GeneralInformation

Country	Japan
City	Tokyo
Organization	Melbourne
ISP	MYTEK TRADING PTY LTD
ASN	AS132825

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2025(1)

CVE-2025-26465

6.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.

2023(4)

CVE-2023-51767

7.0OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges.

CVE-2023-51385

6.5In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.

CVE-2023-48795

5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.

CVE-2023-38408

9.8The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

2021(2)

CVE-2021-41617

7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

CVE-2021-36368

3.7An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed.

2020(2)

CVE-2020-15778

7.8scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."

CVE-2020-14145

5.9The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

2019(1)

CVE-2019-16905

7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.

2016(1)

CVE-2016-20012

5.3OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

2008(1)

CVE-2008-3844

9.3Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known.

2007(1)

CVE-2007-2768

4.3OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.

OpenPorts

22 80 443 8080 8081 8443 9000 9001 9002 9009 9011 9013 9016 9018 9042 9045 9049 9053 9054 9080 9090 9091 9092 9093 9095 9096 9099 9100 9115 9151 9160 9180 9191 9200 9291 9295 9306 9313 9333 9398 9977

22 / tcp

499841674 | 2025-03-20T15:32:32.196447

SSH-2.0-OpenSSH_8.0
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDYvRz2SbXv3VHSSU/k5DNbjeir3Vpl+9aHffI+TFqWkrn1
D/Saf8ds1tuHMjI5Bkgk1zp1yN+3ncQT/9YFo6B/8/gn+Py+jAA1qqvOulGvKECxXk0kDmCmSBo+
B3XUxo/8ntHEkp1WHRwwMKEwfV3zhKmy/vZMDX3m+8XoZ55KVKDxIPDuIUWfUpRpKDeykedKrkbd
cpEAfUqGBXhIKr8U460fMmaocv+hGC66+GvBE3U50GL2Vkc8C+f9lZ2nOLbJGWyIx/HSHGqOGQoU
a9bgmKoEbYy77APSp003p/SVC535EG09+T34ayK424HSVg+AqFa9O2aChdezmzmBhz3REFID2QXz
1Cwa2sx+HSOXNB1yTR748fvkMA+3TREV3LmWR5pBj+Zjhws1/zh9S0YAWldfdvpg5OiuRaDIOX8x
eI1iVNIdm0F6m6zeQ4OM5UhrWDVO61d88GYHde3eKyB8ydmOAlkaoTKkIDjliJ4UkCD6ARcAF4N9
3wjsr5dYH00=
Fingerprint: 39:99:b8:15:1d:d6:04:93:51:ed:52:5a:56:31:6b:c2

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group14-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group-exchange-sha1
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	aes256-gcm@openssh.com
	chacha20-poly1305@openssh.com
	aes256-ctr
	aes256-cbc
	aes128-gcm@openssh.com
	aes128-ctr
	aes128-cbc

MAC Algorithms:
	hmac-sha2-256-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha2-256
	hmac-sha1
	umac-128@openssh.com
	hmac-sha2-512

Compression Algorithms:
	none
	zlib@openssh.com

Vulnerabilities

2 4 6 1

80 / tcp

-49011426 | 2025-03-20T06:01:33.377043

Hashes

hash

1713168105

http.dom_hash

1239617585

http.html_hash

-49011426

http.server_hash

-1340961475

http.title_hash

1606865146

414 Request-URI Too Large

HTTP/1.1 414 Request-URI Too Large
Server: nginx
Date: Thu, 20 Mar 2025 06:01:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 572
Connection: close

443 / tcp

199333125 | 2025-03-20T11:50:02.818428

Hashes

hash

36787498

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 20 Mar 2025 11:49:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

