GeneralInformation

Country	China
City	Hangzhou
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 15 20 23 25 37 49 53 79 90 102 113 143 175 179 221 243 513 515 548 554 602 636 675 771 789 873 992 998 1023 1153 1177 1200 1290 1337 1377 1414 1433 1443 1450 1451 1521 1599 1604 1800 1883 1901 1911 1976 1985 2002 2031 2056 2059 2060 2067 2070 2072 2083 2087 2121 2154 2222 2345 2376 2404 2455 2761 2762 3001 3048 3050 3072 3090 3121 3129 3145 3150 3157 3169 3170 3171 3172 3180 3198 3306 3310 3389 3410 3521 3551 3780 3790 3841 4155 4157 4165 4282 4321 4369 4430 4434 4444 4506 4530 4543 4786 4911 5001 5007 5009 5025 5100 5227 5271 5321 5435 5443 5523 5556 5593 5613 5672 5908 5938 6000 6001 6020 6022 6134 6379 6400 6488 6561 6565 6633 6666 6697 7001 7020 7071 7171 7218 7302 7434 7548 7634 7654 8009 8012 8017 8034 8035 8038 8070 8079 8083 8085 8087 8115 8139 8140 8169 8180 8184 8200 8249 8291 8315 8322 8402 8425 8440 8450 8458 8500 8525 8545 8556 8563 8623 8649 8700 8782 8818 8825 8826 8834 8835 8858 8860 8901 9001 9003 9051 9066 9079 9083 9084 9092 9097 9100 9103 9113 9147 9149 9158 9160 9195 9333 9398 9418 9454 9505 9530 9600 9700 9761 9876 9999 10000 10001 10011 10051 10134 10533 10554 10909 10911 11112 11211 11300 12001 12106 12109 12110 12111 12116 12130 12151 12180 12209 12228 12256 12304 12315 12320 12329 12340 12353 12371 12408 12419 12424 12439 12449 12452 12474 12506 12513 12531 12547 12548 12556 12572 12579 13380 14344 16013 16015 16017 16033 16047 16078 16093 16100 16993 17773 17774 18007 18013 18019 18021 18022 18028 18031 18036 18038 18041 18048 18058 18059 18060 18079 18245 18556 19000 20000 20001 20080 20182 20208 20547 20880 21001 21084 21235 21243 21274 21294 21307 21321 21379 22222 22403 22556 22703 23023 25001 25082 25565 27015 27017 27105 28015 29842 30007 30023 30894 31337 31444 32222 33060 33322 33722 34022 34322 34522 34922 35122 35250 35622 35722 35922 36022 36422 36522 36622 36722 37222 37522 37722 37822 37922 38022 38222 38322 38422 39022 39322 39522 39822 39922 40122 40222 40471 40522 40622 40722 41022 41522 41722 41922 42422 42443 42522 42722 43222 43422 43522 43622 43822 44022 44122 44522 44622 44722 44818 44822 45522 45622 46122 46222 46322 46422 47001 47322 47422 47622 47990 48001 48622 48822 48922 49121 49122 49522 49822 49922 50022 50122 50222 50622 50822 51001 51622 51722 52230 52311 52422 52822 53122 53222 53400 53622 53722 54022 54138 54327 54622 55000 55200 55443 55553 55554 56022 56222 56722 57788 59443 61613 63210

11 / tcp

671605376 | 2025-02-19T08:45:46.057050

SSH-2.0-OpenSSH_X.X

15 / tcp

-1559123399 | 2025-02-03T09:06:16.008773

500 Permission denied - closing connection.

20 / tcp

-1399940268 | 2025-02-15T21:02:15.375869

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

23 / tcp

-23362551 | 2025-02-23T10:19:02.037972

\xff\xfb\x01\xff\xfb\x03\xff\xfd\x18

25 / tcp

819727972 | 2025-02-02T05:43:24.521213

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

37 / tcp

1110767461 | 2025-02-12T10:26:38.936118

HTTP/1.1 200 OK
Server: nginx/1

49 / tcp

-1909001798 | 2025-02-09T09:51:34.429055

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Tue, 21 Dec 2021 03:13:39 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

53 / tcp

-1511422614 | 2025-02-26T11:48:31.750756

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00U\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x00\x9d\x00\x04\x8e\xfb*\xee
\x00\x06\x85\x00\x00\x01\x00\x01\x00\x00\

79 / tcp

-876294238 | 2025-02-25T14:59:37.030975

HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Content-Type: text/html
Connection: close

90 / tcp

-358801646 | 2025-02-27T04:57:19.090949

SSH-2.0-OpenSSH_6.6.1

102 / tcp

-2089734047 | 2025-02-27T17:08:27.998360

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

113 / tcp

-527005584 | 2025-02-19T23:42:34.633754

/0 0 L
/0 0 HUH

143 / tcp

639175818 | 2025-02-16T23:13:05.459419

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

175 / tcp

1911457608 | 2025-01-31T17:45:08.190194

\x00[\x00\x00\x00\x00\x00\x00

179 / tcp

-399606100 | 2025-02-06T17:36:14.442346

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

221 / tcp

-653033013 | 2025-02-07T21:40:35.907838

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

243 / tcp

-1888448627 | 2025-02-10T08:36:25.045047

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

513 / tcp

-2089734047 | 2025-02-18T00:32:22.600369

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

515 / tcp

2087396567 | 2025-02-22T10:52:18.228414

kjnkjabhbanc283ubcsbhdc72

548 / tcp

-969286897 | 2025-02-20T04:38:21.115416

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: TNAS-0E01\nMachine Type: \\x0eNetatalk3.1.12\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: No User Authent\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

554 / tcp

1167995424 | 2025-02-23T06:12:38.903995

RTSP/1.0 200 OK
Server: Server/1.0.0
CSeq: 1
Public: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, GET_PARAMETER, SET_PARAMETER

602 / tcp

366084633 | 2025-02-28T14:51:03.959516

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

636 / tcp

1650594030 | 2025-02-03T14:05:57.002788

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 4-30654152-0 0NNN RT(1705911965960 176) q(-1 -1 -1 -1) r(0 -1) b1

675 / tcp

-1399940268 | 2025-02-11T02:38:52.172547

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

771 / tcp

580340387 | 2025-02-17T04:29:50.729709

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

789 / tcp

401555314 | 2025-02-01T06:25:50.003804

NB[GFXjA^R

873 / tcp

-1970692834 | 2025-02-13T06:42:26.420701

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

992 / tcp

-1242315829 | 2025-02-19T22:32:13.258732

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: /app/
Permissions-Policy: autoplay=(), camera=(), microphone=(), usb=()
Referrer-Policy: same-origin
Vary: Origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY

998 / tcp

401555314 | 2025-02-15T09:09:07.485682

NB[GFXjA^R

1023 / tcp

1370263973 | 2025-02-08T16:22:09.623457

dubbo>

1153 / tcp

632542934 | 2025-02-16T13:32:59.459661

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1177 / tcp

1741579575 | 2025-02-20T08:02:27.575261

1200 / tcp

2087396567 | 2025-02-02T18:27:03.426591

kjnkjabhbanc283ubcsbhdc72

1290 / tcp

1911457608 | 2025-02-06T12:56:58.689817

\x00[\x00\x00\x00\x00\x00\x00

1337 / tcp

-345718689 | 2025-02-22T19:45:24.206929

Vty password is not set.

