GeneralInformation

Country	China
City	Shanghai
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 17 19 21 22 25 26 37 49 51 53 70 79 100 102 104 110 111 113 119 121 135 143 175 179 195 221 264 427 443 444 446 450 487 503 513 515 548 554 587 636 666 700 789 805 809 873 992 993 995 999 1023 1025 1080 1099 1153 1167 1177 1198 1207 1234 1235 1293 1337 1365 1414 1433 1443 1447 1455 1459 1494 1599 1604 1650 1660 1723 1800 1801 1883 1911 1926 1962 1990 2000 2001 2002 2003 2008 2016 2020 2050 2057 2061 2063 2069 2072 2083 2087 2095 2111 2121 2154 2181 2210 2211 2222 2259 2345 2376 2404 2435 2455 2560 2562 2567 2602 2628 2761 2762 2850 3001 3010 3012 3016 3049 3050 3060 3066 3068 3072 3076 3089 3098 3106 3110 3126 3129 3143 3144 3154 3155 3161 3168 3175 3176 3177 3178 3185 3193 3260 3268 3269 3270 3299 3301 3306 3310 3311 3337 3365 3388 3389 3401 3443 3498 3540 3549 3553 3555 3559 3562 3590 3780 3790 3793 3794 3922 4000 4022 4023 4063 4064 4100 4120 4150 4157 4242 4282 4300 4343 4369 4431 4440 4444 4451 4499 4500 4502 4506 4510 4524 4602 4700 4840 4899 4911 4949 5001 5006 5007 5010 5025 5089 5119 5123 5130 5172 5201 5222 5225 5229 5232 5241 5261 5267 5269 5273 5276 5277 5432 5435 5439 5456 5552 5555 5598 5721 5858 5905 5909 5915 5919 5938 5984 5986 5989 5991 5995 6000 6001 6002 6003 6102 6348 6352 6363 6440 6550 6565 6600 6603 6653 6661 6666 6697 6755 6779 7001 7002 7013 7050 7078 7083 7084 7415 7434 7473 7493 7537 7601 7603 7634 7799 7946 8006 8009 8022 8023 8027 8042 8055 8057 8063 8081 8087 8092 8095 8099 8102 8126 8139 8149 8151 8163 8166 8172 8182 8198 8200 8222 8291 8315 8318 8333 8420 8464 8475 8481 8500 8513 8533 8545 8550 8551 8554 8567 8573 8575 8581 8595 8597 8622 8649 8666 8702 8705 8724 8728 8745 8771 8779 8808 8814 8815 8821 8834 8836 8846 8862 8865 8867 8880 8883 8889 8902 8910 8991 8993 9000 9001 9002 9007 9014 9015 9025 9027 9042 9051 9062 9065 9067 9078 9091 9092 9095 9098 9100 9106 9108 9109 9115 9125 9137 9140 9146 9151 9156 9160 9167 9181 9184 9187 9188 9196 9206 9208 9210 9215 9217 9226 9242 9243 9244 9253 9256 9289 9291 9303 9304 9306 9311 9333 9398 9418 9443 9456 9458 9529 9530 9600 9633 9658 9682 9696 9765 9804 9876 9885 9898 9943 9992 9998 9999 10001 10003 10012 10027 10028 10031 10043 10045 10052 10283 10443 10909 10911 11084 11112 11288 11401 11443 11688 12088 12101 12108 12116 12132 12141 12152 12159 12169 12172 12184 12191 12194 12195 12213 12229 12236 12238 12265 12266 12291 12311 12315 12323 12331 12332 12345 12346 12350 12352 12364 12369 12379 12398 12404 12408 12409 12415 12423 12436 12439 12441 12445 12446 12448 12458 12468 12479 12482 12490 12491 12511 12533 12534 12539 12548 12550 12584 12589 12902 14130 14147 14344 14403 14825 14875 14880 15001 15038 16029 16032 16038 16041 16059 16077 16092 16094 16099 16104 16402 16993 17000 17010 17102 18018 18023 18029 18038 18044 18050 18058 18064 18070 18073 18077 18079 18081 18085 18087 18094 18095 18096 18098 18103 18182 18239 18245 18802 18888 19000 19016 19017 19100 19998 19999 20000 20185 20201 20202 20256 20547 20800 20880 20894 21025 21230 21231 21251 21257 21258 21269 21277 21282 21291 21299 21305 21311 21317 21323 21379 21443 22103 22206 22609 23023 24084 24181 25001 25565 27015 27017 28015 29798 30001 30002 30003 30008 30009 30010 30015 30110 30501 31337 31380 32444 32522 32764 32922 33022 33060 33222 33322 33422 33522 33722 34122 34322 34422 34622 34922 35000 35101 35222 35422 35522 35622 35822 35922 36022 36122 36322 36505 36822 36922 37022 37222 37422 37522 37622 37722 37777 37822 38222 38422 38522 38722 38822 39222 39322 39522 39622 39722 39822 40000 40222 40322 40422 40522 40622 40722 40822 40894 40922 41122 41222 41322 41422 41522 41622 41722 41822 41922 42022 42122 42222 42322 42422 42522 42622 42722 42922 43080 43122 43222 43422 43522 43722 43922 44022 44222 44306 44308 44336 44365 44410 44422 44622 44722 44818 45005 45111 45333 45422 45622 45677 45786 45822 45922 46000 46122 46222 46422 46622 46722 46822 46922 47122 47222 47522 47822 47984 47990 48001 48019 48022 48222 48422 48522 48722 48922 49022 49080 49122 49210 49222 49322 49422 49501 49592 49622 49722 50000 50011 50022 50100 50101 50113 50122 50222 50322 50580 50622 50722 51003 51004 51022 51122 51222 51235 51294 51322 51422 51522 51622 52122 52222 52230 52322 52422 52622 52722 53122 53422 53522 53822 53922 54122 54138 54222 54522 54722 55000 55322 55443 55475 55490 55553 55554 56322 56522 57779 57782 57785 58443 59622 60023 60099 60129 61613 61616 62078 63210 63256 63260

11 / tcp

1286504516 | 2025-02-14T05:51:06.325099

CP2E Control Console
Connected to Host: gZI

13 / tcp

1346417108 | 2025-02-20T01:31:10.044860

Mon Jan 22 11:26:37 2024

15 / tcp

117101543 | 2025-02-23T02:12:26.716962

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

17 / tcp

1767345577 | 2025-02-06T08:29:17.500611

Hello, this is Quagga (version 0T).
Copyright 1996-200

19 / tcp

676476721 | 2025-02-09T14:17:25.947855

ELM Enterprise Manager _l
Copyright © 18668511-928641920 TNT Software, Inc.

21 / tcp

2116898107 | 2025-02-21T06:36:39.458248

220 (vsFTPd 3.0.2)

22 / tcp

870256069 | 2025-02-11T03:46:31.421833

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3\r\n

25 / tcp

1632932802 | 2025-02-22T18:19:46.626752

26 / tcp

669849225 | 2025-02-07T01:19:45.735837

SSH-98.60-SysaxSSH_81885..42\r\n

37 / tcp

-1336879475 | 2025-02-11T22:51:01.067910

HTTP/1.1 302 Found
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
X-Frame-Options: SAMEORIGIN
Server: httpd
Location: /login/login.cgi
Content-Type: text/html; charset=%s
Cache-Control: max-age=1
Expires: Mon, 22 Jan 2024 01:15:19 GMT
Connection: close

49 / tcp

-1056270173 | 2025-01-26T01:22:01.741696

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

51 / tcp

-1399940268 | 2025-01-30T10:33:59.135586

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

53 / tcp

-626196604 | 2025-02-06T21:27:17.871868

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00\xca\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x00\x83\x00\x04\xac٠n
\x00\x06\x81\x85\x00\x01\x00\x00\x00\x00\x00

70 / tcp

-1763883228 | 2025-02-21T14:26:46.309568

HTTP/1.1 400 Bad Request
Server: vista/0.7
Content-Type: text/html
Connection: close

79 / tcp

-746345752 | 2025-02-20T06:19:06.623382

¥A\x01,\x02L\x08Connectx\x0857222

100 / tcp

-2017887953 | 2025-02-02T17:58:57.347304

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

102 / tcp

165188539 | 2025-02-09T10:06:03.205308

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

104 / tcp

1332894250 | 2025-02-19T22:45:08.613154

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

110 / tcp

-122096153 | 2025-01-28T06:38:19.348019

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

111 / tcp

-801484042 | 2025-02-18T07:48:24.190771

ERR 27

113 / tcp

60948681 | 2025-02-21T11:32:52.356565

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).

119 / tcp

141730637 | 2025-02-10T11:08:18.877477

HTTP/1.0 200 OK
Server: Proxy

121 / tcp

740837454 | 2025-02-15T07:16:31.588933

SSH-2.0-OpenSSH_5.3

135 / tcp

1302177452 | 2025-02-09T15:12:41.476979

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: Lou\n IP2: 192.168.5.66\n IP3: 240e:381:1b0a:900:40eb:cce6:2dc1:4045\n IP4: 240e:381:1b0a:900:504f:3a1f:a682:9ab5\n IP5: 240e:381:1b0a:900::2e6\n\nNTLMSSP:\nTarget_Name: LOU\nProduct_Version: 10.0.22621 Ntlm 15\nOS: Windows 11, Version 22H2\nNetBIOS_Domain_Name: LOU\nNetBIOS_Computer_Name: LOU\nDNS_Domain_Name: Lou\nDNS_Computer_Name: Lou\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 04:06:53 +0000 UTC\n\nDCE

143 / tcp

376198496 | 2025-02-18T15:05:56.615707

* OK Coremail System IMap Server Ready(mispb-151a50c7-932b-471d-b699-900151c4d82d-foreseahealth.com[c1988e81907d5583d41947167f416ce9])\r\n

175 / tcp

-1327660293 | 2025-02-18T22:18:19.424923

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

179 / tcp

-399606100 | 2025-02-16T14:13:55.240234

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

195 / tcp

-893477759 | 2025-02-22T20:45:18.989082

!versionbind7 t{RPowerDNS Recursor 410

221 / tcp

-358801646 | 2025-01-29T10:35:14.395957

SSH-2.0-OpenSSH_6.6.1

264 / tcp

-1932800090 | 2025-02-22T21:54:48.243186

HTTP

427 / tcp

1530390632 | 2025-01-26T12:43:35.753053

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://127.0.0.1\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:cdserver\nservice:fdserver\nservice:hdserver\nservice:adviser\nservice:lighttpd\nB://l:87/x\n\nResponse of service:ipmi SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:ipmi://(none):623\n  Lifetime: 65535\n  URL: service:ipmi://IEI9CC2C4135A27:623\n\n\nResponse of service:ipmi Attr

443 / tcp

-1715152554 | 2025-02-02T00:33:53.537255

Hashes

hash

71970475

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 02 Feb 2025 00:33:53 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.14.219.218:443/

444 / tcp

2087396567 | 2025-02-17T10:13:04.750141

kjnkjabhbanc283ubcsbhdc72

446 / tcp

-1699556818 | 2025-02-07T06:28:48.892540

\x01remshd: Kerberos Authentication not enabled.\n

450 / tcp

-1399940268 | 2025-02-11T05:10:10.294981

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

487 / tcp

1308377066 | 2025-02-02T10:42:46.524921

ncacn_http/1.0

503 / tcp

-1327660293 | 2025-02-11T18:37:08.005295

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

513 / tcp

-1888448627 | 2025-02-01T07:52:38.182892

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

515 / tcp

-746114901 | 2025-01-31T07:57:58.842037

[KpU

548 / tcp

444328471 | 2025-02-15T23:17:03.415904

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: SynologyRouter\nMachine Type: \rNetatalk3.1.1\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

554 / tcp

-927382641 | 2025-02-07T11:21:58.225011

RTSP/1.0 200 OK
CSeq: 1
Public: OPTIONS, DESCRIBE, PLAY, PAUSE, SETUP, TEARDOWN, SET_PARAMETER, GET_PARAMETER

587 / tcp

745343730 | 2025-02-11T16:05:33.711968

220 smtp.qq.com Esmtp QQ Mail Server

636 / tcp

1732481781 | 2025-02-22T01:00:44.606459

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 8-38284903-0 0NNN RT(1705909933705 166) q(-1 -1 -1 -1) r(0 -1) b1

666 / tcp

1300162323 | 2025-02-16T17:44:51.213905

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

700 / tcp

-2074356892 | 2025-02-20T18:23:13.971957

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Connection: close
Server: Nginx
Expires: 0
Pragma: no-cache
Cache-Control: no-cache
Location: https://portal.ikuai8-wifi.com/templates/default/index.html?timestamp=1705534875&router_ver=3.2.7&firmware=IK-RouterOS&template=default&gwid=dd51dff587fb29512f5e0c65319cba25&user_ip=106%2E75%2E95%2E40

789 / tcp

455076604 | 2025-02-01T10:39:31.943023

!\x07version\x04bind7 t{RPowerDNS Recursor 410

805 / tcp

321971019 | 2025-01-26T15:34:19.863322

-ERR client ip is not in whitelist\r

809 / tcp

-1730858130 | 2025-02-01T08:21:40.618535

RFB 003.008
VNC:
  Protocol Version: 3.8

873 / tcp

-1598265216 | 2025-02-20T04:32:29.450026

@RSYNCD: 31.0

992 / tcp

1814656027 | 2025-02-17T21:07:18.849357

HTTP/1.1 403 Forbidden
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
Keep-Alive: timeout=15; max=19

993 / tcp

971933601 | 2025-02-18T16:51:54.001254

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

995 / tcp

1685649979 | 2025-02-22T20:37:21.253652

+OK Dovecot ready.\r\n

999 / tcp

-1216336508 | 2025-02-05T16:26:25.308742

HTTP/1.1 200 OK
Content-Type: text/xml
X-Transcend-Version: 1

1023 / tcp

291723434 | 2025-02-19T00:16:22.187359


Lantronix MSS100 Version V118/523(045538937)

Type HELP at the 'Local_61349> ' prompt for assistance.