8080 / tcp

-1489940404 | 2025-03-29T03:08:30.794886

Hashes

hash

1869892630

http.dom_hash

70589398

http.html_hash

-1489940404

http.server_hash

-1340961475

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 29 Mar 2025 03:08:30 GMT
Content-Type: image/png
Content-Length: 4100
Last-Modified: Thu, 07 Mar 2024 01:43:01 GMT
Connection: keep-alive
ETag: "65e91ba5-1004"
Expires: Sat, 29 Mar 2025 03:08:29 GMT
Cache-Control: no-cache
Accept-Ranges: bytes

8081 / tcp

1471728067 | 2025-03-10T03:42:12.124313

HTTP/1.1 414 Request-URI Too Large
Server: nginx
Date: Mon, 10 Mar 2025 03:42:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 170
Connection: close

<html>
<head><title>414 Request-URI Too Large</title></head>
<body>
<center><h1>414 Request-URI Too Large</h1></center>
<hr><center>nginx</center>
</body>
</html>

8443 / tcp

199333125 | 2025-03-18T10:45:51.056333

Hashes

hash

769519650

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 18 Mar 2025 10:45:50 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9000 / tcp

199333125 | 2025-03-28T15:07:11.580430

Hashes

hash

-425295004

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Fri, 28 Mar 2025 15:07:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9001 / tcp

199333125 | 2025-03-06T08:54:07.916450

Hashes

hash

-73435290

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 06 Mar 2025 08:54:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9002 / tcp

199333125 | 2025-03-29T08:54:42.400638

Hashes

hash

-932500384

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Sat, 29 Mar 2025 08:54:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9009 / tcp

199333125 | 2025-03-28T08:00:10.936873

Hashes

hash

-1657033327

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Fri, 28 Mar 2025 08:00:10 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9011 / tcp

199333125 | 2025-03-24T01:59:41.356920

Hashes

hash

2072329049

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 24 Mar 2025 01:59:41 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9013 / tcp

199333125 | 2025-03-15T17:57:57.490968

Hashes

hash

1615771576

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Sat, 15 Mar 2025 17:57:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9016 / tcp

199333125 | 2025-03-03T23:26:42.030345

Hashes

hash

1989239835

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 03 Mar 2025 23:26:57 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9018 / tcp

199333125 | 2025-03-11T07:34:16.055982

Hashes

hash

-2032379129

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 11 Mar 2025 07:34:15 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9042 / tcp

199333125 | 2025-03-17T18:53:11.605770

Hashes

hash

-115915024

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 17 Mar 2025 18:53:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9045 / tcp

199333125 | 2025-03-05T20:40:58.273581

Hashes

hash

-835164639

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Wed, 05 Mar 2025 20:40:58 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9049 / tcp

199333125 | 2025-03-09T13:05:49.368228

Hashes

hash

466539787

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Sun, 09 Mar 2025 13:05:49 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9053 / tcp

199333125 | 2025-03-17T05:27:12.316885

Hashes

hash

-2022937884

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 17 Mar 2025 05:27:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9054 / tcp

199333125 | 2025-03-14T12:18:52.210713

Hashes

hash

-1861274740

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Fri, 14 Mar 2025 12:18:52 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9080 / tcp

199333125 | 2025-03-19T12:47:07.508987

Hashes

hash

-46233782

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Wed, 19 Mar 2025 12:47:07 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9090 / tcp

199333125 | 2025-03-18T05:15:44.685553

Hashes

hash

2042838659

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 18 Mar 2025 05:15:44 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9091 / tcp

199333125 | 2025-03-25T23:40:42.450234

Hashes

hash

27341137

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 25 Mar 2025 23:40:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9092 / tcp

199333125 | 2025-03-13T18:48:22.624129

Hashes

hash

2147204061

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 13 Mar 2025 18:48:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9093 / tcp

199333125 | 2025-03-23T15:31:53.019691

Hashes

hash

-1372322122

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Sun, 23 Mar 2025 15:31:52 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9095 / tcp

199333125 | 2025-03-22T13:38:51.838604

Hashes

hash

113820472

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Sat, 22 Mar 2025 13:38:51 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9096 / tcp

