GeneralInformation

Country	China
City	Hangzhou
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 19 21 22 25 43 49 53 65 70 79 104 111 122 175 177 179 195 221 389 427 443 444 461 502 515 548 554 556 636 700 771 830 880 992 995 1023 1025 1050 1080 1111 1153 1177 1200 1234 1337 1388 1452 1515 1604 1723 1800 1801 1883 1911 1922 1926 1962 2002 2003 2057 2067 2087 2108 2154 2222 2332 2345 2404 2455 2566 2628 2762 2806 3003 3004 3050 3066 3068 3075 3083 3127 3146 3163 3193 3260 3268 3299 3301 3306 3310 3341 3388 3389 3400 3401 3403 3561 3563 3572 3780 3790 3954 4022 4063 4120 4150 4321 4369 4433 4434 4500 4506 4543 4786 4808 4840 4911 4949 5001 5006 5007 5009 5010 5090 5190 5222 5231 5239 5269 5280 5435 5456 5495 5568 5597 5672 5858 5904 5906 5938 6000 6002 6102 6161 6379 6505 6512 6622 6633 6666 6667 6668 6697 7001 7014 7021 7071 7171 7218 7415 7443 7535 7634 7657 7774 7776 8009 8023 8041 8057 8076 8081 8083 8085 8087 8089 8096 8139 8140 8151 8154 8174 8181 8196 8239 8291 8432 8481 8485 8500 8519 8545 8554 8589 8649 8700 8723 8788 8804 8811 8818 8823 8827 8834 8845 8880 8887 8889 8907 8911 8999 9001 9002 9042 9051 9053 9057 9083 9091 9095 9133 9145 9151 9157 9160 9193 9222 9251 9306 9418 9443 9465 9500 9530 9600 9761 9876 9943 9977 9998 9999 10039 10089 10250 10533 10911 10936 11112 11210 11300 11602 12000 12019 12082 12103 12143 12145 12195 12196 12206 12213 12234 12236 12237 12238 12239 12264 12276 12302 12315 12317 12343 12348 12399 12421 12426 12476 12486 12505 12531 12534 12538 12589 12615 14147 14344 14896 15002 15503 16003 16006 16014 16090 17100 17184 18081 18111 18245 18765 19000 19017 19999 20040 20256 20880 21081 21232 21240 21268 21291 21293 21310 21357 22103 22345 22556 25001 25007 25565 27015 28015 30002 30003 31337 32746 32764 33333 35000 37777 38080 41922 42322 42422 43222 43422 43722 43822 44158 44399 44622 44818 44822 44922 45003 45122 45222 45444 46722 46922 47022 47080 47122 47422 47622 47990 48022 48322 48422 49022 49080 49200 49422 49622 49688 50000 50100 50822 51002 51235 51522 51922 52022 52222 52230 52722 53122 54322 54922 55443 55553 55554 55722 57122 58122 58222 58822 58922 59022 59922 60000 60129 61613 61616 62078 62237 63210 63260 63443

11 / tcp

2087396567 | 2025-01-15T10:26:13.307333

kjnkjabhbanc283ubcsbhdc72

13 / tcp

1215890103 | 2025-01-27T22:39:44.737558

12:58:25 2024-1-22

15 / tcp

-746114901 | 2025-01-14T04:46:00.619207

[KpU

19 / tcp

829384519 | 2025-01-16T19:27:06.492241

 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefg
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUV

21 / tcp

1564456597 | 2025-01-26T16:18:12.409891

220 Firewall Authentication required before proceeding with service

22 / tcp

870256069 | 2025-01-28T13:29:41.936755

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3\r\n

25 / tcp

1189133115 | 2025-01-17T15:16:35.461402

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

43 / tcp

1741579575 | 2025-01-18T05:54:53.766163

49 / tcp

-1909001798 | 2025-01-09T19:34:48.513968

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Tue, 21 Dec 2021 03:13:39 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

53 / tcp

-1858876500 | 2025-01-30T21:29:17.117441

9\n\\x81\\x80\\x00\\x01\\x00\\x02\\x00\\x00\\x00\\x00\\x08clients1\\x06google\\x03com\\x00\\x00\\x01\\x00\\x01\\xc0\x0c\\x00\\x05\\x00\\x01\\x00\\x00\\x00\\x02\\x00\x0c\\x07clients\\x01l\\xc0\\x15\\xc01\\x00\\x01\\x00\\x01\\x00\\x00\\x00\\x02\\x00\\x04\\xac\xd9\xa3.\n\\x00\\x06\\x85\\x00\\x00\\x01\\x00\\x00\\x00\\x01\\x00

65 / tcp

-358801646 | 2025-01-28T10:05:35.624689

SSH-2.0-OpenSSH_6.6.1

70 / tcp

1412519768 | 2025-01-16T14:47:44.678960

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

79 / tcp

-1770051369 | 2025-01-20T23:46:12.990309

421 too many connections

104 / tcp

1911457608 | 2025-01-05T22:39:19.427155

\x00[\x00\x00\x00\x00\x00\x00

111 / tcp

-1626979812 | 2025-01-12T22:13:33.527110

220 Service ready for new user.

122 / tcp

-1428621233 | 2025-01-28T00:11:24.289181

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

175 / tcp

632542934 | 2025-01-15T13:31:56.863280

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

177 / tcp

1911457608 | 2025-01-23T00:40:31.600743

\x00[\x00\x00\x00\x00\x00\x00

179 / tcp

-399606100 | 2025-01-08T18:26:12.728515

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

195 / tcp

2084412416 | 2025-01-30T04:11:26.201147

yÐÿÿsLINSÓ

221 / tcp

-1888448627 | 2025-01-28T22:09:55.791642

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

389 / tcp

-1639129386 | 2025-01-20T18:51:36.219709

0%\\x02\\x01\\x01a \n\\x010\\x04\\x00\\x04\\x19anonymous bind disallowed

427 / tcp

-349937125 | 2025-01-25T09:18:56.263497

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://192.168.118.88\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\nservice:wbem:https\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://192.168.118.88\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCE

443 / tcp

0 | 2025-01-28T17:18:00.552411

Hashes

hash

-1792440013

http.dom_hash

http.html_hash

http.server_hash

1673621694

HTTP/1.1 200 OK
Date: Tue, 28 Jan 2025 17:18:00 GMT
Content-Type: text/html
Content-Length: 2775
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
Etag: "0df59b23-275"
Server: Tengine
Set-Cookie: SERVERID=bda65b1e9fdd4bf4093b9183f4c9fbe2|1738084680|1738084680;Path=/
Vary: Accept-Encoding
Location: https://ecs-ap-southeast-3.console.aliyun.com

444 / tcp

-1598206565 | 2025-01-07T14:32:19.438355

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Tue, 07 Jan 2025 14:32:18 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

461 / tcp

117101543 | 2025-01-26T20:03:42.329891

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

502 / tcp

1623746877 | 2025-01-16T15:46:57.813182

500 Permission denied - closing connection.\r\n

515 / tcp

-971970408 | 2025-01-15T19:34:49.815436

548 / tcp

-773160241 | 2025-01-17T03:01:27.400487

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: Yes\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: Yes\nCopy File: Yes\nServer Name: murphys-airport-time-capsule\nMachine Type: \\x10TimeCapsule8,119\nAFP Versions: AFP3.3, AFP3.2, AFP3.1\nUAMs: DHCAST128\\x04,DHX2\\x03,SRP\\x06,Recon1C\nServer Signature: 4338365332344c58463948350069672d

