GeneralInformation

Hostnames	log.aliyuncs.com
Domains	aliyuncs.com
Country	China
City	Hangzhou
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 15 17 19 21 25 43 53 70 80 102 104 110 122 143 154 175 179 195 264 389 427 443 502 503 515 548 789 806 873 902 993 1025 1063 1099 1153 1167 1177 1234 1414 1433 1521 1599 1604 1723 1801 1883 1926 1962 2002 2008 2021 2059 2066 2067 2070 2080 2081 2083 2087 2154 2181 2222 2323 2332 2345 2404 2455 2553 2628 2761 2762 3001 3050 3068 3260 3268 3269 3299 3301 3306 3310 3352 3388 3400 3556 3567 3780 3790 4000 4064 4157 4282 4321 4369 4434 4443 4444 4506 4747 4786 4840 4899 4949 4999 5006 5025 5172 5201 5222 5269 5435 5591 5672 5858 5938 6001 6002 6004 6009 6264 6379 6503 6633 6653 6662 6666 6667 6697 6998 7000 7002 7080 7090 7171 7415 7434 7465 7548 8009 8083 8089 8099 8111 8112 8126 8140 8180 8181 8291 8333 8423 8500 8554 8575 8728 8809 8834 8836 8855 8872 9000 9001 9002 9029 9033 9039 9042 9093 9095 9100 9305 9306 9308 9418 9530 9600 9633 9876 9943 9990 9998 9999 10000 10001 10250 10909 10911 11112 11210 12000 14147 14344 16993 18081 18245 19930 20000 20256 20880 21379 23023 25565 27017 30003 31337 32764 35000 37777 41800 44158 44818 50000 50100 54138 55000 55443 55553 55554 61616 62078

550048729 | 2024-10-05T19:25:15.275837

11 / tcp

ÿÿÿ
0 ...

1308377066 | 2024-10-13T01:33:52.258870

15 / tcp

ncacn_http/1.0

-82008689 | 2024-09-29T14:13:33.956786

17 / tcp

"Here's the rule for bargains: "Do other men, for they would do you."
 That's the true business precept." Charles Dickens (1812-70)
\x00

-1729629024 | 2024-10-14T20:21:06.278459

19 / tcp

101 imqbroker =unV

1564456597 | 2024-09-24T21:39:46.826241

21 / tcp

220 Firewall Authentication required before proceeding with service

-1032713145 | 2024-10-12T19:30:44.914753

25 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-971970408 | 2024-09-23T14:05:04.293516

43 / tcp

-1156129152 | 2024-09-24T21:29:17.200826

53 / tcp

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00G\x00\x16\x07clients\x01l\x06google\x03com\x00\xc01\x00\x01\x00\x01\x00\x00\x00\x85\x00\x04\x8e\xfb+\x0e
\x00\x06\x85\x80\x00\x01\x00\x01\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03\xc0\x00\x10\x00\x03\x00\x00\x00\x00\x00	\x08dnsmasq-

-1763883228 | 2024-10-10T14:33:50.611494

70 / tcp

HTTP/1.1 400 Bad Request
Server: vista/0.7
Content-Type: text/html
Connection: close

-855979655 | 2024-10-15T01:19:39.729147

80 / tcp

HTTP/1.1 405 Method Not Allowed
Server: AliyunSLS
Date: Tue, 15 Oct 2024 01:19:39 GMT
Content-Type: application/json
Content-Length: 119
Connection: keep-alive
Access-Control-Allow-Origin: *
Authorization: OLS:rfGLkQJXBPLNloGpHM8DwVmUsEc=

-339084706 | 2024-10-15T14:50:15.995668

102 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

1948301213 | 2024-09-22T07:19:20.973544

104 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

-1810987450 | 2024-09-25T21:52:49.539955

110 / tcp

\xc3\xbf

-2107996212 | 2024-09-30T10:59:51.954017

122 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-398621179 | 2024-09-21T17:38:54.648986

143 / tcp

* OK everfull.com.cn IMAP4rev1 MDaemon 12.5.6 ready\r\n

669849225 | 2024-09-30T20:58:40.246413

154 / tcp

SSH-98.60-SysaxSSH_81885..42\r\n

-2089734047 | 2024-10-08T21:24:50.340381

175 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-399606100 | 2024-10-18T18:59:25.393782

179 / tcp

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

819727972 | 2024-10-17T07:40:51.213295

195 / tcp

SSH-2.0-OpenSSH_7.4

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-6111 13 moreCVE-2019-6110 CVE-2019-6109 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

1672388472 | 2024-10-02T16:43:08.336342

264 / tcp

CheckPoint\nFirewall Host: ADAPCN156FW02\nSmartCenter Host: adluprdfwmgt01..zjz4qa\\x00\n

-1907080992 | 2024-10-16T05:09:34.417056

389 / tcp

0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x00\\x04\\x00\\x04\\x00

-826599962 | 2024-09-25T19:29:08.358565

427 / tcp

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://localhost.localdomain\nScopeList: default\nAttrributeList: \n\n

502435688 | 2024-10-16T14:55:23.595960

443 / tcp

HTTP/1.1 405 Method Not Allowed
Server: AliyunSLS
Date: Wed, 16 Oct 2024 14:55:23 GMT
Content-Type: application/json
Content-Length: 119
Connection: keep-alive
Access-Control-Allow-Origin: *
Authorization: OLS:ZHlyG1Ye7BR9Kf25ZlL1WWcIBIw=