199333125 | 2025-03-04T10:32:18.507358

Hashes

hash

-557558478

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 04 Mar 2025 10:32:34 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9099 / tcp

-1489940404 | 2025-03-07T13:26:25.760834

Hashes

hash

-1595431637

http.dom_hash

70589398

http.html_hash

-1489940404

http.server_hash

-1340961475

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Mar 2025 13:26:25 GMT
Content-Type: image/png
Content-Length: 4100
Last-Modified: Thu, 07 Mar 2024 01:43:01 GMT
Connection: keep-alive
ETag: "65e91ba5-1004"
Expires: Fri, 07 Mar 2025 13:26:24 GMT
Cache-Control: no-cache
Accept-Ranges: bytes

9100 / tcp

1402458567 | 2025-03-21T09:04:59.110799

HTTP/1.1 400 Bad Request
Server: nginx
Date: Fri, 21 Mar 2025 09:04:49 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 150
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx</center>
</body>
</html>

9115 / tcp

199333125 | 2025-03-10T05:41:19.218485

Hashes

hash

-438061864

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 10 Mar 2025 05:41:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9151 / tcp

940018818 | 2025-03-20T18:22:33.403253

HTTP/1.1 400 Bad Request
Server: nginx
Date: Thu, 20 Mar 2025 18:22:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 150
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx</center>
</body>
</html>

9160 / tcp

199333125 | 2025-03-04T05:28:22.054787

Hashes

hash

497504894

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 04 Mar 2025 05:28:21 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9180 / tcp

199333125 | 2025-03-28T23:04:33.601378

Hashes

hash

1520398400

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Fri, 28 Mar 2025 23:04:33 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9191 / tcp

199333125 | 2025-04-01T04:01:14.540540

Hashes

hash

500749193

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Tue, 01 Apr 2025 04:01:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

9200 / tcp

-49011426 | 2025-03-15T10:08:14.721368

Hashes

hash

124260572

http.dom_hash

1239617585

http.html_hash

-49011426

http.server_hash

-1340961475

http.title_hash

1606865146

414 Request-URI Too Large

HTTP/1.1 414 Request-URI Too Large
Server: nginx
Date: Sat, 15 Mar 2025 10:08:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 572
Connection: close

9291 / tcp

-49011426 | 2025-03-08T14:01:41.756325

Hashes

hash

-1157938962

http.dom_hash

1239617585

http.html_hash

-49011426

http.server_hash

-1340961475

http.title_hash

1606865146

414 Request-URI Too Large

HTTP/1.1 414 Request-URI Too Large
Server: nginx
Date: Sat, 08 Mar 2025 14:01:41 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 572
Connection: close

9295 / tcp

-49011426 | 2025-03-31T21:32:04.381874

Hashes

hash

677829934

http.dom_hash

1239617585

http.html_hash

-49011426

http.server_hash

-1340961475

http.title_hash

1606865146

414 Request-URI Too Large

HTTP/1.1 414 Request-URI Too Large
Server: nginx
Date: Mon, 31 Mar 2025 21:32:04 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 572
Connection: close

9306 / tcp

1587773363 | 2025-03-24T13:43:25.040067

HTTP/1.1 414 Request-URI Too Large
Server: nginx
Date: Mon, 24 Mar 2025 13:43:24 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 170
Connection: close

<html>
<head><title>414 Request-URI Too Large</title></head>
<body>
<center><h1>414 Request-URI Too Large</h1></center>
<hr><center>nginx</center>
</body>
</html>

9313 / tcp

-49011426 | 2025-03-26T01:40:11.627457

Hashes

hash

-1316346702

http.dom_hash

1239617585

http.html_hash

-49011426

http.server_hash

-1340961475

http.title_hash

1606865146

414 Request-URI Too Large

HTTP/1.1 414 Request-URI Too Large
Server: nginx
Date: Wed, 26 Mar 2025 01:40:11 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 572
Connection: close