1377 / tcp

740837454 | 2025-02-02T15:19:13.784987

SSH-2.0-OpenSSH_5.3

1414 / tcp

-1835475271 | 2025-02-09T03:37:11.385915

200 NOD32SS 99 (3318497116)\r\n

1433 / tcp

-651181868 | 2025-02-28T17:34:57.919199

MSSQL Server\nVersion: 134219767 (0x80007f7)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nProduct_Version: 5.1.2600 Ntlm 15\nOS: Windows XP/Windows XP, Service Pack 3\n

1443 / tcp

-1715152554 | 2025-02-06T20:17:29.107465

Hashes

hash

891767895

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Thu, 06 Feb 2025 20:17:29 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://121.199.76.175:443/

1450 / tcp

819727972 | 2025-02-11T16:08:58.646162

SSH-2.0-OpenSSH_7.4

1451 / tcp

1077013874 | 2025-02-21T16:39:44.526833

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

1521 / tcp

-805164506 | 2025-02-22T21:39:21.875260

\xc3\xbf\xc3\xbd"\r\nL

1599 / tcp

321971019 | 2025-02-24T02:52:27.748321

-ERR client ip is not in whitelist\r

1604 / tcp

808560482 | 2025-02-10T18:48:10.345613

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP
 : USERID : UNIX : Cr8

1800 / tcp

819727972 | 2025-02-27T01:11:18.782990

SSH-2.0-OpenSSH_7.4

1883 / tcp

1852418385 | 2025-02-11T12:20:52.607162

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

1901 / tcp

-1888448627 | 2025-02-28T23:32:09.411283

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1911 / tcp

921225407 | 2025-02-04T21:58:18.032794

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1976 / tcp

401555314 | 2025-02-07T12:11:26.633150

NB[GFXjA^R

1985 / tcp

165188539 | 2025-02-14T17:59:48.215328

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2002 / tcp

165188539 | 2025-02-04T13:54:04.358676

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2031 / tcp

1492413928 | 2025-02-15T12:53:07.978755

SSH-2.0-OpenSSH_7.5

2056 / tcp

-1648456501 | 2025-02-27T03:19:55.393107

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

2059 / tcp

1426971893 | 2025-02-16T03:18:40.205097

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

2060 / tcp

-441419608 | 2025-02-20T06:25:05.588809

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

2067 / tcp

-136006866 | 2025-02-17T22:01:48.712085

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

2070 / tcp

1623746877 | 2025-02-10T16:57:41.316855

500 Permission denied - closing connection.\r\n

2072 / tcp

-2089734047 | 2025-02-06T06:36:33.761908

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2083 / tcp

1282941221 | 2025-02-14T15:45:05.704129

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

2087 / tcp

819727972 | 2025-02-25T19:19:35.235115

SSH-2.0-OpenSSH_7.4

2121 / tcp

141730637 | 2025-02-07T13:52:57.948246

HTTP/1.0 200 OK
Server: Proxy

2154 / tcp

-971970408 | 2025-02-27T14:37:01.702751

2222 / tcp

372433470 | 2025-02-12T16:48:39.082869

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

2345 / tcp

-1399940268 | 2025-02-25T11:07:43.441881

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2376 / tcp

539065883 | 2025-02-03T23:15:38.249430

2404 / tcp

632542934 | 2025-02-14T21:23:06.828711

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2455 / tcp

842535728 | 2025-02-13T09:14:54.252876

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

2761 / tcp

-1428621233 | 2025-02-13T03:13:34.811787

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

2762 / tcp

-2089734047 | 2025-02-23T21:50:41.895890

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3001 / tcp

401555314 | 2025-02-14T08:12:50.146744

NB[GFXjA^R

3048 / tcp

1911457608 | 2025-02-12T11:41:06.675407

\x00[\x00\x00\x00\x00\x00\x00

3050 / tcp

401555314 | 2025-02-17T11:22:00.211589

NB[GFXjA^R

3072 / tcp

-1032713145 | 2025-02-02T21:27:59.216072

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

3090 / tcp

-2017887953 | 2025-02-20T01:08:25.338627

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

3121 / tcp

-1839934832 | 2025-02-23T13:06:59.199954

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3129 / tcp

-1839934832 | 2025-02-12T20:34:20.279667

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3145 / tcp

-1476017887 | 2025-02-28T23:53:31.517522

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

3150 / tcp

-2033111675 | 2025-02-24T15:12:30.579490

~djb

3157 / tcp

-1476017887 | 2025-02-09T14:22:38.213824

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

3169 / tcp

-784071826 | 2025-02-22T05:53:04.027593

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

3170 / tcp

2143387245 | 2025-02-02T04:28:05.539221

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

3171 / tcp

2143387245 | 2025-02-03T04:23:13.415608

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

3172 / tcp

-1114821551 | 2025-02-17T17:29:41.074339

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

3180 / tcp

1911457608 | 2025-02-03T00:07:32.306308

\x00[\x00\x00\x00\x00\x00\x00

3198 / tcp

45131230 | 2025-02-27T06:50:01.764054

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

3306 / tcp

1000685185 | 2025-02-27T20:17:52.075901

Mysql Version: 5.7.44-log \r\nN\\x00\\x00\\x00\n5.7.44-log\\x00r/\\x06\\x00u1Z3=}L\\x04\\x00\\xff\\xff-\\x02\\x00\\xff\\xc1\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00tKb,\\x0eS\\x19\\x7fD\\x15rQ\\x00mysql_native_password\\x00

3310 / tcp

-1248408558 | 2025-02-12T23:41:28.335142

220 MikroTik FTP server (MikroTik 6.44.3) ready

3389 / tcp

-6645672 | 2025-02-27T22:03:04.819288

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x0f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: 172_16_0_11\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: 172_16_0_11\nNetBIOS_Computer_Name: 172_16_0_11\nDNS_Domain_Name: 172_16_0_11\nDNS_Computer_Name: 172_16_0_11\nSystem_Time: 2024-01-22 08:42:27 +0000 UTC\n\n

3410 / tcp

504717326 | 2025-02-20T19:14:59.328603

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

3521 / tcp

1189133115 | 2025-02-11T11:36:25.891654

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

3551 / tcp

198844676 | 2025-02-20T04:57:24.680608

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3780 / tcp

1842524259 | 2025-02-05T23:26:39.763009

3790 / tcp

819727972 | 2025-02-10T18:09:23.316244

SSH-2.0-OpenSSH_7.4

3841 / tcp

639175818 | 2025-02-21T15:46:57.509905

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

4155 / tcp

-1428621233 | 2025-02-13T00:50:48.473395

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

4157 / tcp

677934968 | 2025-02-13T20:06:48.889739

lm^)Q

4165 / tcp

-1399940268 | 2025-02-18T02:14:38.205555

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4282 / tcp

1741579575 | 2025-02-14T13:39:40.689986

4321 / tcp

-269926141 | 2025-02-16T04:07:05.284433

\\x00\\x00\\x12\\x04\\x00\\x00\\x00\\x00\\x00\\x00\\x03\\x00\\x00\\x00\\x80\\x00\\x04\\x00\\x01\\x00\\x00\\x00\\x05\\x00\\xff\\xff\\xff\\x00\\x00\\x04\\x08\\x00\\x00\\x00\\x00\\x00\\x7f\\xff\\x00\\x00\\x00\\x00\\x08\\x07\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01

4369 / tcp

-375604792 | 2025-02-18T02:35:52.538898

220 Microsoft FTP Service

4430 / tcp

1741579575 | 2025-02-03T23:02:57.390080

4434 / tcp

539065883 | 2025-02-01T14:04:01.801026

4444 / tcp

408230060 | 2025-02-11T08:08:02.368398

\r\nSorry, that nickname format is invalid.\r\n

4506 / tcp

660175493 | 2025-02-15T06:09:17.618833

4530 / tcp

-616720387 | 2025-02-21T02:56:48.684340

SSH-2.0-SSHD_0.7.6

4543 / tcp

-1399940268 | 2025-02-26T22:43:36.015530

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4786 / tcp

1911457608 | 2025-02-06T23:57:26.457217

\x00[\x00\x00\x00\x00\x00\x00

4911 / tcp

580340387 | 2025-02-26T00:07:28.854572

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

5001 / tcp

-1375131644 | 2025-02-22T11:05:31.253793

\x00[v\xc3\xbdC\x7f\x00\x00

5007 / tcp

321971019 | 2025-02-11T06:44:02.404931

-ERR client ip is not in whitelist\r

5009 / tcp

2118208326 | 2025-02-28T15:05:38.584458

HTTP/1.1 426 Upgrade Required
Content-Type: text/plain
Connection: keep-alive
Keep-Alive: timeout=5