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:86:44:4a:f6:e4:94:ce:d3:44:13:19
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: May 20 03:16:02 2024 GMT
            Not After : Jun 21 03:16:01 2025 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.log.aliyuncs.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:38:82:87:0e:ec:4b:5e:b4:b0:0a:e9:49:
                    3b:f5:14:04:84:49:ae:60:13:78:bc:e8:92:b2:57:
                    bf:98:e5:95:79:2a:70:9d:27:c7:12:61:bd:7e:27:
                    cf:e2:db:7f:37:d0:10:c3:50:ff:e0:04:42:11:0d:
                    2d:ae:97:8e:fb:3a:f8:fa:e0:9b:b0:fd:0f:76:2c:
                    cb:f0:4c:42:cc:f3:7d:6c:d9:0e:36:31:9c:35:3e:
                    90:79:88:b1:bc:2f:a8:38:79:4e:86:ac:70:5f:a4:
                    8c:32:a1:c3:1b:2f:ab:7e:b6:37:dc:62:e1:cc:74:
                    85:f6:43:e8:dd:d1:74:f2:d9:2d:09:73:78:b4:09:
                    87:e3:e1:21:a4:c0:cd:74:2a:4e:fb:a3:8c:42:88:
                    c0:7b:8f:b5:68:ec:3a:f4:70:27:68:be:dc:9d:19:
                    a8:72:53:60:cf:1c:04:fb:f5:e2:27:72:d3:eb:0b:
                    7f:cd:3a:cb:c6:91:3f:47:d6:28:b1:17:aa:59:ba:
                    f4:43:1f:df:82:ab:25:0a:f2:6c:56:93:df:a2:56:
                    56:6c:d0:41:c7:ed:7a:a8:8b:c4:83:1a:48:46:0b:
                    67:bc:7b:05:68:c3:4a:b1:2d:bf:7b:62:b8:f6:ab:
                    27:56:e7:66:7c:e0:c5:6c:8a:35:0f:86:a1:83:45:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
            X509v3 Subject Alternative Name: 
                DNS:*.log.aliyuncs.com, DNS:*.cn-hangzhou-ha-intranet.log.aliyuncs.com, DNS:*.cn-hangzhou-ha.log.aliyuncs.com, DNS:*.cn-hangzhou-ha-share.log.aliyuncs.com, DNS:*.cn-hangzhou-ha.dualstack.log.aliyuncs.com, DNS:*.cn-hangzhou-c.dualstack.log.aliyuncs.com, DNS:*.cn-hangzhou-c-share.log.aliyuncs.com, DNS:*.cn-hangzhou-c.log.aliyuncs.com, DNS:*.cn-hangzhou-c-intranet.log.aliyuncs.com, DNS:*.cn-hangzhou-b.dualstack.log.aliyuncs.com, DNS:*.cn-hangzhou-b.log.aliyuncs.com, DNS:*.cn-hangzhou-b-share.log.aliyuncs.com, DNS:*.cn-hangzhou-b-intranet.log.aliyuncs.com, DNS:*.cn-hangzhou.dualstack.log.aliyuncs.com, DNS:*.cn-hangzhou-intranet.log.aliyuncs.com, DNS:*.cn-hangzhou-vpc.log.aliyuncs.com, DNS:*.cn-hangzhou-share.log.aliyuncs.com, DNS:*.cn-hangzhou.log.aliyuncs.com, DNS:*.log-global.aliyuncs.com, DNS:*.dualstack.log.aliyuncs.com, DNS:log.aliyuncs.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            X509v3 Subject Key Identifier: 
                C5:97:84:94:EA:40:77:15:23:64:BC:97:1E:C9:C3:15:BC:62:08:D6
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : May 20 03:16:04.619 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5E:DC:39:7E:AD:B8:84:52:97:AB:32:83:
                                C8:81:F3:5D:71:A2:42:87:65:16:22:72:89:ED:D8:A3:
                                DF:2B:A2:19:02:20:62:43:1B:3A:D6:56:C9:16:D5:C9:
                                7B:B1:C1:01:D1:3C:E0:3D:73:89:6C:C0:56:9E:85:93:
                                C5:4C:05:33:F0:EC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : May 20 03:16:04.617 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B3:B9:01:52:77:61:AE:F8:68:31:EE:
                                DE:25:13:46:20:B9:79:22:C6:BF:0E:72:36:8C:9C:5E:
                                E8:05:46:E5:46:02:21:00:AD:57:9A:8F:B3:D3:01:2E:
                                61:B9:95:1A:36:7E:58:9C:60:00:0B:F2:35:2A:39:BE:
                                2C:15:BB:6F:DF:6F:87:90
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : May 20 03:16:04.886 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:33:04:CA:6F:FE:2A:91:6B:DF:41:87:D3:
                                CA:CB:FE:27:87:B4:00:D2:42:91:6D:DB:5D:E7:63:C8:
                                AF:F9:7A:2F:02:21:00:BD:9B:78:66:9F:33:81:96:B3:
                                99:FA:A4:10:67:A6:A2:65:16:02:A1:E2:DA:23:CD:53:
                                56:ED:FD:4C:6E:2E:E1
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0c:8d:64:b0:e2:37:a9:4a:92:5a:bc:3a:5d:d0:c6:57:92:cc:
        3a:51:b2:54:72:d2:d9:4f:e8:ea:d1:57:7f:ff:74:00:96:c1:
        2b:44:0c:52:a6:85:19:cf:ee:35:96:7e:ed:20:bd:67:35:02:
        56:bc:86:be:d3:d9:fa:7f:a3:60:98:11:e4:c5:2e:6b:7a:43:
        6b:3e:46:16:8d:46:fb:c8:8a:82:77:7a:1d:e9:81:89:22:60:
        9b:f5:34:48:ce:ce:eb:53:aa:5b:c5:00:54:72:01:d0:17:42:
        ad:c9:41:1e:7f:39:af:34:fa:52:08:6c:4c:e4:49:77:3d:eb:
        af:17:93:09:31:83:5a:75:1c:91:9d:93:da:ed:f7:00:65:44:
        df:23:26:cc:95:5c:56:9f:eb:6e:eb:c3:b1:8e:be:5e:d0:a2:
        39:d9:68:2b:d8:06:0b:00:ef:2d:2b:26:b6:c8:0c:bb:2a:a4:
        49:01:50:4b:84:e9:dd:2a:bf:76:c8:f2:66:f5:53:9e:64:cd:
        0c:e2:81:6a:81:1c:99:fb:57:6a:60:53:74:c3:7c:dc:c2:a2:
        a6:58:c9:a2:f0:ed:91:24:1b:6e:08:26:15:16:82:4c:49:a4:
        68:5c:74:51:5f:46:72:2e:19:01:05:fa:f4:f7:a0:df:a2:22:
        75:42:0c:ce