9333 / tcp

738311989 | 2025-03-29T13:37:52.284946

HTTP/1.1 414 Request-URI Too Large
Server: nginx
Date: Sat, 29 Mar 2025 13:37:52 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 170
Connection: close

<html>
<head><title>414 Request-URI Too Large</title></head>
<body>
<center><h1>414 Request-URI Too Large</h1></center>
<hr><center>nginx</center>
</body>
</html>

9398 / tcp

1213793303 | 2025-03-24T19:59:48.412500

HTTP/1.1 414 Request-URI Too Large
Server: nginx
Date: Mon, 24 Mar 2025 19:59:48 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 170
Connection: close

<html>
<head><title>414 Request-URI Too Large</title></head>
<body>
<center><h1>414 Request-URI Too Large</h1></center>
<hr><center>nginx</center>
</body>
</html>

9977 / tcp

199333125 | 2025-03-10T01:50:12.329065

Hashes

hash

1646858767

http.dom_hash

1678420308

http.html_hash

199333125

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Mon, 10 Mar 2025 01:50:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 650
Connection: close

119.42.35.28

Last Seen: 2025-04-01

GeneralInformation

Vulnerabilities All ports Port 22 Latest CVSS

OpenPorts

22 / tcp 499841674 | 2025-03-20T15:32:32.196447

80 / tcp -49011426 | 2025-03-20T06:01:33.377043

Hashes

443 / tcp 199333125 | 2025-03-20T11:50:02.818428

Hashes

8080 / tcp -1489940404 | 2025-03-29T03:08:30.794886

Hashes

8081 / tcp 1471728067 | 2025-03-10T03:42:12.124313

8443 / tcp 199333125 | 2025-03-18T10:45:51.056333

Hashes

9000 / tcp 199333125 | 2025-03-28T15:07:11.580430

Hashes

9001 / tcp 199333125 | 2025-03-06T08:54:07.916450

Hashes

9002 / tcp 199333125 | 2025-03-29T08:54:42.400638

Hashes

9009 / tcp 199333125 | 2025-03-28T08:00:10.936873

Hashes

9011 / tcp 199333125 | 2025-03-24T01:59:41.356920

Hashes

9013 / tcp 199333125 | 2025-03-15T17:57:57.490968

Hashes

9016 / tcp 199333125 | 2025-03-03T23:26:42.030345

Hashes

9018 / tcp 199333125 | 2025-03-11T07:34:16.055982

Hashes

9042 / tcp 199333125 | 2025-03-17T18:53:11.605770

Hashes

9045 / tcp 199333125 | 2025-03-05T20:40:58.273581

Hashes

9049 / tcp 199333125 | 2025-03-09T13:05:49.368228

Hashes

9053 / tcp 199333125 | 2025-03-17T05:27:12.316885

Hashes

9054 / tcp 199333125 | 2025-03-14T12:18:52.210713

Hashes

9080 / tcp 199333125 | 2025-03-19T12:47:07.508987

Hashes

9090 / tcp 199333125 | 2025-03-18T05:15:44.685553

Hashes

9091 / tcp 199333125 | 2025-03-25T23:40:42.450234

Hashes

9092 / tcp 199333125 | 2025-03-13T18:48:22.624129

Hashes

9093 / tcp 199333125 | 2025-03-23T15:31:53.019691

Hashes

9095 / tcp 199333125 | 2025-03-22T13:38:51.838604

Hashes

9096 / tcp 199333125 | 2025-03-04T10:32:18.507358

Hashes

9099 / tcp -1489940404 | 2025-03-07T13:26:25.760834

Hashes

9100 / tcp 1402458567 | 2025-03-21T09:04:59.110799

9115 / tcp 199333125 | 2025-03-10T05:41:19.218485

