GeneralInformation

Country	China
City	Hangzhou
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

13 15 17 19 22 26 37 49 70 89 96 102 110 111 119 179 195 221 264 311 314 427 443 444 461 465 503 513 548 554 587 689 789 902 993 995 1023 1025 1080 1099 1177 1190 1195 1200 1234 1414 1433 1443 1515 1588 1599 1604 1723 1800 1801 1911 1956 1973 1980 2003 2008 2031 2056 2067 2069 2081 2086 2087 2101 2121 2154 2323 2332 2345 2376 2404 2423 2455 2554 2567 2761 2762 2850 3001 3009 3015 3042 3050 3096 3114 3115 3123 3136 3140 3146 3160 3171 3197 3199 3260 3268 3269 3299 3301 3389 3590 3780 3922 4022 4042 4150 4157 4172 4242 4430 4431 4443 4451 4463 4477 4499 4506 4620 4899 4911 4949 5001 5006 5007 5009 5022 5025 5090 5105 5120 5130 5172 5222 5224 5229 5241 5244 5249 5261 5270 5274 5278 5279 5432 5435 5444 5503 5597 5858 5915 5938 5984 5986 6001 6008 6011 6021 6080 6405 6511 6513 6590 6666 6667 6668 6686 6699 7001 7022 7071 7084 7171 7415 7443 7474 7548 7601 7634 7773 8007 8009 8021 8031 8032 8053 8079 8081 8083 8099 8119 8126 8154 8167 8169 8173 8178 8200 8322 8385 8408 8409 8526 8554 8563 8565 8568 8574 8649 8688 8728 8787 8788 8805 8813 8818 8826 8830 8859 8866 8867 8880 9000 9002 9015 9042 9051 9060 9069 9076 9084 9100 9106 9126 9144 9151 9154 9168 9170 9186 9306 9398 9418 9443 9529 9530 9633 9872 9876 9885 9943 9950 9999 10000 10013 10066 10086 10210 10250 10302 10397 10554 11112 11300 11920 12000 12056 12114 12162 12167 12177 12184 12226 12236 12239 12242 12283 12284 12298 12317 12319 12340 12366 12389 12395 12407 12431 12436 12439 12493 12498 12500 12508 12520 12527 12549 12553 12562 12565 12569 12570 12585 12601 12902 14265 14344 14524 15000 16027 16029 16031 16037 16058 16064 16077 16097 16443 16993 18001 18021 18030 18049 18066 18102 18109 18200 18245 18765 20110 20256 20892 21025 21240 21250 21252 21261 21294 21306 21310 21379 22556 23023 24181 27015 28015 30002 30003 30006 30009 30017 30019 30110 31001 32101 33060 33422 33722 33822 34022 34222 34322 34422 34622 34822 34922 35000 35122 35522 36322 36622 36822 37422 37622 37777 37822 38522 38822 39022 40022 40322 40722 42022 42322 42443 42622 43122 43322 43722 44158 44301 44307 44333 44522 44622 44722 44818 44822 44922 45001 45022 45444 45822 45886 45922 46022 46322 46443 46522 46622 46722 47080 47122 47222 48001 48022 48122 48322 48522 48622 48922 49122 49501 49688 49690 49722 49922 50000 50080 51122 51294 51822 52222 52322 52522 52722 52922 53022 53122 53222 53822 54422 54522 54622 55000 55443 55470 55554 55555 56022 56122 57022 57122 57222 57522 58022 58322 58722 59122 59222 59522 59722 60022 61613 63210 63256 63260 64295 64477 64683

13 / tcp

-1036370807 | 2025-01-13T08:25:54.765995

JDWP-Handshake

15 / tcp

1741579575 | 2025-02-04T08:48:06.466078

17 / tcp

344087494 | 2025-02-04T23:01:40.886670

"When a stupid man is doing something he is ashamed of, he always declares
 that it is his duty." George Bernard Shaw (1856-1950)
\x00

19 / tcp

829384519 | 2025-02-05T11:14:37.181709

 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV

22 / tcp

2078509815 | 2025-02-04T06:10:35.789972

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.7
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQCvXhW7Ii3yktfvXm2fgaQLNhtLoOmKRm6v6fNsL2Ehyr8E
GdfTWrFltH+lezD3vYlZV83BNR/laERvrIooM9AhapB1n4l/aauYp+gO+GS3YpVVP2Rh1mZ1eTCS
HpVzvP5XjlK9meBKLVmIR8iw0itxvXl5XpjMAtgVSYrnftbBeqR2Vmy0KW80++q1fh3/5Kj92cWC
XELgt83zsurpRim2OmGUzE9Vr5yt+pLTIfoFwD3q/Epn/FbfU/59eLCAvaah68Ua9+qOfGEb8/uU
KqUoYW8Lqqm+RxlnBpKCGN+gxMrdEnOU+hhKt0xrBfk7YsBBLtedFm3Ol/yC4fkELUeL
Fingerprint: ee:85:cf:5f:fe:f2:c6:8f:c6:4d:63:d7:7e:79:42:56

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

26 / tcp

921225407 | 2025-01-19T04:24:55.674849

\x00\x00\x00\x04\x00\x00\x00\x00\x00

37 / tcp

-253878554 | 2025-01-10T19:18:20.915136

\\xe9X\\x03M

49 / tcp

-359657882 | 2025-02-06T22:29:44.516427

GBPK\xc3\xbb\xc3\xb7n\\xc2\\x93W\xc2\xaf\\xc2\\x86\\xc2\\x93x@\xc2\xa9\\x0e\xc3\x8a*\\xc2\\x9bS

70 / tcp

-1763883228 | 2025-01-17T21:30:31.142322

HTTP/1.1 400 Bad Request
Server: vista/0.7
Content-Type: text/html
Connection: close

89 / tcp

1723769361 | 2025-01-31T21:02:06.571824

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

96 / tcp

1975288991 | 2025-01-26T04:21:43.189569

OPTI

102 / tcp

-1399940268 | 2025-02-03T13:22:04.292081

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

110 / tcp

1911457608 | 2025-01-22T20:44:43.900344

\x00[\x00\x00\x00\x00\x00\x00

111 / tcp

-1327660293 | 2025-02-07T21:54:09.159435

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

119 / tcp

141730637 | 2025-02-08T21:19:37.227305

HTTP/1.0 200 OK
Server: Proxy

179 / tcp

-399606100 | 2025-02-01T03:13:23.874707

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

195 / tcp

401555314 | 2025-02-07T05:59:56.355283

NB[GFXjA^R

221 / tcp

819727972 | 2025-01-11T07:15:43.537164

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

264 / tcp

-1709030885 | 2025-01-25T19:45:42.277917

SSH-

311 / tcp

1975288991 | 2025-01-21T18:38:08.626150

OPTI

314 / tcp

-1399940268 | 2025-02-01T21:17:07.208468

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

427 / tcp

1327409218 | 2025-02-04T19:57:24.595566

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://localhost.localdomain\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://localhost.localdomain\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (0

443 / tcp

-1715152554 | 2025-01-14T16:15:51.168985

Hashes

hash

-797701509

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 14 Jan 2025 16:15:51 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://112.124.55.150:443/

444 / tcp

-741835184 | 2025-02-07T05:40:36.995229

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Fri, 07 Feb 2025 05:40:36 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

461 / tcp

-2089734047 | 2025-01-20T06:12:38.220185

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

465 / tcp

897328069 | 2025-01-27T10:45:58.237407

220 mail.scott000.com ESMTP

503 / tcp

-1032713145 | 2025-01-27T02:50:59.607392

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

513 / tcp

-2033111675 | 2025-02-03T05:05:02.453420

~djb

548 / tcp

-1128967010 | 2025-01-28T13:29:32.971169

HTTP/1.1 200 OK
Server: Server
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, nosnippet, notranslate, noimageindex
Content-Type: text/html; charset=utf-8

554 / tcp

1060450357 | 2025-01-27T14:53:46.682711

RTSP/1.0 200 OK
CSeq: 1
Keep-Alive: timeout=10, max=1000
Public: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER, GET_PARAMETER
Connection: Keep-Alive

587 / tcp

745343730 | 2025-01-27T05:42:06.208980

220 smtp.qq.com Esmtp QQ Mail Server

689 / tcp

-1399940268 | 2025-01-21T20:05:45.381900

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

789 / tcp

-1810987450 | 2025-01-20T19:16:28.245540

\xc3\xbf

902 / tcp

1956828827 | 2025-02-07T20:24:33.804675

220 VMware Authentication Daemon Version 1.10: SSL Required, Se
rverDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , , NFCSSL supported/t

993 / tcp

1353260875 | 2025-01-19T18:25:00.025315

\x00[g\xc2\x95N\x7f\x00\x00

995 / tcp

-2113068813 | 2025-01-28T00:01:09.098709

+OK POP3 server ready\n

1023 / tcp

-1681927087 | 2025-01-21T22:36:29.870589

kjnkjabhbanc283ubcsbhdc72

1025 / tcp

1911457608 | 2025-01-19T01:03:45.421412

\x00[\x00\x00\x00\x00\x00\x00

1080 / tcp

1362344524 | 2025-01-25T20:41:00.336672

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1099 / tcp

-1733106930 | 2025-01-11T19:40:29.144570

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

1177 / tcp

-154107716 | 2025-01-13T23:29:15.908159

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST ...