Username>

1025 / tcp

-358801646 | 2025-02-09T22:49:58.832415

SSH-2.0-OpenSSH_6.6.1

1080 / tcp

1362344524 | 2025-02-01T08:00:11.215189

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1099 / tcp

-375604792 | 2025-02-15T03:22:06.163219

220 Microsoft FTP Service

1153 / tcp

-1248408558 | 2025-02-21T20:22:16.404668

220 MikroTik FTP server (MikroTik 6.44.3) ready

1167 / tcp

1763259671 | 2025-02-11T20:09:23.892226

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

1177 / tcp

-10442315 | 2025-02-16T08:33:47.810168

ª

1198 / tcp

913379549 | 2025-02-10T13:01:31.071733

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: tydcdn

1207 / tcp

1308377066 | 2025-02-14T00:04:12.746792

ncacn_http/1.0

1234 / tcp

1911457608 | 2025-01-26T21:16:54.354270

\x00[\x00\x00\x00\x00\x00\x00

1235 / tcp

-1996280214 | 2025-02-14T19:27:06.217674

\x06\x04\x05@

1293 / tcp

-1399940268 | 2025-02-02T01:00:28.614202

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1337 / tcp

-971970408 | 2025-02-13T05:06:44.273397

1365 / tcp

-1888448627 | 2025-02-04T10:03:19.013655

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1414 / tcp

-1399940268 | 2025-02-23T00:45:04.648965

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1433 / tcp

-1279739995 | 2025-02-11T03:18:34.513091

MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XINKE20190306\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XINKE20190306\nNetBIOS_Computer_Name: XINKE20190306\nDNS_Domain_Name: xinke20190306\nDNS_Computer_Name: xinke20190306\nSystem_Time: 2024-01-22 04:04:46 +0000 UTC\n\n

1443 / tcp

-1715152554 | 2025-01-26T05:31:28.417576

Hashes

hash

-907417654

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 26 Jan 2025 05:31:28 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.14.219.218:443/

1447 / tcp

165188539 | 2025-02-11T21:14:15.646532

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1455 / tcp

-42767839 | 2025-02-05T07:59:26.510908

RFB 005.000

VNC:
  Protocol Version: 5.0

1459 / tcp

-1399940268 | 2025-02-04T23:42:29.735134

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1494 / tcp

-829363896 | 2025-02-03T10:24:06.792251

HTTP/1.1 200 OK
Server: Linux/2.x UPnP/1.0 Avtech/1.0
Connection: close
Content-Type: text/html

1599 / tcp

2103111368 | 2025-02-22T01:11:25.542670

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

1604 / tcp

1126993057 | 2025-02-21T10:00:29.004014

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

1650 / tcp

-1099385124 | 2025-02-13T13:03:59.824208

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

1660 / tcp

945910976 | 2025-02-07T21:36:20.058845

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

1723 / tcp

1103582599 | 2025-02-10T14:05:50.563328

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

1800 / tcp

-1099385124 | 2025-02-06T19:39:07.060818

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

1801 / tcp

1535389866 | 2025-02-04T10:04:42.504190

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2157_PS-LHW-01jjk135_25164-48622

1883 / tcp

819727972 | 2025-02-15T22:27:26.781889

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

1911 / tcp

-1399940268 | 2025-02-01T00:18:04.236716

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1926 / tcp

1353260875 | 2025-02-14T21:07:57.488918

\x00[g\xc2\x95N\x7f\x00\x00

1962 / tcp

-358801646 | 2025-02-10T22:20:44.376444

SSH-2.0-OpenSSH_6.6.1

1990 / tcp

2063598737 | 2025-01-31T11:34:55.301720

/0 0 L\r\n/0 0 HUH\r\n

2000 / tcp

-980525298 | 2025-02-20T17:39:55.319183

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

2001 / tcp

-2089734047 | 2025-01-26T15:43:59.395748

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2002 / tcp

1887224352 | 2025-02-15T14:29:52.637381

2003 / tcp

677934968 | 2025-02-12T14:05:33.575577

lm^)Q

2008 / tcp

1978059005 | 2025-02-14T11:33:34.158954

Sorry, that nickname format is invalid.

2016 / tcp

165188539 | 2025-02-21T16:10:51.784611

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2020 / tcp

-1521733197 | 2025-02-18T23:38:02.271561

HTTP/1.1 302 Found
Server: nginx
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Location: /accounts/login/?next=/
Vary: Accept-Language, Cookie
Content-Language: en

2050 / tcp

-1996280214 | 2025-02-10T11:17:17.762071

\x06\x04\x05@

2057 / tcp

-1399940268 | 2025-02-07T11:57:39.029492

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2061 / tcp

632542934 | 2025-01-25T00:08:55.896443

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2063 / tcp

819727972 | 2025-02-06T18:42:05.259204

SSH-2.0-OpenSSH_7.4

2069 / tcp

-1428621233 | 2025-02-05T16:04:15.969808

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

2072 / tcp

-1730858130 | 2025-01-24T04:12:20.074074

RFB 003.008
VNC:
  Protocol Version: 3.8

2083 / tcp

1741579575 | 2025-01-24T13:09:01.326570

2087 / tcp

2087396567 | 2025-02-12T18:22:29.027598

kjnkjabhbanc283ubcsbhdc72

2095 / tcp

-980525298 | 2025-02-22T09:01:42.244669

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

2111 / tcp

372433470 | 2025-02-05T11:59:38.915305

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

2121 / tcp

141730637 | 2025-02-06T22:47:24.959718

HTTP/1.0 200 OK
Server: Proxy

2154 / tcp

-971970408 | 2025-01-31T18:46:09.792119

2181 / tcp

546151771 | 2025-02-16T09:11:31.426048

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2210 / tcp

1332894250 | 2025-02-04T15:50:56.814607

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

2211 / tcp

-2031152423 | 2025-02-09T04:51:38.763167

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

2222 / tcp

2036221768 | 2025-01-25T08:50:26.141336

SSH-2.0-paramiko_2.4.2\r\n\n

2259 / tcp

1911457608 | 2025-02-16T17:08:18.556861

\x00[\x00\x00\x00\x00\x00\x00

2345 / tcp

-2096652808 | 2025-02-16T21:07:24.236337

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

2376 / tcp

-1453516345 | 2025-02-22T07:48:52.807022

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

2404 / tcp

-1261090339 | 2025-02-15T05:32:04.096589

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

2435 / tcp

1655023012 | 2025-02-10T21:11:52.604337

athinfod: invalid query.\n

2455 / tcp

-297128567 | 2025-02-14T22:27:16.998717

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

2560 / tcp

-1059554316 | 2025-01-26T01:47:04.113754

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

2562 / tcp

504717326 | 2025-01-27T07:22:44.824887

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

2567 / tcp

819727972 | 2025-01-27T00:01:59.997097

SSH-2.0-OpenSSH_7.4

2602 / tcp

575925250 | 2025-02-06T21:11:23.459802

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

2628 / tcp

51259122 | 2025-02-10T17:06:57.956883

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

2761 / tcp

-457235091 | 2025-02-10T12:00:13.748776

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

2762 / tcp

-1730858130 | 2025-02-10T23:00:55.333578

RFB 003.008
VNC:
  Protocol Version: 3.8

2850 / tcp

-1399940268 | 2025-02-08T21:34:51.822322

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3001 / tcp

2063598737 | 2025-02-04T05:23:22.734458

/0 0 L\r\n/0 0 HUH\r\n

3010 / tcp

-1399940268 | 2025-02-17T11:37:55.976460

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3012 / tcp

-2089734047 | 2025-02-03T02:29:17.095065

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3016 / tcp

-358801646 | 2025-02-02T23:14:04.801952

SSH-2.0-OpenSSH_6.6.1

3049 / tcp

1911457608 | 2025-02-19T15:36:44.964957

\x00[\x00\x00\x00\x00\x00\x00

3050 / tcp

-1399940268 | 2025-02-15T08:01:54.991299

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3060 / tcp

-1399940268 | 2025-02-05T23:47:26.674780

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3066 / tcp

-1045760528 | 2025-02-19T22:21:32.377575

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

3068 / tcp

165188539 | 2025-02-15T20:53:00.966276

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3072 / tcp

-1907909544 | 2025-02-09T06:11:44.293696

\r\nHello, this is Quagga (version 0T).\r\nCopyright 1996-200

3076 / tcp

-2089734047 | 2025-02-01T20:47:50.484419

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3089 / tcp

632542934 | 2025-01-31T19:26:52.981925

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

3098 / tcp

-441419608 | 2025-02-15T05:57:12.946711

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

3106 / tcp

819727972 | 2025-01-26T03:09:28.246110

SSH-2.0-OpenSSH_7.4

3110 / tcp

-1839934832 | 2025-01-30T13:08:50.105076

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3126 / tcp

1830697416 | 2025-02-15T02:06:06.323865

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

3129 / tcp

1492413928 | 2025-02-01T00:17:13.470223

SSH-2.0-OpenSSH_7.5

3143 / tcp

-1399940268 | 2025-02-14T12:34:08.617807

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3144 / tcp

1911457608 | 2025-02-03T00:18:56.325608

\x00[\x00\x00\x00\x00\x00\x00

3154 / tcp

669849225 | 2025-01-30T23:54:22.308706

SSH-98.60-SysaxSSH_81885..42\r\n

3155 / tcp

-1399940268 | 2025-02-17T13:53:28.390297

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3161 / tcp

-441419608 | 2025-02-15T21:31:27.413729

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

3168 / tcp

-1227409554 | 2025-02-04T06:47:56.975555

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3175 / tcp

-1779118422 | 2025-02-16T02:47:29.504121

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

3176 / tcp

321971019 | 2025-01-28T17:23:24.972994

-ERR client ip is not in whitelist\r

3177 / tcp

-1899074860 | 2025-01-30T16:12:34.544669

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

3178 / tcp

-1713437100 | 2025-02-05T19:48:59.968589

\xc3\xbf\xc3\xbb\x01\r\nWelcome to NetLinx v94 Copyright AMX Corp. 34395-49007\r\n>

3185 / tcp

-1327660293 | 2025-02-14T12:04:23.212040

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3193 / tcp

1308377066 | 2025-02-22T01:10:13.373516

ncacn_http/1.0

3260 / tcp

-1341662640 | 2025-01-29T07:04:40.282615

HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3268 / tcp

1727372229 | 2025-02-19T16:34:41.736218

HTTP/1.1 302 
Location: http://116.6.76.114:3268/index.html

3269 / tcp

-2089734047 | 2025-02-04T01:18:44.637403

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3270 / tcp

307999478 | 2025-02-05T14:36:56.700955

unknown command \r\nunknown command \r\n

3299 / tcp

1842524259 | 2025-02-12T12:55:36.824261

3301 / tcp

597764502 | 2025-02-08T16:01:47.954376

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

3306 / tcp

292351399 | 2025-01-26T15:30:41.965922

Mysql Version: 5.5.24-log \r\nN\\x00\\x00\\x00\n5.5.24-log\\x00\\x87\\x00\\x00\\x00uF>E}hpx\\x00\\xff\\xf7!\\x02\\x00\\x0f\\x80\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00-rx$GyO\\aT]Z\\x00mysql_native_password\\x00

3310 / tcp

-1399940268 | 2025-02-12T04:59:48.722976

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3311 / tcp

321971019 | 2025-02-18T20:38:00.404735

-ERR client ip is not in whitelist\r

3337 / tcp

-2107996212 | 2025-02-05T21:01:10.163938

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

3365 / tcp

-1013082686 | 2025-02-03T08:27:21.023534

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

3388 / tcp

-2107996212 | 2025-02-07T22:32:08.034878

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

3389 / tcp

521595461 | 2025-02-15T23:27:40.353643

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x03\\x00\\x08\\x00\\x02\\x00\\x00\\x00\n\nGuess_OS:Windows Server 2003 or 2008\nFlag: PROTOCOL_HYBRID\n