-1140468363 | 2024-09-24T09:47:47.767022

502 / tcp

\x02\t\x01

1911457608 | 2024-09-28T16:57:38.842569

503 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1655023012 | 2024-10-13T16:10:10.837158

515 / tcp

athinfod: invalid query.\n

-2035415184 | 2024-09-25T11:01:46.140814

548 / tcp

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: Landisk2\nMachine Type: \rNetatalk3.1.8\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: Cleartxt Passwrd\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

-2089734047 | 2024-10-13T20:22:51.934902

789 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1077013874 | 2024-10-06T22:31:37.062305

806 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

-1970692834 | 2024-09-24T16:11:20.886927

873 / tcp

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

1956828827 | 2024-10-10T06:38:14.534555

902 / tcp

220 VMware Authentication Daemon Version 1.10: SSL Required, Se
rverDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , , NFCSSL supported/t

-1013082686 | 2024-10-19T20:34:27.353824

993 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

-1399940268 | 2024-10-02T23:32:23.933900

1025 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-10-21T13:58:49.936824

1063 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2096652808 | 2024-10-14T04:33:10.725166

1099 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1911457608 | 2024-09-24T17:36:21.062160

1153 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1492413928 | 2024-09-29T20:58:28.619723

1167 / tcp

SSH-2.0-OpenSSH_7.5

1741579575 | 2024-09-30T10:03:07.798407

1177 / tcp

117101543 | 2024-10-14T14:21:57.159334

1234 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

165188539 | 2024-10-20T20:30:52.558929

1414 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

49107754 | 2024-10-08T07:43:40.577902

1433 / tcp

MSSQL Server\nVersion: 134219767 (0x80007f7)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nProduct_Version: 5.2.3790 Ntlm 15\nOS: Windows Server 2003/Windows Server 2003 R2/Windows Server 2003, Service Pack 2\n

-805164506 | 2024-10-08T00:43:30.583058

1521 / tcp

\xc3\xbf\xc3\xbd"\r\nL

819727972 | 2024-10-08T20:30:25.704225

1599 / tcp

SSH-2.0-OpenSSH_7.4

2087396567 | 2024-10-14T18:38:05.728066

1604 / tcp

kjnkjabhbanc283ubcsbhdc72

-1608241410 | 2024-09-25T23:37:57.779465

1723 / tcp

Firmware: 1\nHostname: local\nVendor: linux\n

-833635452 | 2024-10-21T13:07:43.008916

1801 / tcp

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x05\xe8\x9b\xb5\\x95E\\x1eJ\\x85\xd5\xb1\\xe4\\xf9\\xba\\xf6+92d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

51259122 | 2024-09-29T22:48:01.032999

1883 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

842535728 | 2024-10-01T11:19:46.404511

1926 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

-1428621233 | 2024-10-07T14:41:14.507246

1962 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

-784071826 | 2024-09-27T08:14:01.993461

2002 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-16905 7 moreCVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368

1545917845 | 2024-10-05T16:55:52.194448

2008 / tcp

[gN

-2096652808 | 2024-10-01T08:54:56.679213

2021 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1888448627 | 2024-10-16T09:49:11.887865

2059 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

819727972 | 2024-10-14T08:53:01.931606

2066 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-10-10T01:07:30.379022

2067 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-10-14T18:14:06.583568

2070 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-09-28T02:50:41.553225

2080 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1839934832 | 2024-10-16T04:55:23.233532

2081 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-971970408 | 2024-09-24T20:16:33.955202

2083 / tcp

-2033111675 | 2024-10-01T16:43:52.786424

2087 / tcp

~djb

-971970408 | 2024-10-10T21:17:42.341794

2154 / tcp

546151771 | 2024-09-26T04:16:09.770589

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

-358801646 | 2024-10-03T13:21:12.215682

2222 / tcp

SSH-2.0-OpenSSH_6.6.1

1662205251 | 2024-10-03T07:36:31.687577

2323 / tcp

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

-2107996212 | 2024-10-14T19:06:49.966892

2332 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

819727972 | 2024-09-28T20:35:03.887261

2345 / tcp

SSH-2.0-OpenSSH_7.4

-2089734047 | 2024-10-16T20:13:59.289045

2404 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-409020351 | 2024-10-04T06:14:05.306794

2455 / tcp

NPC Telnet permit one connection.
 But One connection() already keep alive.
Good Bye !!