1190 / tcp

1911457608 | 2025-02-06T20:26:26.438750

\x00[\x00\x00\x00\x00\x00\x00

1195 / tcp

921225407 | 2025-02-02T11:18:45.803076

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1200 / tcp

2087396567 | 2025-01-25T23:59:44.023193

kjnkjabhbanc283ubcsbhdc72

1234 / tcp

1911457608 | 2025-01-26T15:32:28.391474

\x00[\x00\x00\x00\x00\x00\x00

1414 / tcp

2098371729 | 2025-02-04T07:21:31.686798

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

1433 / tcp

555056254 | 2025-02-05T00:09:40.462936

MSSQL Server\nVersion: 171050560 (0xa320640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: 3NXCU7QCCJGSTII\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: 3NXCU7QCCJGSTII\nNetBIOS_Computer_Name: 3NXCU7QCCJGSTII\nDNS_Domain_Name: 3NXCU7QCCJGSTII\nDNS_Computer_Name: 3NXCU7QCCJGSTII\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 01:19:47 +0000 UTC\n\n

1443 / tcp

-1715152554 | 2025-01-14T16:15:48.152255

Hashes

hash

2077905957

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 14 Jan 2025 16:15:48 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://112.124.55.150:443/

1515 / tcp

-971970408 | 2025-02-04T08:51:44.221016

1588 / tcp

-1230049476 | 2025-01-10T07:16:45.595214

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

1599 / tcp

-1036370807 | 2025-01-23T02:54:32.533081

JDWP-Handshake

1604 / tcp

792973478 | 2025-01-30T07:32:16.747255

[®{

1723 / tcp

1103582599 | 2025-01-31T01:05:28.646679

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

1800 / tcp

2143387245 | 2025-02-02T21:52:57.992072

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

1801 / tcp

-1299899661 | 2025-01-31T04:09:12.888900

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x97W\\xcd[\\x98\\xc4\\x1aJ\\xa5\xd1\xbf\\xf9\\xbd\\xc7\\xce\\xfd92d3\\x10\\x01\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1911 / tcp

-2096652808 | 2025-02-05T18:27:02.749915

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1956 / tcp

-2089734047 | 2025-02-01T10:55:06.362647

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1973 / tcp

1911457608 | 2025-02-03T00:05:23.600594

\x00[\x00\x00\x00\x00\x00\x00

1980 / tcp

-1399940268 | 2025-02-04T22:09:04.699234

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2003 / tcp

-2031152423 | 2025-01-16T17:50:50.242016

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

2008 / tcp

1689518693 | 2025-02-06T23:26:33.371139

[¼/

2031 / tcp

1911457608 | 2025-01-14T12:57:37.551220

\x00[\x00\x00\x00\x00\x00\x00

2056 / tcp

-1399940268 | 2025-01-13T19:51:13.645849

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2067 / tcp

1975288991 | 2025-02-05T19:19:01.295393

OPTI

2069 / tcp

-1399940268 | 2025-01-18T17:48:36.870045

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2081 / tcp

1911457608 | 2025-01-23T07:17:38.236256

\x00[\x00\x00\x00\x00\x00\x00

2086 / tcp

-2118655245 | 2025-02-01T02:54:53.048526

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

2087 / tcp

171352214 | 2025-02-06T16:10:19.018634

-ERR client ip is not in whitelist

2101 / tcp

1278527606 | 2025-02-01T04:00:47.378569

SSH-2.0-Teleport

2121 / tcp

141730637 | 2025-01-21T06:14:15.007386

HTTP/1.0 200 OK
Server: Proxy

2154 / tcp

-784071826 | 2025-02-08T22:48:03.900136

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

2323 / tcp

1662205251 | 2025-02-07T09:55:41.720707

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

2332 / tcp

-842670865 | 2025-01-31T09:15:54.094491

0@

2345 / tcp

921225407 | 2025-01-27T02:58:42.042530

\x00\x00\x00\x04\x00\x00\x00\x00\x00

2376 / tcp

-1795027372 | 2025-01-31T02:28:12.009986

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

2404 / tcp

819727972 | 2025-01-19T04:37:47.736806

SSH-2.0-OpenSSH_7.4

2423 / tcp

632542934 | 2025-01-11T03:52:45.589492

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2455 / tcp

1842524259 | 2025-02-09T00:45:25.413121

2554 / tcp

-1888448627 | 2025-01-16T19:57:12.000006

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

2567 / tcp

-832380282 | 2025-01-30T23:25:32.265699

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

2761 / tcp

-1099385124 | 2025-01-11T05:19:52.396017

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

2762 / tcp

575925250 | 2025-02-04T12:10:22.288300

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

2850 / tcp

-1888448627 | 2025-01-29T23:48:56.567003

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3001 / tcp

-1261090339 | 2025-01-18T09:37:59.761828

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

3009 / tcp

819727972 | 2025-01-31T23:52:40.825567

SSH-2.0-OpenSSH_7.4

3015 / tcp

819727972 | 2025-01-27T06:19:39.583189

SSH-2.0-OpenSSH_7.4

3042 / tcp

-1399940268 | 2025-01-22T05:51:10.849190

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3050 / tcp

-1839934832 | 2025-01-23T14:12:54.168452

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3096 / tcp

1911457608 | 2025-01-15T15:39:32.949685

\x00[\x00\x00\x00\x00\x00\x00

3114 / tcp

-653033013 | 2025-01-17T19:38:35.320594

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

3115 / tcp

-1399940268 | 2025-02-06T16:27:37.258801

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3123 / tcp

-1399940268 | 2025-01-31T01:01:52.897032

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3136 / tcp

-2089734047 | 2025-01-25T22:16:04.683745

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3140 / tcp

321971019 | 2025-02-01T23:03:49.181319

-ERR client ip is not in whitelist\r

3146 / tcp

366084633 | 2025-02-05T15:55:48.581106

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

3160 / tcp

366084633 | 2025-01-13T07:10:11.736095

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

3171 / tcp

-832380282 | 2025-01-25T15:50:34.321824

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

3197 / tcp

1761482307 | 2025-01-11T02:10:07.915822

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

3199 / tcp

-832380282 | 2025-01-29T20:14:01.516706

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

3260 / tcp

-862070606 | 2025-01-22T08:56:15.712206

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n

3268 / tcp

-2031078612 | 2025-02-05T03:38:08.676010

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: http://proxy.ces.org.tw:3000/login?url=http%3A%2F%2Floginbyurl.wanfangdata.com.cn%2F

3269 / tcp

-2089734047 | 2025-01-25T13:19:57.074764

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3299 / tcp

-321444299 | 2025-01-30T21:36:32.514488

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

3301 / tcp

-1399940268 | 2025-02-04T05:05:44.670355

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3389 / tcp

1908555143 | 2025-01-24T11:57:43.144823

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x1f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: 7BKOHJ0F5NJTKEI\nProduct_Version: 10.0.14393 Ntlm 15\nOS: Windows 10, Version 1607/Windows Server 2016, Version 1607\nNetBIOS_Domain_Name: 7BKOHJ0F5NJTKEI\nNetBIOS_Computer_Name: 7BKOHJ0F5NJTKEI\nDNS_Domain_Name: 7bkohj0f5njtkeim\nDNS_Computer_Name: 7bkohj0f5njtkeim\nSystem_Time: 2024-01-22 08:43:54 +0000 UTC\n\n

3590 / tcp

205347087 | 2025-02-03T03:39:59.003463

SSH-25453-Cisco-3524665.35\n

3780 / tcp

-1032713145 | 2025-02-03T18:25:30.480180

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

3922 / tcp

-2031152423 | 2025-01-11T19:41:43.557314

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

4022 / tcp

1911457608 | 2025-02-07T09:08:28.420516

\x00[\x00\x00\x00\x00\x00\x00

4042 / tcp

-1996280214 | 2025-02-01T09:07:01.646071

\x06\x04\x05@

4150 / tcp

1975288991 | 2025-01-14T16:34:50.793180

OPTI

4157 / tcp

2009276894 | 2025-01-25T22:31:13.976484

N
5.6.40-logÅTUNEgVX2
¢!xlB...