3401 / tcp

1911457608 | 2025-01-29T13:58:32.683034

\x00[\x00\x00\x00\x00\x00\x00

3443 / tcp

1911457608 | 2025-02-10T18:46:28.328043

\x00[\x00\x00\x00\x00\x00\x00

3498 / tcp

-1399940268 | 2025-02-16T21:05:05.450093

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3540 / tcp

165188539 | 2025-02-07T17:07:52.609863

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3549 / tcp

1911457608 | 2025-02-21T00:39:26.941196

\x00[\x00\x00\x00\x00\x00\x00

3553 / tcp

-1099385124 | 2025-02-02T01:37:53.421248

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

3555 / tcp

380146262 | 2025-02-22T05:32:10.315914

@RSYNCD: 30.0

3559 / tcp

-1428621233 | 2025-01-29T01:56:00.416521

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

3562 / tcp

-1399940268 | 2025-01-29T22:19:17.956565

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3590 / tcp

-1746074029 | 2025-01-26T16:43:05.811054

101 imqbroker =unV\r\n

3780 / tcp

-971970408 | 2025-02-08T08:39:30.255429

3790 / tcp

819727972 | 2025-01-28T01:05:39.400191

SSH-2.0-OpenSSH_7.4

3793 / tcp

1911457608 | 2025-02-13T10:05:15.670485

\x00[\x00\x00\x00\x00\x00\x00

3794 / tcp

1332894250 | 2025-01-31T00:32:24.780219

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

3922 / tcp

-1327660293 | 2025-02-03T08:10:55.822358

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

4000 / tcp

-1960639992 | 2025-02-20T19:02:36.823585

HTTP/1.1 401 Unauthorized

4022 / tcp

-1899074860 | 2025-02-06T00:35:02.474735

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

4023 / tcp

-1399940268 | 2025-02-23T02:21:33.486818

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4063 / tcp

1542849631 | 2025-02-14T23:39:39.307446

* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at

4064 / tcp

1308377066 | 2025-02-06T16:49:38.746084

ncacn_http/1.0

4100 / tcp

1911457608 | 2025-02-20T20:59:31.560483

\x00[\x00\x00\x00\x00\x00\x00

4120 / tcp

1911457608 | 2025-01-28T11:01:28.783776

\x00[\x00\x00\x00\x00\x00\x00

4150 / tcp

2063598737 | 2025-02-15T13:57:46.603817

/0 0 L\r\n/0 0 HUH\r\n

4157 / tcp

-971970408 | 2025-01-26T09:54:40.680840

4242 / tcp

-1914158197 | 2025-02-18T18:46:23.921622

HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

4282 / tcp

-971970408 | 2025-02-18T18:06:12.912055

4300 / tcp

-1329831334 | 2025-02-09T14:14:52.265555

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

4343 / tcp

304069997 | 2025-02-18T19:06:54.629856

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae23c0_hyd56_32143-35382

4369 / tcp

2103111368 | 2025-02-10T14:53:07.801273

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

4431 / tcp

1911457608 | 2025-01-31T02:19:31.423544

\x00[\x00\x00\x00\x00\x00\x00

4440 / tcp

455076604 | 2025-01-29T14:23:42.052428

!\x07version\x04bind7 t{RPowerDNS Recursor 410

4444 / tcp

819727972 | 2025-02-02T23:45:14.132232

SSH-2.0-OpenSSH_7.4

4451 / tcp

-1839934832 | 2025-01-29T19:26:50.855989

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

4499 / tcp

-2089734047 | 2025-01-26T21:03:50.737126

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4500 / tcp

819727972 | 2025-02-22T02:06:58.404848

SSH-2.0-OpenSSH_7.4

4502 / tcp

-1399940268 | 2025-02-21T20:44:42.096983

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4506 / tcp

-971970408 | 2025-02-14T13:05:50.705512

4510 / tcp

1911457608 | 2025-02-10T09:01:50.081020

\x00[\x00\x00\x00\x00\x00\x00

4524 / tcp

-1399940268 | 2025-02-19T03:46:53.767333

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4602 / tcp

-2096652808 | 2025-02-19T23:15:55.028910

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

4700 / tcp

-1399940268 | 2025-02-06T14:36:42.639000

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4840 / tcp

-1399940268 | 2025-02-10T05:58:12.515524

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4899 / tcp

819727972 | 2025-02-08T04:49:58.097722

SSH-2.0-OpenSSH_7.4

4911 / tcp

1189133115 | 2025-02-15T17:08:59.398537

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

4949 / tcp

550048729 | 2025-02-13T23:00:54.496703

ÿÿÿ
0 ...

5001 / tcp

897328069 | 2025-02-13T23:12:20.160507

220 mail.scott000.com ESMTP

5006 / tcp

1842524259 | 2025-02-23T01:52:01.628437

5007 / tcp

1574088840 | 2025-01-27T12:29:16.283274

">Application and Content Networking Software 3.9</a>)\n</BODY><

5010 / tcp

-1399940268 | 2025-02-18T09:19:51.391535

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5025 / tcp

2087396567 | 2025-02-17T20:45:48.735331

kjnkjabhbanc283ubcsbhdc72

5089 / tcp

1911457608 | 2025-02-21T00:59:07.187675

\x00[\x00\x00\x00\x00\x00\x00

5119 / tcp

-1399940268 | 2025-02-13T04:18:59.768607

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5123 / tcp

1911457608 | 2025-02-17T14:04:07.406112

\x00[\x00\x00\x00\x00\x00\x00

5130 / tcp

2063598737 | 2025-01-29T10:50:58.135092

/0 0 L\r\n/0 0 HUH\r\n

5172 / tcp

1960438949 | 2025-02-17T01:19:21.335020

Siemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready
ÿûÿûÿýÿþUsername:

5201 / tcp

819727972 | 2025-02-07T08:20:57.586747

SSH-2.0-OpenSSH_7.4

5222 / tcp

539065883 | 2025-02-01T13:10:19.614309

5225 / tcp

-1249500036 | 2025-02-15T12:14:19.227823

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

5229 / tcp

165188539 | 2025-02-04T18:17:36.508754

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

5232 / tcp

321971019 | 2025-02-09T10:36:42.201651

-ERR client ip is not in whitelist\r

5241 / tcp

921225407 | 2025-01-28T01:14:57.354616

\x00\x00\x00\x04\x00\x00\x00\x00\x00

5261 / tcp

1991883981 | 2025-01-24T13:35:10.443998

B\x00\x00\x00\xc3\xbfn\x04Too many connections

5267 / tcp

-1399940268 | 2025-02-11T05:04:10.499594

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5269 / tcp

-1854630806 | 2025-02-19T09:59:21.250019

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705937491.237-w-waf01tjgt

5273 / tcp

-1399940268 | 2025-01-30T03:42:27.693251

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5276 / tcp

1911457608 | 2025-02-10T13:32:28.253624

\x00[\x00\x00\x00\x00\x00\x00

5277 / tcp

-1399940268 | 2025-02-17T12:29:54.664066

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5432 / tcp

580340387 | 2025-02-06T10:40:31.402049

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

5435 / tcp

-1733106930 | 2025-02-15T07:01:12.558729

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

5439 / tcp

-2096652808 | 2025-02-12T23:34:17.004883

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5456 / tcp

-2096652808 | 2025-02-11T04:54:28.270453

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5552 / tcp

-1986594217 | 2025-02-15T13:03:41.903992

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

5555 / tcp

-138456724 | 2025-02-14T21:12:47.831390

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae29c9_PSshwt5vj35_47920-11883

5598 / tcp

-1428621233 | 2025-02-20T04:44:25.166831

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

5721 / tcp

1996932384 | 2025-02-08T10:54:24.870546

"raop" nonce

5858 / tcp

-653033013 | 2025-01-27T19:27:12.448385

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

5905 / tcp

1911457608 | 2025-02-17T07:33:46.403211

\x00[\x00\x00\x00\x00\x00\x00

5909 / tcp

740837454 | 2025-01-25T23:57:46.775202

SSH-2.0-OpenSSH_5.3

5915 / tcp

-1249500036 | 2025-01-28T03:08:31.174144

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

5919 / tcp

2098371729 | 2025-02-13T13:15:35.801953

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

5938 / tcp

-1795027372 | 2025-02-22T05:38:48.028233

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

5984 / tcp

1999272906 | 2025-02-04T16:29:51.286930

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

2087396567 | 2025-01-26T02:18:24.776657

kjnkjabhbanc283ubcsbhdc72

5989 / tcp

-1899074860 | 2025-02-06T12:48:04.472192

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

5991 / tcp

-2107996212 | 2025-02-22T16:19:43.416154

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

5995 / tcp

-136006866 | 2025-02-19T10:38:42.069685

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

6000 / tcp

50497985 | 2025-01-29T02:00:20.031087

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

6001 / tcp

-2031152423 | 2025-02-04T07:17:30.058340

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

6002 / tcp

819727972 | 2025-02-14T22:54:20.297245

SSH-2.0-OpenSSH_7.4

6003 / tcp

-2089734047 | 2025-02-15T04:30:12.519995

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

6102 / tcp

-1626979812 | 2025-02-22T04:55:58.598353

220 Service ready for new user.

6348 / tcp

-1730858130 | 2025-02-13T11:02:44.118014

RFB 003.008
VNC:
  Protocol Version: 3.8

6352 / tcp

-1399940268 | 2025-01-30T08:40:30.535558

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6363 / tcp

-146605374 | 2025-01-31T22:40:44.387065

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

6440 / tcp

-1839934832 | 2025-02-21T10:42:49.407217

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

6550 / tcp

-904840257 | 2025-01-31T19:49:57.159933

572 Relay not authorized\r\n

6565 / tcp

-367607324 | 2025-02-21T09:44:59.330226

\\x12\\x04\\x03\\x7f\xc3\xbf\xc3\xbf\xc3\xbf\n0\\x04\\x10\\x06 \\x04\\x08...\n

6600 / tcp

1011407350 | 2025-02-01T18:22:10.578832

* OK GroupWise IMAP4rev1 Server Ready\r\n

6603 / tcp

-1399940268 | 2025-02-17T00:04:07.717213

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6653 / tcp

-438503381 | 2025-01-28T05:06:38.042066

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

6661 / tcp

-1839934832 | 2025-02-06T10:10:08.741335

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

6666 / tcp

4935895 | 2025-02-10T21:25:08.101416

HTTP/1.1 400 Bad Request
Server: CloudWAF

6697 / tcp

45131230 | 2025-02-03T23:02:00.815427

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

6755 / tcp

-2031152423 | 2025-01-27T18:43:55.316272

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

6779 / tcp

756886313 | 2025-01-27T11:57:46.001227

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html

7001 / tcp

-829704895 | 2025-02-16T18:42:53.486402

+OK-1035|

7002 / tcp

-1453516345 | 2025-02-23T03:34:15.842582

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

7013 / tcp

-2089734047 | 2025-01-25T20:45:17.171234

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

7050 / tcp

-1839934832 | 2025-02-17T07:41:42.968558

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

7078 / tcp

1210754493 | 2025-02-08T20:54:50.855914

0\x0c\x02\x01\x01a\x07\n\x01\x00\x04\x00\x04\x00

7083 / tcp

-1839934832 | 2025-01-28T07:27:44.694249

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

7084 / tcp

-1399940268 | 2025-02-09T13:34:53.624345

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7415 / tcp

819727972 | 2025-02-19T15:36:52.225389

SSH-2.0-OpenSSH_7.4

7434 / tcp

-2096652808 | 2025-02-17T06:00:04.025659

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

7473 / tcp

-407828767 | 2025-02-08T10:58:20.685887

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

7493 / tcp

-1399940268 | 2025-02-06T08:07:41.971639

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7537 / tcp

707919486 | 2025-02-11T03:45:10.804303

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

7601 / tcp

-1013082686 | 2025-02-06T19:04:39.113736

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

7603 / tcp

632542934 | 2025-01-26T18:12:11.823283

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

7634 / tcp

2087396567 | 2025-02-11T19:15:28.849472

kjnkjabhbanc283ubcsbhdc72

7799 / tcp

819727972 | 2025-02-01T17:47:06.468495

SSH-2.0-OpenSSH_7.4

7946 / tcp

-1013082686 | 2025-02-16T15:25:50.277855

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

8006 / tcp

-1399940268 | 2025-02-15T12:17:41.599683

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8009 / tcp

1767345577 | 2025-02-11T18:51:47.175885

Hello, this is Quagga (version 0T).
Copyright 1996-200

8022 / tcp

819727972 | 2025-01-28T23:33:25.619954

SSH-2.0-OpenSSH_7.4

8023 / tcp

165188539 | 2025-02-21T12:48:58.238312

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8027 / tcp

2103111368 | 2025-02-21T12:36:59.452131

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

8042 / tcp

-734844577 | 2025-02-14T04:16:02.210727

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 657d1c3a_PSfjfzdx2nh100_10014-18094