-1399940268 | 2024-10-18T16:35:45.402839

2553 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-971970408 | 2024-10-01T03:48:47.461614

2628 / tcp

1948301213 | 2024-10-12T06:40:55.410333

2761 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

1830187220 | 2024-10-15T04:17:41.250589

2762 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

842535728 | 2024-10-11T15:27:34.235152

3001 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

2063598737 | 2024-10-09T15:32:30.675497

3050 / tcp

/0 0 L\r\n/0 0 HUH\r\n

-2089734047 | 2024-10-19T21:41:41.880897

3068 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-862070606 | 2024-10-11T13:20:39.157713

3260 / tcp

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n

198844676 | 2024-09-28T11:37:07.340039

3268 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

-1399940268 | 2024-10-15T00:25:03.601652

3269 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2096652808 | 2024-10-12T23:02:28.528744

3299 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-2089734047 | 2024-10-07T13:48:10.357612

3301 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1036944024 | 2024-10-16T04:42:41.982697

3306 / tcp

F\\x00\\x00\\x00\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MySQL server

-1487943323 | 2024-10-03T11:21:28.489261

3310 / tcp

431 Unable to negotiate secure command connection.\r\n

1282941221 | 2024-10-08T19:07:36.161488

3352 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

165188539 | 2024-10-10T12:30:27.915300

3388 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-2096652808 | 2024-09-28T21:30:48.020140

3400 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1399940268 | 2024-10-19T19:50:07.551143

3556 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1611764932 | 2024-09-25T21:22:43.007337

3567 / tcp

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

-1760806421 | 2024-10-21T06:28:53.819030

3780 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

819727972 | 2024-10-09T03:53:58.774850

3790 / tcp

SSH-2.0-OpenSSH_7.4

470305186 | 2024-10-17T04:16:25.099742

4000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET

-1399940268 | 2024-10-09T18:28:09.305582

4064 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

178736976 | 2024-10-19T03:36:20.392848

4157 / tcp

SSH-58-Ingrian_SSH

819727972 | 2024-09-27T11:29:31.286805

4282 / tcp

SSH-2.0-OpenSSH_7.4

-269926141 | 2024-10-06T22:53:45.249124

4321 / tcp

\\x00\\x00\\x12\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\x00\\x00\\x00\\x80\\x00\\x04\\x00\\x01\\x00\\x00\\x00\\x05\\x00\\xff\\xff\\xff\\x00\\x00\\x04\\x08\\x00\\x00\\x00\\x00\\x00\\x7f\\xff\\x00\\x00\\x00\\x00\\x08\\x07\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01

921225407 | 2024-10-05T12:16:15.035229

4369 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-971970408 | 2024-10-20T13:56:40.063833

4434 / tcp

751161953 | 2024-09-21T17:58:23.280293

4443 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae295529c967ad650ec3304d944abd

1690634669 | 2024-10-16T21:53:53.113133

4444 / tcp

539065883 | 2024-10-01T14:36:59.155145

4506 / tcp

819727972 | 2024-10-07T16:20:15.597585

4747 / tcp

SSH-2.0-OpenSSH_7.4

-1888448627 | 2024-10-03T03:54:53.131277

4786 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

639175818 | 2024-10-19T17:04:21.191373

4840 / tcp

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

1690634669 | 2024-10-13T13:48:34.138268

4899 / tcp

1689518693 | 2024-10-16T01:50:54.576012

4949 / tcp

[¼/

1911457608 | 2024-10-19T09:51:30.465445

4999 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2024-10-01T00:59:58.742611

5006 / tcp

kjnkjabhbanc283ubcsbhdc72

-358801646 | 2024-10-19T22:19:12.232956

5025 / tcp

SSH-2.0-OpenSSH_6.6.1

2087396567 | 2024-10-15T22:01:06.506817

5172 / tcp

kjnkjabhbanc283ubcsbhdc72

-1996280214 | 2024-10-03T15:57:49.301130

5201 / tcp

\x06\x04\x05@

1363464823 | 2024-10-12T07:54:00.083246

5222 / tcp

\x00[|ox\x7f\x00\x00

756886313 | 2024-10-11T08:52:20.479691

5269 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html

-339084706 | 2024-10-07T20:31:01.099843

5435 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

-784071826 | 2024-10-17T23:52:02.029129

5591 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-16905 7 moreCVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368

575925250 | 2024-09-22T14:46:28.735594

5672 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

2087396567 | 2024-10-20T11:22:06.982722

5858 / tcp

kjnkjabhbanc283ubcsbhdc72

-1779118422 | 2024-10-13T01:15:05.591830

5938 / tcp

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

120534451 | 2024-10-02T07:59:25.791321

6001 / tcp

X11 access denied

1632932802 | 2024-10-19T23:28:58.117910

6002 / tcp

-1730858130 | 2024-10-08T20:38:23.601610

6004 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1623449421 | 2024-10-11T07:37:30.860198

6009 / tcp

HTTP/1.1 200 OK
Server: nginx/1.12.2
Content-Type: text/html
Accept-Ranges: bytes
Connection: Keep-alive
Via: 1.1 ID-1716635744544672 uproxy-9