5025 / tcp

1741579575 | 2025-02-01T19:03:17.277203

5100 / tcp

-1114821551 | 2025-02-07T11:37:35.473769

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

5227 / tcp

1911457608 | 2025-02-19T09:34:44.930067

\x00[\x00\x00\x00\x00\x00\x00

5271 / tcp

-616720387 | 2025-01-31T21:24:03.007695

SSH-2.0-SSHD_0.7.6

5321 / tcp

-1399940268 | 2025-02-22T01:53:11.268407

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5435 / tcp

921225407 | 2025-02-15T20:33:47.735955

\x00\x00\x00\x04\x00\x00\x00\x00\x00

5443 / tcp

-1399940268 | 2025-02-17T21:48:15.229266

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5523 / tcp

-288825733 | 2025-02-03T21:18:24.596774

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

5556 / tcp

-1399940268 | 2025-02-04T12:16:51.409780

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5593 / tcp

455076604 | 2025-02-28T18:09:22.355378

!\x07version\x04bind7 t{RPowerDNS Recursor 410

5613 / tcp

819727972 | 2025-02-23T09:56:36.291433

SSH-2.0-OpenSSH_7.4

5672 / tcp

575925250 | 2025-02-21T02:41:14.738527

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5908 / tcp

-358801646 | 2025-02-12T04:30:46.259867

SSH-2.0-OpenSSH_6.6.1

5938 / tcp

-2089734047 | 2025-02-23T11:55:28.073237

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

6000 / tcp

820958131 | 2025-02-03T22:32:48.949929

kjnkjabhbanc283ubcsbhdc72\x02

6001 / tcp

-2089734047 | 2025-02-15T02:12:58.614895

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

6020 / tcp

-1986594217 | 2025-02-01T03:51:20.443987

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

6022 / tcp

819727972 | 2025-02-27T08:33:35.292911

SSH-2.0-OpenSSH_7.4

6134 / tcp

1911457608 | 2025-02-15T13:44:53.555934

\x00[\x00\x00\x00\x00\x00\x00

6379 / tcp

321971019 | 2025-02-20T16:55:50.407468

-ERR client ip is not in whitelist\r

6400 / tcp

321971019 | 2025-02-26T04:58:59.676792

-ERR client ip is not in whitelist\r

6488 / tcp

-1099385124 | 2025-02-26T20:19:34.061925

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

6561 / tcp

-142686627 | 2025-02-17T14:21:37.008983

\x00[\xc2\xba\x7fs\x7f\x00\x00

6565 / tcp

-1999764222 | 2025-02-20T02:58:18.458398

HTTP/1.1 405 Method Not Allowed
Server: gSOAP/2.8
Content-Type: text/xml; charset=utf-8
Connection: close

6633 / tcp

-2033111675 | 2025-02-26T22:02:46.274725

~djb

6666 / tcp

4935895 | 2025-02-25T04:11:58.028216

HTTP/1.1 400 Bad Request
Server: CloudWAF

6697 / tcp

165188539 | 2025-02-25T05:37:19.526848

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

7001 / tcp

641070437 | 2025-02-14T10:04:30.649169

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae2576b8dddc78c2c56b6d959693af

7020 / tcp

307999478 | 2025-02-19T20:34:17.607929

unknown command \r\nunknown command \r\n

7071 / tcp

819727972 | 2025-02-08T07:32:08.094453

SSH-2.0-OpenSSH_7.4

7171 / tcp

-1399940268 | 2025-02-24T06:34:34.685529

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7218 / tcp

-1681927087 | 2025-02-18T07:08:49.058101

kjnkjabhbanc283ubcsbhdc72

7302 / tcp

2103111368 | 2025-02-26T11:21:37.229015

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

7434 / tcp

1690634669 | 2025-02-23T18:03:44.264953

7548 / tcp

2087396567 | 2025-01-31T14:41:57.603446

kjnkjabhbanc283ubcsbhdc72

7634 / tcp

1189133115 | 2025-02-02T20:14:47.395437

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

7654 / tcp

1911457608 | 2025-02-16T07:03:26.624267

\x00[\x00\x00\x00\x00\x00\x00

8009 / tcp

493955023 | 2025-02-25T01:14:20.571833

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

8012 / tcp

819727972 | 2025-02-08T19:15:55.576544

SSH-2.0-OpenSSH_7.4

8017 / tcp

1212285915 | 2025-02-14T20:56:02.021405

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

8034 / tcp

-1428621233 | 2025-02-07T19:17:05.776293

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8035 / tcp

45131230 | 2025-02-11T21:23:59.526731

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

8038 / tcp

-1265999252 | 2025-02-26T08:30:59.106134

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

8070 / tcp

632542934 | 2025-02-10T02:49:04.040442

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8079 / tcp

-2089734047 | 2025-02-05T10:03:10.251453

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8083 / tcp

660175493 | 2025-02-25T20:27:26.197417

8085 / tcp

1690634669 | 2025-02-13T11:16:24.737714

8087 / tcp

165188539 | 2025-02-18T18:03:10.920538

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8115 / tcp

1911457608 | 2025-01-31T20:13:21.705410

\x00[\x00\x00\x00\x00\x00\x00

8139 / tcp

-971970408 | 2025-02-10T03:24:41.650542

8140 / tcp

1308377066 | 2025-02-17T16:37:34.155223

ncacn_http/1.0

8169 / tcp

-2089734047 | 2025-02-27T09:08:48.717924

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8180 / tcp

-2145024526 | 2025-01-31T21:52:20.100181

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-SDjinan-CMCCZJ7-CACHE18[2]
X-CCDN-FORBID-CODE: 040001

8184 / tcp

639175818 | 2025-02-20T18:52:37.747494

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

8200 / tcp

1320285193 | 2025-02-28T01:19:21.467934

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

8249 / tcp

632542934 | 2025-02-17T00:26:37.737031

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8291 / tcp

1911457608 | 2025-02-04T01:08:33.417603

\x00[\x00\x00\x00\x00\x00\x00

8315 / tcp

1574088840 | 2025-02-21T03:51:56.241276

">Application and Content Networking Software 3.9</a>)\n</BODY><

8322 / tcp

-1105333987 | 2025-02-17T14:41:52.787215

\x00[KpU\x7f\x00\x00

8402 / tcp

-476765094 | 2025-02-20T05:27:17.574214

HTTP/1.1 200 OK
Server: QWS
Content-Type: text/html
Connection: keep-alive
Access-Control-Allow-Origin: *
QY-H-M: HIT
Access-Control-Allow-Headers: Origin,X-Requested-With,Content-Type,Accept,Authorization,DNT,X-CustomHeader,Keep-Alive,User-Agent,If-Modified-Since,Cache-Control
Access-Control-Allow-Methods: GET,OPTIONS
Expires: Sat, 23 Nov 2024 14:33:49 GMT
Cache-Control: max-age=31536000
Accept-Ranges: bytes