4172 / tcp

-1013082686 | 2025-01-29T23:45:40.534558

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

4242 / tcp

-1341662640 | 2025-01-28T18:49:10.240819

HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

4430 / tcp

1741579575 | 2025-02-03T23:15:24.339628

4431 / tcp

-2031152423 | 2025-02-05T19:42:55.995944

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

4443 / tcp

1140068775 | 2025-02-03T13:25:39.425890

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html
X-Frame-Options: DENY

Name: VMware ESXi
FullName: VMware ESXi 6.7.0 build-8169922
Vendor: VMware, Inc.
Version: 6.7.0
Build: 8169922
LocaleVersion: INTL
LocaleBuild: 000
OsType: vmnix-x86
ProductLineId: embeddedEsx
ApiType: HostAgent
ApiVersion: 6.7

4451 / tcp

-1399940268 | 2025-01-28T01:07:38.682317

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4463 / tcp

921225407 | 2025-02-03T20:36:38.500408

\x00\x00\x00\x04\x00\x00\x00\x00\x00

4477 / tcp

677934968 | 2025-01-19T02:21:00.615278

lm^)Q

4499 / tcp

-2046514463 | 2025-02-06T00:05:21.200947

AB\x01\t

4506 / tcp

1690634669 | 2025-02-03T03:03:06.900711

4620 / tcp

-2089734047 | 2025-02-07T19:12:51.528306

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4899 / tcp

660175493 | 2025-02-03T14:11:46.512480

4911 / tcp

1761482307 | 2025-01-12T04:24:24.528154

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

4949 / tcp

1453929220 | 2025-02-08T05:24:08.638446

[ç

5001 / tcp

-1111515360 | 2025-02-04T23:58:59.416970

remshd: Kerberos Authentication not enabled.

5006 / tcp

2087396567 | 2025-01-29T11:27:02.976337

kjnkjabhbanc283ubcsbhdc72

5007 / tcp

165188539 | 2025-02-01T13:11:33.630485

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

5009 / tcp

-1413918021 | 2025-01-21T02:05:46.662112

acpp\\x00\\x03\\x00\\x01E\\xe2\\x05\\x98\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xff\\xff\\xff\\xf0\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00

5022 / tcp

-1248408558 | 2025-01-24T15:50:23.111418

220 MikroTik FTP server (MikroTik 6.44.3) ready

5025 / tcp

1690634669 | 2025-01-16T19:20:58.317487

5090 / tcp

-441419608 | 2025-01-31T02:27:46.210610

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

5105 / tcp

1911457608 | 2025-01-19T00:38:24.910901

\x00[\x00\x00\x00\x00\x00\x00

5120 / tcp

1700949307 | 2025-01-21T11:22:03.843682

HTTP/1.1 200 
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Referer-Policy: no-referrer-when-downgrade
X-Permitted-Cross-Domain-Policies: all
X-Download-Options: noopen
Expires: Wed, 31 Dec 1969 23:59:59 GMT
Cache-Control: no-cache
Pragma: no-cache
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Accept-Ranges: bytes
Content-Type: text/html;charset=

5130 / tcp

-1399940268 | 2025-01-28T15:19:29.990799

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5172 / tcp

539065883 | 2025-02-06T21:45:57.139394

5222 / tcp

-1142844482 | 2025-01-13T09:33:46.247391

ÿûSOYO_SIP VBNQyQSKc settings
Password:

5224 / tcp

819727972 | 2025-02-05T16:43:01.234354

SSH-2.0-OpenSSH_7.4

5229 / tcp

-2096652808 | 2025-01-29T17:06:25.803891

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5241 / tcp

45131230 | 2025-01-17T06:31:03.745177

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

5244 / tcp

-1399940268 | 2025-01-14T22:18:30.206251

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5249 / tcp

1911457608 | 2025-01-24T22:32:39.068343

\x00[\x00\x00\x00\x00\x00\x00

5261 / tcp

-1399940268 | 2025-01-21T22:59:04.906164

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5270 / tcp

1059192566 | 2025-02-01T06:38:07.257484

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div

5274 / tcp

-457235091 | 2025-01-29T20:55:44.772069

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

5278 / tcp

-2089734047 | 2025-01-16T02:05:49.655013

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5279 / tcp

1911457608 | 2025-01-31T20:26:32.938661

\x00[\x00\x00\x00\x00\x00\x00

5432 / tcp

-1399940268 | 2025-01-19T09:08:21.176834

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5435 / tcp

-1399940268 | 2025-02-04T21:41:25.101047

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5444 / tcp

1332894250 | 2025-02-07T04:58:22.748009

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

5503 / tcp

-1399940268 | 2025-01-31T17:38:28.631528

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5597 / tcp

1504401647 | 2025-01-14T18:26:55.360628

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

5858 / tcp

-1399940268 | 2025-01-29T02:04:25.888399

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5915 / tcp

-840053751 | 2025-01-16T16:11:53.120601

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET,PUT,DELETE OPTIONS
Access-Control-Allow-Headers: Origin, Authorization, Accept,Content-Type
Access-Control-Allow-Credentials: true
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET,PUT,DELETE OPTIONS
Access-Control-Allow-Headers: Origin, Authorization, Accept,Content-Type
Access-Control-Allow-Credentials: tru

5938 / tcp

819727972 | 2025-02-06T08:28:45.598699

SSH-2.0-OpenSSH_7.4

5984 / tcp

1999272906 | 2025-01-25T05:44:57.637368

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

2087396567 | 2025-02-08T00:00:56.064324

kjnkjabhbanc283ubcsbhdc72

6001 / tcp

-1399940268 | 2025-01-31T23:45:18.260271

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6008 / tcp

671605376 | 2025-01-25T00:35:40.575135

SSH-2.0-OpenSSH_X.X

6011 / tcp

1504401647 | 2025-01-24T12:41:52.176868

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

6021 / tcp

-358801646 | 2025-01-21T22:44:23.043852

SSH-2.0-OpenSSH_6.6.1

6080 / tcp

0 | 2025-02-02T16:43:39.917614

Hashes

hash

1865391109

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
content-length: 0

6405 / tcp

-2089734047 | 2025-01-25T08:47:45.220545

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

6511 / tcp

-1399940268 | 2025-01-28T10:05:19.313084

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6513 / tcp

165188539 | 2025-01-30T00:02:38.173289

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

6590 / tcp

-1399940268 | 2025-01-23T03:53:01.585704

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6666 / tcp

372433470 | 2025-01-14T14:49:24.941876

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

6667 / tcp

-1970931525 | 2025-02-03T04:39:30.377862

À0¨ã

6668 / tcp

321971019 | 2025-01-23T02:42:38.423911

-ERR client ip is not in whitelist\r

6686 / tcp

-1399940268 | 2025-02-01T00:25:46.262854

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6699 / tcp

-465507598 | 2025-02-08T23:56:43.915705

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae291e_PS-000-01iee5_23195-7718

7001 / tcp

641070437 | 2025-01-23T02:22:45.876275

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae2576b8dddc78c2c56b6d959693af