554 / tcp

1060450357 | 2025-01-19T09:07:12.524917

RTSP/1.0 200 OK
CSeq: 1
Keep-Alive: timeout=10, max=1000
Public: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER, GET_PARAMETER
Connection: Keep-Alive

556 / tcp

-1399940268 | 2025-01-15T16:22:42.580991

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

636 / tcp

4146400 | 2025-01-21T00:27:33.058407

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 8-26086461-0 0NNN RT(1705912253915 115) q(-1 -1 -1 -1) r(0 -1) b1

700 / tcp

-1871658906 | 2025-01-31T01:02:12.368627

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Connection: close
Server: Nginx
Expires: 0
Pragma: no-cache
Cache-Control: no-cache
Location: https://portal.ikuai8-wifi.com/templates/default/index.html?timestamp=1705534773&router_ver=3.2.4&firmware=IK-RouterOS&template=default&gwid=a7dea2d1ff2b46d582c814cbae2fb058&user_ip=*.*.*.*

771 / tcp

-1899074860 | 2025-01-03T04:54:25.743914

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

830 / tcp

103159425 | 2025-01-18T23:05:05.567463

SSH-1.99-RGOS_SSH

880 / tcp

-1256415508 | 2025-01-11T14:55:48.090622

HTTP/1.1 404 Not Found
Server: TornadoServer/6.1
Content-Type: text/html; charset=UTF-8

992 / tcp

-936692830 | 2025-01-17T05:27:36.877915

HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19

995 / tcp

-1489591880 | 2025-01-09T19:07:24.508471

+OK MS OK\r\n

1023 / tcp

1230233688 | 2025-01-19T21:51:36.691772

[|ox

1025 / tcp

597764502 | 2025-01-10T17:01:11.658413

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

1050 / tcp

1353260875 | 2025-01-12T11:40:53.945887

\x00[g\xc2\x95N\x7f\x00\x00

1080 / tcp

1362344524 | 2025-01-16T19:14:10.122749

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1111 / tcp

-358801646 | 2025-01-07T23:23:15.575962

SSH-2.0-OpenSSH_6.6.1

1153 / tcp

-2046514463 | 2025-01-05T06:47:55.341559

AB\x01\t

1177 / tcp

-971970408 | 2025-01-29T19:36:43.158254

1200 / tcp

1370263973 | 2025-01-25T23:52:57.094904

dubbo>

1234 / tcp

1623746877 | 2025-01-01T17:46:39.773631

500 Permission denied - closing connection.\r\n

1337 / tcp

-1059554316 | 2025-01-14T05:02:53.839905

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

1388 / tcp

819727972 | 2025-01-27T05:18:03.178627

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

1452 / tcp

-1626979812 | 2025-01-17T09:46:09.599422

220 Service ready for new user.

1515 / tcp

-546659243 | 2025-01-02T08:40:01.858721

ôInternal Server ErrorAB

1604 / tcp

416263569 | 2025-01-13T12:57:58.860083

BÿnToo many connections

1723 / tcp

1103582599 | 2025-01-30T10:57:22.888125

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

1800 / tcp

-1399940268 | 2025-01-17T08:21:06.587207

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1801 / tcp

-833635452 | 2025-01-25T18:06:28.216930

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x05\xe8\x9b\xb5\\x95E\\x1eJ\\x85\xd5\xb1\\xe4\\xf9\\xba\\xf6+92d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1883 / tcp

632542934 | 2025-01-20T15:38:02.857116

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1911 / tcp

1767345577 | 2025-01-20T09:27:35.190953

Hello, this is Quagga (version 0T).
Copyright 1996-200

1922 / tcp

-1839934832 | 2025-01-02T00:22:39.063687

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

1926 / tcp

1996932384 | 2025-01-28T20:51:53.370805

"raop" nonce

1962 / tcp

-407828767 | 2025-01-28T16:19:38.245387

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

2002 / tcp

1911457608 | 2025-01-25T03:22:33.124818

\x00[\x00\x00\x00\x00\x00\x00

2003 / tcp

408230060 | 2025-01-30T07:19:28.349311

\r\nSorry, that nickname format is invalid.\r\n

2057 / tcp

-1835475271 | 2025-01-12T10:45:19.569030

200 NOD32SS 99 (3318497116)\r\n

2067 / tcp

401555314 | 2025-01-22T08:05:43.089520

NB[GFXjA^R

2087 / tcp

-1032713145 | 2025-01-19T11:39:20.116813

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

2108 / tcp

205347087 | 2025-01-23T18:32:50.192720

SSH-25453-Cisco-3524665.35\n

2154 / tcp

1984588611 | 2025-01-24T18:09:38.923043

2222 / tcp

372433470 | 2025-01-29T21:15:44.194211

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

2332 / tcp

291723434 | 2025-01-26T08:53:40.564645


Lantronix MSS100 Version V118/523(045538937)

Type HELP at the 'Local_61349> ' prompt for assistance.



Username>

2345 / tcp

-1399940268 | 2025-01-16T12:33:46.633744

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2404 / tcp

819727972 | 2025-01-27T09:54:29.173163

SSH-2.0-OpenSSH_7.4

2455 / tcp

-971970408 | 2025-01-19T23:51:21.748538

2566 / tcp

-1888448627 | 2025-01-20T21:53:12.958469

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

2628 / tcp

539065883 | 2025-01-16T19:08:54.773332

2762 / tcp

-2089734047 | 2025-01-07T00:01:48.546262

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2806 / tcp

-2080784861 | 2025-01-13T17:51:13.529248

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

3003 / tcp

-1227409554 | 2025-01-17T20:54:50.070347

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3004 / tcp

-1399940268 | 2025-01-09T23:42:12.761367

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3050 / tcp

-1032713145 | 2025-01-28T20:07:41.392209

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

3066 / tcp

-1399940268 | 2025-01-19T15:56:22.006618

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3068 / tcp

51259122 | 2025-01-22T08:07:47.797133

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

3075 / tcp

165188539 | 2025-01-12T20:53:47.465311

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3083 / tcp

-1036370807 | 2025-01-29T22:48:18.075649

JDWP-Handshake

3127 / tcp

-1399940268 | 2025-01-25T12:39:10.613975

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3146 / tcp

1911457608 | 2025-01-22T06:25:25.716954

\x00[\x00\x00\x00\x00\x00\x00

3163 / tcp

819727972 | 2025-01-25T20:35:06.112720

SSH-2.0-OpenSSH_7.4

3193 / tcp

-2089734047 | 2025-01-19T22:07:05.550582

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3260 / tcp

-1914158197 | 2025-01-29T04:56:47.083654

HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

3268 / tcp

1213931722 | 2025-01-25T15:30:12.114110

ICAP/1.0 501 Other\r\nServer: Traffic Spicer 7788179225\r\n

3299 / tcp

290819026 | 2025-01-03T17:38:13.708871

welcome to Pandora console!
----------------------------
-------------------------
|     Login Time     |     2021-12-08 1...