8055 / tcp

2103111368 | 2025-02-08T03:48:15.530156

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

8057 / tcp

1911457608 | 2025-02-07T10:23:34.281809

\x00[\x00\x00\x00\x00\x00\x00

8063 / tcp

-1839934832 | 2025-02-05T13:00:00.406968

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8081 / tcp

1082732927 | 2025-01-30T20:28:16.141576

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

8087 / tcp

-653033013 | 2025-02-09T20:14:22.606585

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

8092 / tcp

1830697416 | 2025-02-02T00:21:23.542617

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

8095 / tcp

321971019 | 2025-02-10T16:31:44.549593

-ERR client ip is not in whitelist\r

8099 / tcp

1115736665 | 2025-02-16T00:50:40.231304

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-AREACMCC2-CACHE15[8]
X-CCDN-FORBID-CODE: 040001

8102 / tcp

-1888448627 | 2025-02-08T20:26:29.121391

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8126 / tcp

1911457608 | 2025-02-16T10:25:34.703132

\x00[\x00\x00\x00\x00\x00\x00

8139 / tcp

-1032713145 | 2025-02-18T17:10:48.012677

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8149 / tcp

1975288991 | 2025-02-22T22:10:16.768115

OPTI

8151 / tcp

-1399940268 | 2025-01-31T21:51:02.802152

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8163 / tcp

819727972 | 2025-02-22T01:28:27.222393

SSH-2.0-OpenSSH_7.4

8166 / tcp

2103111368 | 2025-02-15T17:53:55.223533

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

8172 / tcp

-2089734047 | 2025-02-16T00:49:24.322437

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8182 / tcp

819727972 | 2025-02-23T03:01:05.328143

SSH-2.0-OpenSSH_7.4

8198 / tcp

1381121983 | 2025-02-03T17:52:21.479325

Notify\r\n

8200 / tcp

1320285193 | 2025-02-21T00:25:03.024422

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

8222 / tcp

-146700117 | 2025-02-07T11:31:24.287805

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae15c3_dianx14_42689-20309

8291 / tcp

1761482307 | 2025-02-22T06:46:21.377125

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

8315 / tcp

1623746877 | 2025-02-10T20:47:20.998067

500 Permission denied - closing connection.\r\n

8318 / tcp

-2096652808 | 2025-02-03T04:56:45.496199

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8333 / tcp

-1300025046 | 2025-02-08T22:45:01.282796

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705941025.555-waf01bjtp3

8420 / tcp

-1399940268 | 2025-01-24T11:41:59.332483

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8464 / tcp

1519486042 | 2025-02-09T01:13:28.107075

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

8475 / tcp

1911457608 | 2025-02-16T14:55:48.455043

\x00[\x00\x00\x00\x00\x00\x00

8481 / tcp

1911457608 | 2025-01-30T21:35:57.457660

\x00[\x00\x00\x00\x00\x00\x00

8500 / tcp

-1784271535 | 2025-02-18T07:29:49.622401

inv2W\x04\x0f\x01

8513 / tcp

-1399940268 | 2025-02-01T09:45:23.536711

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8533 / tcp

-2089734047 | 2025-01-26T08:06:30.169767

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8545 / tcp

-1013082686 | 2025-02-21T20:41:37.032111

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

8550 / tcp

1763259671 | 2025-02-13T09:56:01.314971

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

8551 / tcp

-1399940268 | 2025-01-31T17:45:23.013690

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8554 / tcp

819727972 | 2025-02-18T17:55:00.801655

SSH-2.0-OpenSSH_7.4

8567 / tcp

1332894250 | 2025-02-09T10:17:03.172267

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

8573 / tcp

1830187220 | 2025-02-18T00:25:49.677151

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

8575 / tcp

-2089734047 | 2025-02-07T10:27:26.171483

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8581 / tcp

-1399940268 | 2025-02-18T18:51:06.768193

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8595 / tcp

-1399940268 | 2025-01-28T11:51:56.632260

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8597 / tcp

-903067560 | 2025-02-13T19:19:28.428153

\x00[\x13)\xc2\x81\x7f\x00\x00

8622 / tcp

-2089734047 | 2025-01-26T11:07:45.497624

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8649 / tcp

842535728 | 2025-02-15T19:31:13.044475

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

8666 / tcp

-1399940268 | 2025-02-20T15:16:31.920602

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8702 / tcp

1948301213 | 2025-02-22T22:19:10.036145

RFB 003.003
VNC:
  Protocol Version: 3.3

8705 / tcp

1620329124 | 2025-02-05T13:40:21.150360

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

8724 / tcp

-1730858130 | 2025-01-28T13:03:03.727270

RFB 003.008
VNC:
  Protocol Version: 3.8

8728 / tcp

-792826324 | 2025-02-21T02:47:26.415279

220 FTP server ready - login please

8745 / tcp

820958131 | 2025-02-03T10:39:42.721182

kjnkjabhbanc283ubcsbhdc72\x02

8771 / tcp

-1399940268 | 2025-02-18T00:06:14.345980

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8779 / tcp

-1013082686 | 2025-02-02T20:49:52.453554

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

8808 / tcp

921225407 | 2025-01-26T20:15:20.933981

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8814 / tcp

-1641514916 | 2025-02-22T17:35:22.885917

* OK Merak 1dFUa2 IMAP4rev1

8815 / tcp

165188539 | 2025-02-01T05:44:55.795253

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8821 / tcp

-1538260461 | 2025-02-06T09:34:57.180684

\x01\x00\x00\x00

8834 / tcp

-1148066627 | 2025-02-15T06:02:42.744111

\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00

8836 / tcp

-2089734047 | 2025-01-26T13:47:29.618674

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8846 / tcp

321971019 | 2025-02-06T18:37:43.387380

-ERR client ip is not in whitelist\r

8862 / tcp

1911457608 | 2025-02-16T12:37:59.734368

\x00[\x00\x00\x00\x00\x00\x00

8865 / tcp

321971019 | 2025-02-10T08:15:47.802418

-ERR client ip is not in whitelist\r

8867 / tcp

819727972 | 2025-02-02T00:20:37.594295

SSH-2.0-OpenSSH_7.4

8880 / tcp

-1375131644 | 2025-01-30T03:25:27.227260

\x00[v\xc3\xbdC\x7f\x00\x00

8883 / tcp

1911457608 | 2025-02-03T21:29:27.725972

\x00[\x00\x00\x00\x00\x00\x00

8889 / tcp

-1839934832 | 2025-02-08T09:18:02.868502

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8902 / tcp

-2096652808 | 2025-02-10T21:17:18.268811

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8910 / tcp

-2096652808 | 2025-01-25T19:48:16.073191

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8991 / tcp

-1399940268 | 2025-02-05T03:49:13.250206

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8993 / tcp

1975288991 | 2025-02-04T12:55:18.285091

OPTI

9000 / tcp

-2067028711 | 2025-02-23T02:58:57.628179

\x15\x03\x01\x00\x02\x02F

9001 / tcp

-1026951088 | 2025-02-20T05:23:09.820512

erro ip

9002 / tcp

-1139539254 | 2025-02-06T06:50:58.559565

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

9007 / tcp

-1399940268 | 2025-02-15T21:18:46.827124

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9014 / tcp

-1810987450 | 2025-02-07T16:45:34.659914

\xc3\xbf

9015 / tcp

971933601 | 2025-02-09T00:46:02.333797

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

9025 / tcp

-1329831334 | 2025-02-15T03:17:29.846104

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

9027 / tcp

-2089734047 | 2025-02-03T23:42:44.934941

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9042 / tcp

-1031019485 | 2025-02-23T02:17:41.296092

[l¶Ð

9051 / tcp

792973478 | 2025-01-30T23:27:18.328141

[®{

9062 / tcp

709622286 | 2025-01-25T18:15:40.210377

OK Welcome <299685> on DirectUpdate server 7286\r\n

9065 / tcp

-1399940268 | 2025-02-13T08:27:30.170442

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9067 / tcp

632542934 | 2025-02-12T10:27:52.916891

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

9078 / tcp

-249504111 | 2025-01-30T10:49:56.008360

\x00[xU-\x7f\x00\x00

9091 / tcp

2087396567 | 2025-02-13T06:28:08.783126

kjnkjabhbanc283ubcsbhdc72

9092 / tcp

819727972 | 2025-01-26T11:38:12.460790

SSH-2.0-OpenSSH_7.4

9095 / tcp

2103111368 | 2025-02-07T05:14:45.256235

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

9098 / tcp

1989907056 | 2025-02-07T02:56:03.747927

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

9100 / tcp

-1947777893 | 2025-02-14T21:32:52.103250

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

9106 / tcp

1911457608 | 2025-02-02T07:06:22.551336

\x00[\x00\x00\x00\x00\x00\x00

9108 / tcp

819727972 | 2025-02-15T07:41:44.901554

SSH-2.0-OpenSSH_7.4

9109 / tcp

-1248408558 | 2025-02-03T08:46:36.588081

220 MikroTik FTP server (MikroTik 6.44.3) ready

9115 / tcp

-2089734047 | 2025-01-26T09:08:20.337650

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9125 / tcp

117101543 | 2025-01-27T00:50:15.886511

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

9137 / tcp

1911457608 | 2025-02-15T05:13:34.425078

\x00[\x00\x00\x00\x00\x00\x00

9140 / tcp

1911457608 | 2025-02-07T02:25:47.164294

\x00[\x00\x00\x00\x00\x00\x00

9146 / tcp

1948301213 | 2025-02-07T18:13:57.651571

RFB 003.003
VNC:
  Protocol Version: 3.3

9151 / tcp

1741579575 | 2025-02-19T21:22:10.085927

9156 / tcp

709622286 | 2025-02-06T17:20:27.484958

OK Welcome <299685> on DirectUpdate server 7286\r\n

9160 / tcp

1911457608 | 2025-02-18T20:30:40.923403

\x00[\x00\x00\x00\x00\x00\x00

9167 / tcp

1911457608 | 2025-02-12T04:23:07.839063

\x00[\x00\x00\x00\x00\x00\x00

9181 / tcp

-2089734047 | 2025-02-22T14:39:13.855985

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9184 / tcp

1615193817 | 2025-02-04T21:48:44.942048

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

9187 / tcp

165188539 | 2025-02-03T23:51:30.566009

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9188 / tcp

1519486042 | 2025-01-26T06:55:36.155198

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

9196 / tcp

-146605374 | 2025-02-15T04:38:57.137679

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

9206 / tcp

-1399940268 | 2025-02-09T17:11:58.759901

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9208 / tcp

-1428621233 | 2025-01-29T23:57:31.418846

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

9210 / tcp

455076604 | 2025-02-16T10:18:03.267314

!\x07version\x04bind7 t{RPowerDNS Recursor 410

9215 / tcp

819727972 | 2025-02-13T18:44:48.010401

SSH-2.0-OpenSSH_7.4

9217 / tcp

-358801646 | 2025-02-02T23:28:31.670283

SSH-2.0-OpenSSH_6.6.1

9226 / tcp

-1327660293 | 2025-02-06T04:03:32.845318

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

9242 / tcp

707919486 | 2025-02-04T15:19:12.970437

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

9243 / tcp

819727972 | 2025-02-10T22:53:29.435730

SSH-2.0-OpenSSH_7.4

9244 / tcp

1504401647 | 2025-02-22T02:25:08.533046

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

9253 / tcp

-1779118422 | 2025-02-17T02:13:50.043665

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

9256 / tcp

380146262 | 2025-02-07T12:02:53.660597

@RSYNCD: 30.0

9289 / tcp

455076604 | 2025-01-31T16:09:03.521427

!\x07version\x04bind7 t{RPowerDNS Recursor 410

9291 / tcp

-1399940268 | 2025-02-19T16:10:37.896946

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9303 / tcp

632542934 | 2025-02-12T16:43:04.757261

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

9304 / tcp

599074451 | 2025-02-08T01:54:58.314666

msg

9306 / tcp

119860953 | 2025-02-13T21:51:35.545240

* OK ArGoSoft Mail Server IMAP Module v.YW at

9311 / tcp

1911457608 | 2025-01-25T06:57:09.746983

\x00[\x00\x00\x00\x00\x00\x00

9333 / tcp

-1399940268 | 2025-02-16T14:56:36.690179

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9398 / tcp

2087396567 | 2025-02-10T21:06:55.144113

kjnkjabhbanc283ubcsbhdc72

9418 / tcp

694512854 | 2025-02-06T14:19:46.624668

220-FileZilla Server 中文版 0.9.60 beta
220-written by Tim Kosse (tim.kosse@filezilla-project.org)
220 Please visit https://filezilla-project.org/

9443 / tcp

-1469993535 | 2025-02-20T01:36:17.534869

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Thu, 20 Feb 2025 01:36:17 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://106.14.219.218:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