-980525298 | 2024-09-23T00:42:17.991980

6264 / tcp

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

321971019 | 2024-09-25T01:52:37.245429

6379 / tcp

-ERR client ip is not in whitelist\r

1332894250 | 2024-10-01T16:39:26.050845

6503 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

-1428621233 | 2024-10-11T17:49:58.237865

6633 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

819727972 | 2024-10-12T23:48:22.446068

6653 / tcp

SSH-2.0-OpenSSH_7.4

632542934 | 2024-10-15T18:29:38.411877

6662 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1327849035 | 2024-10-19T11:40:01.529090

6666 / tcp

HTTP/1.1 200 OK
Server: Webs
X-Frame-Options: SAMEORIGIN
Content-Type: text/html
Connection: keep-alive
Keep-Alive: timeout=60, max=99

1911457608 | 2024-10-15T01:30:29.812019

6667 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-653033013 | 2024-09-30T12:21:38.697384

6697 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

819727972 | 2024-10-03T06:36:27.054307

6998 / tcp

SSH-2.0-OpenSSH_7.4

-579195550 | 2024-09-27T17:04:30.399066

7000 / tcp

HTTP/1.1 407 Proxy Authentication Required 
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm="proxy"

-1045760528 | 2024-10-17T06:16:39.017010

7002 / tcp

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

921225407 | 2024-10-05T07:14:26.638999

7080 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1830697416 | 2024-10-12T23:17:24.160771

7090 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

-1611764932 | 2024-10-08T18:14:54.168816

7171 / tcp

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

-1327660293 | 2024-09-28T16:42:27.791948

7415 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

1542849631 | 2024-10-09T21:34:35.821354

7434 / tcp

* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at

1761482307 | 2024-10-09T14:29:09.918547

7465 / tcp

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

-1248408558 | 2024-10-12T15:51:46.932668

7548 / tcp

220 MikroTik FTP server (MikroTik 6.44.3) ready

1574088840 | 2024-09-27T23:11:42.337898

8009 / tcp

">Application and Content Networking Software 3.9</a>)\n</BODY><

-2096652808 | 2024-10-11T22:19:42.896048

8083 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1842524259 | 2024-09-29T06:56:30.004327

8089 / tcp

623236583 | 2024-10-18T05:32:06.053064

8099 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae293a_dedxin34_19677-349

597764502 | 2024-10-13T04:46:27.612557

8111 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

1865391109 | 2024-09-30T16:30:27.176754

8112 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0

2087396567 | 2024-10-02T09:50:34.375390

8126 / tcp

kjnkjabhbanc283ubcsbhdc72

1308377066 | 2024-09-23T23:43:17.533695

8140 / tcp

ncacn_http/1.0

-1902426733 | 2024-09-29T18:55:28.928867

8180 / tcp

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html
Expires: 0

2087396567 | 2024-10-04T14:02:23.833530

8181 / tcp

kjnkjabhbanc283ubcsbhdc72

1911457608 | 2024-09-30T03:11:42.803445

8291 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1487943323 | 2024-09-30T21:59:46.912305

8333 / tcp

431 Unable to negotiate secure command connection.\r\n

1134517380 | 2024-10-08T11:39:49.184101

8423 / tcp

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

1662811133 | 2024-10-10T18:59:18.661757

8500 / tcp

MudNames 77 - (C) 1997-2001 Ragnar Hojland Espinosa <ragnar@ragnar-hojland.com>

-68075478 | 2024-10-20T03:47:43.471991

8554 / tcp

-1399940268 | 2024-10-11T05:37:36.767690

8575 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-339084706 | 2024-10-16T01:16:04.827762

8728 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

-2089734047 | 2024-10-11T22:47:08.995881

8809 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1611764932 | 2024-10-13T03:47:38.301893

8834 / tcp

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

1911457608 | 2024-09-21T19:06:45.538022

8836 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1830697416 | 2024-09-22T01:58:57.102396

8855 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

819727972 | 2024-10-06T12:04:34.700232

8872 / tcp

SSH-2.0-OpenSSH_7.4

-1167054895 | 2024-10-08T17:12:17.117931

9000 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24a9_VM-TPE-019Bk119_8663-62725

-1026951088 | 2024-10-18T07:27:25.502911

9001 / tcp

erro ip

2087396567 | 2024-10-12T21:17:33.003179

9002 / tcp

kjnkjabhbanc283ubcsbhdc72

597764502 | 2024-09-23T17:19:02.188514

9029 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

-1477838366 | 2024-09-24T22:47:17.650163

9033 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

1282941221 | 2024-10-08T19:02:22.359380

9039 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1689518693 | 2024-09-23T19:29:13.255328

9042 / tcp

[¼/

707919486 | 2024-10-15T20:57:24.213847

9093 / tcp

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

1741579575 | 2024-10-07T11:48:17.486936

9095 / tcp

51259122 | 2024-10-03T18:40:31.214686

9100 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

1911457608 | 2024-09-22T16:31:48.609291

9305 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1730858130 | 2024-10-12T01:31:18.536683

9306 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-1399940268 | 2024-09-26T01:49:37.261907

9308 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

694512854 | 2024-10-14T07:23:36.143747

9418 / tcp

220-FileZilla Server 中文版 0.9.60 beta
220-written by Tim Kosse (tim.kosse@filezilla-project.org)
220 Please visit https://filezilla-project.org/

-2107996212 | 2024-10-16T18:49:11.315201

9530 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-2031152423 | 2024-09-27T05:59:14.682468

9600 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

819727972 | 2024-10-17T19:42:58.761987

9633 / tcp

SSH-2.0-OpenSSH_7.4

-1867457549 | 2024-10-17T04:36:13.231895

9876 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)

