:10.265949

111 / tcp 819727972 | 2025-01-14T10:56:06.922638

113 / tcp 1921398876 | 2025-02-05T14:41:35.413375

119 / tcp -2107996212 | 2025-02-03T20:32:33.511634

135 / tcp -646274631 | 2025-01-26T03:04:40.461789

143 / tcp -1939513550 | 2025-01-31T10:44:07.873014

179 / tcp -399606100 | 2025-01-16T16:54:10.042605

189 / tcp -992671574 | 2025-02-05T02:41:20.812103

192 / tcp -1399940268 | 2025-01-09T10:05:10.579833

199 / tcp 1958349741 | 2025-02-04T03:52:55.347821

221 / tcp 1911457608 | 2025-02-03T21:46:53.428240

263 / tcp 205347087 | 2025-02-04T18:28:50.777304

264 / tcp -1932800090 | 2025-01-26T08:11:57.992984

311 / tcp -1547976805 | 2025-01-18T00:10:42.942777

389 / tcp -1743283776 | 2025-02-03T22:30:42.771732

400 / tcp -2089734047 | 2025-02-06T05:48:43.186628

427 / tcp 1327409218 | 2025-01-28T10:50:20.418174

444 / tcp 1817928504 | 2025-01-29T20:31:14.498178

465 / tcp 897328069 | 2025-01-24T10:37:54.909766

485 / tcp -903067560 | 2025-01-28T16:18:22.021561

488 / tcp -1399940268 | 2025-01-19T03:55:14.297306

491 / tcp -1888448627 | 2025-01-10T04:04:52.307002

502 / tcp -1626979812 | 2025-01-29T07:24:18.776112

503 / tcp 819727972 | 2025-01-22T10:34:30.617024

513 / tcp 321971019 | 2025-01-09T14:07:56.273371

515 / tcp 819727972 | 2025-01-25T18:26:20.249455

541 / tcp -1299118573 | 2025-01-30T19:27:36.430560

548 / tcp 444328471 | 2025-01-29T06:04:57.793547

700 / tcp -2021756999 | 2025-01-13T04:50:30.059806

743 / tcp -1996280214 | 2025-02-05T02:19:08.854150

771 / tcp 1767345577 | 2025-01-22T11:50:27.459303

782 / tcp -801484042 | 2025-01-17T09:18:18.047170

789 / tcp 1134517380 | 2025-01-24T17:25:01.502527

830 / tcp 103159425 | 2025-01-27T03:10:03.548513

873 / tcp -976882525 | 2025-01-13T22:24:59.114292

887 / tcp -1888448627 | 2025-01-23T21:31:22.628336

902 / tcp 1956828827 | 2025-01-30T07:13:16.820506

943 / tcp -303199180 | 2025-02-01T01:27:01.879285

992 / tcp -936692830 | 2025-02-01T23:12:20.678452

993 / tcp 709622286 | 2025-02-03T00:01:58.802288

995 / tcp -1489591880 | 2025-02-01T17:23:03.898066

998 / tcp 398077695 | 2025-01-21T16:50:20.981402

1023 / tcp 819727972 | 2025-01-28T17:52:57.684336

1025 / tcp -1399940268 | 2025-01-26T15:39:00.587165

1080 / tcp 1362344524 | 2025-01-30T23:40:39.174100

1099 / tcp 205347087 | 2025-01-18T19:50:02.397618

1153 / tcp 307999478 | 2025-01-27T07:13:57.341570

1177 / tcp -1231966337 | 2025-02-03T07:32:25.674624

1188 / tcp 321971019 | 2025-01-12T23:11:44.982413

1200 / tcp 1690634669 | 2025-02-04T20:41:05.541823

1207 / tcp -2089734047 | 2025-01-19T18:19:48.194005

1292 / tcp 2103111368 | 2025-01-31T08:11:22.802335

1337 / tcp -971970408 | 2025-01-25T08:34:56.561306

1343 / tcp -903067560 | 2025-01-16T18:45:33.799801

1433 / tcp -182670276 | 2025-01-20T06:16:24.225829

1443 / tcp -1715152554 | 2025-02-04T06:36:46.712350

11 / tcp

988099889 | 2025-01-14T15:32:41.879670

13 / tcp

-1729629024 | 2025-02-03T15:24:44.558535

15 / tcp

-971970408 | 2025-02-01T11:19:39.324686

19 / tcp

829384519 | 2025-01-12T18:34:20.982675

23 / tcp

-23362551 | 2025-01-10T08:07:19.802941

25 / tcp

-1399940268 | 2025-01-27T01:20:01.248800

37 / tcp

306859053 | 2025-01-25T05:55:41.349917

38 / tcp

119860953 | 2025-01-19T23:16:34.512602

43 / tcp

671605376 | 2025-02-01T16:01:39.844522

49 / tcp

1160472910 | 2025-02-04T16:39:36.387960

53 / tcp

1308081026 | 2025-01-23T12:38:29.120126

70 / tcp

857710896 | 2025-01-17T08:25:09.515605

79 / tcp

268196945 | 2025-01-09T12:12:13.676764

80 / tcp