3301 / tcp

-1327660293 | 2025-01-04T18:52:25.526417

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3306 / tcp

1801207137 | 2025-01-05T19:15:48.350692

F\\x00\\x00\\x00\\xffj\\x04Host \'106.75.96.125\' is not allowed to connect to this MySQL server

3310 / tcp

-653033013 | 2025-01-20T17:25:33.371674

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

3341 / tcp

971933601 | 2025-01-28T20:35:51.687321

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

3388 / tcp

1282941221 | 2025-01-21T00:01:02.342064

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

3389 / tcp

1146750585 | 2025-01-29T17:13:45.320422

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x0f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: UHYPBIESUENB72Z\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: UHYPBIESUENB72Z\nNetBIOS_Computer_Name: UHYPBIESUENB72Z\nDNS_Domain_Name: uhypbiesuenb72ze\nDNS_Computer_Name: uhypbiesuenb72ze\nSystem_Time: 2023-02-06 08:40:05 +0000 UTC\n\n

3400 / tcp

2063598737 | 2025-01-15T04:52:37.457776

/0 0 L\r\n/0 0 HUH\r\n

3401 / tcp

-1399940268 | 2025-01-06T21:30:05.756277

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3403 / tcp

2063598737 | 2025-01-19T15:52:07.612968

/0 0 L\r\n/0 0 HUH\r\n

3561 / tcp

-1839934832 | 2025-01-18T21:03:48.920894

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3563 / tcp

-1888448627 | 2025-01-29T04:27:07.335914

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3572 / tcp

1642597142 | 2025-01-26T23:00:37.496641

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

3780 / tcp

474736340 | 2025-01-27T02:01:02.825662

431 Unable to negotiate secure command connection.

3790 / tcp

2087396567 | 2025-01-13T08:17:50.111230

kjnkjabhbanc283ubcsbhdc72

3954 / tcp

1308377066 | 2025-01-17T13:52:35.206969

ncacn_http/1.0

4022 / tcp

-1099385124 | 2025-01-19T04:47:58.524428

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

4063 / tcp

2087396567 | 2025-01-28T23:50:54.390683

kjnkjabhbanc283ubcsbhdc72

4120 / tcp

1761482307 | 2025-01-21T11:20:18.117788

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

4150 / tcp

-1013082686 | 2025-01-13T00:11:29.217984

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

4321 / tcp

-1250504565 | 2025-01-29T22:24:02.486294

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

4369 / tcp

51259122 | 2025-01-12T20:24:50.691776

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

4433 / tcp

2103111368 | 2025-01-14T05:44:34.290353

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

4434 / tcp

2087396567 | 2025-01-15T20:57:03.087869

kjnkjabhbanc283ubcsbhdc72

4500 / tcp

-826610984 | 2025-01-11T22:55:21.998068

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 602
Connect-To: https://member.aliyun.com/unshift-flush/object-trigger/jobs/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div id="other"></

4506 / tcp

2087396567 | 2025-01-23T16:42:26.860774

kjnkjabhbanc283ubcsbhdc72

4543 / tcp

819727972 | 2025-01-27T16:03:27.650086

SSH-2.0-OpenSSH_7.4

4786 / tcp

366084633 | 2025-01-25T19:25:49.136999

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

4808 / tcp

-358801646 | 2025-01-23T11:25:11.046051

SSH-2.0-OpenSSH_6.6.1

4840 / tcp

819727972 | 2025-01-16T21:34:56.611736

SSH-2.0-OpenSSH_7.4

4911 / tcp

-2089734047 | 2025-01-27T13:13:19.294507

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4949 / tcp

1741579575 | 2025-01-28T09:54:53.457657

5001 / tcp

-971970408 | 2025-01-28T19:05:08.334254

5006 / tcp

2087396567 | 2025-01-01T15:42:02.713336

kjnkjabhbanc283ubcsbhdc72

5007 / tcp

-1399940268 | 2025-01-18T02:58:40.661535

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5009 / tcp

567505242 | 2025-01-18T12:24:40.270435

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1a3c_wdx20_40557-6922

5010 / tcp

1911457608 | 2025-01-08T02:14:37.696137

\x00[\x00\x00\x00\x00\x00\x00

5090 / tcp

1767345577 | 2025-01-12T20:10:52.608162

Hello, this is Quagga (version 0T).
Copyright 1996-200

5190 / tcp

-1056270173 | 2025-01-24T21:53:11.637033

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

5222 / tcp

-1810987450 | 2025-01-18T20:31:21.344193

\xc3\xbf

5231 / tcp

-358801646 | 2025-01-15T21:17:40.782231

SSH-2.0-OpenSSH_6.6.1

5239 / tcp

819727972 | 2025-01-14T14:18:09.978120

SSH-2.0-OpenSSH_7.4

5269 / tcp

-241300778 | 2025-01-24T20:04:20.779545

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938365.72-w-waf02tjgt

5280 / tcp

-198546083 | 2025-01-24T00:36:44.458241

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2049_PS-WNZ-01STm32_6466-3339

5435 / tcp

-2089734047 | 2025-01-25T23:13:17.564766

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5456 / tcp

1911457608 | 2025-01-11T20:25:53.192537

\x00[\x00\x00\x00\x00\x00\x00

5495 / tcp

-2107996212 | 2025-01-20T03:15:43.135134

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

5568 / tcp

103159425 | 2025-01-09T16:47:37.319831

SSH-1.99-RGOS_SSH

5597 / tcp

945910976 | 2025-01-11T15:39:43.373197

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

5672 / tcp

575925250 | 2025-01-07T21:14:32.432055

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5858 / tcp

-1230049476 | 2025-01-08T08:37:37.794846

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

5904 / tcp

1911457608 | 2025-01-18T21:27:25.435841

\x00[\x00\x00\x00\x00\x00\x00

5906 / tcp

-1249500036 | 2025-01-08T19:34:49.595844

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

5938 / tcp

1726594447 | 2025-01-27T04:36:07.648536

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

6000 / tcp

120534451 | 2025-01-05T09:51:09.814379

X11 access denied

6002 / tcp

1082732927 | 2025-01-08T18:14:46.262885

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

6102 / tcp

-1327660293 | 2025-01-28T19:33:47.478513

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

6161 / tcp

1911457608 | 2025-01-09T22:24:55.785720

\x00[\x00\x00\x00\x00\x00\x00

6379 / tcp

321971019 | 2025-01-10T20:55:40.187009

-ERR client ip is not in whitelist\r

6505 / tcp

-1327660293 | 2025-01-30T09:17:45.231091

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

6512 / tcp

-2107996212 | 2025-01-26T18:16:38.592517

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

6622 / tcp

-441419608 | 2025-01-09T23:53:34.170031

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

6633 / tcp

-1327660293 | 2025-01-07T14:40:57.048067

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

6666 / tcp

4935895 | 2025-01-30T11:08:10.698498

HTTP/1.1 400 Bad Request
Server: CloudWAF

6667 / tcp

1321679546 | 2025-01-09T09:53:35.712121

ÿÿÿ
0 ...