9456 / tcp

410249975 | 2025-02-19T13:04:24.210917

LNS READY<>

9458 / tcp

-1399940268 | 2025-02-03T21:24:37.259658

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9529 / tcp

-1399940268 | 2025-02-08T21:56:55.398099

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9530 / tcp

-2089734047 | 2025-02-13T18:58:32.491446

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9600 / tcp

1504401647 | 2025-01-25T05:53:31.854611

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

9633 / tcp

1690634669 | 2025-01-28T22:27:20.449191

9658 / tcp

1282941221 | 2025-01-26T05:44:06.312954

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

9682 / tcp

1911457608 | 2025-02-20T02:59:35.579261

\x00[\x00\x00\x00\x00\x00\x00

9696 / tcp

307999478 | 2025-02-10T13:48:47.363601

unknown command \r\nunknown command \r\n

9765 / tcp

-249504111 | 2025-02-02T14:40:44.196545

\x00[xU-\x7f\x00\x00

9804 / tcp

1363464823 | 2025-01-30T20:02:35.224642

\x00[|ox\x7f\x00\x00

9876 / tcp

-1709563712 | 2025-02-10T20:12:36.629204

\\x00\\x00\\x01+\\x00\\x00\\x00_{"code":0,"flag":1,"language":"JAVA","opaque":0,"serializeTypeCurrentRPC":"JSON","version":433}{"brokerAddrTable":{"broker-a":{"brokerAddrs":{0:"62.118.54.92:10911"},"brokerName":"broker-a","cluster":"DefaultCluster","enableActingMaster":false}},"clusterAddrTable":{"DefaultCluster":["broker-a"]}}

9885 / tcp

-1839934832 | 2025-01-27T04:22:13.464903

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9898 / tcp

1320285193 | 2025-02-17T08:26:44.617128

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

9943 / tcp

-726580714 | 2025-02-19T14:18:15.035858

\\x03\\x10\\x08\\x02\\xc2\\x80}\\x08\\x02\\xc2\\x80\xc3\xa2\\x14\\x01

9992 / tcp

740837454 | 2025-02-02T11:55:24.382841

SSH-2.0-OpenSSH_5.3

9998 / tcp

-328903379 | 2025-01-24T18:30:21.948357

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2516_PStwtbTPE1rg71_39907-39996

9999 / tcp

1161309183 | 2025-02-18T16:07:36.229694

ProxyServer is ready

10001 / tcp

1492413928 | 2025-02-04T04:53:12.105042

SSH-2.0-OpenSSH_7.5

10003 / tcp

1911457608 | 2025-02-13T17:50:07.669322

\x00[\x00\x00\x00\x00\x00\x00

10012 / tcp

-1380608668 | 2025-02-15T20:32:31.027385

\\x00[\'\\x1c\\xc0\\xa8X\\xfd

10027 / tcp

639175818 | 2025-01-31T12:36:55.241427

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

10028 / tcp

-2089734047 | 2025-01-31T04:16:17.476299

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10031 / tcp

-2089734047 | 2025-02-02T22:43:40.574350

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10043 / tcp

-784071826 | 2025-01-31T06:58:09.803625

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

10045 / tcp

1911457608 | 2025-02-15T09:54:22.035646

\x00[\x00\x00\x00\x00\x00\x00

10052 / tcp

-2089734047 | 2025-02-19T14:46:33.031064

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10283 / tcp

321971019 | 2025-01-28T17:07:58.007657

-ERR client ip is not in whitelist\r

10443 / tcp

0 | 2025-02-05T03:51:36.719594

Hashes

hash

-734629808

http.dom_hash

http.html_hash

http.server_hash

1673621694

HTTP/1.1 200 OK
Date: Wed, 05 Feb 2025 03:51:36 GMT
Content-Type: text/html
Content-Length: 1214
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
Etag: "da45fdeb-7d6"
Server: Tengine
Set-Cookie: SERVERID=cc78701b72784aa270818ee967b46821|1738727496|1738727496;Path=/
Vary: Accept-Encoding
Location: https://qilin.aliyun.com

10909 / tcp

-2096652808 | 2025-02-11T18:52:52.606888

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

10911 / tcp

819727972 | 2025-02-12T17:34:01.334026

SSH-2.0-OpenSSH_7.4

11084 / tcp

1543809371 | 2025-02-09T23:32:59.544985

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

11112 / tcp

-1139539254 | 2025-02-12T07:08:14.546456

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

11288 / tcp

819727972 | 2025-02-22T07:11:17.602050

SSH-2.0-OpenSSH_7.4

11401 / tcp

-1810987450 | 2025-02-07T20:20:01.817593

\xc3\xbf

11443 / tcp

599074451 | 2025-01-28T21:42:59.568727

msg

11688 / tcp

-1428621233 | 2025-01-30T08:13:22.000358

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

12088 / tcp

-441419608 | 2025-01-31T02:34:24.538617

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

12101 / tcp

1975288991 | 2025-01-27T19:07:57.666755

OPTI

12108 / tcp

-1399940268 | 2025-01-29T19:23:18.470208

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12116 / tcp

921225407 | 2025-02-21T19:29:33.342118

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12132 / tcp

-1399940268 | 2025-01-25T19:42:26.448717

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12141 / tcp

1767345577 | 2025-01-29T16:08:21.320302

Hello, this is Quagga (version 0T).
Copyright 1996-200

12152 / tcp

1332894250 | 2025-02-18T02:03:49.071422

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

12159 / tcp

-747911285 | 2025-02-13T10:05:00.077620

\xc2\xaa

12169 / tcp

-1399940268 | 2025-02-02T17:31:45.221124

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12172 / tcp

-1327660293 | 2025-01-30T16:12:59.139059

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12184 / tcp

921225407 | 2025-01-27T05:24:58.605284

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12191 / tcp

-1327660293 | 2025-01-29T02:17:04.285142

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12194 / tcp

-1611764932 | 2025-01-28T10:16:45.482926

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

12195 / tcp

-2031152423 | 2025-01-27T04:58:21.811814

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

12213 / tcp

1308377066 | 2025-02-12T11:06:49.603806

ncacn_http/1.0

12229 / tcp

-1327660293 | 2025-01-31T12:36:16.011684

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12236 / tcp

-1399940268 | 2025-02-06T10:14:56.651951

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12238 / tcp

-1059554316 | 2025-02-06T15:26:20.274422

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

12265 / tcp

-873003756 | 2025-02-21T21:27:26.343493

HTTP/1.1 200 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Accept-Ranges: bytes
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
Content-Type: text/html;charset=UTF-8
Content-Language: en-US

12266 / tcp

921225407 | 2025-02-11T11:10:35.184919

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12291 / tcp

-1399940268 | 2025-02-09T14:52:59.555232

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12311 / tcp

-2107996212 | 2025-02-14T15:15:33.886463

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

12315 / tcp

632542934 | 2025-01-26T20:25:54.873880

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12323 / tcp

-2089734047 | 2025-02-21T16:50:41.712219

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12331 / tcp

-1189269828 | 2025-02-10T01:48:18.176874

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12332 / tcp

1308377066 | 2025-01-28T16:37:06.303281

ncacn_http/1.0

12345 / tcp

878900329 | 2025-02-21T06:33:18.558117

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24ba_PStjkgwtss75_22411-43255