-1839864261 | 2024-10-06T06:36:14.440546

9943 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25a5_PS-TNH-01Vm9154_3387-14536

-1399940268 | 2024-10-04T12:21:33.815334

9990 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-696402907 | 2024-09-25T01:48:58.178968

9998 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae298c_PS-HIA-01Q7y203_55153-4321

1161309183 | 2024-09-21T20:34:50.882605

9999 / tcp

ProxyServer is ready

-441419608 | 2024-10-05T21:49:24.194291

10000 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

1492413928 | 2024-09-26T23:07:31.625722

10001 / tcp

SSH-2.0-OpenSSH_7.5

1741579575 | 2024-10-19T07:44:49.681276

10250 / tcp

-1899074860 | 2024-10-04T21:57:35.765969

10909 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

-1399940268 | 2024-10-15T20:07:57.876885

10911 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-616720387 | 2024-10-13T21:04:19.168519

11112 / tcp

SSH-2.0-SSHD_0.7.6

1161309183 | 2024-10-11T21:43:52.277081

11210 / tcp

ProxyServer is ready

-446385447 | 2024-10-08T23:05:57.000244

12000 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1efa_PS-CKG-01vQy48_16235-38870

-1626979812 | 2024-10-12T16:54:23.960465

14147 / tcp

220 Service ready for new user.

-1810987450 | 2024-10-06T07:26:31.884786

14344 / tcp

\xc3\xbf

171352214 | 2024-10-11T08:24:57.570267

16993 / tcp

-ERR client ip is not in whitelist

-784071826 | 2024-10-06T02:57:06.272511

18081 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-16905 7 moreCVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368

165188539 | 2024-10-08T11:26:55.048784

18245 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2087396567 | 2024-10-21T13:11:54.406181

19930 / tcp

kjnkjabhbanc283ubcsbhdc72

1900503736 | 2024-10-09T12:34:44.566014

20000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

1911457608 | 2024-10-07T14:10:53.908798

20256 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1370263973 | 2024-10-07T18:16:43.923470

20880 / tcp

dubbo>

-1026951088 | 2024-09-29T14:13:12.667893

21379 / tcp

erro ip

1887224352 | 2024-09-29T09:57:59.401792

23023 / tcp

408230060 | 2024-10-13T08:22:27.452890

25565 / tcp

\r\nSorry, that nickname format is invalid.\r\n

1763259671 | 2024-09-23T21:58:37.100698

27017 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

1231376952 | 2024-10-14T20:43:50.389826

30003 / tcp

-786044033 | 2024-10-03T23:14:38.337964

31337 / tcp

OK Welcome <299685> on DirectUpdate server 7286

585675468 | 2024-10-02T18:19:04.687918

32764 / tcp

@
05@ þ...

819727972 | 2024-10-20T20:55:45.625131

35000 / tcp

SSH-2.0-OpenSSH_7.4

660175493 | 2024-10-21T10:13:38.046385

37777 / tcp

740837454 | 2024-09-21T18:00:51.448469

41800 / tcp

SSH-2.0-OpenSSH_5.3

-433302150 | 2024-09-30T21:30:31.152061

44158 / tcp

/multistream/1.0.0

1574088840 | 2024-10-17T22:47:03.687422

44818 / tcp

">Application and Content Networking Software 3.9</a>)\n</BODY><

1282941221 | 2024-10-16T02:55:58.065844

50000 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-1681927087 | 2024-10-20T19:41:05.563950

50100 / tcp

kjnkjabhbanc283ubcsbhdc72

-2089734047 | 2024-10-17T21:00:50.081610

54138 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1032713145 | 2024-09-29T22:09:27.123933

55000 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-971970408 | 2024-10-13T01:07:36.508234

55443 / tcp

819727972 | 2024-10-21T16:02:07.325255

55553 / tcp

SSH-2.0-OpenSSH_7.4

2087396567 | 2024-10-09T09:40:27.054989

55554 / tcp

kjnkjabhbanc283ubcsbhdc72

819727972 | 2024-09-30T09:23:03.977519

61616 / tcp

SSH-2.0-OpenSSH_7.4

-1113435755 | 2024-10-01T10:37:45.038431

62078 / tcp

/1.1 404 Not Found
Content Length: 0

120.55.220.55

Last Seen: 2024-10-21

Tags:

GeneralInformation

Vulnerabilities All ports Port 195 Port 1167 Port 1599 Port 2002 Port 2066 Port 2345 Port 3790 Port 4282 Port 4747 Port 5591 Port 6653 Port 6998 Port 8872 Port 9633 Port 10001 Port 18081 Port 35000 Port 41800 Port 55553 Port 61616 Latest CVSS