6668 / tcp

819727972 | 2025-01-23T08:17:18.389004

SSH-2.0-OpenSSH_7.4

6697 / tcp

819727972 | 2025-01-14T16:41:39.682625

SSH-2.0-OpenSSH_7.4

7001 / tcp

1265582946 | 2025-01-21T14:11:39.822454

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2838_PS-JJN-01GM465_27752-26327

7014 / tcp

-1399940268 | 2025-01-23T08:58:32.804651

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7021 / tcp

-2031152423 | 2025-01-16T05:51:41.915228

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

7071 / tcp

-321444299 | 2025-01-16T22:13:54.493752

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

7171 / tcp

669849225 | 2025-01-17T02:50:09.513499

SSH-98.60-SysaxSSH_81885..42\r\n

7218 / tcp

-1681927087 | 2025-01-21T09:27:16.693883

kjnkjabhbanc283ubcsbhdc72

7415 / tcp

-1019343788 | 2025-01-12T05:38:02.790349

W!\x00\x00\x00\x00

7443 / tcp

-1209805157 | 2025-01-29T15:51:41.129288

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-SH-COchilian1-CACHE1[1]
X-CCDN-FORBID-CODE: 040001

7535 / tcp

1911457608 | 2025-01-18T19:24:47.640657

\x00[\x00\x00\x00\x00\x00\x00

7634 / tcp

-971970408 | 2025-01-13T23:42:45.756514

7657 / tcp

-2118655245 | 2025-01-21T13:59:48.386958

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

7774 / tcp

1574088840 | 2025-01-25T23:13:33.033190

">Application and Content Networking Software 3.9</a>)\n</BODY><

7776 / tcp

165188539 | 2025-01-09T14:52:32.589876

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8009 / tcp

921225407 | 2025-01-28T01:06:31.862895

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8023 / tcp

-2089734047 | 2025-01-10T02:27:26.578665

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8041 / tcp

819727972 | 2025-01-15T01:25:11.514529

SSH-2.0-OpenSSH_7.4

8057 / tcp

-1611764932 | 2025-01-29T02:38:49.022796

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

8076 / tcp

-2017887953 | 2025-01-10T15:11:49.655940

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

8081 / tcp

1741579575 | 2025-01-04T21:53:57.135237

8083 / tcp

-1476017887 | 2025-01-09T14:59:46.867061

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

8085 / tcp

1852418385 | 2025-01-26T05:09:32.151609

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

8087 / tcp

-1399940268 | 2025-01-21T19:57:28.041795

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8089 / tcp

740837454 | 2025-01-28T00:48:08.797435

SSH-2.0-OpenSSH_5.3

8096 / tcp

-441419608 | 2025-01-02T14:33:54.593967

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

8139 / tcp

2087396567 | 2025-01-28T05:42:41.119916

kjnkjabhbanc283ubcsbhdc72

8140 / tcp

1690634669 | 2025-01-26T21:14:43.881553

8151 / tcp

-1888448627 | 2025-01-12T03:13:50.140604

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8154 / tcp

-801484042 | 2025-01-09T15:00:15.100750

ERR 27

8174 / tcp

401555314 | 2025-01-18T23:16:07.635569

NB[GFXjA^R

8181 / tcp

2087396567 | 2025-01-29T23:30:58.833329

kjnkjabhbanc283ubcsbhdc72

8196 / tcp

1632932802 | 2025-01-18T17:16:51.294547

8239 / tcp

1911457608 | 2025-01-17T18:12:56.610223

\x00[\x00\x00\x00\x00\x00\x00

8291 / tcp

165188539 | 2025-01-26T17:50:20.144460

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8432 / tcp

-358801646 | 2025-01-19T22:21:26.837637

SSH-2.0-OpenSSH_6.6.1

8481 / tcp

1996932384 | 2025-01-10T23:54:07.622201

"raop" nonce

8485 / tcp

971933601 | 2025-01-10T05:38:28.379137

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

8500 / tcp

-1455149952 | 2025-01-04T22:44:15.046736

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1e27_PS-000-01sNY99_31294-28028

8519 / tcp

639175818 | 2025-01-23T03:30:34.213640

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

8545 / tcp

819727972 | 2025-01-27T12:55:18.500770

SSH-2.0-OpenSSH_7.4

8554 / tcp

-971970408 | 2025-01-01T18:56:35.369333

8589 / tcp

15018106 | 2025-01-29T03:44:34.871660

\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00

8649 / tcp

842535728 | 2025-01-07T22:31:58.670787

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

8700 / tcp

-1730858130 | 2025-01-10T20:41:09.057883

RFB 003.008
VNC:
  Protocol Version: 3.8

8723 / tcp

-802143704 | 2025-01-13T16:49:39.907218

HTTP/1.0 500 Internal Server Error
D
Connection: close

Command server error

8788 / tcp

-2089734047 | 2025-01-11T09:05:12.306788

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8804 / tcp

819727972 | 2025-01-11T18:15:26.736228

SSH-2.0-OpenSSH_7.4

8811 / tcp

921225407 | 2025-01-24T20:17:06.180279

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8818 / tcp

-1032713145 | 2025-01-08T18:57:40.197008

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8823 / tcp

-2089734047 | 2025-01-17T03:36:15.179456

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8827 / tcp

1059192566 | 2025-01-12T09:31:40.585258

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div

8834 / tcp

-445721795 | 2025-01-09T01:42:30.180332

\x00[\xc3\xaed\x1a\x7f\x00\x00

8845 / tcp

410249975 | 2025-01-12T04:38:07.993025

LNS READY<>

8880 / tcp

-2031152423 | 2025-01-25T00:57:11.769524

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8887 / tcp

-358801646 | 2025-01-02T12:18:54.637565

SSH-2.0-OpenSSH_6.6.1

8889 / tcp

-2096652808 | 2025-01-16T09:16:56.686060

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8907 / tcp

1332894250 | 2025-01-25T14:04:39.753629

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

8911 / tcp

165188539 | 2025-01-12T04:03:21.792326

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8999 / tcp

1278527606 | 2025-01-25T04:54:42.201206

SSH-2.0-Teleport

9001 / tcp

-1026951088 | 2025-01-03T00:09:12.388292

erro ip

9002 / tcp

-1839934832 | 2025-01-02T06:42:59.809564

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9042 / tcp

-971970408 | 2025-01-26T12:04:01.465538

9051 / tcp

2087396567 | 2025-01-11T01:45:10.284952

kjnkjabhbanc283ubcsbhdc72

9053 / tcp

1543809371 | 2025-01-17T20:13:39.256033

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

9057 / tcp

-1399940268 | 2025-01-25T10:45:59.484405

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9083 / tcp

1332894250 | 2025-01-20T12:45:21.870165

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

9091 / tcp

-1730858130 | 2025-01-19T18:01:41.184932

RFB 003.008
VNC:
  Protocol Version: 3.8

9095 / tcp

740837454 | 2025-01-01T12:40:50.704818

SSH-2.0-OpenSSH_5.3

9133 / tcp

-1399940268 | 2025-01-22T21:51:19.703871

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9145 / tcp

-1399940268 | 2025-01-22T03:42:27.966308

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9151 / tcp

539065883 | 2025-01-13T22:19:02.758062

9157 / tcp

819727972 | 2025-01-10T11:18:34.618806

SSH-2.0-OpenSSH_7.4

9160 / tcp

-1139539254 | 2025-01-20T03:07:47.316116

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

9193 / tcp

-1399940268 | 2025-01-15T00:48:35.053201

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9222 / tcp

-1399940268 | 2025-01-15T07:27:31.195583

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9251 / tcp

366084633 | 2025-01-24T10:39:24.237066

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

9306 / tcp

-1399940268 | 2025-01-18T13:56:57.810381

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9418 / tcp

1529351907 | 2025-01-04T22:32:13.063453

HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive

please add white ip *.*.*.*

9443 / tcp

-884342717 | 2025-01-28T03:00:25.051373

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 28 Jan 2025 03:00:24 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://121.199.68.183:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