8425 / tcp

-441419608 | 2025-02-05T14:30:20.326477

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

8440 / tcp

408230060 | 2025-02-04T13:45:17.872498

\r\nSorry, that nickname format is invalid.\r\n

8450 / tcp

-1032713145 | 2025-02-02T05:51:59.985824

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8458 / tcp

-1839934832 | 2025-02-11T10:11:11.545214

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8500 / tcp

1652191202 | 2025-02-16T17:00:47.228051

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae296b_PS-NTG-014eQ157_14943-13699

8525 / tcp

-2089734047 | 2025-02-02T21:55:34.336268

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8545 / tcp

51259122 | 2025-02-13T00:47:17.419398

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

8556 / tcp

819727972 | 2025-02-14T18:16:57.762676

SSH-2.0-OpenSSH_7.4

8563 / tcp

819727972 | 2025-02-20T22:28:41.732143

SSH-2.0-OpenSSH_7.4

8623 / tcp

1975288991 | 2025-02-09T20:30:17.592211

OPTI

8649 / tcp

2098371729 | 2025-02-20T08:22:02.590071

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

8700 / tcp

-1888448627 | 2025-02-14T16:35:09.775770

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8782 / tcp

1077013874 | 2025-02-24T05:11:29.239416

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

8818 / tcp

1911457608 | 2025-02-21T00:06:14.102472

\x00[\x00\x00\x00\x00\x00\x00

8825 / tcp

-1399940268 | 2025-02-16T05:10:30.546090

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8826 / tcp

-2031152423 | 2025-02-19T07:16:34.765005

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8834 / tcp

1642597142 | 2025-02-08T02:11:48.277076

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

8835 / tcp

1504401647 | 2025-02-26T23:09:07.756996

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

8858 / tcp

-585940771 | 2025-02-21T09:47:24.936517

Unknown command\r\n

8860 / tcp

1911457608 | 2025-02-05T19:33:25.794207

\x00[\x00\x00\x00\x00\x00\x00

8901 / tcp

-1399940268 | 2025-02-16T21:59:35.470961

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9001 / tcp

-1026951088 | 2025-02-18T19:46:57.417568

erro ip

9003 / tcp

-1329831334 | 2025-01-31T19:07:27.598630

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

9051 / tcp

819727972 | 2025-02-22T15:09:49.311109

SSH-2.0-OpenSSH_7.4

9066 / tcp

-1399940268 | 2025-02-15T06:52:15.877957

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9079 / tcp

-1279886438 | 2025-02-25T23:54:45.743069

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

9083 / tcp

-122096153 | 2025-02-11T23:56:21.309565

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

9084 / tcp

165188539 | 2025-02-02T04:55:36.029132

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9092 / tcp

819727972 | 2025-02-21T17:00:04.426867

SSH-2.0-OpenSSH_7.4

9097 / tcp

-1839934832 | 2025-02-15T05:56:52.924632

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9100 / tcp

-1399940268 | 2025-02-26T23:55:12.534004

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9103 / tcp

-1428621233 | 2025-02-17T18:53:11.309396

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

9113 / tcp

165188539 | 2025-02-16T06:41:33.259973

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9147 / tcp

1911457608 | 2025-02-04T07:44:12.122236

\x00[\x00\x00\x00\x00\x00\x00

9149 / tcp

1212285915 | 2025-02-03T11:41:27.402880

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

9158 / tcp

-441419608 | 2025-02-18T23:12:50.810420

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

9160 / tcp

-1810987450 | 2025-02-21T10:53:41.395091

\xc3\xbf

9195 / tcp

-1839934832 | 2025-02-28T02:12:32.894804

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9333 / tcp

819727972 | 2025-02-28T13:39:37.757360

SSH-2.0-OpenSSH_7.4

9398 / tcp

-2080784861 | 2025-02-17T20:25:05.990536

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

9418 / tcp

-1261053701 | 2025-02-09T05:13:03.370226

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

9454 / tcp

740837454 | 2025-02-27T18:41:02.104523

SSH-2.0-OpenSSH_5.3

9505 / tcp

-1189269828 | 2025-02-20T16:55:22.169166

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

9530 / tcp

321971019 | 2025-02-14T17:33:41.330355

-ERR client ip is not in whitelist\r

9600 / tcp

-1399940268 | 2025-02-05T23:03:11.734190

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9700 / tcp

-358801646 | 2025-02-07T13:23:34.064513

SSH-2.0-OpenSSH_6.6.1

9761 / tcp

-992671574 | 2025-02-08T01:15:56.380217

@RSYNCD: 26

9876 / tcp

1127011450 | 2025-02-09T17:48:58.884593

HTTP/1.1 200 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Accept-Ranges: bytes
Content-Type: text/html;charset=utf-8
Content-Language: en

