GeneralInformation

Country	China
City	Hangzhou
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 19 22 23 43 49 70 79 102 104 111 122 175 177 179 195 221 343 385 389 427 443 444 447 480 487 502 593 636 771 789 873 992 993 995 1023 1026 1153 1177 1193 1200 1443 1599 1604 1723 1800 1833 1883 1911 1926 1957 1962 1980 1988 2008 2016 2022 2064 2067 2077 2081 2083 2087 2121 2122 2181 2195 2196 2222 2271 2323 2345 2404 2455 2601 2628 2761 2762 3001 3053 3054 3057 3080 3083 3093 3108 3127 3135 3147 3148 3168 3188 3194 3260 3269 3299 3301 3306 3310 3388 3523 3551 3556 3780 3953 4000 4022 4040 4064 4150 4200 4242 4282 4321 4369 4433 4443 4444 4445 4500 4506 4786 4808 4821 4899 4949 5006 5009 5011 5025 5051 5201 5233 5244 5254 5271 5432 5433 5594 5650 5672 5696 5858 5938 5986 6000 6001 6308 6511 6514 6653 6664 6666 6668 6697 6799 7001 7070 7078 7086 7171 7218 7415 7443 7500 7634 7980 8009 8025 8048 8055 8081 8083 8085 8087 8089 8099 8103 8113 8117 8126 8136 8147 8164 8169 8181 8185 8190 8194 8199 8431 8433 8449 8465 8475 8484 8502 8503 8536 8554 8580 8589 8640 8728 8788 8801 8805 8811 8819 8834 8848 8861 8880 8889 8906 9001 9033 9048 9051 9065 9066 9070 9079 9081 9088 9091 9095 9100 9118 9136 9140 9151 9152 9159 9170 9175 9207 9223 9248 9251 9292 9306 9398 9400 9418 9446 9530 9633 9758 9810 9876 9898 9900 9943 9998 10001 10033 10036 10039 10051 10134 10250 10554 10911 11000 11112 11288 12000 12101 12103 12108 12129 12134 12179 12219 12251 12261 12274 12278 12298 12304 12355 12357 12366 12403 12427 12435 12450 12465 12485 12489 12502 12516 12521 12537 12552 12564 12576 12585 12615 13443 14901 16013 16029 16045 16052 16053 16057 16070 16084 16100 16403 17775 18018 18027 18052 18058 18064 18067 18081 18096 18108 18111 18245 18443 18765 19000 20000 20020 20070 20185 20208 20547 20880 21001 21025 21287 21294 21304 21310 21320 21322 21326 21379 21381 22000 22107 22556 23023 24082 25001 25002 25565 27015 28017 30002 30009 30101 30112 30121 30468 31337 32101 32400 32444 32764 33060 33389 33522 34322 34722 35000 35522 35622 36022 36122 36522 36822 37022 37222 37777 38022 38322 38722 38822 39001 39022 39122 39222 39522 39622 39722 39922 40122 40322 40822 41222 41322 41522 41722 41822 42622 43022 43122 43422 43522 43722 44022 44158 44222 44722 44818 44822 44922 45002 45022 45622 45722 45822 45922 46122 46222 46422 46622 46822 46922 48001 48122 48322 48422 48722 48822 49522 49682 50000 50022 50042 50122 51122 51235 51322 52322 52931 53222 53322 53422 53622 53722 55000 55322 55443 55481 55722 57122 57622 57922 58000 58022 58122 58322 58522 58585 58922 59922 60129 61234 61616 62443 63210 63260

11 / tcp

1261582754 | 2025-01-27T12:10:57.997970

unknown command 
unknown command

13 / tcp

1412519768 | 2025-02-05T14:57:17.013817

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

15 / tcp

863754335 | 2025-01-08T20:16:23.512144

0a

19 / tcp

873425297 | 2025-02-06T10:25:53.948904

200 NOD32SS 99 (3318497116)

22 / tcp

2039704282 | 2025-01-13T19:24:34.855938

SSH-2.0-OpenSSH_5.3\r\n

23 / tcp

-2107996212 | 2025-02-02T18:48:45.532090

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

43 / tcp

-441419608 | 2025-01-10T18:53:32.761666

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

49 / tcp

-801484042 | 2025-01-22T08:20:02.210348

ERR 27

70 / tcp

-833941849 | 2025-01-29T00:44:37.041674

\x1e\x06\xc2\x81\x01\x07version\x04bind\x10\x03

79 / tcp

-972699072 | 2025-01-19T16:02:32.770925

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

CVE-2018-10088

102 / tcp

51259122 | 2025-01-10T09:02:04.581472

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

104 / tcp

-1399940268 | 2025-01-24T09:48:08.375849

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

111 / tcp

897328069 | 2025-01-27T02:03:18.353278

220 mail.scott000.com ESMTP

122 / tcp

-1648456501 | 2025-01-08T20:52:07.942502

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

175 / tcp

1991883981 | 2025-01-21T16:23:08.100709

B\x00\x00\x00\xc3\xbfn\x04Too many connections

177 / tcp

-1730858130 | 2025-01-11T23:13:05.810724

RFB 003.008
VNC:
  Protocol Version: 3.8

179 / tcp

-399606100 | 2025-01-30T15:19:26.169628

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

195 / tcp

2087396567 | 2025-01-28T19:04:30.798256

kjnkjabhbanc283ubcsbhdc72

221 / tcp

-1730858130 | 2025-02-06T00:21:07.299608

RFB 003.008
VNC:
  Protocol Version: 3.8

343 / tcp

-1032713145 | 2025-01-10T07:19:18.019270

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

385 / tcp

-1139539254 | 2025-01-11T14:16:27.380394

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

389 / tcp

-1713467553 | 2025-01-13T13:03:14.090811

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Connection: close

427 / tcp

928665344 | 2025-01-30T07:53:23.039797

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://127.0.0.1\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:cdserver\nservice:fdserver\nservice:hdserver\nservice:adviser\nservice:lighttpd\nB://l:87/x\n