-2118655245 | 2025-01-13T10:31:14.700850

91 / tcp

-2046514463 | 2025-01-30T08:42:35.449617

102 / tcp

-339084706 | 2025-02-01T23:47:36.781622

104 / tcp

-1230049476 | 2025-01-10T14:48:33.413952

106 / tcp

709622286 | 2025-01-28T00:36:53.495283

110 / tcp

-2096652808 | 2025-01-23T21:49:10.265949

111 / tcp

819727972 | 2025-01-14T10:56:06.922638

113 / tcp

1921398876 | 2025-02-05T14:41:35.413375

119 / tcp

-2107996212 | 2025-02-03T20:32:33.511634

135 / tcp

-646274631 | 2025-01-26T03:04:40.461789

143 / tcp

-1939513550 | 2025-01-31T10:44:07.873014

179 / tcp

-399606100 | 2025-01-16T16:54:10.042605

189 / tcp

-992671574 | 2025-02-05T02:41:20.812103

192 / tcp

-1399940268 | 2025-01-09T10:05:10.579833

199 / tcp

1958349741 | 2025-02-04T03:52:55.347821

221 / tcp

1911457608 | 2025-02-03T21:46:53.428240

263 / tcp

205347087 | 2025-02-04T18:28:50.777304

264 / tcp

-1932800090 | 2025-01-26T08:11:57.992984

311 / tcp

-1547976805 | 2025-01-18T00:10:42.942777

389 / tcp

-1743283776 | 2025-02-03T22:30:42.771732

400 / tcp

-2089734047 | 2025-02-06T05:48:43.186628

427 / tcp

1327409218 | 2025-01-28T10:50:20.418174

444 / tcp

1817928504 | 2025-01-29T20:31:14.498178

465 / tcp

897328069 | 2025-01-24T10:37:54.909766

485 / tcp

-903067560 | 2025-01-28T16:18:22.021561

488 / tcp

-1399940268 | 2025-01-19T03:55:14.297306

491 / tcp

-1888448627 | 2025-01-10T04:04:52.307002

502 / tcp

-1626979812 | 2025-01-29T07:24:18.776112

503 / tcp

819727972 | 2025-01-22T10:34:30.617024

513 / tcp

321971019 | 2025-01-09T14:07:56.273371

515 / tcp

819727972 | 2025-01-25T18:26:20.249455

541 / tcp

-1299118573 | 2025-01-30T19:27:36.430560

548 / tcp

444328471 | 2025-01-29T06:04:57.793547

700 / tcp

-2021756999 | 2025-01-13T04:50:30.059806

743 / tcp

-1996280214 | 2025-02-05T02:19:08.854150

771 / tcp

1767345577 | 2025-01-22T11:50:27.459303

782 / tcp

-801484042 | 2025-01-17T09:18:18.047170

789 / tcp

1134517380 | 2025-01-24T17:25:01.502527

830 / tcp

103159425 | 2025-01-27T03:10:03.548513

873 / tcp

-976882525 | 2025-01-13T22:24:59.114292

887 / tcp

-1888448627 | 2025-01-23T21:31:22.628336

902 / tcp

1956828827 | 2025-01-30T07:13:16.820506

943 / tcp

-303199180 | 2025-02-01T01:27:01.879285

992 / tcp

-936692830 | 2025-02-01T23:12:20.678452

993 / tcp

709622286 | 2025-02-03T00:01:58.802288

995 / tcp

-1489591880 | 2025-02-01T17:23:03.898066

998 / tcp

398077695 | 2025-01-21T16:50:20.981402

1023 / tcp

819727972 | 2025-01-28T17:52:57.684336

1025 / tcp

-1399940268 | 2025-01-26T15:39:00.587165

1080 / tcp

1362344524 | 2025-01-30T23:40:39.174100

1099 / tcp

205347087 | 2025-01-18T19:50:02.397618

1153 / tcp

307999478 | 2025-01-27T07:13:57.341570

1177 / tcp

-1231966337 | 2025-02-03T07:32:25.674624

1188 / tcp

321971019 | 2025-01-12T23:11:44.982413

1200 / tcp

1690634669 | 2025-02-04T20:41:05.541823

1207 / tcp

-2089734047 | 2025-01-19T18:19:48.194005

1292 / tcp

2103111368 | 2025-01-31T08:11:22.802335

1337 / tcp

-971970408 | 2025-01-25T08:34:56.561306

1343 / tcp

-903067560 | 2025-01-16T18:45:33.799801

1433 / tcp

-182670276 | 2025-01-20T06:16:24.225829

1443 / tcp

-1715152554 | 2025-02-04T06:36:46.712350

1456 / tcp

921225407 | 2025-02-06T14:37:38.654012

1515 / tcp

-971970408 | 2025-01-17T10:09:26.978844

1588 / tcp

-904840257 | 2025-02-01T17:08:32.573407

1599 / tcp

-1810987450 | 2025-02-01T20:38:00.600159

1604 / tcp

1544300041 | 2025-01-14T10:46:44.266228

1723 / tcp

1103582599 | 2025-01-31T07:14:01.034895