7022 / tcp

321971019 | 2025-02-04T13:44:36.288790

-ERR client ip is not in whitelist\r

7071 / tcp

-222277909 | 2025-01-23T19:20:15.830269

0@@

7084 / tcp

1996932384 | 2025-01-25T20:46:38.824272

"raop" nonce

7171 / tcp

-1399940268 | 2025-01-26T09:32:11.382994

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7415 / tcp

-2089734047 | 2025-02-04T17:58:03.091658

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

7443 / tcp

-584993230 | 2025-01-16T20:36:57.436336

HTTP/1.1 400 Bad Request
Server:  
Content-Type: text/html
Connection: close

7474 / tcp

-2118655245 | 2025-01-29T14:28:57.976676

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

7548 / tcp

-971970408 | 2025-02-08T20:51:08.471183

7601 / tcp

-2096652808 | 2025-01-28T09:23:29.704064

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

7634 / tcp

1996932384 | 2025-02-07T12:20:11.477254

"raop" nonce

7773 / tcp

1492413928 | 2025-01-25T00:09:59.161572

SSH-2.0-OpenSSH_7.5

8007 / tcp

1320285193 | 2025-02-01T13:11:41.446829

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

8009 / tcp

-136006866 | 2025-02-01T05:35:26.337772

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

8021 / tcp

-1028730644 | 2025-01-12T05:26:21.188748

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive

8031 / tcp

-1825431268 | 2025-01-24T02:50:50.227270

HTTP/1.1 422 Bad Request
Content-Type: text/html

8032 / tcp

-1839934832 | 2025-01-19T10:49:21.188671

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8053 / tcp

-1032713145 | 2025-01-24T15:42:53.404678

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8079 / tcp

-1839934832 | 2025-01-17T19:21:40.678561

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8081 / tcp

320677201 | 2025-01-31T07:08:02.856610

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

8083 / tcp

-314039103 | 2025-01-15T15:54:39.359138

Surnom.
Sorry, that nickname format is invalid.

8099 / tcp

-1639624373 | 2025-01-25T18:28:33.043521

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28c9_CS-000-01kgX25_35624-12255

8119 / tcp

-1399940268 | 2025-01-24T02:54:16.640391

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8126 / tcp

921225407 | 2025-01-20T17:24:45.161379

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8154 / tcp

-1114821551 | 2025-02-07T11:32:05.297901

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

8167 / tcp

-1428621233 | 2025-01-20T21:11:22.993332

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8169 / tcp

-1399940268 | 2025-01-18T13:47:59.606450

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8173 / tcp

-1399940268 | 2025-01-30T02:36:37.222154

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8178 / tcp

-1428621233 | 2025-01-21T19:40:17.827849

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8200 / tcp

1320285193 | 2025-02-03T08:19:13.501473

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

8322 / tcp

165188539 | 2025-01-25T03:09:07.543032

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8385 / tcp

-2033111675 | 2025-01-12T07:33:37.815866

~djb

8408 / tcp

-1598265216 | 2025-01-27T05:00:51.458268

@RSYNCD: 31.0

8409 / tcp

-2017887953 | 2025-01-10T21:04:31.937492

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

8526 / tcp

921225407 | 2025-01-10T20:19:45.163247

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8554 / tcp

2087396567 | 2025-01-30T22:31:28.914240

kjnkjabhbanc283ubcsbhdc72

8563 / tcp

321971019 | 2025-01-14T19:18:45.572730

-ERR client ip is not in whitelist\r

8565 / tcp

-2031152423 | 2025-01-22T21:05:01.961856

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8568 / tcp

-1730858130 | 2025-01-14T16:25:10.860797

RFB 003.008
VNC:
  Protocol Version: 3.8

8574 / tcp

1911457608 | 2025-01-29T04:10:13.442523

\x00[\x00\x00\x00\x00\x00\x00

8649 / tcp

842535728 | 2025-01-14T04:17:00.863186

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

8688 / tcp

-1737707071 | 2025-01-25T19:11:04.291150

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

8728 / tcp

-1746074029 | 2025-01-13T14:43:19.610171

101 imqbroker =unV\r\n

8787 / tcp

1911457608 | 2025-01-23T23:43:25.212366

\x00[\x00\x00\x00\x00\x00\x00

8788 / tcp

-1399940268 | 2025-01-26T22:26:44.983787

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8805 / tcp

-1399940268 | 2025-01-31T20:21:27.369426

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8813 / tcp

1426971893 | 2025-02-02T19:29:40.311112

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

8818 / tcp

1911457608 | 2025-01-12T19:07:14.394923

\x00[\x00\x00\x00\x00\x00\x00

8826 / tcp

1911457608 | 2025-02-04T12:30:19.835024

\x00[\x00\x00\x00\x00\x00\x00

8830 / tcp

1911457608 | 2025-02-01T10:30:20.695932

\x00[\x00\x00\x00\x00\x00\x00

8859 / tcp

-2096652808 | 2025-01-10T11:38:56.277542

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8866 / tcp

-1399940268 | 2025-01-31T21:22:58.597527

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8867 / tcp

-1399940268 | 2025-01-11T00:37:03.394817

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8880 / tcp

171352214 | 2025-02-07T07:28:29.299144

-ERR client ip is not in whitelist

9000 / tcp

-1167054895 | 2025-02-02T03:01:29.677581

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24a9_VM-TPE-019Bk119_8663-62725

9002 / tcp

841014058 | 2025-01-26T14:44:54.772470

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

9015 / tcp

-2107996212 | 2025-02-01T17:51:26.970285

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

9042 / tcp

-1733645023 | 2025-01-16T01:11:31.510048

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

9051 / tcp

1741579575 | 2025-01-16T22:21:13.772907

9060 / tcp

-358801646 | 2025-01-11T08:53:27.829735

SSH-2.0-OpenSSH_6.6.1

9069 / tcp

165188539 | 2025-01-29T05:00:50.061302

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9076 / tcp

-1888448627 | 2025-02-08T15:02:56.774130

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9084 / tcp

1989907056 | 2025-01-10T11:01:14.796893

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

9100 / tcp

1624217396 | 2025-02-02T11:12:06.939888

HELO:10.3.6.0.false\nAS:2048\nHL:19

9106 / tcp

-1099385124 | 2025-01-24T23:55:26.343752

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

9126 / tcp

-2089734047 | 2025-02-04T21:52:34.062125

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9144 / tcp

-792826324 | 2025-01-26T11:16:23.474549

220 FTP server ready - login please

9151 / tcp

539065883 | 2025-01-30T23:54:19.786618

9154 / tcp

-2140303521 | 2025-02-02T04:21:59.393333

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

9168 / tcp

-1733645023 | 2025-01-15T00:10:26.784741

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

9170 / tcp

1381121983 | 2025-01-19T20:00:05.062718

Notify\r\n

9186 / tcp

1615193817 | 2025-02-04T06:34:29.970556

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

9306 / tcp

921225407 | 2025-01-20T04:21:05.047389

\x00\x00\x00\x04\x00\x00\x00\x00\x00

9398 / tcp

2087396567 | 2025-01-28T01:06:48.744122

kjnkjabhbanc283ubcsbhdc72

9418 / tcp

-1261053701 | 2025-01-10T15:02:34.578642

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

9443 / tcp

-2146231800 | 2025-01-26T09:26:08.687162

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 26 Jan 2025 09:26:08 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://112.124.55.150:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

9529 / tcp

819727972 | 2025-01-15T02:16:45.886302

SSH-2.0-OpenSSH_7.4

9530 / tcp

493955023 | 2025-01-28T19:19:45.497566

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

9633 / tcp

2087396567 | 2025-02-08T05:02:25.163725

kjnkjabhbanc283ubcsbhdc72

9872 / tcp

321971019 | 2025-01-22T11:25:14.292426

-ERR client ip is not in whitelist\r

9876 / tcp

1721921834 | 2025-01-19T12:17:22.779740

\\x00\\x00\\x01+\\x00\\x00\\x00_{"code":0,"flag":1,"language":"JAVA","opaque":0,"serializeTypeCurrentRPC":"JSON","version":433}{"brokerAddrTable":{"broker-a":{"brokerAddrs":{0:"180.116.172.66:10911"},"brokerName":"broker-a","cluster":"DefaultCluster","enableActingMaster":false}},"clusterAddrTable":{"DefaultCluster":["broker-a"]}}

9885 / tcp

1519486042 | 2025-01-23T23:48:23.056991

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

9943 / tcp

1712606111 | 2025-01-29T04:13:01.159794

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1282_PSzqstdxyw34_8689-21922