Hashes

9151 / tcp 940018818 | 2025-03-20T18:22:33.403253

9160 / tcp 199333125 | 2025-03-04T05:28:22.054787

Hashes

9180 / tcp 199333125 | 2025-03-28T23:04:33.601378

Hashes

9191 / tcp 199333125 | 2025-04-01T04:01:14.540540

Hashes

9200 / tcp -49011426 | 2025-03-15T10:08:14.721368

Hashes

9291 / tcp -49011426 | 2025-03-08T14:01:41.756325

Hashes

9295 / tcp -49011426 | 2025-03-31T21:32:04.381874

Hashes

9306 / tcp 1587773363 | 2025-03-24T13:43:25.040067

9313 / tcp -49011426 | 2025-03-26T01:40:11.627457

Hashes

9333 / tcp 738311989 | 2025-03-29T13:37:52.284946

9398 / tcp 1213793303 | 2025-03-24T19:59:48.412500

9977 / tcp 199333125 | 2025-03-10T01:50:12.329065

Hashes

Vulnerabilities

22 / tcp

499841674 | 2025-03-20T15:32:32.196447

80 / tcp

-49011426 | 2025-03-20T06:01:33.377043

443 / tcp

199333125 | 2025-03-20T11:50:02.818428

8080 / tcp

-1489940404 | 2025-03-29T03:08:30.794886

8081 / tcp

1471728067 | 2025-03-10T03:42:12.124313

8443 / tcp

199333125 | 2025-03-18T10:45:51.056333

9000 / tcp

199333125 | 2025-03-28T15:07:11.580430

9001 / tcp

199333125 | 2025-03-06T08:54:07.916450

9002 / tcp

199333125 | 2025-03-29T08:54:42.400638

9009 / tcp

199333125 | 2025-03-28T08:00:10.936873

9011 / tcp

199333125 | 2025-03-24T01:59:41.356920

9013 / tcp

199333125 | 2025-03-15T17:57:57.490968

9016 / tcp

199333125 | 2025-03-03T23:26:42.030345

9018 / tcp

199333125 | 2025-03-11T07:34:16.055982

9042 / tcp

199333125 | 2025-03-17T18:53:11.605770

9045 / tcp

199333125 | 2025-03-05T20:40:58.273581

9049 / tcp

199333125 | 2025-03-09T13:05:49.368228

9053 / tcp

199333125 | 2025-03-17T05:27:12.316885

9054 / tcp

199333125 | 2025-03-14T12:18:52.210713

9080 / tcp

199333125 | 2025-03-19T12:47:07.508987

9090 / tcp

199333125 | 2025-03-18T05:15:44.685553

9091 / tcp

199333125 | 2025-03-25T23:40:42.450234

9092 / tcp

199333125 | 2025-03-13T18:48:22.624129

9093 / tcp

199333125 | 2025-03-23T15:31:53.019691

9095 / tcp

199333125 | 2025-03-22T13:38:51.838604

9096 / tcp

199333125 | 2025-03-04T10:32:18.507358

9099 / tcp

-1489940404 | 2025-03-07T13:26:25.760834

9100 / tcp

1402458567 | 2025-03-21T09:04:59.110799

9115 / tcp

199333125 | 2025-03-10T05:41:19.218485

9151 / tcp

940018818 | 2025-03-20T18:22:33.403253

9160 / tcp

199333125 | 2025-03-04T05:28:22.054787

9180 / tcp

199333125 | 2025-03-28T23:04:33.601378

9191 / tcp

199333125 | 2025-04-01T04:01:14.540540

9200 / tcp

-49011426 | 2025-03-15T10:08:14.721368

9291 / tcp

-49011426 | 2025-03-08T14:01:41.756325

9295 / tcp

-49011426 | 2025-03-31T21:32:04.381874

9306 / tcp

1587773363 | 2025-03-24T13:43:25.040067

9313 / tcp

-49011426 | 2025-03-26T01:40:11.627457

9333 / tcp

738311989 | 2025-03-29T13:37:52.284946

9398 / tcp

1213793303 | 2025-03-24T19:59:48.412500

9977 / tcp

199333125 | 2025-03-10T01:50:12.329065