9999 / tcp

1161309183 | 2025-02-11T03:55:30.851260

ProxyServer is ready

10000 / tcp

1308377066 | 2025-02-24T04:15:22.587249

ncacn_http/1.0

10001 / tcp

1492413928 | 2025-02-08T18:54:49.749091

SSH-2.0-OpenSSH_7.5

10011 / tcp

165188539 | 2025-02-20T21:08:47.288562

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

10051 / tcp

165188539 | 2025-02-24T16:46:42.870112

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

10134 / tcp

-2089734047 | 2025-02-06T04:48:41.310503

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10533 / tcp

1911457608 | 2025-02-14T00:18:00.251648

\x00[\x00\x00\x00\x00\x00\x00

10554 / tcp

-274082663 | 2025-02-26T08:47:50.233327

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

10909 / tcp

-1399940268 | 2025-02-22T23:05:50.754784

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10911 / tcp

-146605374 | 2025-02-26T17:03:07.581714

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

11112 / tcp

408230060 | 2025-02-27T04:09:35.803834

\r\nSorry, that nickname format is invalid.\r\n

11211 / tcp

-136006866 | 2025-02-22T09:11:42.926433

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11300 / tcp

1615193817 | 2025-02-02T21:39:11.879610

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

12001 / tcp

819727972 | 2025-02-28T23:08:05.817293

SSH-2.0-OpenSSH_7.4

12106 / tcp

-616720387 | 2025-02-19T16:19:16.314871

SSH-2.0-SSHD_0.7.6

12109 / tcp

-832380282 | 2025-02-24T06:54:58.205311

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

12110 / tcp

-832380282 | 2025-02-19T03:57:52.026997

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

12111 / tcp

-1428621233 | 2025-02-14T17:36:21.788268

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

12116 / tcp

921225407 | 2025-02-14T18:45:48.458447

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12130 / tcp

1911457608 | 2025-02-14T17:07:44.080997

\x00[\x00\x00\x00\x00\x00\x00

12151 / tcp

632542934 | 2025-02-16T08:17:32.268535

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12180 / tcp

1911457608 | 2025-02-14T12:43:26.044181

\x00[\x00\x00\x00\x00\x00\x00

12209 / tcp

-438503381 | 2025-02-03T17:23:36.386196

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

12228 / tcp

-1399940268 | 2025-02-02T01:27:51.716874

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12256 / tcp

-1399940268 | 2025-02-01T23:31:50.815843

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12304 / tcp

1911457608 | 2025-02-28T21:36:12.386300

\x00[\x00\x00\x00\x00\x00\x00

12315 / tcp

-1399940268 | 2025-02-04T05:33:00.737428

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12320 / tcp

-1810987450 | 2025-02-06T20:55:53.508179

\xc3\xbf

12329 / tcp

89142341 | 2025-02-18T22:37:13.056659

\x05\x00\x00\x00\x0b\x08\x05\x1a\x00

12340 / tcp

-2096652808 | 2025-02-27T15:44:04.632211

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12353 / tcp

401555314 | 2025-02-20T14:32:57.402669

NB[GFXjA^R

12371 / tcp

-445721795 | 2025-02-23T17:07:06.278166

\x00[\xc3\xaed\x1a\x7f\x00\x00

12408 / tcp

1911457608 | 2025-02-24T05:20:32.009059

\x00[\x00\x00\x00\x00\x00\x00

12419 / tcp

-1810987450 | 2025-02-08T04:36:36.518290

\xc3\xbf

12424 / tcp

-1105333987 | 2025-02-10T09:14:02.006760

\x00[KpU\x7f\x00\x00

12439 / tcp

-2089734047 | 2025-02-27T08:00:18.689593

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12449 / tcp

-1261090339 | 2025-02-02T20:04:00.994963

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

12452 / tcp

1911457608 | 2025-02-21T17:14:32.725911

\x00[\x00\x00\x00\x00\x00\x00

12474 / tcp

-1839934832 | 2025-02-14T23:35:57.093255

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12506 / tcp

-1888448627 | 2025-02-06T00:08:08.538938

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12513 / tcp

401555314 | 2025-02-13T21:53:50.721031

NB[GFXjA^R

12531 / tcp

-1399940268 | 2025-02-09T18:13:03.322981

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12547 / tcp

-1611764932 | 2025-02-14T15:43:53.038479

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

12548 / tcp

-1097188123 | 2025-02-15T07:40:51.239350

[g\xc2\x95N\x7f

12556 / tcp

1911457608 | 2025-02-01T12:17:43.273165

\x00[\x00\x00\x00\x00\x00\x00

12572 / tcp

707919486 | 2025-02-09T20:11:28.418100

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

12579 / tcp

2098371729 | 2025-02-18T14:21:44.050313

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

13380 / tcp

-1399940268 | 2025-02-24T20:25:36.429418

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14344 / tcp

-1399940268 | 2025-02-25T05:53:24.064550

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16013 / tcp

-1839934832 | 2025-02-06T20:08:53.852531

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

16015 / tcp

-1839934832 | 2025-02-18T22:54:20.026801

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

16017 / tcp

-1399940268 | 2025-02-21T23:18:57.564005

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16033 / tcp

-1399940268 | 2025-02-28T18:38:55.108855

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16047 / tcp

819727972 | 2025-02-27T19:36:51.271402

SSH-2.0-OpenSSH_7.4

16078 / tcp

707919486 | 2025-02-24T09:07:15.919930

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

16093 / tcp

-1996280214 | 2025-02-08T09:11:59.741312

\x06\x04\x05@

16100 / tcp

-1888448627 | 2025-02-04T04:23:11.566529

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

16993 / tcp

2087396567 | 2025-02-07T03:01:44.650783

kjnkjabhbanc283ubcsbhdc72

17773 / tcp

-1399940268 | 2025-02-05T23:31:29.312358

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

17774 / tcp

-1399940268 | 2025-02-09T08:09:21.171861

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18007 / tcp

-1399940268 | 2025-01-31T17:28:20.924060

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18013 / tcp

-1899074860 | 2025-03-01T01:31:36.035493

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

18019 / tcp

-1059554316 | 2025-02-10T17:34:11.699994

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

18021 / tcp

1767345577 | 2025-02-02T16:23:46.536412

Hello, this is Quagga (version 0T).
Copyright 1996-200

18022 / tcp

1911457608 | 2025-02-01T16:15:19.310052

\x00[\x00\x00\x00\x00\x00\x00

18028 / tcp

321971019 | 2025-02-12T11:42:22.527172

-ERR client ip is not in whitelist\r

18031 / tcp

1911457608 | 2025-02-15T22:56:12.760517

\x00[\x00\x00\x00\x00\x00\x00

18036 / tcp

-1399940268 | 2025-02-04T12:29:15.747579

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18038 / tcp

-784071826 | 2025-02-28T00:22:49.316660

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

18041 / tcp

-1888448627 | 2025-02-15T20:09:14.635821

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

18048 / tcp

580340387 | 2025-02-18T15:52:30.919875

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

18058 / tcp

-1795027372 | 2025-02-11T01:56:55.371176

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

18059 / tcp

-980525298 | 2025-02-22T16:57:34.666178

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

18060 / tcp

-345718689 | 2025-02-05T17:57:16.679786

Vty password is not set.

18079 / tcp

-1261090339 | 2025-02-08T19:22:07.990789

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

18245 / tcp

921225407 | 2025-02-10T01:14:57.358870

\x00\x00\x00\x04\x00\x00\x00\x00\x00

18556 / tcp

-1327660293 | 2025-02-07T21:25:15.994984

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

19000 / tcp

1919228981 | 2025-02-23T18:02:00.791066

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

20000 / tcp

1900503736 | 2025-02-28T06:41:29.518113

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20001 / tcp

819727972 | 2025-02-17T21:33:56.948157

SSH-2.0-OpenSSH_7.4

20080 / tcp

-1399940268 | 2025-02-21T21:43:22.156013

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20182 / tcp

1504401647 | 2025-02-20T14:39:33.519892

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

20208 / tcp

-1730858130 | 2025-02-22T05:11:34.616945

RFB 003.008
VNC:
  Protocol Version: 3.8

20547 / tcp

-1899074860 | 2025-02-24T11:12:39.385628

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

20880 / tcp

1370263973 | 2025-02-24T19:45:59.630188

dubbo>

21001 / tcp

-616720387 | 2025-02-28T20:12:20.106567

SSH-2.0-SSHD_0.7.6

21084 / tcp

921225407 | 2025-02-24T16:01:54.894258

\x00\x00\x00\x04\x00\x00\x00\x00\x00

21235 / tcp

971933601 | 2025-02-10T11:34:11.845378

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

21243 / tcp

-1399940268 | 2025-02-15T09:27:27.903166

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21274 / tcp

-1013082686 | 2025-02-08T16:14:21.165982

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

21294 / tcp

-1327660293 | 2025-02-16T23:28:26.816466

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

21307 / tcp

-1399940268 | 2025-02-27T21:14:24.521899

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21321 / tcp

1911457608 | 2025-02-17T04:42:52.451165

\x00[\x00\x00\x00\x00\x00\x00

21379 / tcp

1911457608 | 2025-02-10T11:28:56.235922

\x00[\x00\x00\x00\x00\x00\x00

22222 / tcp

-358801646 | 2025-02-24T08:39:39.709365

SSH-2.0-OpenSSH_6.6.1

22403 / tcp

320677201 | 2025-02-27T03:50:51.632599

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

22556 / tcp

1504401647 | 2025-02-17T04:10:51.774621

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

22703 / tcp

320677201 | 2025-02-09T22:14:10.437508

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

23023 / tcp

2067064333 | 2025-02-08T04:00:57.440099

athinfod: invalid query.