12346 / tcp

745343730 | 2025-02-21T18:46:46.710910

220 smtp.qq.com Esmtp QQ Mail Server

12350 / tcp

819727972 | 2025-02-05T00:33:40.508010

SSH-2.0-OpenSSH_7.4

12352 / tcp

945910976 | 2025-01-29T14:31:49.042794

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

12364 / tcp

1911457608 | 2025-02-18T20:44:18.903465

\x00[\x00\x00\x00\x00\x00\x00

12369 / tcp

-2089734047 | 2025-02-19T18:40:34.512676

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12379 / tcp

-1399940268 | 2025-02-14T20:28:31.951915

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12398 / tcp

2143387245 | 2025-02-05T08:47:26.786099

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

12404 / tcp

-180163620 | 2025-02-20T00:51:32.719130

NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n

12408 / tcp

50497985 | 2025-02-13T00:39:27.842618

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

12409 / tcp

-2096652808 | 2025-01-26T12:33:52.383330

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12415 / tcp

-1476017887 | 2025-02-03T10:19:21.849214

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

12423 / tcp

-1230049476 | 2025-02-16T23:07:01.090336

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

12436 / tcp

-1230049476 | 2025-02-22T05:15:18.212310

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

12439 / tcp

-1730858130 | 2025-02-06T19:03:53.386603

RFB 003.008
VNC:
  Protocol Version: 3.8

12441 / tcp

-1730858130 | 2025-02-08T22:17:07.633841

RFB 003.008
VNC:
  Protocol Version: 3.8

12445 / tcp

2098371729 | 2025-02-11T19:04:50.346789

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

12446 / tcp

165188539 | 2025-02-04T19:17:39.719918

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12448 / tcp

-142686627 | 2025-02-21T09:58:59.673024

\x00[\xc2\xba\x7fs\x7f\x00\x00

12458 / tcp

597764502 | 2025-02-14T10:11:00.060390

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

12468 / tcp

-1375131644 | 2025-02-03T17:13:41.740629

\x00[v\xc3\xbdC\x7f\x00\x00

12479 / tcp

1911457608 | 2025-01-31T13:45:58.308488

\x00[\x00\x00\x00\x00\x00\x00

12482 / tcp

307999478 | 2025-02-11T20:36:18.508193

unknown command \r\nunknown command \r\n

12490 / tcp

51259122 | 2025-01-30T18:49:48.846109

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

12491 / tcp

819727972 | 2025-02-09T18:07:16.558495

SSH-2.0-OpenSSH_7.4

12511 / tcp

-441419608 | 2025-02-17T21:27:30.247307

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

12533 / tcp

-1746074029 | 2025-02-10T07:00:51.885637

101 imqbroker =unV\r\n

12534 / tcp

-1477838366 | 2025-01-29T17:00:27.059915

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

12539 / tcp

455076604 | 2025-02-07T13:04:49.918049

!\x07version\x04bind7 t{RPowerDNS Recursor 410

12548 / tcp

1353260875 | 2025-02-13T12:45:00.282600

\x00[g\xc2\x95N\x7f\x00\x00

12550 / tcp

-2089734047 | 2025-01-30T20:04:42.347913

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12584 / tcp

819727972 | 2025-02-15T16:08:33.555253

SSH-2.0-OpenSSH_7.4

12589 / tcp

-2089734047 | 2025-02-07T09:44:12.052331

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12902 / tcp

-1730858130 | 2025-02-08T11:56:47.644574

RFB 003.008
VNC:
  Protocol Version: 3.8

14130 / tcp

-1399940268 | 2025-02-21T02:42:57.395041

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14147 / tcp

-1730858130 | 2025-02-14T13:42:19.550266

RFB 003.008
VNC:
  Protocol Version: 3.8

14344 / tcp

-2107996212 | 2025-02-09T14:23:48.817364

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

14403 / tcp

119860953 | 2025-02-06T23:03:35.313043

* OK ArGoSoft Mail Server IMAP Module v.YW at

14825 / tcp

-653033013 | 2025-02-14T16:41:35.184761

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

14875 / tcp

-1230049476 | 2025-02-19T16:11:36.460329

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

14880 / tcp

-1399940268 | 2025-02-17T06:43:18.536054

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

15001 / tcp

1308377066 | 2025-02-12T21:16:37.958774

ncacn_http/1.0

15038 / tcp

-2089734047 | 2025-02-14T03:32:54.349758

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

16029 / tcp

599074451 | 2025-01-25T14:27:39.456076

msg

16032 / tcp

-1888448627 | 2025-02-06T10:12:24.516652

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

16038 / tcp

-1888448627 | 2025-02-09T20:10:41.100247

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

16041 / tcp

-1399940268 | 2025-02-17T19:40:38.899086

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16059 / tcp

-1746074029 | 2025-02-18T17:40:13.550859

101 imqbroker =unV\r\n

16077 / tcp

-1139539254 | 2025-02-08T07:26:19.721572

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

16092 / tcp

1134517380 | 2025-01-29T19:51:00.416946

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

16094 / tcp

-1996280214 | 2025-02-04T06:08:10.386966

\x06\x04\x05@

16099 / tcp

45131230 | 2025-01-24T20:30:55.062427

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

16104 / tcp

819727972 | 2025-02-20T04:36:57.327378

SSH-2.0-OpenSSH_7.4

16402 / tcp

-653033013 | 2025-02-20T17:56:18.444713

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

16993 / tcp

-971970408 | 2025-01-29T17:59:30.671025

17000 / tcp

-1810987450 | 2025-02-06T21:35:24.610556

\xc3\xbf

17010 / tcp

819727972 | 2025-02-15T12:52:26.674061

SSH-2.0-OpenSSH_7.4

17102 / tcp

-375604792 | 2025-02-01T23:23:55.262899

220 Microsoft FTP Service

18018 / tcp

401555314 | 2025-02-01T16:01:24.248801

NB[GFXjA^R

18023 / tcp

307999478 | 2025-02-20T06:41:50.736339

unknown command \r\nunknown command \r\n

18029 / tcp

-1399940268 | 2025-01-27T04:37:46.458299

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18038 / tcp

1308377066 | 2025-02-16T09:05:53.400756

ncacn_http/1.0

18044 / tcp

165188539 | 2025-01-29T04:56:01.894688

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

18050 / tcp

1761482307 | 2025-02-07T05:39:23.210322

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

18058 / tcp

-1487943323 | 2025-02-08T08:51:41.165939

431 Unable to negotiate secure command connection.\r\n

18064 / tcp

-1248408558 | 2025-02-18T04:52:55.675756

220 MikroTik FTP server (MikroTik 6.44.3) ready

18070 / tcp

1911457608 | 2025-02-20T16:14:21.869683

\x00[\x00\x00\x00\x00\x00\x00

18073 / tcp

1282941221 | 2025-02-04T10:07:03.883203

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

18077 / tcp

1911457608 | 2025-02-20T20:55:02.537757

\x00[\x00\x00\x00\x00\x00\x00

18079 / tcp

-1032713145 | 2025-02-20T08:31:57.234620

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

18081 / tcp

819727972 | 2025-02-01T16:42:00.344120

SSH-2.0-OpenSSH_7.4

18085 / tcp

-1026951088 | 2025-01-29T04:38:42.647253

erro ip

18087 / tcp

-1399940268 | 2025-02-15T13:52:22.674250

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18094 / tcp

-805362002 | 2025-02-17T16:12:39.047773

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

18095 / tcp

1189133115 | 2025-02-13T07:16:52.138810

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

18096 / tcp

819727972 | 2025-01-29T22:31:03.627609

SSH-2.0-OpenSSH_7.4

18098 / tcp

117101543 | 2025-02-10T17:54:47.568289

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

18103 / tcp

-1114821551 | 2025-02-15T19:18:31.948953

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

18182 / tcp

-2089734047 | 2025-02-11T00:55:51.314642

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

18239 / tcp

165188539 | 2025-02-18T15:25:36.027774

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

18245 / tcp

1615193817 | 2025-02-14T14:10:57.222378

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

18802 / tcp

-1899074860 | 2025-02-01T17:32:37.416492

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

18888 / tcp

1492413928 | 2025-02-14T20:31:57.584438

SSH-2.0-OpenSSH_7.5

19000 / tcp

165188539 | 2025-02-18T16:02:18.939558

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

19016 / tcp

1911457608 | 2025-02-18T06:08:50.525374

\x00[\x00\x00\x00\x00\x00\x00

19017 / tcp

-1428621233 | 2025-02-04T22:53:52.677652

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

19100 / tcp

819727972 | 2025-02-01T23:37:02.082807

SSH-2.0-OpenSSH_7.4

19998 / tcp

-992671574 | 2025-02-12T19:59:23.136784

@RSYNCD: 26

19999 / tcp

-136006866 | 2025-01-28T11:59:02.989603

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

20000 / tcp

1900503736 | 2025-02-22T16:48:22.195868

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20185 / tcp

-249504111 | 2025-02-02T01:42:26.639739

\x00[xU-\x7f\x00\x00

20201 / tcp

819727972 | 2025-01-29T18:28:14.437016

SSH-2.0-OpenSSH_7.4

20202 / tcp

-1453516345 | 2025-02-17T15:47:30.558068

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

20256 / tcp

-952165951 | 2025-02-09T20:27:39.540849

AB

20547 / tcp

971933601 | 2025-02-13T23:06:22.834065

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

20800 / tcp

205347087 | 2025-02-18T02:02:09.936445

SSH-25453-Cisco-3524665.35\n

20880 / tcp

1370263973 | 2025-02-15T03:18:14.463927

dubbo>

20894 / tcp

-653033013 | 2025-02-15T06:58:11.828837

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

21025 / tcp

1842524259 | 2025-01-26T10:50:25.656187

21230 / tcp

-1399940268 | 2025-02-04T19:37:26.187954

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21231 / tcp

-2031152423 | 2025-02-10T03:42:15.623734

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

21251 / tcp

-1428621233 | 2025-02-09T16:52:52.690560

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

21257 / tcp

-1399940268 | 2025-02-03T23:12:16.002373

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21258 / tcp

-1888448627 | 2025-02-09T09:40:30.675821

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

21269 / tcp

1059192566 | 2025-02-03T06:38:36.863342

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div

21277 / tcp

-1839934832 | 2025-01-28T20:39:21.844648

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

21282 / tcp

-1059554316 | 2025-02-07T03:50:57.656264

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

21291 / tcp

165188539 | 2025-02-05T18:06:07.343526

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21299 / tcp

-1888448627 | 2025-02-09T19:22:37.431807

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

21305 / tcp

-1327660293 | 2025-01-31T18:48:06.203693

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

21311 / tcp

1911457608 | 2025-02-16T21:07:41.560227

\x00[\x00\x00\x00\x00\x00\x00

21317 / tcp

-1453516345 | 2025-02-11T17:20:36.956424

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

21323 / tcp

-1399940268 | 2025-01-26T01:21:22.732840

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21379 / tcp

1911457608 | 2025-02-14T18:28:56.845064

\x00[\x00\x00\x00\x00\x00\x00

21443 / tcp

-2089734047 | 2025-02-02T18:38:28.932123

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

22103 / tcp

819727972 | 2025-01-30T12:34:20.127586

SSH-2.0-OpenSSH_7.4

22206 / tcp

-747911285 | 2025-02-05T15:32:30.671868

\xc2\xaa

22609 / tcp

-1626979812 | 2025-02-08T04:38:37.432773

220 Service ready for new user.

23023 / tcp

-1681927087 | 2025-02-12T10:26:17.650983

kjnkjabhbanc283ubcsbhdc72

24084 / tcp

2063598737 | 2025-02-21T17:23:08.868853

/0 0 L\r\n/0 0 HUH\r\n

24181 / tcp

1308377066 | 2025-02-21T22:11:40.035880

ncacn_http/1.0

25001 / tcp

1308377066 | 2025-02-04T15:56:26.130167

ncacn_http/1.0

25565 / tcp

-1399940268 | 2025-02-02T20:28:04.525798

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

27015 / tcp

401555314 | 2025-02-22T05:29:42.419943

NB[GFXjA^R

27017 / tcp

1763259671 | 2025-02-04T12:14:20.367085

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

28015 / tcp

117101543 | 2025-02-02T10:22:49.021838

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

29798 / tcp

-1648456501 | 2025-02-15T19:41:32.548386

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

30001 / tcp

320677201 | 2025-02-08T17:48:39.227051

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

30002 / tcp

1632932802 | 2025-02-16T12:41:00.782004

30003 / tcp

820958131 | 2025-02-14T22:23:35.225319

kjnkjabhbanc283ubcsbhdc72\x02

30008 / tcp

820958131 | 2025-02-13T18:00:04.459998

kjnkjabhbanc283ubcsbhdc72\x02

30009 / tcp

165188539 | 2025-01-24T20:16:08.458450

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

30010 / tcp

-1399940268 | 2025-02-12T14:17:21.978759

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

30015 / tcp

1189133115 | 2025-02-17T22:21:15.763211

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

30110 / tcp

-441419608 | 2025-02-01T11:25:20.691309

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

30501 / tcp

-2017887953 | 2025-02-05T21:14:04.078328

SSH-2.0-OpenSSH_7.9

31337 / tcp

-147424911 | 2025-02-04T22:26:17.085849

HTTP/1.1 404 Not Found
Content Length: 0

31380 / tcp

-2089734047 | 2025-02-05T17:04:12.512353

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

32444 / tcp

1492413928 | 2025-02-14T22:13:38.100185

SSH-2.0-OpenSSH_7.5

32522 / tcp

-445721795 | 2025-02-07T02:43:50.242891

\x00[\xc3\xaed\x1a\x7f\x00\x00

32764 / tcp

103159425 | 2025-02-18T22:13:35.125367

SSH-1.99-RGOS_SSH

32922 / tcp

1850902677 | 2025-02-07T09:38:40.855677

W!

33022 / tcp

-1733106930 | 2025-02-07T14:20:40.139155

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

33060 / tcp

546151771 | 2025-02-04T22:37:59.445538

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

33222 / tcp

2087396567 | 2025-02-07T04:09:30.398846

kjnkjabhbanc283ubcsbhdc72

33322 / tcp

-1477838366 | 2025-02-07T05:55:42.939353

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

33422 / tcp

2087396567 | 2025-02-06T22:53:09.999267

kjnkjabhbanc283ubcsbhdc72

33522 / tcp

2087396567 | 2025-02-06T18:15:17.991119

kjnkjabhbanc283ubcsbhdc72

33722 / tcp

1308377066 | 2025-02-06T21:08:03.607571

ncacn_http/1.0

34122 / tcp

-1598265216 | 2025-02-06T14:16:47.949502

@RSYNCD: 31.0

34322 / tcp

-971970408 | 2025-02-06T14:20:19.390991

34422 / tcp

-971970408 | 2025-02-06T08:58:34.713268

34622 / tcp

2087396567 | 2025-02-06T05:58:10.951282

kjnkjabhbanc283ubcsbhdc72

34922 / tcp

-2081419599 | 2025-02-06T00:14:54.090790

@
03d

35000 / tcp

401555314 | 2025-02-12T08:44:52.943431

NB[GFXjA^R

35101 / tcp

2121220663 | 2025-02-20T06:49:25.520477

SSH-58-Ingrian_SSH\r\n

35222 / tcp

2087396567 | 2025-02-05T18:58:32.647748

kjnkjabhbanc283ubcsbhdc72

35422 / tcp

-1779118422 | 2025-02-05T11:48:44.518312

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

35522 / tcp

171352214 | 2025-02-05T19:11:23.211000

-ERR client ip is not in whitelist

35622 / tcp

841014058 | 2025-02-05T15:16:57.288505

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

35822 / tcp

-971970408 | 2025-02-05T06:38:14.204604

35922 / tcp

-746114901 | 2025-02-05T08:21:23.752535

[KpU

36022 / tcp

366084633 | 2025-02-05T03:04:58.921273

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

36122 / tcp

-1810987450 | 2025-02-04T17:39:49.469411

\xc3\xbf

36322 / tcp

-971970408 | 2025-02-04T21:20:16.101596

36505 / tcp

819727972 | 2025-02-13T11:26:44.305436

SSH-2.0-OpenSSH_7.4

36822 / tcp

2087396567 | 2025-02-04T14:38:19.267840

kjnkjabhbanc283ubcsbhdc72

36922 / tcp

-971970408 | 2025-02-04T01:11:22.743641

37022 / tcp

2087396567 | 2025-02-04T10:06:55.099186

kjnkjabhbanc283ubcsbhdc72

37222 / tcp

2087396567 | 2025-02-04T06:23:10.534811

kjnkjabhbanc283ubcsbhdc72

37422 / tcp

-375604792 | 2025-02-03T19:53:52.300596

220 Microsoft FTP Service

37522 / tcp

-1189269828 | 2025-02-04T02:58:49.140347

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

37622 / tcp

2087396567 | 2025-02-03T17:54:38.507236

kjnkjabhbanc283ubcsbhdc72

37722 / tcp

819727972 | 2025-02-14T03:26:43.771036

SSH-2.0-OpenSSH_7.4

37777 / tcp

-1189269828 | 2025-02-21T19:20:36.918536

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

37822 / tcp

-971970408 | 2025-02-03T08:38:14.316724

38222 / tcp

539065883 | 2025-02-03T10:24:08.411983

38422 / tcp

1842524259 | 2025-02-18T19:21:00.697164

38522 / tcp

819727972 | 2025-02-03T02:24:15.976653

SSH-2.0-OpenSSH_7.4

38722 / tcp

-653033013 | 2025-02-03T03:21:12.040337

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

38822 / tcp

897328069 | 2025-02-02T13:08:53.793247

220 mail.scott000.com ESMTP

39222 / tcp

1850902677 | 2025-02-20T12:06:22.986821

W!