OpenPorts

550048729 | 2024-10-05T19:25:15.275837 11 / tcp

1308377066 | 2024-10-13T01:33:52.258870 15 / tcp

-82008689 | 2024-09-29T14:13:33.956786 17 / tcp

-1729629024 | 2024-10-14T20:21:06.278459 19 / tcp

1564456597 | 2024-09-24T21:39:46.826241 21 / tcp

-1032713145 | 2024-10-12T19:30:44.914753 25 / tcp

-971970408 | 2024-09-23T14:05:04.293516 43 / tcp

-1156129152 | 2024-09-24T21:29:17.200826 53 / tcp

-1763883228 | 2024-10-10T14:33:50.611494 70 / tcp

-855979655 | 2024-10-15T01:19:39.729147 80 / tcp

-339084706 | 2024-10-15T14:50:15.995668 102 / tcp

1948301213 | 2024-09-22T07:19:20.973544 104 / tcp

-1810987450 | 2024-09-25T21:52:49.539955 110 / tcp

-2107996212 | 2024-09-30T10:59:51.954017 122 / tcp

-398621179 | 2024-09-21T17:38:54.648986 143 / tcp

669849225 | 2024-09-30T20:58:40.246413 154 / tcp

-2089734047 | 2024-10-08T21:24:50.340381 175 / tcp

-399606100 | 2024-10-18T18:59:25.393782 179 / tcp

819727972 | 2024-10-17T07:40:51.213295 195 / tcp

1672388472 | 2024-10-02T16:43:08.336342 264 / tcp

-1907080992 | 2024-10-16T05:09:34.417056 389 / tcp

-826599962 | 2024-09-25T19:29:08.358565 427 / tcp

502435688 | 2024-10-16T14:55:23.595960 443 / tcp

-1140468363 | 2024-09-24T09:47:47.767022 502 / tcp

1911457608 | 2024-09-28T16:57:38.842569 503 / tcp

1655023012 | 2024-10-13T16:10:10.837158 515 / tcp

-2035415184 | 2024-09-25T11:01:46.140814 548 / tcp

-2089734047 | 2024-10-13T20:22:51.934902 789 / tcp

1077013874 | 2024-10-06T22:31:37.062305 806 / tcp

-1970692834 | 2024-09-24T16:11:20.886927 873 / tcp

1956828827 | 2024-10-10T06:38:14.534555 902 / tcp

-1013082686 | 2024-10-19T20:34:27.353824 993 / tcp

-1399940268 | 2024-10-02T23:32:23.933900 1025 / tcp

-1399940268 | 2024-10-21T13:58:49.936824 1063 / tcp

-2096652808 | 2024-10-14T04:33:10.725166 1099 / tcp

1911457608 | 2024-09-24T17:36:21.062160 1153 / tcp

1492413928 | 2024-09-29T20:58:28.619723 1167 / tcp

1741579575 | 2024-09-30T10:03:07.798407 1177 / tcp

117101543 | 2024-10-14T14:21:57.159334 1234 / tcp

165188539 | 2024-10-20T20:30:52.558929 1414 / tcp

49107754 | 2024-10-08T07:43:40.577902 1433 / tcp

-805164506 | 2024-10-08T00:43:30.583058 1521 / tcp

819727972 | 2024-10-08T20:30:25.704225 1599 / tcp

2087396567 | 2024-10-14T18:38:05.728066 1604 / tcp

-1608241410 | 2024-09-25T23:37:57.779465 1723 / tcp

-833635452 | 2024-10-21T13:07:43.008916 1801 / tcp

51259122 | 2024-09-29T22:48:01.032999 1883 / tcp

842535728 | 2024-10-01T11:19:46.404511 1926 / tcp

-1428621233 | 2024-10-07T14:41:14.507246 1962 / tcp

-784071826 | 2024-09-27T08:14:01.993461 2002 / tcp

1545917845 | 2024-10-05T16:55:52.194448 2008 / tcp

-2096652808 | 2024-10-01T08:54:56.679213 2021 / tcp

-1888448627 | 2024-10-16T09:49:11.887865 2059 / tcp

819727972 | 2024-10-14T08:53:01.931606 2066 / tcp

-1399940268 | 2024-10-10T01:07:30.379022 2067 / tcp

-1399940268 | 2024-10-14T18:14:06.583568 2070 / tcp

-1399940268 | 2024-09-28T02:50:41.553225 2080 / tcp

-1839934832 | 2024-10-16T04:55:23.233532 2081 / tcp

-971970408 | 2024-09-24T20:16:33.955202 2083 / tcp

-2033111675 | 2024-10-01T16:43:52.786424 2087 / tcp

-971970408 | 2024-10-10T21:17:42.341794 2154 / tcp

546151771 | 2024-09-26T04:16:09.770589 2181 / tcp

-358801646 | 2024-10-03T13:21:12.215682 2222 / tcp

1662205251 | 2024-10-03T07:36:31.687577 2323 / tcp

-2107996212 | 2024-10-14T19:06:49.966892 2332 / tcp

819727972 | 2024-09-28T20:35:03.887261 2345 / tcp

-2089734047 | 2024-10-16T20:13:59.289045 2404 / tcp

-409020351 | 2024-10-04T06:14:05.306794 2455 / tcp

-1399940268 | 2024-10-18T16:35:45.402839 2553 / tcp

-971970408 | 2024-10-01T03:48:47.461614 2628 / tcp

1948301213 | 2024-10-12T06:40:55.410333 2761 / tcp

1830187220 | 2024-10-15T04:17:41.250589 2762 / tcp

842535728 | 2024-10-11T15:27:34.235152 3001 / tcp

2063598737 | 2024-10-09T15:32:30.675497 3050 / tcp

Vulnerabilities

550048729 | 2024-10-05T19:25:15.275837
11 / tcp

1308377066 | 2024-10-13T01:33:52.258870
15 / tcp