9465 / tcp

-2089734047 | 2025-01-28T17:08:36.557345

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9500 / tcp

-1991224470 | 2025-01-02T19:06:19.988201

\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x14TP/1.1\r\n\\x00\\x00\\x00\\x00&

9530 / tcp

51259122 | 2025-01-25T18:27:33.777164

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

9600 / tcp

-1399940268 | 2025-01-29T00:39:23.016763

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9761 / tcp

-375604792 | 2025-01-26T13:07:43.273956

220 Microsoft FTP Service

9876 / tcp

1721921834 | 2025-01-11T14:41:34.863775

\\x00\\x00\\x01+\\x00\\x00\\x00_{"code":0,"flag":1,"language":"JAVA","opaque":0,"serializeTypeCurrentRPC":"JSON","version":433}{"brokerAddrTable":{"broker-a":{"brokerAddrs":{0:"180.116.172.66:10911"},"brokerName":"broker-a","cluster":"DefaultCluster","enableActingMaster":false}},"clusterAddrTable":{"DefaultCluster":["broker-a"]}}

9943 / tcp

248249138 | 2025-01-06T23:34:37.556798

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24d3_xyd116_25356-2749

9977 / tcp

165188539 | 2025-01-29T23:45:38.667656

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9998 / tcp

1637038794 | 2025-01-19T12:43:57.989493

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2521_PS-PEK-015Wj25_25111-50596

9999 / tcp

1161309183 | 2025-01-03T03:35:05.459233

ProxyServer is ready

10039 / tcp

321971019 | 2025-01-23T02:13:37.840131

-ERR client ip is not in whitelist\r

10089 / tcp

1911457608 | 2025-01-25T21:05:56.919336

\x00[\x00\x00\x00\x00\x00\x00

10250 / tcp

2087396567 | 2025-01-07T17:51:39.835053

kjnkjabhbanc283ubcsbhdc72

10533 / tcp

-1399940268 | 2025-01-16T04:20:02.717913

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10911 / tcp

-339084706 | 2025-01-25T09:04:40.328653

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

10936 / tcp

-1453516345 | 2025-01-20T15:58:43.489584

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

11112 / tcp

-792826324 | 2025-01-23T20:14:52.808339

220 FTP server ready - login please

11210 / tcp

-1399940268 | 2025-01-24T18:51:35.053631

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11300 / tcp

-1733106930 | 2025-01-26T04:47:06.763595

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

11602 / tcp

-1733645023 | 2025-01-22T10:28:18.307335

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

12000 / tcp

227700176 | 2025-01-26T01:52:57.770405

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-transform
Set-Cookie: _csrf=kW6lEf7WlBTiDChV5oht1zfpUBE6MTcwNTkxMjc1NjU1NzkzNjYwNQ; Path=/; Expires=Tue, 23 Jan 2024 08:39:16 GMT; HttpOnly; SameSite=Lax
Set-Cookie: macaron_flash=; Path=/; Max-Age=0; HttpOnly; SameSite=Lax
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache

12019 / tcp

1615193817 | 2025-01-28T01:59:03.671614

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

12082 / tcp

-1839934832 | 2025-01-29T07:13:49.825548

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12103 / tcp

-784071826 | 2025-01-19T22:09:09.414250

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

12143 / tcp

-1399940268 | 2025-01-10T14:37:16.627868

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12145 / tcp

-274082663 | 2025-01-22T14:12:10.077870

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

12195 / tcp

-1013082686 | 2025-01-29T14:43:38.043200

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

12196 / tcp

819727972 | 2025-01-28T20:04:21.800757

SSH-2.0-OpenSSH_7.4

12206 / tcp

-1428621233 | 2025-01-13T12:00:31.430268

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

12213 / tcp

1911457608 | 2025-01-10T06:00:59.282888

\x00[\x00\x00\x00\x00\x00\x00

12234 / tcp

-2096652808 | 2025-01-26T00:23:44.732197

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12236 / tcp

921225407 | 2025-01-18T20:53:17.190706

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12237 / tcp

-1013082686 | 2025-01-15T16:58:19.640908

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

12238 / tcp

-2089734047 | 2025-01-25T00:48:34.739329

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12239 / tcp

632542934 | 2025-01-16T21:22:54.323831

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12264 / tcp

1126993057 | 2025-01-15T01:21:02.764419

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

12276 / tcp

1615193817 | 2025-01-20T11:21:49.927789

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

12302 / tcp

819727972 | 2025-01-15T06:17:00.516736

SSH-2.0-OpenSSH_7.4

12315 / tcp

1134517380 | 2025-01-10T17:18:39.244570

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

12317 / tcp

-1996280214 | 2025-01-18T09:57:49.917500

\x06\x04\x05@

12343 / tcp

1911457608 | 2025-01-28T10:58:20.656521

\x00[\x00\x00\x00\x00\x00\x00

12348 / tcp

2103111368 | 2025-01-24T22:12:14.202422

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

12399 / tcp

-1428621233 | 2025-01-17T12:30:15.787065

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

12421 / tcp

-1327660293 | 2025-01-29T17:35:52.937243

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12426 / tcp

165188539 | 2025-01-29T16:53:35.807598

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12476 / tcp

-616720387 | 2025-01-13T18:32:30.860467

SSH-2.0-SSHD_0.7.6

12486 / tcp

-2046514463 | 2025-01-28T19:44:26.137975

AB\x01\t

12505 / tcp

1632932802 | 2025-01-22T11:21:30.223997

12531 / tcp

-358801646 | 2025-01-18T09:54:21.404887

SSH-2.0-OpenSSH_6.6.1

12534 / tcp

1911457608 | 2025-01-29T23:03:10.340986

\x00[\x00\x00\x00\x00\x00\x00

12538 / tcp

-1399940268 | 2025-01-12T18:28:31.190178

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12589 / tcp

-653033013 | 2025-01-30T17:02:18.743021

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

12615 / tcp

1919228981 | 2025-01-16T15:48:46.563888

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

14147 / tcp

-1139539254 | 2025-01-20T05:52:44.991357

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

14344 / tcp

-1888448627 | 2025-01-26T17:31:16.556726

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

14896 / tcp

632542934 | 2025-01-11T04:44:30.357401

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

15002 / tcp

-1056270173 | 2025-01-13T08:56:55.093503

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

15503 / tcp

1363464823 | 2025-01-13T09:18:46.172724

\x00[|ox\x7f\x00\x00

16003 / tcp

-1839934832 | 2025-01-25T21:07:01.427944

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

16006 / tcp

1624217396 | 2025-01-19T07:56:08.748894

HELO:10.3.6.0.false\nAS:2048\nHL:19

16014 / tcp

1911457608 | 2025-01-16T08:54:52.148409

\x00[\x00\x00\x00\x00\x00\x00

16090 / tcp

-1139539254 | 2025-01-08T21:42:53.299599

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

17100 / tcp

599074451 | 2025-01-11T13:25:22.524923

msg

17184 / tcp

-1140468363 | 2025-01-22T16:31:28.445497

\x02\t\x01

18081 / tcp

632542934 | 2025-01-25T00:45:48.970747

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

18111 / tcp

-904840257 | 2025-01-19T04:25:28.498404

572 Relay not authorized\r\n

18245 / tcp

-1032713145 | 2025-01-23T22:17:04.911991

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

18765 / tcp

-1399940268 | 2025-01-19T02:07:42.781680

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

19000 / tcp

-1105333987 | 2025-01-17T22:50:22.846650

\x00[KpU\x7f\x00\x00

19017 / tcp

-2031152423 | 2025-01-15T21:48:57.324498

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

19999 / tcp

-2031152423 | 2025-01-16T02:13:34.988268

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

20040 / tcp

1642597142 | 2025-01-13T07:11:14.797966

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

20256 / tcp

1545917845 | 2025-01-11T22:15:21.975312

[gN

20880 / tcp

1370263973 | 2025-01-13T11:51:14.081653

dubbo>

21081 / tcp

-375604792 | 2025-01-22T16:52:24.960626

220 Microsoft FTP Service

21232 / tcp

-784071826 | 2025-01-30T22:06:07.647784

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

21240 / tcp

-1399940268 | 2025-01-28T20:26:29.753281

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21268 / tcp

819727972 | 2025-01-30T15:35:42.661339

SSH-2.0-OpenSSH_7.4

21291 / tcp

1189133115 | 2025-01-19T16:02:01.715071

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

21293 / tcp

-1399940268 | 2025-01-10T17:06:59.647055

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21310 / tcp

398077695 | 2025-01-31T02:03:34.601509

21357 / tcp

1996932384 | 2025-01-12T21:21:23.083851

"raop" nonce

22103 / tcp

632542934 | 2025-01-22T12:03:43.975766

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

22345 / tcp

-1641514916 | 2025-01-09T21:42:13.194281

* OK Merak 1dFUa2 IMAP4rev1

22556 / tcp

945910976 | 2025-01-03T10:23:46.597026

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

25001 / tcp

1911457608 | 2025-01-18T10:36:10.107308

\x00[\x00\x00\x00\x00\x00\x00

25007 / tcp

-1888448627 | 2025-01-12T08:56:14.943425

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

25565 / tcp

-1327660293 | 2025-01-24T17:23:16.205296

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

27015 / tcp

-1308965223 | 2025-01-25T10:46:57.567618

Command: None
Size: 540161845
ID: 1634493778
Type: 1869488249

28015 / tcp

-2046514463 | 2025-01-07T04:05:04.164998

AB\x01\t

30002 / tcp

-737567094 | 2025-01-13T12:01:43.734693

N
5.6.40-logÅTUNEgVX2
¢!xlB...

30003 / tcp

-1559123399 | 2025-01-26T18:12:33.050237

500 Permission denied - closing connection.

31337 / tcp

-147424911 | 2025-01-27T09:01:50.438652

HTTP/1.1 404 Not Found
Content Length: 0

32746 / tcp

408230060 | 2025-01-18T06:21:26.559893

\r\nSorry, that nickname format is invalid.\r\n

32764 / tcp

459162008 | 2025-01-18T23:36:53.923387

Notify

33333 / tcp

-1888448627 | 2025-01-05T17:55:22.032400

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

35000 / tcp

1911457608 | 2025-01-27T01:15:33.805682

\x00[\x00\x00\x00\x00\x00\x00

37777 / tcp

1623746877 | 2025-01-08T23:13:23.845538

500 Permission denied - closing connection.\r\n

38080 / tcp

-1399940268 | 2025-01-23T16:34:30.502601

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

41922 / tcp

-971970408 | 2025-01-06T16:32:09.001906

42322 / tcp

117101543 | 2025-01-30T22:32:37.412384

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

42422 / tcp

1690634669 | 2025-01-30T11:48:22.802251

43222 / tcp

1282941221 | 2025-01-06T15:48:25.443957

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

43422 / tcp

-1839934832 | 2025-01-30T19:01:43.977150

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

43722 / tcp

-1559123399 | 2025-01-30T10:21:08.854232

500 Permission denied - closing connection.

43822 / tcp

1059192566 | 2025-01-30T08:18:40.271134

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div

44158 / tcp

-433302150 | 2025-01-11T17:51:50.741296

/multistream/1.0.0

44399 / tcp

-2089734047 | 2025-01-30T18:44:08.303088

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

44622 / tcp

1189133115 | 2025-01-29T16:09:05.202178

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

44818 / tcp

-1839934832 | 2025-01-30T07:58:52.663807

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

44822 / tcp

171352214 | 2025-01-28T15:21:03.201039

-ERR client ip is not in whitelist

44922 / tcp

1308377066 | 2025-01-29T12:43:26.520474

ncacn_http/1.0

45003 / tcp

-1399940268 | 2025-01-23T21:02:57.136628

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

45122 / tcp

-1626979812 | 2025-01-29T07:39:19.892337

220 Service ready for new user.

45222 / tcp

1286504516 | 2025-01-29T04:00:12.011372

CP2E Control Console
Connected to Host: gZI

45444 / tcp

-2089734047 | 2025-01-10T23:18:39.009988

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

46722 / tcp

-784071826 | 2025-01-28T04:47:24.857136

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

46922 / tcp

863754335 | 2025-01-27T17:29:28.258934

0a

47022 / tcp

104385780 | 2025-01-27T10:19:44.574657

ceph v2

47080 / tcp

-2089734047 | 2025-01-26T02:25:22.100986

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

47122 / tcp

-1626979812 | 2025-01-27T19:19:49.971939

220 Service ready for new user.

47422 / tcp

1690634669 | 2025-01-27T13:13:36.407030

47622 / tcp

-1730858130 | 2025-01-27T07:17:50.921483

RFB 003.008
VNC:
  Protocol Version: 3.8

47990 / tcp

474736340 | 2025-01-23T02:27:58.067816

431 Unable to negotiate secure command connection.

48022 / tcp

1741579575 | 2025-01-26T16:16:07.752790

48322 / tcp

-971970408 | 2025-01-26T19:54:34.429258

48422 / tcp

-1248408558 | 2025-01-26T18:05:17.243412

220 MikroTik FTP server (MikroTik 6.44.3) ready

49022 / tcp

-1461540015 | 2025-01-26T07:21:59.936609

audio 0 RTP/AVP 18 4 3 8 0 101
a

49080 / tcp

-445721795 | 2025-01-20T07:43:39.358784

\x00[\xc3\xaed\x1a\x7f\x00\x00

49200 / tcp

-1399940268 | 2025-01-12T16:55:51.231725

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

49422 / tcp

841014058 | 2025-01-25T13:19:23.829543

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

49622 / tcp

-314039103 | 2025-01-06T17:58:12.827519

Surnom.
Sorry, that nickname format is invalid.

49688 / tcp

-1435414831 | 2025-01-09T01:14:20.606387

roku: ready\r\n

50000 / tcp

1830697416 | 2025-01-05T21:16:54.895879

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

50100 / tcp

-1316491703 | 2025-01-23T11:29:19.394575

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

50822 / tcp

-2107996212 | 2025-01-24T22:21:30.049526

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

51002 / tcp

819727972 | 2025-01-11T23:39:37.777011

SSH-2.0-OpenSSH_7.4

51235 / tcp

819727972 | 2025-01-03T09:19:45.830596

SSH-2.0-OpenSSH_7.4

51522 / tcp

380146262 | 2025-01-24T13:14:07.828549

@RSYNCD: 30.0

51922 / tcp

320677201 | 2025-01-24T04:03:40.502810

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

52022 / tcp

290819026 | 2025-01-23T14:17:06.620081

welcome to Pandora console!
----------------------------
-------------------------
|     Login Time     |     2021-12-08 1...