25001 / tcp

1911457608 | 2025-02-22T12:29:35.471729

\x00[\x00\x00\x00\x00\x00\x00

25082 / tcp

165188539 | 2025-02-17T13:35:55.995363

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

25565 / tcp

1911457608 | 2025-02-17T21:25:48.229813

\x00[\x00\x00\x00\x00\x00\x00

27015 / tcp

-1477838366 | 2025-02-28T21:26:32.452253

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

27017 / tcp

1763259671 | 2025-02-17T22:46:34.941280

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

27105 / tcp

-1399940268 | 2025-02-15T18:45:44.899240

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

28015 / tcp

-1327660293 | 2025-02-14T01:26:17.863129

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

29842 / tcp

819727972 | 2025-02-05T22:48:54.409054

SSH-2.0-OpenSSH_7.4

30007 / tcp

-1487943323 | 2025-02-09T14:45:05.294260

431 Unable to negotiate secure command connection.\r\n

30023 / tcp

1624217396 | 2025-02-04T01:08:00.667371

HELO:10.3.6.0.false\nAS:2048\nHL:19

30894 / tcp

-805362002 | 2025-02-14T20:45:33.776984

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

31337 / tcp

-1992519278 | 2025-02-23T22:31:10.569801

\xc3\xbf\xc3\xbb\\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

31444 / tcp

1492413928 | 2025-02-16T08:22:17.599142

SSH-2.0-OpenSSH_7.5

32222 / tcp

-146605374 | 2025-02-07T13:04:18.646691

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

33060 / tcp

-358801646 | 2025-02-09T09:04:42.356635

SSH-2.0-OpenSSH_6.6.1

33322 / tcp

-1477838366 | 2025-02-23T16:53:46.000697

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

33722 / tcp

819727972 | 2025-02-06T21:25:10.258705

SSH-2.0-OpenSSH_7.4

34022 / tcp

-903067560 | 2025-02-06T12:05:20.357084

\x00[\x13)\xc2\x81\x7f\x00\x00

34322 / tcp

-1611764932 | 2025-02-06T12:44:24.505119

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

34522 / tcp

-971970408 | 2025-02-05T22:24:59.516331

34922 / tcp

1975288991 | 2025-02-06T00:33:25.995446

OPTI

35122 / tcp

1842524259 | 2025-02-06T04:04:08.221800

35250 / tcp

1543809371 | 2025-02-05T10:15:38.257873

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

35622 / tcp

1332894250 | 2025-02-05T15:36:37.965715

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

35722 / tcp

2087396567 | 2025-02-28T05:55:27.085214

kjnkjabhbanc283ubcsbhdc72

35922 / tcp

-1148066627 | 2025-02-05T08:38:57.678054

\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00

36022 / tcp

-2096652808 | 2025-02-27T04:46:30.215280

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

36422 / tcp

2087396567 | 2025-02-04T23:45:54.455687

kjnkjabhbanc283ubcsbhdc72

36522 / tcp

-1839934832 | 2025-02-28T20:03:32.975487

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

36622 / tcp

740837454 | 2025-02-04T18:31:18.053240

SSH-2.0-OpenSSH_5.3

36722 / tcp

-2096652808 | 2025-02-04T13:10:00.788262

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

37222 / tcp

1212921144 | 2025-02-04T06:41:37.642393

0@

37522 / tcp

1426971893 | 2025-02-04T03:16:36.398132

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

37722 / tcp

-971970408 | 2025-02-03T21:15:15.402751

37822 / tcp

-971970408 | 2025-02-03T10:51:09.235825

37922 / tcp

1741579575 | 2025-02-03T15:58:52.923869

38022 / tcp

1189133115 | 2025-02-03T14:40:07.628449

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

38222 / tcp

1544300041 | 2025-02-03T11:06:03.676396

SSH-25453-Cisco-3524665.35

38322 / tcp

2087396567 | 2025-02-17T12:09:01.249717

kjnkjabhbanc283ubcsbhdc72

38422 / tcp

1690634669 | 2025-02-03T07:11:50.703474

39022 / tcp

1741579575 | 2025-02-02T22:20:44.365842

39322 / tcp

-971970408 | 2025-02-02T15:10:57.397944

39522 / tcp

2087396567 | 2025-02-02T16:59:18.007450

kjnkjabhbanc283ubcsbhdc72

39822 / tcp

842535728 | 2025-02-02T06:20:47.180607

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

39922 / tcp

1690634669 | 2025-02-26T17:04:18.639674

40122 / tcp

-1730858130 | 2025-02-26T13:16:29.955576

RFB 003.008
VNC:
  Protocol Version: 3.8

40222 / tcp

-1810987450 | 2025-02-10T17:06:20.523236

\xc3\xbf

40471 / tcp

-146605374 | 2025-02-28T22:13:35.852838

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

40522 / tcp

2087396567 | 2025-02-16T23:00:02.871151

kjnkjabhbanc283ubcsbhdc72

40622 / tcp

-746114901 | 2025-02-26T11:35:32.356208

[KpU

40722 / tcp

-971970408 | 2025-02-10T12:27:31.013067

41022 / tcp

-746114901 | 2025-02-17T04:28:33.806168

[KpU

41522 / tcp

-971970408 | 2025-02-16T02:48:10.459168

41722 / tcp

-1013082686 | 2025-02-15T10:31:29.568485

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

41922 / tcp

401555314 | 2025-01-31T17:06:54.915837

NB[GFXjA^R

42422 / tcp

1690634669 | 2025-02-15T12:48:20.343875

42443 / tcp

-1399940268 | 2025-02-15T11:27:45.016758

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

42522 / tcp

660175493 | 2025-02-14T17:47:41.241456

42722 / tcp

-786044033 | 2025-02-09T06:24:14.608100

OK Welcome <299685> on DirectUpdate server 7286

43222 / tcp

2033888749 | 2025-02-28T23:37:10.501973

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

43422 / tcp

2087396567 | 2025-02-27T19:29:38.613910

kjnkjabhbanc283ubcsbhdc72

43522 / tcp

104385780 | 2025-02-27T17:46:09.904483

ceph v2

43622 / tcp

233634112 | 2025-02-21T17:25:46.495910

SSH-98.60-SysaxSSH_81885..42

43822 / tcp

1996932384 | 2025-02-27T01:17:28.836246

"raop" nonce

44022 / tcp

-2096652808 | 2025-02-26T20:19:16.079239

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

44122 / tcp

842535728 | 2025-02-26T22:38:20.202992

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

44522 / tcp

2087396567 | 2025-02-13T20:36:29.494754

kjnkjabhbanc283ubcsbhdc72

44622 / tcp

539065883 | 2025-02-23T03:14:28.247640

44722 / tcp

-2096652808 | 2025-02-13T17:01:27.179460

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

44818 / tcp

820958131 | 2025-02-24T08:24:18.068610

kjnkjabhbanc283ubcsbhdc72\x02

44822 / tcp

-2096652808 | 2025-02-20T10:40:43.495976

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

45522 / tcp

-1730858130 | 2025-02-09T02:52:01.656599

RFB 003.008
VNC:
  Protocol Version: 3.8

45622 / tcp

-971970408 | 2025-02-25T14:26:06.969561

46122 / tcp

-893477759 | 2025-02-24T11:59:01.696340

!versionbind7 t{RPowerDNS Recursor 410

46222 / tcp

1767345577 | 2025-02-24T22:56:23.539533

Hello, this is Quagga (version 0T).
Copyright 1996-200

46322 / tcp

1996932384 | 2025-02-24T21:03:28.548397

"raop" nonce

46422 / tcp

1741579575 | 2025-02-08T19:48:05.726472

47001 / tcp

-1279886438 | 2025-02-14T23:05:56.299096

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

47322 / tcp

171352214 | 2025-02-23T19:15:17.737428

-ERR client ip is not in whitelist

47422 / tcp

2087396567 | 2025-02-25T00:08:25.276199

kjnkjabhbanc283ubcsbhdc72

47622 / tcp

2087396567 | 2025-02-23T15:38:18.684015

kjnkjabhbanc283ubcsbhdc72

47990 / tcp

996960436 | 2025-02-15T20:57:18.695648

572 Relay not authorized

48001 / tcp

-249504111 | 2025-02-12T12:53:21.128057

\x00[xU-\x7f\x00\x00

48622 / tcp

1642597142 | 2025-02-24T19:20:46.237979

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

48822 / tcp

660175493 | 2025-02-24T17:07:02.173087

48922 / tcp

1975288991 | 2025-02-19T18:46:58.660578

OPTI

49121 / tcp

819727972 | 2025-02-23T16:08:42.552538

SSH-2.0-OpenSSH_7.4

49122 / tcp

-1990350878 | 2025-02-21T06:03:16.529097

 
04 \...