9950 / tcp

-2089734047 | 2025-01-30T12:58:52.373761

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9999 / tcp

1161309183 | 2025-02-08T01:00:50.791490

ProxyServer is ready

10000 / tcp

2087396567 | 2025-01-30T16:42:23.427885

kjnkjabhbanc283ubcsbhdc72

10013 / tcp

632542934 | 2025-02-04T05:22:52.367767

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

10066 / tcp

-358801646 | 2025-01-20T22:01:24.323282

SSH-2.0-OpenSSH_6.6.1

10086 / tcp

-1036370807 | 2025-02-03T17:56:16.096925

JDWP-Handshake

10210 / tcp

1761482307 | 2025-01-25T00:53:22.540157

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

10250 / tcp

1189133115 | 2025-01-24T16:11:39.791992

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

10302 / tcp

-2089734047 | 2025-01-26T22:27:14.146439

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10397 / tcp

410249975 | 2025-01-24T11:12:43.692044

LNS READY<>

10554 / tcp

-971970408 | 2025-01-19T08:41:44.799284

11112 / tcp

-747911285 | 2025-02-06T18:06:42.017666

\xc2\xaa

11300 / tcp

165188539 | 2025-01-22T22:13:27.852810

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

11920 / tcp

-1399940268 | 2025-01-23T21:27:09.542458

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12000 / tcp

-1461540015 | 2025-01-22T11:19:58.206285

audio 0 RTP/AVP 18 4 3 8 0 101
a

12056 / tcp

366084633 | 2025-01-26T14:02:47.306671

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

12114 / tcp

921225407 | 2025-01-31T03:56:06.854421

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12162 / tcp

1161309183 | 2025-02-01T06:21:41.961649

ProxyServer is ready

12167 / tcp

921225407 | 2025-02-01T13:37:19.950294

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12177 / tcp

-1329831334 | 2025-01-31T17:28:48.750837

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

12184 / tcp

-375604792 | 2025-01-22T18:51:44.403797

220 Microsoft FTP Service

12226 / tcp

-1327660293 | 2025-01-31T11:45:59.971125

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12236 / tcp

1911457608 | 2025-01-19T11:36:47.275849

\x00[\x00\x00\x00\x00\x00\x00

12239 / tcp

51259122 | 2025-01-22T15:48:52.080501

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

12242 / tcp

819727972 | 2025-01-30T00:08:05.139094

SSH-2.0-OpenSSH_7.4

12283 / tcp

-1399940268 | 2025-01-21T22:51:41.858432

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12284 / tcp

819727972 | 2025-01-19T22:39:35.186743

SSH-2.0-OpenSSH_7.4

12298 / tcp

-249504111 | 2025-01-18T05:26:36.646913

\x00[xU-\x7f\x00\x00

12317 / tcp

-1399940268 | 2025-02-01T16:40:02.159135

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12319 / tcp

-2089734047 | 2025-01-12T14:48:31.638233

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12340 / tcp

321971019 | 2025-02-02T12:52:29.658773

-ERR client ip is not in whitelist\r

12366 / tcp

1911457608 | 2025-01-24T18:25:35.820168

\x00[\x00\x00\x00\x00\x00\x00

12389 / tcp

671605376 | 2025-01-26T18:11:10.655874

SSH-2.0-OpenSSH_X.X

12395 / tcp

-1399940268 | 2025-01-12T22:34:31.497121

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12407 / tcp

819727972 | 2025-01-31T12:53:49.923185

SSH-2.0-OpenSSH_7.4

12431 / tcp

-2107996212 | 2025-01-28T22:02:05.272835

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

12436 / tcp

-2089734047 | 2025-01-29T11:57:58.053362

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12439 / tcp

819727972 | 2025-01-18T19:48:00.134894

SSH-2.0-OpenSSH_7.4

12493 / tcp

165188539 | 2025-02-08T17:47:07.190484

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12498 / tcp

-1399940268 | 2025-02-08T21:26:44.764923

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12500 / tcp

945910976 | 2025-01-27T18:57:27.887459

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

12508 / tcp

-1598265216 | 2025-01-31T10:31:16.945637

@RSYNCD: 31.0

12520 / tcp

-1399940268 | 2025-01-11T03:40:57.308999

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12527 / tcp

-358801646 | 2025-02-06T17:23:46.170903

SSH-2.0-OpenSSH_6.6.1

12549 / tcp

-375604792 | 2025-01-20T16:33:45.957998

220 Microsoft FTP Service

12553 / tcp

-616720387 | 2025-01-31T15:37:05.246992

SSH-2.0-SSHD_0.7.6

12562 / tcp

-1279886438 | 2025-01-13T20:04:55.851890

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

12565 / tcp

-2089734047 | 2025-01-13T07:31:36.799400

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12569 / tcp

1504401647 | 2025-01-28T12:25:53.922453

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

12570 / tcp

366084633 | 2025-01-24T15:20:58.552554

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

12585 / tcp

165188539 | 2025-01-11T00:25:23.552518

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12601 / tcp

-1538260461 | 2025-02-07T18:57:31.806103

\x01\x00\x00\x00

12902 / tcp

165188539 | 2025-01-29T06:24:59.785188

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

14265 / tcp

-358801646 | 2025-01-31T07:43:25.709549

SSH-2.0-OpenSSH_6.6.1

14344 / tcp

-1730858130 | 2025-01-26T22:02:58.349795

RFB 003.008
VNC:
  Protocol Version: 3.8

14524 / tcp

45131230 | 2025-01-11T16:00:37.244121

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

15000 / tcp

1509130814 | 2025-02-08T10:36:52.752305

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae29f9_PS-000-01Q6N23_11336-21575

16027 / tcp

1308377066 | 2025-01-13T15:51:17.068375

ncacn_http/1.0

16029 / tcp

632542934 | 2025-01-18T10:22:34.669659

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

16031 / tcp

819727972 | 2025-02-07T11:00:41.567218

SSH-2.0-OpenSSH_7.4

16037 / tcp

-1399940268 | 2025-01-14T10:53:02.706824

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16058 / tcp

1911457608 | 2025-01-24T06:10:05.657017

\x00[\x00\x00\x00\x00\x00\x00

16064 / tcp

-1888448627 | 2025-01-25T17:25:16.766765

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

16077 / tcp

-2089734047 | 2025-01-12T20:48:19.533031

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

16097 / tcp

-1375131644 | 2025-01-25T15:47:43.241422

\x00[v\xc3\xbdC\x7f\x00\x00

16443 / tcp

-1399940268 | 2025-01-26T07:55:02.207007

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16993 / tcp

1353260875 | 2025-01-10T08:14:55.608398

\x00[g\xc2\x95N\x7f\x00\x00

18001 / tcp

1767345577 | 2025-01-18T14:15:44.933546

Hello, this is Quagga (version 0T).
Copyright 1996-200

18021 / tcp

493955023 | 2025-01-19T02:42:17.242651

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

18030 / tcp

1911457608 | 2025-01-18T08:06:08.742886

\x00[\x00\x00\x00\x00\x00\x00

18049 / tcp

-1099385124 | 2025-02-06T13:41:21.561875

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

18066 / tcp

1996932384 | 2025-02-05T17:23:48.932833

"raop" nonce

18102 / tcp

-358801646 | 2025-01-30T10:03:40.862178

SSH-2.0-OpenSSH_6.6.1

18109 / tcp

-1888448627 | 2025-01-24T06:14:02.586372

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

18200 / tcp

2098371729 | 2025-01-13T06:23:00.830147

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

18245 / tcp

1504401647 | 2025-01-17T01:42:15.800111

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

18765 / tcp

819727972 | 2025-01-26T05:36:00.200166

SSH-2.0-OpenSSH_7.4

20110 / tcp

921225407 | 2025-01-29T23:48:50.326283

\x00\x00\x00\x04\x00\x00\x00\x00\x00

20256 / tcp

1948301213 | 2025-01-26T07:28:06.114504

RFB 003.003
VNC:
  Protocol Version: 3.3

20892 / tcp

1519486042 | 2025-01-31T21:50:03.634175

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

21025 / tcp

-1036370807 | 2025-01-23T08:56:16.941361

JDWP-Handshake

21240 / tcp

-2096652808 | 2025-01-15T15:48:09.154153

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

21250 / tcp

-1399940268 | 2025-02-02T07:03:59.848137

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21252 / tcp

-1399940268 | 2025-01-24T05:59:47.044963

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21261 / tcp

-1888448627 | 2025-01-31T11:41:30.720846

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

21294 / tcp

-1399940268 | 2025-01-18T15:40:44.789194

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21306 / tcp

819727972 | 2025-01-16T18:45:55.666994

SSH-2.0-OpenSSH_7.4

21310 / tcp

-1435414831 | 2025-01-27T01:01:44.783641

roku: ready\r\n

21379 / tcp

740837454 | 2025-02-06T00:41:10.573955

SSH-2.0-OpenSSH_5.3

22556 / tcp

-1888448627 | 2025-01-10T23:33:13.312913

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

23023 / tcp

-1609150592 | 2025-01-14T05:26:56.974913

ÿÿÿ
0 ...