52222 / tcp

-1114821551 | 2025-01-23T16:23:47.906268

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

52230 / tcp

321971019 | 2025-01-19T01:58:34.288216

-ERR client ip is not in whitelist\r

52722 / tcp

2087396567 | 2025-01-23T03:36:21.073335

kjnkjabhbanc283ubcsbhdc72

53122 / tcp

1231376952 | 2025-01-22T23:50:23.281982

54322 / tcp

819727972 | 2025-01-22T00:11:17.038932

SSH-2.0-OpenSSH_7.4

54922 / tcp

-2096652808 | 2025-01-21T12:48:33.965101

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

55443 / tcp

819727972 | 2025-01-02T18:25:54.767432

SSH-2.0-OpenSSH_7.4

55553 / tcp

2087396567 | 2025-01-02T13:24:41.320053

kjnkjabhbanc283ubcsbhdc72

55554 / tcp

-653033013 | 2025-01-21T01:06:38.772652

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

55722 / tcp

-641479109 | 2025-01-20T23:27:21.749523

[xU-

57122 / tcp

-2096652808 | 2025-01-19T23:34:14.577976

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

58122 / tcp

2087396567 | 2025-01-19T01:13:21.433451

kjnkjabhbanc283ubcsbhdc72

58222 / tcp

819727972 | 2025-01-18T19:38:38.794322

SSH-2.0-OpenSSH_7.4

58822 / tcp

-971970408 | 2025-01-18T16:06:56.826410

58922 / tcp

-1139539254 | 2025-01-18T10:18:52.964995

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

59022 / tcp

-319440554 | 2025-01-18T08:26:52.529150

59922 / tcp

-2107996212 | 2025-01-17T18:21:55.554339

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

60000 / tcp

-1399940268 | 2025-01-10T08:56:56.574866

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

60129 / tcp

-971970408 | 2025-01-08T16:47:17.383626

61613 / tcp

-1888448627 | 2025-01-18T23:29:13.817628

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

61616 / tcp

819727972 | 2025-01-21T05:55:27.011063

SSH-2.0-OpenSSH_7.4

62078 / tcp

-860824904 | 2025-01-28T03:36:27.322039

\x00\x01)

62237 / tcp

-1795027372 | 2025-01-17T22:10:14.260609

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

63210 / tcp

-1045760528 | 2025-01-23T14:29:50.433138

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

63260 / tcp

-1428621233 | 2025-01-28T16:25:36.148973

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

63443 / tcp

1504401647 | 2025-01-09T18:48:49.739853

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

121.199.68.183

Last Seen: 2025-01-31

Tags:

GeneralInformation

OpenPorts

11 / tcp 2087396567 | 2025-01-15T10:26:13.307333

13 / tcp 1215890103 | 2025-01-27T22:39:44.737558

15 / tcp -746114901 | 2025-01-14T04:46:00.619207

19 / tcp 829384519 | 2025-01-16T19:27:06.492241

21 / tcp 1564456597 | 2025-01-26T16:18:12.409891

22 / tcp 870256069 | 2025-01-28T13:29:41.936755

25 / tcp 1189133115 | 2025-01-17T15:16:35.461402

43 / tcp 1741579575 | 2025-01-18T05:54:53.766163

49 / tcp -1909001798 | 2025-01-09T19:34:48.513968

53 / tcp -1858876500 | 2025-01-30T21:29:17.117441

65 / tcp -358801646 | 2025-01-28T10:05:35.624689

70 / tcp 1412519768 | 2025-01-16T14:47:44.678960

79 / tcp -1770051369 | 2025-01-20T23:46:12.990309

104 / tcp 1911457608 | 2025-01-05T22:39:19.427155

111 / tcp -1626979812 | 2025-01-12T22:13:33.527110

122 / tcp -1428621233 | 2025-01-28T00:11:24.289181

175 / tcp 632542934 | 2025-01-15T13:31:56.863280

177 / tcp 1911457608 | 2025-01-23T00:40:31.600743

179 / tcp -399606100 | 2025-01-08T18:26:12.728515

195 / tcp 2084412416 | 2025-01-30T04:11:26.201147

221 / tcp -1888448627 | 2025-01-28T22:09:55.791642

389 / tcp -1639129386 | 2025-01-20T18:51:36.219709

427 / tcp -349937125 | 2025-01-25T09:18:56.263497

443 / tcp 0 | 2025-01-28T17:18:00.552411

Hashes

444 / tcp -1598206565 | 2025-01-07T14:32:19.438355

461 / tcp 117101543 | 2025-01-26T20:03:42.329891

502 / tcp 1623746877 | 2025-01-16T15:46:57.813182

515 / tcp -971970408 | 2025-01-15T19:34:49.815436

548 / tcp -773160241 | 2025-01-17T03:01:27.400487

554 / tcp 1060450357 | 2025-01-19T09:07:12.524917

556 / tcp -1399940268 | 2025-01-15T16:22:42.580991

636 / tcp 4146400 | 2025-01-21T00:27:33.058407

700 / tcp -1871658906 | 2025-01-31T01:02:12.368627

771 / tcp -1899074860 | 2025-01-03T04:54:25.743914

830 / tcp 103159425 | 2025-01-18T23:05:05.567463

880 / tcp -1256415508 | 2025-01-11T14:55:48.090622

992 / tcp -936692830 | 2025-01-17T05:27:36.877915

995 / tcp -1489591880 | 2025-01-09T19:07:24.508471

1023 / tcp 1230233688 | 2025-01-19T21:51:36.691772

1025 / tcp 597764502 | 2025-01-10T17:01:11.658413

1050 / tcp 1353260875 | 2025-01-12T11:40:53.945887

1080 / tcp 1362344524 | 2025-01-16T19:14:10.122749

1111 / tcp -358801646 | 2025-01-07T23:23:15.575962

1153 / tcp -2046514463 | 2025-01-05T06:47:55.341559

1177 / tcp -971970408 | 2025-01-29T19:36:43.158254

1200 / tcp 1370263973 | 2025-01-25T23:52:57.094904

1234 / tcp 1623746877 | 2025-01-01T17:46:39.773631

1337 / tcp -1059554316 | 2025-01-14T05:02:53.839905

1388 / tcp 819727972 | 2025-01-27T05:18:03.178627

1452 / tcp -1626979812 | 2025-01-17T09:46:09.599422

1515 / tcp -546659243 | 2025-01-02T08:40:01.858721

1604 / tcp 416263569 | 2025-01-13T12:57:58.860083

1723 / tcp 1103582599 | 2025-01-30T10:57:22.888125

1800 / tcp -1399940268 | 2025-01-17T08:21:06.587207

1801 / tcp -833635452 | 2025-01-25T18:06:28.216930

1883 / tcp 632542934 | 2025-01-20T15:38:02.857116

1911 / tcp 1767345577 | 2025-01-20T09:27:35.190953

1922 / tcp -1839934832 | 2025-01-02T00:22:39.063687

1926 / tcp 1996932384 | 2025-01-28T20:51:53.370805

1962 / tcp -407828767 | 2025-01-28T16:19:38.245387

2002 / tcp 1911457608 | 2025-01-25T03:22:33.124818

2003 / tcp 408230060 | 2025-01-30T07:19:28.349311

2057 / tcp -1835475271 | 2025-01-12T10:45:19.569030

2067 / tcp 401555314 | 2025-01-22T08:05:43.089520

2087 / tcp -1032713145 | 2025-01-19T11:39:20.116813

2108 / tcp 205347087 | 2025-01-23T18:32:50.192720

2154 / tcp 1984588611 | 2025-01-24T18:09:38.923043

2222 / tcp 372433470 | 2025-01-29T21:15:44.194211

2332 / tcp 291723434 | 2025-01-26T08:53:40.564645

2345 / tcp -1399940268 | 2025-01-16T12:33:46.633744

2404 / tcp 819727972 | 2025-01-27T09:54:29.173163

2455 / tcp -971970408 | 2025-01-19T23:51:21.748538

2566 / tcp -1888448627 | 2025-01-20T21:53:12.958469

2628 / tcp 539065883 | 2025-01-16T19:08:54.773332

11 / tcp

2087396567 | 2025-01-15T10:26:13.307333

13 / tcp

1215890103 | 2025-01-27T22:39:44.737558

15 / tcp

-746114901 | 2025-01-14T04:46:00.619207

19 / tcp

829384519 | 2025-01-16T19:27:06.492241

21 / tcp

1564456597 | 2025-01-26T16:18:12.409891

22 / tcp

870256069 | 2025-01-28T13:29:41.936755

25 / tcp

1189133115 | 2025-01-17T15:16:35.461402

43 / tcp

1741579575 | 2025-01-18T05:54:53.766163

49 / tcp

-1909001798 | 2025-01-09T19:34:48.513968

53 / tcp

-1858876500 | 2025-01-30T21:29:17.117441

65 / tcp

-358801646 | 2025-01-28T10:05:35.624689

70 / tcp

1412519768 | 2025-01-16T14:47:44.678960

79 / tcp

-1770051369 | 2025-01-20T23:46:12.990309

104 / tcp

1911457608 | 2025-01-05T22:39:19.427155

111 / tcp

-1626979812 | 2025-01-12T22:13:33.527110

122 / tcp

-1428621233 | 2025-01-28T00:11:24.289181

175 / tcp

632542934 | 2025-01-15T13:31:56.863280

177 / tcp

1911457608 | 2025-01-23T00:40:31.600743

179 / tcp

-399606100 | 2025-01-08T18:26:12.728515

195 / tcp

2084412416 | 2025-01-30T04:11:26.201147

221 / tcp

-1888448627 | 2025-01-28T22:09:55.791642

389 / tcp

-1639129386 | 2025-01-20T18:51:36.219709

427 / tcp

-349937125 | 2025-01-25T09:18:56.263497

443 / tcp

0 | 2025-01-28T17:18:00.552411

444 / tcp

-1598206565 | 2025-01-07T14:32:19.438355

461 / tcp

117101543 | 2025-01-26T20:03:42.329891

502 / tcp

1623746877 | 2025-01-16T15:46:57.813182

515 / tcp

-971970408 | 2025-01-15T19:34:49.815436

548 / tcp

-773160241 | 2025-01-17T03:01:27.400487

554 / tcp

1060450357 | 2025-01-19T09:07:12.524917

556 / tcp

-1399940268 | 2025-01-15T16:22:42.580991

636 / tcp

4146400 | 2025-01-21T00:27:33.058407

700 / tcp

-1871658906 | 2025-01-31T01:02:12.368627

771 / tcp

-1899074860 | 2025-01-03T04:54:25.743914

830 / tcp

103159425 | 2025-01-18T23:05:05.567463

880 / tcp

-1256415508 | 2025-01-11T14:55:48.090622

992 / tcp

-936692830 | 2025-01-17T05:27:36.877915

995 / tcp

-1489591880 | 2025-01-09T19:07:24.508471

1023 / tcp

1230233688 | 2025-01-19T21:51:36.691772

1025 / tcp

597764502 | 2025-01-10T17:01:11.658413

1050 / tcp

1353260875 | 2025-01-12T11:40:53.945887

1080 / tcp

1362344524 | 2025-01-16T19:14:10.122749

1111 / tcp

-358801646 | 2025-01-07T23:23:15.575962

1153 / tcp

-2046514463 | 2025-01-05T06:47:55.341559

1177 / tcp

-971970408 | 2025-01-29T19:36:43.158254

1200 / tcp

1370263973 | 2025-01-25T23:52:57.094904

1234 / tcp

1623746877 | 2025-01-01T17:46:39.773631

1337 / tcp

-1059554316 | 2025-01-14T05:02:53.839905

1388 / tcp

819727972 | 2025-01-27T05:18:03.178627

1452 / tcp

-1626979812 | 2025-01-17T09:46:09.599422

1515 / tcp

-546659243 | 2025-01-02T08:40:01.858721

1604 / tcp

416263569 | 2025-01-13T12:57:58.860083

1723 / tcp

1103582599 | 2025-01-30T10:57:22.888125

1800 / tcp

-1399940268 | 2025-01-17T08:21:06.587207

1801 / tcp

-833635452 | 2025-01-25T18:06:28.216930

1883 / tcp

632542934 | 2025-01-20T15:38:02.857116

1911 / tcp

1767345577 | 2025-01-20T09:27:35.190953

1922 / tcp

-1839934832 | 2025-01-02T00:22:39.063687

1926 / tcp

1996932384 | 2025-01-28T20:51:53.370805

1962 / tcp

-407828767 | 2025-01-28T16:19:38.245387

2002 / tcp

1911457608 | 2025-01-25T03:22:33.124818

2003 / tcp

408230060 | 2025-01-30T07:19:28.349311

2057 / tcp

-1835475271 | 2025-01-12T10:45:19.569030

2067 / tcp

401555314 | 2025-01-22T08:05:43.089520

2087 / tcp

-1032713145 | 2025-01-19T11:39:20.116813

2108 / tcp

205347087 | 2025-01-23T18:32:50.192720

2154 / tcp

1984588611 | 2025-01-24T18:09:38.923043

2222 / tcp

372433470 | 2025-01-29T21:15:44.194211

2332 / tcp

291723434 | 2025-01-26T08:53:40.564645

2345 / tcp

-1399940268 | 2025-01-16T12:33:46.633744

2404 / tcp

819727972 | 2025-01-27T09:54:29.173163

2455 / tcp

-971970408 | 2025-01-19T23:51:21.748538

2566 / tcp

-1888448627 | 2025-01-20T21:53:12.958469

2628 / tcp

539065883 | 2025-01-16T19:08:54.773332

2762 / tcp

-2089734047 | 2025-01-07T00:01:48.546262

2806 / tcp

-2080784861 | 2025-01-13T17:51:13.529248

3003 / tcp

-1227409554 | 2025-01-17T20:54:50.070347

3004 / tcp

-1399940268 | 2025-01-09T23:42:12.761367

3050 / tcp

-1032713145 | 2025-01-28T20:07:41.392209

3066 / tcp

-1399940268 | 2025-01-19T15:56:22.006618