49522 / tcp

-358801646 | 2025-02-21T04:05:33.374946

SSH-2.0-OpenSSH_6.6.1

49822 / tcp

-1136600457 | 2025-02-22T21:23:02.390292

HELO:10.3.6.0.false
AS:2048
HL:19

49922 / tcp

-1681927087 | 2025-02-22T18:55:01.057866

kjnkjabhbanc283ubcsbhdc72

50022 / tcp

819727972 | 2025-02-22T10:29:09.492466

SSH-2.0-OpenSSH_7.4

50122 / tcp

1911457608 | 2025-02-03T06:42:16.389018

\x00[\x00\x00\x00\x00\x00\x00

50222 / tcp

842535728 | 2025-02-22T06:49:52.759267

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

50622 / tcp

1282941221 | 2025-02-21T19:08:01.278404

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

50822 / tcp

-358801646 | 2025-02-20T19:19:22.679710

SSH-2.0-OpenSSH_6.6.1

51001 / tcp

1911457608 | 2025-02-07T04:26:47.176460

\x00[\x00\x00\x00\x00\x00\x00

51622 / tcp

2087396567 | 2025-02-21T02:21:08.905616

kjnkjabhbanc283ubcsbhdc72

51722 / tcp

-992671574 | 2025-02-21T00:34:13.973270

@RSYNCD: 26

52230 / tcp

-2031152423 | 2025-02-20T06:03:26.333504

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

52311 / tcp

1911457608 | 2025-02-28T15:35:52.253109

\x00[\x00\x00\x00\x00\x00\x00

52422 / tcp

2087396567 | 2025-02-20T01:51:38.336052

kjnkjabhbanc283ubcsbhdc72

52822 / tcp

-1804465946 | 2025-02-19T20:32:19.124221

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Server: Kestrel
Transfer-Encoding: chunked
Strict-Transport-Security: max-age=2592000

53122 / tcp

819727972 | 2025-02-19T17:00:34.179521

SSH-2.0-OpenSSH_7.4

53222 / tcp

171352214 | 2025-02-09T15:04:39.324699

-ERR client ip is not in whitelist

53400 / tcp

-1399940268 | 2025-02-25T02:24:10.842325

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

53622 / tcp

819727972 | 2025-02-19T11:42:24.727337

SSH-2.0-OpenSSH_7.4

53722 / tcp

-1990350878 | 2025-02-14T09:15:02.308609

 
04 \...

54022 / tcp

-1139539254 | 2025-02-19T04:34:16.214568

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

54138 / tcp

-1399940268 | 2025-02-05T03:56:16.846384

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

54327 / tcp

-891714208 | 2025-02-25T22:28:31.935599

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

54622 / tcp

-1476017887 | 2025-02-18T14:36:34.770375

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

55000 / tcp

819727972 | 2025-02-13T10:00:33.949205

SSH-2.0-OpenSSH_7.4

55200 / tcp

-1839934832 | 2025-02-19T19:05:33.453248

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

55443 / tcp

707919486 | 2025-02-25T21:54:24.199679

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

55553 / tcp

819727972 | 2025-02-22T22:34:56.767437

SSH-2.0-OpenSSH_7.4

55554 / tcp

1842524259 | 2025-02-10T20:31:50.148483

56022 / tcp

1741579575 | 2025-02-17T23:48:11.757139

56222 / tcp

-138733098 | 2025-02-17T20:19:32.700741

roku: ready

56722 / tcp

539065883 | 2025-02-09T08:58:02.374788

57788 / tcp

-1375131644 | 2025-02-25T01:21:04.153777

\x00[v\xc3\xbdC\x7f\x00\x00

59443 / tcp

-2080784861 | 2025-02-28T10:21:22.241485

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

61613 / tcp

1723769361 | 2025-02-09T09:27:14.321506

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

63210 / tcp

-1013082686 | 2025-02-18T09:29:37.606254

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

121.199.76.175

Last Seen: 2025-03-01

Tags:

GeneralInformation

OpenPorts

11 / tcp 671605376 | 2025-02-19T08:45:46.057050

15 / tcp -1559123399 | 2025-02-03T09:06:16.008773

20 / tcp -1399940268 | 2025-02-15T21:02:15.375869

23 / tcp -23362551 | 2025-02-23T10:19:02.037972

25 / tcp 819727972 | 2025-02-02T05:43:24.521213

37 / tcp 1110767461 | 2025-02-12T10:26:38.936118

49 / tcp -1909001798 | 2025-02-09T09:51:34.429055

53 / tcp -1511422614 | 2025-02-26T11:48:31.750756

79 / tcp -876294238 | 2025-02-25T14:59:37.030975

90 / tcp -358801646 | 2025-02-27T04:57:19.090949

102 / tcp -2089734047 | 2025-02-27T17:08:27.998360

113 / tcp -527005584 | 2025-02-19T23:42:34.633754

143 / tcp 639175818 | 2025-02-16T23:13:05.459419

175 / tcp 1911457608 | 2025-01-31T17:45:08.190194

179 / tcp -399606100 | 2025-02-06T17:36:14.442346

221 / tcp -653033013 | 2025-02-07T21:40:35.907838

243 / tcp -1888448627 | 2025-02-10T08:36:25.045047

513 / tcp -2089734047 | 2025-02-18T00:32:22.600369

515 / tcp 2087396567 | 2025-02-22T10:52:18.228414

548 / tcp -969286897 | 2025-02-20T04:38:21.115416

554 / tcp 1167995424 | 2025-02-23T06:12:38.903995

602 / tcp 366084633 | 2025-02-28T14:51:03.959516

636 / tcp 1650594030 | 2025-02-03T14:05:57.002788

675 / tcp -1399940268 | 2025-02-11T02:38:52.172547

771 / tcp 580340387 | 2025-02-17T04:29:50.729709

789 / tcp 401555314 | 2025-02-01T06:25:50.003804

873 / tcp -1970692834 | 2025-02-13T06:42:26.420701

992 / tcp -1242315829 | 2025-02-19T22:32:13.258732

998 / tcp 401555314 | 2025-02-15T09:09:07.485682

1023 / tcp 1370263973 | 2025-02-08T16:22:09.623457

1153 / tcp 632542934 | 2025-02-16T13:32:59.459661

1177 / tcp 1741579575 | 2025-02-20T08:02:27.575261

1200 / tcp 2087396567 | 2025-02-02T18:27:03.426591

1290 / tcp 1911457608 | 2025-02-06T12:56:58.689817

1337 / tcp -345718689 | 2025-02-22T19:45:24.206929

1377 / tcp 740837454 | 2025-02-02T15:19:13.784987

1414 / tcp -1835475271 | 2025-02-09T03:37:11.385915

1433 / tcp -651181868 | 2025-02-28T17:34:57.919199

1443 / tcp -1715152554 | 2025-02-06T20:17:29.107465

Hashes

1450 / tcp 819727972 | 2025-02-11T16:08:58.646162

1451 / tcp 1077013874 | 2025-02-21T16:39:44.526833

1521 / tcp -805164506 | 2025-02-22T21:39:21.875260

1599 / tcp 321971019 | 2025-02-24T02:52:27.748321

1604 / tcp 808560482 | 2025-02-10T18:48:10.345613

1800 / tcp 819727972 | 2025-02-27T01:11:18.782990

1883 / tcp 1852418385 | 2025-02-11T12:20:52.607162

1901 / tcp -1888448627 | 2025-02-28T23:32:09.411283

1911 / tcp 921225407 | 2025-02-04T21:58:18.032794

1976 / tcp 401555314 | 2025-02-07T12:11:26.633150

1985 / tcp 165188539 | 2025-02-14T17:59:48.215328

2002 / tcp 165188539 | 2025-02-04T13:54:04.358676

2031 / tcp 1492413928 | 2025-02-15T12:53:07.978755

2056 / tcp -1648456501 | 2025-02-27T03:19:55.393107

2059 / tcp 1426971893 | 2025-02-16T03:18:40.205097

2060 / tcp -441419608 | 2025-02-20T06:25:05.588809

2067 / tcp -136006866 | 2025-02-17T22:01:48.712085

2070 / tcp 1623746877 | 2025-02-10T16:57:41.316855

2072 / tcp -2089734047 | 2025-02-06T06:36:33.761908

2083 / tcp 1282941221 | 2025-02-14T15:45:05.704129

2087 / tcp 819727972 | 2025-02-25T19:19:35.235115

2121 / tcp 141730637 | 2025-02-07T13:52:57.948246

2154 / tcp -971970408 | 2025-02-27T14:37:01.702751

2222 / tcp 372433470 | 2025-02-12T16:48:39.082869

2345 / tcp -1399940268 | 2025-02-25T11:07:43.441881

2376 / tcp 539065883 | 2025-02-03T23:15:38.249430

2404 / tcp 632542934 | 2025-02-14T21:23:06.828711

2455 / tcp 842535728 | 2025-02-13T09:14:54.252876

2761 / tcp -1428621233 | 2025-02-13T03:13:34.811787

2762 / tcp -2089734047 | 2025-02-23T21:50:41.895890

3001 / tcp 401555314 | 2025-02-14T08:12:50.146744

3048 / tcp 1911457608 | 2025-02-12T11:41:06.675407

3050 / tcp 401555314 | 2025-02-17T11:22:00.211589

3072 / tcp -1032713145 | 2025-02-02T21:27:59.216072

3090 / tcp -2017887953 | 2025-02-20T01:08:25.338627

11 / tcp

671605376 | 2025-02-19T08:45:46.057050

15 / tcp

-1559123399 | 2025-02-03T09:06:16.008773

20 / tcp

-1399940268 | 2025-02-15T21:02:15.375869

23 / tcp

-23362551 | 2025-02-23T10:19:02.037972

25 / tcp

819727972 | 2025-02-02T05:43:24.521213

37 / tcp

1110767461 | 2025-02-12T10:26:38.936118

49 / tcp

-1909001798 | 2025-02-09T09:51:34.429055

53 / tcp

-1511422614 | 2025-02-26T11:48:31.750756

79 / tcp

-876294238 | 2025-02-25T14:59:37.030975

90 / tcp

-358801646 | 2025-02-27T04:57:19.090949

102 / tcp

-2089734047 | 2025-02-27T17:08:27.998360

113 / tcp

-527005584 | 2025-02-19T23:42:34.633754

143 / tcp

639175818 | 2025-02-16T23:13:05.459419

175 / tcp

1911457608 | 2025-01-31T17:45:08.190194

179 / tcp

-399606100 | 2025-02-06T17:36:14.442346

221 / tcp

-653033013 | 2025-02-07T21:40:35.907838

243 / tcp

-1888448627 | 2025-02-10T08:36:25.045047

513 / tcp

-2089734047 | 2025-02-18T00:32:22.600369

515 / tcp

2087396567 | 2025-02-22T10:52:18.228414

548 / tcp

-969286897 | 2025-02-20T04:38:21.115416

554 / tcp

1167995424 | 2025-02-23T06:12:38.903995

602 / tcp

366084633 | 2025-02-28T14:51:03.959516

636 / tcp

1650594030 | 2025-02-03T14:05:57.002788

675 / tcp

-1399940268 | 2025-02-11T02:38:52.172547

771 / tcp

580340387 | 2025-02-17T04:29:50.729709

789 / tcp

401555314 | 2025-02-01T06:25:50.003804

873 / tcp

-1970692834 | 2025-02-13T06:42:26.420701

992 / tcp

-1242315829 | 2025-02-19T22:32:13.258732

998 / tcp

401555314 | 2025-02-15T09:09:07.485682

1023 / tcp

1370263973 | 2025-02-08T16:22:09.623457

1153 / tcp

632542934 | 2025-02-16T13:32:59.459661

1177 / tcp

1741579575 | 2025-02-20T08:02:27.575261

1200 / tcp

2087396567 | 2025-02-02T18:27:03.426591

1290 / tcp

1911457608 | 2025-02-06T12:56:58.689817

1337 / tcp

-345718689 | 2025-02-22T19:45:24.206929

1377 / tcp

740837454 | 2025-02-02T15:19:13.784987

1414 / tcp

-1835475271 | 2025-02-09T03:37:11.385915

1433 / tcp

-651181868 | 2025-02-28T17:34:57.919199

1443 / tcp

-1715152554 | 2025-02-06T20:17:29.107465

1450 / tcp

819727972 | 2025-02-11T16:08:58.646162

1451 / tcp

1077013874 | 2025-02-21T16:39:44.526833

1521 / tcp

-805164506 | 2025-02-22T21:39:21.875260

1599 / tcp

321971019 | 2025-02-24T02:52:27.748321

1604 / tcp

808560482 | 2025-02-10T18:48:10.345613

1800 / tcp

819727972 | 2025-02-27T01:11:18.782990

1883 / tcp

1852418385 | 2025-02-11T12:20:52.607162

1901 / tcp

-1888448627 | 2025-02-28T23:32:09.411283

1911 / tcp

921225407 | 2025-02-04T21:58:18.032794

1976 / tcp

401555314 | 2025-02-07T12:11:26.633150

1985 / tcp

165188539 | 2025-02-14T17:59:48.215328

2002 / tcp

165188539 | 2025-02-04T13:54:04.358676

2031 / tcp

1492413928 | 2025-02-15T12:53:07.978755

2056 / tcp

-1648456501 | 2025-02-27T03:19:55.393107

2059 / tcp

1426971893 | 2025-02-16T03:18:40.205097

2060 / tcp

-441419608 | 2025-02-20T06:25:05.588809

2067 / tcp

-136006866 | 2025-02-17T22:01:48.712085

2070 / tcp

1623746877 | 2025-02-10T16:57:41.316855

2072 / tcp

-2089734047 | 2025-02-06T06:36:33.761908

2083 / tcp

1282941221 | 2025-02-14T15:45:05.704129

2087 / tcp

819727972 | 2025-02-25T19:19:35.235115

2121 / tcp

141730637 | 2025-02-07T13:52:57.948246

2154 / tcp

-971970408 | 2025-02-27T14:37:01.702751

2222 / tcp

372433470 | 2025-02-12T16:48:39.082869

2345 / tcp

-1399940268 | 2025-02-25T11:07:43.441881

2376 / tcp

539065883 | 2025-02-03T23:15:38.249430

2404 / tcp

632542934 | 2025-02-14T21:23:06.828711

2455 / tcp

842535728 | 2025-02-13T09:14:54.252876

2761 / tcp

-1428621233 | 2025-02-13T03:13:34.811787

2762 / tcp

-2089734047 | 2025-02-23T21:50:41.895890

3001 / tcp

401555314 | 2025-02-14T08:12:50.146744

3048 / tcp

1911457608 | 2025-02-12T11:41:06.675407

3050 / tcp

401555314 | 2025-02-17T11:22:00.211589

3072 / tcp

-1032713145 | 2025-02-02T21:27:59.216072

3090 / tcp

-2017887953 | 2025-02-20T01:08:25.338627

3121 / tcp

-1839934832 | 2025-02-23T13:06:59.199954

3129 / tcp

-1839934832 | 2025-02-12T20:34:20.279667

3145 / tcp

-1476017887 | 2025-02-28T23:53:31.517522

3150 / tcp

-2033111675 | 2025-02-24T15:12:30.579490

3157 / tcp

-1476017887 | 2025-02-09T14:22:38.213824

3169 / tcp

-784071826 | 2025-02-22T05:53:04.027593