39322 / tcp

1948301213 | 2025-02-18T16:27:11.800741

RFB 003.003
VNC:
  Protocol Version: 3.3

39522 / tcp

1741579575 | 2025-02-02T16:41:42.562552

39622 / tcp

-1248408558 | 2025-02-01T21:00:32.981937

220 MikroTik FTP server (MikroTik 6.44.3) ready

39722 / tcp

-971970408 | 2025-02-18T04:47:52.666455

39822 / tcp

-971970408 | 2025-02-18T08:22:20.963565

40000 / tcp

-1399940268 | 2025-02-22T12:19:56.055607

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

40222 / tcp

-1839934832 | 2025-02-10T16:55:06.839786

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

40322 / tcp

2087396567 | 2025-02-17T06:01:08.540854

kjnkjabhbanc283ubcsbhdc72

40422 / tcp

1261582754 | 2025-02-16T15:51:27.403949

unknown command 
unknown command

40522 / tcp

1231376952 | 2025-02-01T17:31:51.956547

40622 / tcp

819727972 | 2025-02-17T00:27:44.475447

SSH-2.0-OpenSSH_7.4

40722 / tcp

2087396567 | 2025-02-01T15:46:37.019961

kjnkjabhbanc283ubcsbhdc72

40822 / tcp

-1097188123 | 2025-02-01T01:48:42.106272

[g\xc2\x95N\x7f

40894 / tcp

-2089734047 | 2025-02-12T09:17:56.220920

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

40922 / tcp

-1839934832 | 2025-02-16T17:29:54.748265

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

41122 / tcp

50497985 | 2025-02-16T14:03:17.084367

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

41222 / tcp

1919228981 | 2025-02-01T05:23:03.994895

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

41322 / tcp

1778988322 | 2025-02-15T18:51:14.823956

* OK GroupWise IMAP4rev1 Server Ready

41422 / tcp

104385780 | 2025-02-16T05:12:26.468842

ceph v2

41522 / tcp

1984588611 | 2025-01-31T20:21:35.987885

41622 / tcp

2087396567 | 2025-01-31T22:08:39.339105

kjnkjabhbanc283ubcsbhdc72

41722 / tcp

-1316491703 | 2025-02-15T10:12:42.455426

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

41822 / tcp

2087396567 | 2025-01-31T11:51:27.903886

kjnkjabhbanc283ubcsbhdc72

41922 / tcp

2087396567 | 2025-01-31T16:48:27.808374

kjnkjabhbanc283ubcsbhdc72

42022 / tcp

-1900404274 | 2025-02-16T02:58:31.475033

Unknown command

42122 / tcp

1741579575 | 2025-02-08T21:26:08.078784

42222 / tcp

-1114821551 | 2025-01-31T13:18:12.428213

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

42322 / tcp

1830697416 | 2025-01-30T22:09:39.219151

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

42422 / tcp

-971970408 | 2025-01-30T12:20:03.555128

42522 / tcp

2087396567 | 2025-02-14T17:29:12.537565

kjnkjabhbanc283ubcsbhdc72

42622 / tcp

2087396567 | 2025-01-31T07:19:57.524931

kjnkjabhbanc283ubcsbhdc72

42722 / tcp

-1375131644 | 2025-02-09T06:03:52.799447

\x00[v\xc3\xbdC\x7f\x00\x00

42922 / tcp

380146262 | 2025-01-31T01:25:50.308246

@RSYNCD: 30.0

43080 / tcp

819727972 | 2025-02-01T21:44:17.763234

SSH-2.0-OpenSSH_7.4

43122 / tcp

2087396567 | 2025-01-30T15:03:44.270142

kjnkjabhbanc283ubcsbhdc72

43222 / tcp

104385780 | 2025-01-30T20:34:35.950574

ceph v2

43422 / tcp

233634112 | 2025-02-14T01:42:04.481904

SSH-98.60-SysaxSSH_81885..42

43522 / tcp

2087396567 | 2025-01-30T16:57:05.767269

kjnkjabhbanc283ubcsbhdc72

43722 / tcp

819727972 | 2025-02-11T00:34:02.635995

SSH-2.0-OpenSSH_7.4

43922 / tcp

1741579575 | 2025-01-30T06:17:13.079072

44022 / tcp

1308377066 | 2025-01-29T23:04:03.857224

ncacn_http/1.0

44222 / tcp

-1999117212 | 2025-01-29T16:01:20.384641

44306 / tcp

-1399940268 | 2025-02-17T20:59:14.997774

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44308 / tcp

2143387245 | 2025-02-05T05:37:13.459904

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

44336 / tcp

-1399940268 | 2025-01-30T23:48:39.072550

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44365 / tcp

-1399940268 | 2025-02-20T01:59:06.425580

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44410 / tcp

1911457608 | 2025-02-21T10:14:19.540530

\x00[\x00\x00\x00\x00\x00\x00

44422 / tcp

2033888749 | 2025-01-29T21:37:25.822632

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

44622 / tcp

-222277909 | 2025-02-13T18:30:16.844385

0@@

44722 / tcp

1426971893 | 2025-01-30T01:39:07.845089

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

44818 / tcp

-891714208 | 2025-02-16T20:57:02.700393

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

45005 / tcp

639175818 | 2025-02-09T21:12:24.642707

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

45111 / tcp

-2089734047 | 2025-02-13T19:47:45.638625

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

45333 / tcp

1911457608 | 2025-02-20T03:20:42.261901

\x00[\x00\x00\x00\x00\x00\x00

45422 / tcp

2087396567 | 2025-02-19T10:07:20.881865

kjnkjabhbanc283ubcsbhdc72

45622 / tcp

2087396567 | 2025-01-28T16:55:01.403990

kjnkjabhbanc283ubcsbhdc72

45677 / tcp

1665283070 | 2025-01-28T17:43:26.102000

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x00\x00\n0\x03\x00\x00\x00\x01\x00\x05\x00\x00@\x00\x00\x06\x00\x00\x1f@

45786 / tcp

1911457608 | 2025-01-28T06:37:36.897959

\x00[\x00\x00\x00\x00\x00\x00

45822 / tcp

-971970408 | 2025-01-28T20:34:59.964098

45922 / tcp

1690634669 | 2025-01-27T20:53:53.931394

46000 / tcp

-1399940268 | 2025-02-01T18:11:09.556193

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

46122 / tcp

722711397 | 2025-01-28T13:19:15.487905

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

46222 / tcp

2087396567 | 2025-01-28T08:03:03.618444

kjnkjabhbanc283ubcsbhdc72

46422 / tcp

-971970408 | 2025-01-28T06:06:42.922999

46622 / tcp

-358801646 | 2025-02-10T10:57:14.561282

SSH-2.0-OpenSSH_6.6.1

46722 / tcp

2087396567 | 2025-02-10T05:10:39.210898

kjnkjabhbanc283ubcsbhdc72

46822 / tcp

171352214 | 2025-02-09T22:15:28.517116

-ERR client ip is not in whitelist

46922 / tcp

104385780 | 2025-02-10T06:55:07.451351

ceph v2

47122 / tcp

104385780 | 2025-02-09T13:02:03.681262

ceph v2

47222 / tcp

-2017887953 | 2025-02-10T03:21:48.967757

SSH-2.0-OpenSSH_7.9

47522 / tcp

2087396567 | 2025-01-27T08:15:44.814912

kjnkjabhbanc283ubcsbhdc72

47822 / tcp

119860953 | 2025-01-27T04:39:51.872185

* OK ArGoSoft Mail Server IMAP Module v.YW at

47984 / tcp

819727972 | 2025-01-30T09:36:04.385366

SSH-2.0-OpenSSH_7.4

47990 / tcp

-1316491703 | 2025-02-07T11:56:14.024178

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

48001 / tcp

-805362002 | 2025-01-29T04:48:51.647404

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

48019 / tcp

165188539 | 2025-02-06T17:49:19.206334

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

48022 / tcp

539065883 | 2025-01-26T18:49:35.801590

48222 / tcp

-1428621233 | 2025-01-26T14:25:27.811835

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

48422 / tcp

1741579575 | 2025-01-26T17:48:58.984416

48522 / tcp

1741579575 | 2025-01-26T12:25:55.925959

48722 / tcp

-2033111675 | 2025-01-26T10:43:16.296550

~djb

48922 / tcp

-1733645023 | 2025-01-25T16:36:36.279953

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

49022 / tcp

1842524259 | 2025-01-26T07:07:32.128432

49080 / tcp

-1399940268 | 2025-02-14T02:27:05.810378

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

49122 / tcp

-1529979118 | 2025-02-21T05:28:34.546325

inv2W

49210 / tcp

671605376 | 2025-01-26T12:50:22.877005

SSH-2.0-OpenSSH_X.X

49222 / tcp

819727972 | 2025-02-22T23:13:05.951815

SSH-2.0-OpenSSH_7.4

49322 / tcp

-971970408 | 2025-02-20T20:45:40.867292

49422 / tcp

-1559123399 | 2025-02-23T01:02:16.866012

500 Permission denied - closing connection.

49501 / tcp

-1399940268 | 2025-02-17T19:46:44.989370

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

49592 / tcp

-1399940268 | 2025-01-29T11:39:55.620500

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

49622 / tcp

-1839934832 | 2025-02-09T01:46:57.143353

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

49722 / tcp

-1013082686 | 2025-02-22T21:26:25.113628

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

50000 / tcp

-784071826 | 2025-02-07T19:22:31.844972

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

50011 / tcp

-653033013 | 2025-01-31T14:37:51.327365

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

50022 / tcp

819727972 | 2025-02-22T10:10:33.110530

SSH-2.0-OpenSSH_7.4

50100 / tcp

1632932802 | 2025-02-15T13:32:26.918443

50101 / tcp

1975288991 | 2025-02-17T06:25:46.536290

OPTI

50113 / tcp

1208318993 | 2025-02-12T15:40:11.323298

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

50122 / tcp

-527005584 | 2025-02-22T08:17:23.108521

/0 0 L
/0 0 HUH

50222 / tcp

2087396567 | 2025-02-09T21:07:49.975196

kjnkjabhbanc283ubcsbhdc72

50322 / tcp

819727972 | 2025-02-13T23:50:13.752353

SSH-2.0-OpenSSH_7.4

50580 / tcp

-146605374 | 2025-02-17T05:06:55.989890

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

50622 / tcp

1741579575 | 2025-02-21T19:05:18.181744

50722 / tcp

2087396567 | 2025-02-20T22:29:49.779075

kjnkjabhbanc283ubcsbhdc72

51003 / tcp

-2140303521 | 2025-02-09T07:37:52.213382

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

51004 / tcp

-1399940268 | 2025-02-22T20:55:18.113956

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

51022 / tcp

740837454 | 2025-02-11T06:01:48.778605

SSH-2.0-OpenSSH_5.3

51122 / tcp

819727972 | 2025-02-17T02:14:16.378025

SSH-2.0-OpenSSH_7.4

51222 / tcp

660175493 | 2025-02-21T12:02:13.171100

51235 / tcp

-1261090339 | 2025-01-25T19:53:13.739517

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

51294 / tcp

921225407 | 2025-02-22T19:40:04.602750

\x00\x00\x00\x04\x00\x00\x00\x00\x00

51322 / tcp

2087396567 | 2025-01-24T10:01:57.072584

kjnkjabhbanc283ubcsbhdc72

51422 / tcp

-1428621233 | 2025-02-21T07:13:24.316481

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

51522 / tcp

2087396567 | 2025-01-24T13:01:06.061224

kjnkjabhbanc283ubcsbhdc72

51622 / tcp

-971970408 | 2025-02-21T02:00:48.051758

52122 / tcp

2087396567 | 2025-02-20T07:46:00.063279

kjnkjabhbanc283ubcsbhdc72

52222 / tcp

-321444299 | 2025-02-10T17:49:44.376664

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

52230 / tcp

-1045760528 | 2025-02-17T13:04:52.972708

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

52322 / tcp

539065883 | 2025-02-20T05:04:48.219541

52422 / tcp

-154107716 | 2025-02-20T01:43:08.390601

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST ...

52622 / tcp

2087396567 | 2025-02-19T23:47:45.861454

kjnkjabhbanc283ubcsbhdc72

52722 / tcp

-971970408 | 2025-02-11T02:18:27.899611

53122 / tcp

-2096652808 | 2025-02-19T16:55:45.716494

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

53422 / tcp

-321444299 | 2025-02-08T23:00:16.711140

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

53522 / tcp

-971970408 | 2025-02-19T13:11:16.534443

53822 / tcp

171352214 | 2025-02-14T06:55:39.457479

-ERR client ip is not in whitelist

53922 / tcp

1842524259 | 2025-02-19T06:15:39.739119

54122 / tcp

-321444299 | 2025-02-14T07:03:25.906586

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

54138 / tcp

2143387245 | 2025-02-18T19:15:49.966986

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

54222 / tcp

-971970408 | 2025-02-16T21:21:54.668867

54522 / tcp

1412519768 | 2025-02-18T17:36:22.724372

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

54722 / tcp

171352214 | 2025-02-18T12:45:57.252601

-ERR client ip is not in whitelist

55000 / tcp

1911457608 | 2025-02-20T04:28:33.406528

\x00[\x00\x00\x00\x00\x00\x00

55322 / tcp

-971970408 | 2025-02-18T03:12:04.755182

55443 / tcp

1996932384 | 2025-02-21T18:31:20.097436

"raop" nonce

55475 / tcp

321971019 | 2025-02-10T09:41:15.194894

-ERR client ip is not in whitelist\r

55490 / tcp

-1399940268 | 2025-02-13T15:00:29.844719

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

55553 / tcp

-68075478 | 2025-02-02T03:25:38.245166

55554 / tcp

1978059005 | 2025-02-05T23:51:28.614697

Sorry, that nickname format is invalid.