-82008689 | 2024-09-29T14:13:33.956786
17 / tcp

-1729629024 | 2024-10-14T20:21:06.278459
19 / tcp

1564456597 | 2024-09-24T21:39:46.826241
21 / tcp

-1032713145 | 2024-10-12T19:30:44.914753
25 / tcp

-971970408 | 2024-09-23T14:05:04.293516
43 / tcp

-1156129152 | 2024-09-24T21:29:17.200826
53 / tcp

-1763883228 | 2024-10-10T14:33:50.611494
70 / tcp

-855979655 | 2024-10-15T01:19:39.729147
80 / tcp

-339084706 | 2024-10-15T14:50:15.995668
102 / tcp

1948301213 | 2024-09-22T07:19:20.973544
104 / tcp

-1810987450 | 2024-09-25T21:52:49.539955
110 / tcp

-2107996212 | 2024-09-30T10:59:51.954017
122 / tcp

-398621179 | 2024-09-21T17:38:54.648986
143 / tcp

669849225 | 2024-09-30T20:58:40.246413
154 / tcp

-2089734047 | 2024-10-08T21:24:50.340381
175 / tcp

-399606100 | 2024-10-18T18:59:25.393782
179 / tcp

819727972 | 2024-10-17T07:40:51.213295
195 / tcp

1672388472 | 2024-10-02T16:43:08.336342
264 / tcp

-1907080992 | 2024-10-16T05:09:34.417056
389 / tcp

-826599962 | 2024-09-25T19:29:08.358565
427 / tcp

502435688 | 2024-10-16T14:55:23.595960
443 / tcp

-1140468363 | 2024-09-24T09:47:47.767022
502 / tcp

1911457608 | 2024-09-28T16:57:38.842569
503 / tcp

1655023012 | 2024-10-13T16:10:10.837158
515 / tcp

-2035415184 | 2024-09-25T11:01:46.140814
548 / tcp

-2089734047 | 2024-10-13T20:22:51.934902
789 / tcp

1077013874 | 2024-10-06T22:31:37.062305
806 / tcp

-1970692834 | 2024-09-24T16:11:20.886927
873 / tcp

1956828827 | 2024-10-10T06:38:14.534555
902 / tcp

-1013082686 | 2024-10-19T20:34:27.353824
993 / tcp

-1399940268 | 2024-10-02T23:32:23.933900
1025 / tcp

-1399940268 | 2024-10-21T13:58:49.936824
1063 / tcp

-2096652808 | 2024-10-14T04:33:10.725166
1099 / tcp

1911457608 | 2024-09-24T17:36:21.062160
1153 / tcp

1492413928 | 2024-09-29T20:58:28.619723
1167 / tcp

1741579575 | 2024-09-30T10:03:07.798407
1177 / tcp

117101543 | 2024-10-14T14:21:57.159334
1234 / tcp

165188539 | 2024-10-20T20:30:52.558929
1414 / tcp

49107754 | 2024-10-08T07:43:40.577902
1433 / tcp

-805164506 | 2024-10-08T00:43:30.583058
1521 / tcp

819727972 | 2024-10-08T20:30:25.704225
1599 / tcp

2087396567 | 2024-10-14T18:38:05.728066
1604 / tcp

-1608241410 | 2024-09-25T23:37:57.779465
1723 / tcp

-833635452 | 2024-10-21T13:07:43.008916
1801 / tcp

51259122 | 2024-09-29T22:48:01.032999
1883 / tcp

842535728 | 2024-10-01T11:19:46.404511
1926 / tcp

-1428621233 | 2024-10-07T14:41:14.507246
1962 / tcp

-784071826 | 2024-09-27T08:14:01.993461
2002 / tcp

1545917845 | 2024-10-05T16:55:52.194448
2008 / tcp

-2096652808 | 2024-10-01T08:54:56.679213
2021 / tcp

-1888448627 | 2024-10-16T09:49:11.887865
2059 / tcp

819727972 | 2024-10-14T08:53:01.931606
2066 / tcp

-1399940268 | 2024-10-10T01:07:30.379022
2067 / tcp

-1399940268 | 2024-10-14T18:14:06.583568
2070 / tcp

-1399940268 | 2024-09-28T02:50:41.553225
2080 / tcp

-1839934832 | 2024-10-16T04:55:23.233532
2081 / tcp

-971970408 | 2024-09-24T20:16:33.955202
2083 / tcp

-2033111675 | 2024-10-01T16:43:52.786424
2087 / tcp

-971970408 | 2024-10-10T21:17:42.341794
2154 / tcp

546151771 | 2024-09-26T04:16:09.770589
2181 / tcp

-358801646 | 2024-10-03T13:21:12.215682
2222 / tcp

1662205251 | 2024-10-03T07:36:31.687577
2323 / tcp

-2107996212 | 2024-10-14T19:06:49.966892
2332 / tcp

819727972 | 2024-09-28T20:35:03.887261
2345 / tcp

-2089734047 | 2024-10-16T20:13:59.289045
2404 / tcp

-409020351 | 2024-10-04T06:14:05.306794
2455 / tcp

-1399940268 | 2024-10-18T16:35:45.402839
2553 / tcp

-971970408 | 2024-10-01T03:48:47.461614
2628 / tcp

1948301213 | 2024-10-12T06:40:55.410333
2761 / tcp

1830187220 | 2024-10-15T04:17:41.250589
2762 / tcp

842535728 | 2024-10-11T15:27:34.235152
3001 / tcp

2063598737 | 2024-10-09T15:32:30.675497
3050 / tcp

-2089734047 | 2024-10-19T21:41:41.880897
3068 / tcp

-862070606 | 2024-10-11T13:20:39.157713
3260 / tcp

198844676 | 2024-09-28T11:37:07.340039
3268 / tcp

-1399940268 | 2024-10-15T00:25:03.601652
3269 / tcp

-2096652808 | 2024-10-12T23:02:28.528744
3299 / tcp