24181 / tcp

1761482307 | 2025-01-10T23:44:02.393535

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

27015 / tcp

-577822804 | 2025-01-31T00:21:26.975348

Command: None
Size: 1867713037
ID: 746156658
Type: 1634235424

28015 / tcp

820958131 | 2025-01-29T16:25:29.846175

kjnkjabhbanc283ubcsbhdc72\x02

30002 / tcp

-784071826 | 2025-01-30T19:58:14.442145

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

30003 / tcp

819727972 | 2025-01-29T11:58:54.160451

SSH-2.0-OpenSSH_7.4

30006 / tcp

669849225 | 2025-02-01T23:50:21.308443

SSH-98.60-SysaxSSH_81885..42\r\n

30009 / tcp

-1032713145 | 2025-01-22T18:45:32.185720

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

30017 / tcp

-653033013 | 2025-01-17T17:53:18.584446

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

30019 / tcp

-1399940268 | 2025-01-27T07:12:13.645664

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

30110 / tcp

740837454 | 2025-01-17T18:29:39.224516

SSH-2.0-OpenSSH_5.3

31001 / tcp

2143387245 | 2025-01-28T00:45:55.129696

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

32101 / tcp

819727972 | 2025-01-19T21:06:48.771023

SSH-2.0-OpenSSH_7.4

33060 / tcp

104385780 | 2025-01-28T02:36:25.351346

ceph v2

33422 / tcp

-2096652808 | 2025-02-06T23:21:33.524146

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

33722 / tcp

-441419608 | 2025-02-06T22:03:10.266528

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

33822 / tcp

660175493 | 2025-02-06T20:00:05.094519

34022 / tcp

104385780 | 2025-02-06T12:39:17.779832

ceph v2

34222 / tcp

-971970408 | 2025-02-06T16:28:47.748861

34322 / tcp

-1045760528 | 2025-02-06T13:29:14.075227

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

34422 / tcp

-1730858130 | 2025-02-06T09:29:37.352676

RFB 003.008
VNC:
  Protocol Version: 3.8

34622 / tcp

-971970408 | 2025-02-06T05:58:24.100564

34822 / tcp

-952165951 | 2025-02-05T22:57:50.274733

AB

34922 / tcp

2087396567 | 2025-02-06T01:00:41.495904

kjnkjabhbanc283ubcsbhdc72

35000 / tcp

-358801646 | 2025-02-09T03:04:26.989271

SSH-2.0-OpenSSH_6.6.1

35122 / tcp

-971970408 | 2025-02-06T04:45:26.496209

35522 / tcp

-1598265216 | 2025-02-05T18:25:22.022322

@RSYNCD: 31.0

36322 / tcp

2087396567 | 2025-02-04T20:29:58.528644

kjnkjabhbanc283ubcsbhdc72

36622 / tcp

819727972 | 2025-02-04T18:42:23.849314

SSH-2.0-OpenSSH_7.4

36822 / tcp

-407828767 | 2025-02-04T15:21:55.613605

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

37422 / tcp

2087396567 | 2025-02-03T19:43:33.491107

kjnkjabhbanc283ubcsbhdc72

37622 / tcp

2087396567 | 2025-02-03T17:54:45.442269

kjnkjabhbanc283ubcsbhdc72

37777 / tcp

-2046514463 | 2025-01-17T19:27:58.931953

AB\x01\t

37822 / tcp

-445721795 | 2025-02-03T09:06:17.021643

\x00[\xc3\xaed\x1a\x7f\x00\x00

38522 / tcp

2087396567 | 2025-02-03T02:05:23.236167

kjnkjabhbanc283ubcsbhdc72

38822 / tcp

1741579575 | 2025-02-02T14:52:42.589122

39022 / tcp

1850902677 | 2025-02-02T22:34:38.753097

W!

40022 / tcp

-971970408 | 2025-02-01T23:14:33.487363

40322 / tcp

897328069 | 2025-02-02T01:02:32.650001

220 mail.scott000.com ESMTP

40722 / tcp

671605376 | 2025-02-01T16:23:52.155409

SSH-2.0-OpenSSH_X.X

42022 / tcp

1741579575 | 2025-01-31T10:28:36.363938

42322 / tcp

1741579575 | 2025-01-30T23:56:55.786251

42443 / tcp

1911457608 | 2025-01-13T20:29:24.978997

\x00[\x00\x00\x00\x00\x00\x00

42622 / tcp

1286504516 | 2025-02-08T01:23:12.525717

CP2E Control Console
Connected to Host: gZI

43122 / tcp

996960436 | 2025-01-30T15:32:47.901000

572 Relay not authorized

43322 / tcp

1353260875 | 2025-01-29T19:57:12.744077

\x00[g\xc2\x95N\x7f\x00\x00

43722 / tcp

2087396567 | 2025-01-30T10:19:09.779005

kjnkjabhbanc283ubcsbhdc72

44158 / tcp

-433302150 | 2025-01-10T19:40:20.979337

/multistream/1.0.0

44301 / tcp

-1399940268 | 2025-01-17T09:41:29.568178

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44307 / tcp

-1261090339 | 2025-01-25T22:11:12.503806

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

44333 / tcp

-1399940268 | 2025-01-21T20:22:27.705138

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44522 / tcp

1690634669 | 2025-01-29T18:11:29.072265

44622 / tcp

-138733098 | 2025-01-29T16:23:19.900912

roku: ready

44722 / tcp

-971970408 | 2025-01-30T01:21:25.003404

44818 / tcp

-2107996212 | 2025-01-13T13:23:33.374154

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

44822 / tcp

-616720387 | 2025-01-28T16:47:03.687513

SSH-2.0-SSHD_0.7.6

44922 / tcp

539065883 | 2025-01-29T12:50:11.911912

45001 / tcp

-2089734047 | 2025-01-16T19:03:46.988757

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

45022 / tcp

-1779118422 | 2025-01-29T02:24:44.156095

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

45444 / tcp

1911457608 | 2025-01-31T13:59:07.861353

\x00[\x00\x00\x00\x00\x00\x00

45822 / tcp

410249975 | 2025-01-28T21:34:11.622278

LNS READY<>

45886 / tcp

-1013082686 | 2025-02-01T11:33:24.170638

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

45922 / tcp

2087396567 | 2025-01-27T21:24:50.861193

kjnkjabhbanc283ubcsbhdc72

46022 / tcp

819727972 | 2025-01-28T12:45:02.998933

SSH-2.0-OpenSSH_7.4

46322 / tcp

1761482307 | 2025-01-28T10:13:16.495659

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

46443 / tcp

819727972 | 2025-02-07T21:41:28.601797

SSH-2.0-OpenSSH_7.4

46522 / tcp

539065883 | 2025-01-28T01:07:37.307720

46622 / tcp

-1375131644 | 2025-01-28T00:42:36.037205

\x00[v\xc3\xbdC\x7f\x00\x00

46722 / tcp

-1114821551 | 2025-02-08T13:55:03.459852

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

47080 / tcp

819727972 | 2025-01-30T08:22:19.411883

SSH-2.0-OpenSSH_7.4

47122 / tcp

-2096652808 | 2025-01-27T19:33:41.686573

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

47222 / tcp

104385780 | 2025-01-27T03:17:57.189296

ceph v2

48001 / tcp

-903067560 | 2025-01-14T20:45:40.171383

\x00[\x13)\xc2\x81\x7f\x00\x00

48022 / tcp

-1428621233 | 2025-01-26T16:40:52.999861

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

48122 / tcp

2087396567 | 2025-01-26T21:54:59.401143

kjnkjabhbanc283ubcsbhdc72

48322 / tcp

-971970408 | 2025-01-26T20:08:37.919534

48522 / tcp

-641479109 | 2025-01-26T14:34:42.620980

[xU-

48622 / tcp

472902042 | 2025-01-26T03:57:56.479792

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

48922 / tcp

1741579575 | 2025-01-25T18:18:22.264675

49122 / tcp

60948681 | 2025-01-25T22:33:22.796567

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).