56322 / tcp

819727972 | 2025-02-17T20:31:03.197509

SSH-2.0-OpenSSH_7.4

56522 / tcp

-971970408 | 2025-02-08T02:17:40.614911

57779 / tcp

669849225 | 2025-02-19T03:50:18.409064

SSH-98.60-SysaxSSH_81885..42\r\n

57782 / tcp

-1399940268 | 2025-01-28T12:56:56.538826

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

57785 / tcp

-1648456501 | 2025-02-04T08:31:48.826940

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

58443 / tcp

-358801646 | 2025-02-15T17:59:00.726019

SSH-2.0-OpenSSH_6.6.1

59622 / tcp

104385780 | 2025-02-15T22:09:17.473959

ceph v2

60023 / tcp

-1598265216 | 2025-02-09T23:52:56.998225

@RSYNCD: 31.0

60099 / tcp

-2089734047 | 2025-01-24T22:29:45.760203

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

60129 / tcp

-1839934832 | 2025-02-17T23:43:19.719918

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

61613 / tcp

1975288991 | 2025-02-19T06:09:00.832322

OPTI

61616 / tcp

1911457608 | 2025-02-22T05:07:52.376920

\x00[\x00\x00\x00\x00\x00\x00

62078 / tcp

1842317374 | 2025-02-06T09:15:27.978692

/1.1 400 Bad Request
Server: nginx/1.13.0
Content-Type: text/html
Connection: close

63210 / tcp

-786044033 | 2025-02-03T13:15:38.583731

OK Welcome <299685> on DirectUpdate server 7286

63256 / tcp

1642597142 | 2025-01-25T19:59:52.314966

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

63260 / tcp

-1795027372 | 2025-02-19T19:04:47.509085

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

106.14.219.218

Last Seen: 2025-02-23

Tags:

GeneralInformation

OpenPorts

11 / tcp 1286504516 | 2025-02-14T05:51:06.325099

13 / tcp 1346417108 | 2025-02-20T01:31:10.044860

15 / tcp 117101543 | 2025-02-23T02:12:26.716962

17 / tcp 1767345577 | 2025-02-06T08:29:17.500611

19 / tcp 676476721 | 2025-02-09T14:17:25.947855

21 / tcp 2116898107 | 2025-02-21T06:36:39.458248

22 / tcp 870256069 | 2025-02-11T03:46:31.421833

25 / tcp 1632932802 | 2025-02-22T18:19:46.626752

26 / tcp 669849225 | 2025-02-07T01:19:45.735837

37 / tcp -1336879475 | 2025-02-11T22:51:01.067910

49 / tcp -1056270173 | 2025-01-26T01:22:01.741696

51 / tcp -1399940268 | 2025-01-30T10:33:59.135586

53 / tcp -626196604 | 2025-02-06T21:27:17.871868

70 / tcp -1763883228 | 2025-02-21T14:26:46.309568

79 / tcp -746345752 | 2025-02-20T06:19:06.623382

100 / tcp -2017887953 | 2025-02-02T17:58:57.347304

102 / tcp 165188539 | 2025-02-09T10:06:03.205308

104 / tcp 1332894250 | 2025-02-19T22:45:08.613154

110 / tcp -122096153 | 2025-01-28T06:38:19.348019

111 / tcp -801484042 | 2025-02-18T07:48:24.190771

113 / tcp 60948681 | 2025-02-21T11:32:52.356565

119 / tcp 141730637 | 2025-02-10T11:08:18.877477

121 / tcp 740837454 | 2025-02-15T07:16:31.588933

135 / tcp 1302177452 | 2025-02-09T15:12:41.476979

143 / tcp 376198496 | 2025-02-18T15:05:56.615707

175 / tcp -1327660293 | 2025-02-18T22:18:19.424923

179 / tcp -399606100 | 2025-02-16T14:13:55.240234

195 / tcp -893477759 | 2025-02-22T20:45:18.989082

221 / tcp -358801646 | 2025-01-29T10:35:14.395957

264 / tcp -1932800090 | 2025-02-22T21:54:48.243186

427 / tcp 1530390632 | 2025-01-26T12:43:35.753053

443 / tcp -1715152554 | 2025-02-02T00:33:53.537255

Hashes

444 / tcp 2087396567 | 2025-02-17T10:13:04.750141

446 / tcp -1699556818 | 2025-02-07T06:28:48.892540

450 / tcp -1399940268 | 2025-02-11T05:10:10.294981

487 / tcp 1308377066 | 2025-02-02T10:42:46.524921

503 / tcp -1327660293 | 2025-02-11T18:37:08.005295

513 / tcp -1888448627 | 2025-02-01T07:52:38.182892

515 / tcp -746114901 | 2025-01-31T07:57:58.842037

548 / tcp 444328471 | 2025-02-15T23:17:03.415904

554 / tcp -927382641 | 2025-02-07T11:21:58.225011

587 / tcp 745343730 | 2025-02-11T16:05:33.711968

636 / tcp 1732481781 | 2025-02-22T01:00:44.606459

666 / tcp 1300162323 | 2025-02-16T17:44:51.213905

700 / tcp -2074356892 | 2025-02-20T18:23:13.971957

789 / tcp 455076604 | 2025-02-01T10:39:31.943023

805 / tcp 321971019 | 2025-01-26T15:34:19.863322

809 / tcp -1730858130 | 2025-02-01T08:21:40.618535

873 / tcp -1598265216 | 2025-02-20T04:32:29.450026

992 / tcp 1814656027 | 2025-02-17T21:07:18.849357

993 / tcp 971933601 | 2025-02-18T16:51:54.001254

995 / tcp 1685649979 | 2025-02-22T20:37:21.253652

999 / tcp -1216336508 | 2025-02-05T16:26:25.308742

1023 / tcp 291723434 | 2025-02-19T00:16:22.187359

1025 / tcp -358801646 | 2025-02-09T22:49:58.832415

1080 / tcp 1362344524 | 2025-02-01T08:00:11.215189

1099 / tcp -375604792 | 2025-02-15T03:22:06.163219

1153 / tcp -1248408558 | 2025-02-21T20:22:16.404668

1167 / tcp 1763259671 | 2025-02-11T20:09:23.892226

1177 / tcp -10442315 | 2025-02-16T08:33:47.810168

1198 / tcp 913379549 | 2025-02-10T13:01:31.071733

1207 / tcp 1308377066 | 2025-02-14T00:04:12.746792

1234 / tcp 1911457608 | 2025-01-26T21:16:54.354270

1235 / tcp -1996280214 | 2025-02-14T19:27:06.217674

1293 / tcp -1399940268 | 2025-02-02T01:00:28.614202

1337 / tcp -971970408 | 2025-02-13T05:06:44.273397

1365 / tcp -1888448627 | 2025-02-04T10:03:19.013655

1414 / tcp -1399940268 | 2025-02-23T00:45:04.648965

1433 / tcp -1279739995 | 2025-02-11T03:18:34.513091

1443 / tcp -1715152554 | 2025-01-26T05:31:28.417576

Hashes

1447 / tcp 165188539 | 2025-02-11T21:14:15.646532

1455 / tcp -42767839 | 2025-02-05T07:59:26.510908

1459 / tcp -1399940268 | 2025-02-04T23:42:29.735134

11 / tcp

1286504516 | 2025-02-14T05:51:06.325099

13 / tcp

1346417108 | 2025-02-20T01:31:10.044860

15 / tcp

117101543 | 2025-02-23T02:12:26.716962

17 / tcp

1767345577 | 2025-02-06T08:29:17.500611

19 / tcp

676476721 | 2025-02-09T14:17:25.947855

21 / tcp

2116898107 | 2025-02-21T06:36:39.458248

22 / tcp

870256069 | 2025-02-11T03:46:31.421833

25 / tcp

1632932802 | 2025-02-22T18:19:46.626752

26 / tcp

669849225 | 2025-02-07T01:19:45.735837

37 / tcp

-1336879475 | 2025-02-11T22:51:01.067910

49 / tcp

-1056270173 | 2025-01-26T01:22:01.741696

51 / tcp

-1399940268 | 2025-01-30T10:33:59.135586

53 / tcp

-626196604 | 2025-02-06T21:27:17.871868

70 / tcp

-1763883228 | 2025-02-21T14:26:46.309568

79 / tcp

-746345752 | 2025-02-20T06:19:06.623382

100 / tcp

-2017887953 | 2025-02-02T17:58:57.347304

102 / tcp

165188539 | 2025-02-09T10:06:03.205308

104 / tcp

1332894250 | 2025-02-19T22:45:08.613154

110 / tcp

-122096153 | 2025-01-28T06:38:19.348019

111 / tcp

-801484042 | 2025-02-18T07:48:24.190771

113 / tcp

60948681 | 2025-02-21T11:32:52.356565

119 / tcp

141730637 | 2025-02-10T11:08:18.877477

121 / tcp

740837454 | 2025-02-15T07:16:31.588933

135 / tcp

1302177452 | 2025-02-09T15:12:41.476979

143 / tcp

376198496 | 2025-02-18T15:05:56.615707

175 / tcp

-1327660293 | 2025-02-18T22:18:19.424923

179 / tcp

-399606100 | 2025-02-16T14:13:55.240234

195 / tcp

-893477759 | 2025-02-22T20:45:18.989082

221 / tcp

-358801646 | 2025-01-29T10:35:14.395957

264 / tcp

-1932800090 | 2025-02-22T21:54:48.243186

427 / tcp

1530390632 | 2025-01-26T12:43:35.753053

443 / tcp

-1715152554 | 2025-02-02T00:33:53.537255

444 / tcp

2087396567 | 2025-02-17T10:13:04.750141

446 / tcp

-1699556818 | 2025-02-07T06:28:48.892540

450 / tcp

-1399940268 | 2025-02-11T05:10:10.294981

487 / tcp

1308377066 | 2025-02-02T10:42:46.524921

503 / tcp

-1327660293 | 2025-02-11T18:37:08.005295

513 / tcp

-1888448627 | 2025-02-01T07:52:38.182892

515 / tcp

-746114901 | 2025-01-31T07:57:58.842037

548 / tcp

444328471 | 2025-02-15T23:17:03.415904

554 / tcp

-927382641 | 2025-02-07T11:21:58.225011

587 / tcp

745343730 | 2025-02-11T16:05:33.711968

636 / tcp

1732481781 | 2025-02-22T01:00:44.606459

666 / tcp

1300162323 | 2025-02-16T17:44:51.213905

700 / tcp

-2074356892 | 2025-02-20T18:23:13.971957

789 / tcp

455076604 | 2025-02-01T10:39:31.943023

805 / tcp

321971019 | 2025-01-26T15:34:19.863322

809 / tcp

-1730858130 | 2025-02-01T08:21:40.618535

873 / tcp

-1598265216 | 2025-02-20T04:32:29.450026

992 / tcp

1814656027 | 2025-02-17T21:07:18.849357

993 / tcp

971933601 | 2025-02-18T16:51:54.001254

995 / tcp

1685649979 | 2025-02-22T20:37:21.253652

999 / tcp

-1216336508 | 2025-02-05T16:26:25.308742

1023 / tcp

291723434 | 2025-02-19T00:16:22.187359

1025 / tcp

-358801646 | 2025-02-09T22:49:58.832415

1080 / tcp

1362344524 | 2025-02-01T08:00:11.215189

1099 / tcp

-375604792 | 2025-02-15T03:22:06.163219

1153 / tcp

-1248408558 | 2025-02-21T20:22:16.404668

1167 / tcp

1763259671 | 2025-02-11T20:09:23.892226

1177 / tcp

-10442315 | 2025-02-16T08:33:47.810168

1198 / tcp

913379549 | 2025-02-10T13:01:31.071733

1207 / tcp

1308377066 | 2025-02-14T00:04:12.746792

1234 / tcp

1911457608 | 2025-01-26T21:16:54.354270

1235 / tcp

-1996280214 | 2025-02-14T19:27:06.217674

1293 / tcp

-1399940268 | 2025-02-02T01:00:28.614202

1337 / tcp

-971970408 | 2025-02-13T05:06:44.273397

1365 / tcp

-1888448627 | 2025-02-04T10:03:19.013655

1414 / tcp

-1399940268 | 2025-02-23T00:45:04.648965

1433 / tcp

-1279739995 | 2025-02-11T03:18:34.513091

1443 / tcp

-1715152554 | 2025-01-26T05:31:28.417576

1447 / tcp

165188539 | 2025-02-11T21:14:15.646532

1455 / tcp

-42767839 | 2025-02-05T07:59:26.510908

1459 / tcp

-1399940268 | 2025-02-04T23:42:29.735134

1494 / tcp

-829363896 | 2025-02-03T10:24:06.792251

1599 / tcp

2103111368 | 2025-02-22T01:11:25.542670

1604 / tcp

1126993057 | 2025-02-21T10:00:29.004014

1650 / tcp

-1099385124 | 2025-02-13T13:03:59.824208

1660 / tcp

945910976 | 2025-02-07T21:36:20.058845

1723 / tcp

1103582599 | 2025-02-10T14:05:50.563328

1800 / tcp

-1099385124 | 2025-02-06T19:39:07.060818