49501 / tcp

-1947777893 | 2025-02-04T19:17:17.870627

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

49688 / tcp

-1399940268 | 2025-01-18T18:24:33.640008

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

49690 / tcp

-1399940268 | 2025-01-29T01:39:55.936862

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

49722 / tcp

539065883 | 2025-01-25T15:52:34.869411

49922 / tcp

-79865617 | 2025-02-07T21:32:53.126286

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )

50000 / tcp

819727972 | 2025-02-05T14:46:54.619683

SSH-2.0-OpenSSH_7.4

50080 / tcp

-1428621233 | 2025-01-23T20:12:45.584212

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

51122 / tcp

819727972 | 2025-02-08T07:50:58.602528

SSH-2.0-OpenSSH_7.4

51294 / tcp

1911457608 | 2025-01-30T18:39:48.343084

\x00[\x00\x00\x00\x00\x00\x00

51822 / tcp

2087396567 | 2025-01-23T21:42:27.672964

kjnkjabhbanc283ubcsbhdc72

52222 / tcp

1261582754 | 2025-01-23T16:55:54.392469

unknown command 
unknown command

52322 / tcp

2087396567 | 2025-01-23T18:08:32.013429

kjnkjabhbanc283ubcsbhdc72

52522 / tcp

1286504516 | 2025-01-23T09:37:34.085055

CP2E Control Console
Connected to Host: gZI

52722 / tcp

-971970408 | 2025-01-23T04:41:35.141645

52922 / tcp

546151771 | 2025-02-08T06:51:43.572528

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

53022 / tcp

-1036370807 | 2025-01-23T02:00:57.591753

JDWP-Handshake

53122 / tcp

-971970408 | 2025-01-22T23:21:51.456392

53222 / tcp

1690634669 | 2025-01-22T20:46:31.584617

53822 / tcp

1308377066 | 2025-01-22T12:06:49.019192

ncacn_http/1.0

54422 / tcp

707919486 | 2025-01-21T18:39:49.002198

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

54522 / tcp

-154107716 | 2025-01-21T20:28:45.633960

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST ...

54622 / tcp

1741579575 | 2025-01-21T16:48:19.605385

55000 / tcp

410249975 | 2025-02-03T23:58:27.057912

LNS READY<>

55443 / tcp

2087396567 | 2025-01-14T19:44:28.260104

kjnkjabhbanc283ubcsbhdc72

55470 / tcp

1989907056 | 2025-01-23T15:41:40.723079

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

55554 / tcp

398077695 | 2025-01-21T16:14:50.636114

55555 / tcp

1063825417 | 2025-01-14T20:19:12.166152

SSH-2.0-OpenSSH_7.3\r\n

56022 / tcp

819727972 | 2025-01-20T13:37:48.723545

SSH-2.0-OpenSSH_7.4

56122 / tcp

-653033013 | 2025-01-20T13:46:49.515989

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

57022 / tcp

819727972 | 2025-01-19T16:29:07.664891

SSH-2.0-OpenSSH_7.4

57122 / tcp

819727972 | 2025-01-19T23:47:30.118754

SSH-2.0-OpenSSH_7.4

57222 / tcp

819727972 | 2025-01-19T21:55:25.608553

SSH-2.0-OpenSSH_7.4

57522 / tcp

1082732927 | 2025-01-19T07:03:26.396945

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

58022 / tcp

1308377066 | 2025-01-19T05:10:51.254549

ncacn_http/1.0

58322 / tcp

1492413928 | 2025-01-18T21:59:36.449057

SSH-2.0-OpenSSH_7.5

58722 / tcp

171352214 | 2025-01-18T14:17:16.361640

-ERR client ip is not in whitelist

59122 / tcp

-747911285 | 2025-01-18T06:49:37.789416

\xc2\xaa

59222 / tcp

-1428621233 | 2025-01-18T01:17:34.894940

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

59522 / tcp

-441419608 | 2025-01-17T23:59:21.236463

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

59722 / tcp

2087396567 | 2025-01-17T14:44:13.334756

kjnkjabhbanc283ubcsbhdc72

60022 / tcp

-616720387 | 2025-01-17T10:58:50.995931

SSH-2.0-SSHD_0.7.6

61613 / tcp

-1105333987 | 2025-02-01T03:57:15.638080

\x00[KpU\x7f\x00\x00

63210 / tcp

819727972 | 2025-02-04T21:45:35.308238

SSH-2.0-OpenSSH_7.4

63256 / tcp

819727972 | 2025-01-24T17:02:08.941589

SSH-2.0-OpenSSH_7.4

63260 / tcp

-1327660293 | 2025-01-29T21:07:21.088693

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

64295 / tcp

504717326 | 2025-02-06T14:50:19.101176

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

64477 / tcp

398077695 | 2025-02-04T20:06:46.054996

64683 / tcp

-1399940268 | 2025-01-18T14:20:10.498574

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

112.124.55.150

Last Seen: 2025-02-09

Tags:

GeneralInformation

OpenPorts

13 / tcp -1036370807 | 2025-01-13T08:25:54.765995

15 / tcp 1741579575 | 2025-02-04T08:48:06.466078

17 / tcp 344087494 | 2025-02-04T23:01:40.886670

19 / tcp 829384519 | 2025-02-05T11:14:37.181709

22 / tcp 2078509815 | 2025-02-04T06:10:35.789972

26 / tcp 921225407 | 2025-01-19T04:24:55.674849

37 / tcp -253878554 | 2025-01-10T19:18:20.915136

49 / tcp -359657882 | 2025-02-06T22:29:44.516427

70 / tcp -1763883228 | 2025-01-17T21:30:31.142322

89 / tcp 1723769361 | 2025-01-31T21:02:06.571824

96 / tcp 1975288991 | 2025-01-26T04:21:43.189569

102 / tcp -1399940268 | 2025-02-03T13:22:04.292081

110 / tcp 1911457608 | 2025-01-22T20:44:43.900344

111 / tcp -1327660293 | 2025-02-07T21:54:09.159435

119 / tcp 141730637 | 2025-02-08T21:19:37.227305

179 / tcp -399606100 | 2025-02-01T03:13:23.874707

195 / tcp 401555314 | 2025-02-07T05:59:56.355283

221 / tcp 819727972 | 2025-01-11T07:15:43.537164

264 / tcp -1709030885 | 2025-01-25T19:45:42.277917

311 / tcp 1975288991 | 2025-01-21T18:38:08.626150

314 / tcp -1399940268 | 2025-02-01T21:17:07.208468

427 / tcp 1327409218 | 2025-02-04T19:57:24.595566

443 / tcp -1715152554 | 2025-01-14T16:15:51.168985

Hashes

444 / tcp -741835184 | 2025-02-07T05:40:36.995229

461 / tcp -2089734047 | 2025-01-20T06:12:38.220185

465 / tcp 897328069 | 2025-01-27T10:45:58.237407

503 / tcp -1032713145 | 2025-01-27T02:50:59.607392

513 / tcp -2033111675 | 2025-02-03T05:05:02.453420

548 / tcp -1128967010 | 2025-01-28T13:29:32.971169

554 / tcp 1060450357 | 2025-01-27T14:53:46.682711

587 / tcp 745343730 | 2025-01-27T05:42:06.208980

689 / tcp -1399940268 | 2025-01-21T20:05:45.381900

789 / tcp -1810987450 | 2025-01-20T19:16:28.245540

902 / tcp 1956828827 | 2025-02-07T20:24:33.804675

993 / tcp 1353260875 | 2025-01-19T18:25:00.025315

995 / tcp -2113068813 | 2025-01-28T00:01:09.098709

1023 / tcp -1681927087 | 2025-01-21T22:36:29.870589

1025 / tcp 1911457608 | 2025-01-19T01:03:45.421412

1080 / tcp 1362344524 | 2025-01-25T20:41:00.336672

1099 / tcp -1733106930 | 2025-01-11T19:40:29.144570

1177 / tcp -154107716 | 2025-01-13T23:29:15.908159

1190 / tcp 1911457608 | 2025-02-06T20:26:26.438750

1195 / tcp 921225407 | 2025-02-02T11:18:45.803076

1200 / tcp 2087396567 | 2025-01-25T23:59:44.023193

1234 / tcp 1911457608 | 2025-01-26T15:32:28.391474

1414 / tcp 2098371729 | 2025-02-04T07:21:31.686798

1433 / tcp 555056254 | 2025-02-05T00:09:40.462936

1443 / tcp -1715152554 | 2025-01-14T16:15:48.152255

Hashes

1515 / tcp -971970408 | 2025-02-04T08:51:44.221016

1588 / tcp -1230049476 | 2025-01-10T07:16:45.595214

1599 / tcp -1036370807 | 2025-01-23T02:54:32.533081

1604 / tcp 792973478 | 2025-01-30T07:32:16.747255

1723 / tcp 1103582599 | 2025-01-31T01:05:28.646679

1800 / tcp 2143387245 | 2025-02-02T21:52:57.992072

1801 / tcp -1299899661 | 2025-01-31T04:09:12.888900

1911 / tcp -2096652808 | 2025-02-05T18:27:02.749915

1956 / tcp -2089734047 | 2025-02-01T10:55:06.362647

1973 / tcp 1911457608 | 2025-02-03T00:05:23.600594

1980 / tcp -1399940268 | 2025-02-04T22:09:04.699234

2003 / tcp -2031152423 | 2025-01-16T17:50:50.242016

2008 / tcp 1689518693 | 2025-02-06T23:26:33.371139

2031 / tcp 1911457608 | 2025-01-14T12:57:37.551220

2056 / tcp -1399940268 | 2025-01-13T19:51:13.645849

2067 / tcp 1975288991 | 2025-02-05T19:19:01.295393

2069 / tcp -1399940268 | 2025-01-18T17:48:36.870045

2081 / tcp 1911457608 | 2025-01-23T07:17:38.236256

2086 / tcp -2118655245 | 2025-02-01T02:54:53.048526

Hashes

2087 / tcp 171352214 | 2025-02-06T16:10:19.018634

2101 / tcp 1278527606 | 2025-02-01T04:00:47.378569

2121 / tcp 141730637 | 2025-01-21T06:14:15.007386

2154 / tcp -784071826 | 2025-02-08T22:48:03.900136

2323 / tcp 1662205251 | 2025-02-07T09:55:41.720707

13 / tcp

-1036370807 | 2025-01-13T08:25:54.765995

15 / tcp

1741579575 | 2025-02-04T08:48:06.466078

17 / tcp

344087494 | 2025-02-04T23:01:40.886670

19 / tcp

829384519 | 2025-02-05T11:14:37.181709

22 / tcp

2078509815 | 2025-02-04T06:10:35.789972

26 / tcp

921225407 | 2025-01-19T04:24:55.674849

37 / tcp

-253878554 | 2025-01-10T19:18:20.915136

49 / tcp

-359657882 | 2025-02-06T22:29:44.516427

70 / tcp

-1763883228 | 2025-01-17T21:30:31.142322

89 / tcp

1723769361 | 2025-01-31T21:02:06.571824

96 / tcp

1975288991 | 2025-01-26T04:21:43.189569

102 / tcp

-1399940268 | 2025-02-03T13:22:04.292081

110 / tcp

1911457608 | 2025-01-22T20:44:43.900344

111 / tcp

-1327660293 | 2025-02-07T21:54:09.159435

119 / tcp

141730637 | 2025-02-08T21:19:37.227305

179 / tcp

-399606100 | 2025-02-01T03:13:23.874707

195 / tcp

401555314 | 2025-02-07T05:59:56.355283

221 / tcp

819727972 | 2025-01-11T07:15:43.537164

264 / tcp

-1709030885 | 2025-01-25T19:45:42.277917

311 / tcp

1975288991 | 2025-01-21T18:38:08.626150

314 / tcp

-1399940268 | 2025-02-01T21:17:07.208468

427 / tcp

1327409218 | 2025-02-04T19:57:24.595566

443 / tcp

-1715152554 | 2025-01-14T16:15:51.168985

444 / tcp

-741835184 | 2025-02-07T05:40:36.995229

461 / tcp

-2089734047 | 2025-01-20T06:12:38.220185

465 / tcp

897328069 | 2025-01-27T10:45:58.237407

503 / tcp

-1032713145 | 2025-01-27T02:50:59.607392

513 / tcp

-2033111675 | 2025-02-03T05:05:02.453420

548 / tcp

-1128967010 | 2025-01-28T13:29:32.971169

554 / tcp

1060450357 | 2025-01-27T14:53:46.682711

587 / tcp

745343730 | 2025-01-27T05:42:06.208980

689 / tcp

-1399940268 | 2025-01-21T20:05:45.381900

789 / tcp

-1810987450 | 2025-01-20T19:16:28.245540

902 / tcp

1956828827 | 2025-02-07T20:24:33.804675

993 / tcp

1353260875 | 2025-01-19T18:25:00.025315

995 / tcp

-2113068813 | 2025-01-28T00:01:09.098709

1023 / tcp

-1681927087 | 2025-01-21T22:36:29.870589

1025 / tcp

1911457608 | 2025-01-19T01:03:45.421412

1080 / tcp

1362344524 | 2025-01-25T20:41:00.336672

1099 / tcp

-1733106930 | 2025-01-11T19:40:29.144570

1177 / tcp

-154107716 | 2025-01-13T23:29:15.908159

1190 / tcp

1911457608 | 2025-02-06T20:26:26.438750

1195 / tcp

921225407 | 2025-02-02T11:18:45.803076

1200 / tcp

2087396567 | 2025-01-25T23:59:44.023193

1234 / tcp

1911457608 | 2025-01-26T15:32:28.391474

1414 / tcp

2098371729 | 2025-02-04T07:21:31.686798

1433 / tcp

555056254 | 2025-02-05T00:09:40.462936

1443 / tcp

-1715152554 | 2025-01-14T16:15:48.152255

1515 / tcp

-971970408 | 2025-02-04T08:51:44.221016

1588 / tcp

-1230049476 | 2025-01-10T07:16:45.595214

1599 / tcp

-1036370807 | 2025-01-23T02:54:32.533081

1604 / tcp

792973478 | 2025-01-30T07:32:16.747255

1723 / tcp

1103582599 | 2025-01-31T01:05:28.646679

1800 / tcp

2143387245 | 2025-02-02T21:52:57.992072

1801 / tcp

-1299899661 | 2025-01-31T04:09:12.888900

1911 / tcp

-2096652808 | 2025-02-05T18:27:02.749915

1956 / tcp

-2089734047 | 2025-02-01T10:55:06.362647

1973 / tcp

1911457608 | 2025-02-03T00:05:23.600594

1980 / tcp

-1399940268 | 2025-02-04T22:09:04.699234

2003 / tcp

-2031152423 | 2025-01-16T17:50:50.242016

2008 / tcp

1689518693 | 2025-02-06T23:26:33.371139

2031 / tcp

1911457608 | 2025-01-14T12:57:37.551220

2056 / tcp

-1399940268 | 2025-01-13T19:51:13.645849

2067 / tcp

1975288991 | 2025-02-05T19:19:01.295393

2069 / tcp

-1399940268 | 2025-01-18T17:48:36.870045

2081 / tcp

1911457608 | 2025-01-23T07:17:38.236256

2086 / tcp

-2118655245 | 2025-02-01T02:54:53.048526

2087 / tcp

171352214 | 2025-02-06T16:10:19.018634

2101 / tcp

1278527606 | 2025-02-01T04:00:47.378569

2121 / tcp

141730637 | 2025-01-21T06:14:15.007386

2154 / tcp

-784071826 | 2025-02-08T22:48:03.900136

2323 / tcp

1662205251 | 2025-02-07T09:55:41.720707

2332 / tcp

-842670865 | 2025-01-31T09:15:54.094491

2345 / tcp

921225407 | 2025-01-27T02:58:42.042530

2376 / tcp

-1795027372 | 2025-01-31T02:28:12.009986

2404 / tcp

819727972 | 2025-01-19T04:37:47.736806

2423 / tcp

632542934 | 2025-01-11T03:52:45.589492

2455 / tcp

1842524259 | 2025-02-09T00:45:25.413121

2554 / tcp

-1888448627 | 2025-01-16T19:57:12.000006

2567 / tcp

-832380282 | 2025-01-30T23:25:32.265699