443 / tcp

-1715152554 | 2025-01-28T00:02:17.064241

Hashes

hash

1496181150

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 28 Jan 2025 00:02:16 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://121.40.250.225:443/

444 / tcp

1357555024 | 2025-01-24T17:22:32.940870

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Fri, 24 Jan 2025 17:22:32 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

447 / tcp

580340387 | 2025-01-22T22:31:43.733916

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

480 / tcp

-249504111 | 2025-02-05T23:57:37.774937

\x00[xU-\x7f\x00\x00

487 / tcp

-2089734047 | 2025-01-14T10:06:12.566738

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

502 / tcp

-1888448627 | 2025-01-25T23:45:19.326342

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

593 / tcp

1308377066 | 2025-01-14T04:54:20.456627

ncacn_http/1.0

636 / tcp

1402312074 | 2025-02-05T19:54:57.596811

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 13-51264013-0 0NNN RT(1705909593861 113) q(-1 -1 -1 -1) r(0 -1) b1

771 / tcp

-1279886438 | 2025-01-16T21:22:30.042048

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

789 / tcp

-146605374 | 2025-01-09T11:11:49.082528

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

873 / tcp

-1970692834 | 2025-01-10T02:06:01.146758

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

992 / tcp

-936692830 | 2025-01-22T22:34:45.988656

HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19

993 / tcp

1911457608 | 2025-01-29T17:17:53.154272

\x00[\x00\x00\x00\x00\x00\x00

995 / tcp

1685649979 | 2025-01-08T17:15:29.310750

+OK Dovecot ready.\r\n

1023 / tcp

1231376952 | 2025-01-24T19:56:06.454897

1026 / tcp

921225407 | 2025-01-09T03:10:23.398164

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1153 / tcp

-2089734047 | 2025-01-12T12:10:25.672118

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1177 / tcp

-971970408 | 2025-01-19T08:16:33.938117

1193 / tcp

819727972 | 2025-01-28T15:14:54.368043

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

1200 / tcp

2087396567 | 2025-01-14T22:34:13.471009

kjnkjabhbanc283ubcsbhdc72

1443 / tcp

-1715152554 | 2025-01-28T00:02:12.055745

Hashes

hash

642276226

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 28 Jan 2025 00:02:11 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://121.40.250.225:443/

1599 / tcp

-358707605 | 2025-01-29T04:06:33.046518

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 391
Connect-To: https://qd-gatway.aliyuncs.com/table/tree-land/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div id="other"></div>

</body>

1604 / tcp

408230060 | 2025-01-27T05:24:28.233155

\r\nSorry, that nickname format is invalid.\r\n

1723 / tcp

-1608241410 | 2025-01-14T15:07:23.573120

Firmware: 1\nHostname: local\nVendor: linux\n

1800 / tcp

671605376 | 2025-02-01T23:02:38.648126

SSH-2.0-OpenSSH_X.X

1833 / tcp

-1105333987 | 2025-01-20T10:04:21.897441

\x00[KpU\x7f\x00\x00

1883 / tcp

1632932802 | 2025-01-23T07:11:37.817038

1911 / tcp

-1888448627 | 2025-01-21T17:17:30.240223

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1926 / tcp

819727972 | 2025-01-14T12:07:25.034951

SSH-2.0-OpenSSH_7.4

1957 / tcp

-1399940268 | 2025-01-31T19:21:35.142491

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1962 / tcp

-1538260461 | 2025-02-05T14:06:42.562046

\x01\x00\x00\x00

1980 / tcp

165188539 | 2025-01-14T20:37:57.812889

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1988 / tcp

1911457608 | 2025-01-27T00:03:45.116587

\x00[\x00\x00\x00\x00\x00\x00

2008 / tcp

819727972 | 2025-01-12T10:24:30.306071

SSH-2.0-OpenSSH_7.4

2016 / tcp

-249504111 | 2025-01-29T04:36:07.959782

\x00[xU-\x7f\x00\x00

2022 / tcp

819727972 | 2025-01-21T09:45:53.075501

SSH-2.0-OpenSSH_7.4

2064 / tcp

165188539 | 2025-01-26T12:43:15.666207

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2067 / tcp

-1230049476 | 2025-01-14T01:38:23.462454

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

2077 / tcp

1989907056 | 2025-01-27T13:25:37.424930

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

2081 / tcp

-1099385124 | 2025-02-04T14:08:21.224068

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

2083 / tcp

2087396567 | 2025-01-29T20:38:29.874250

kjnkjabhbanc283ubcsbhdc72

2087 / tcp

1842524259 | 2025-02-03T02:38:07.821418

2121 / tcp

141730637 | 2025-01-27T12:46:28.125046

HTTP/1.0 200 OK
Server: Proxy

2122 / tcp

-1626979812 | 2025-02-06T21:45:10.770036

220 Service ready for new user.

2181 / tcp

-122096153 | 2025-01-25T17:50:37.451300

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

2195 / tcp

-1733106930 | 2025-01-21T10:53:38.514534

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

2196 / tcp

165188539 | 2025-01-31T13:02:06.999457

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2222 / tcp

58083962 | 2025-02-02T22:49:51.680899

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Content-Type: text/html
Connection: close

2271 / tcp

-2089734047 | 2025-02-01T13:48:22.848093

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2323 / tcp

1662205251 | 2025-01-21T10:10:36.837429

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

2345 / tcp

1911457608 | 2025-02-02T09:46:12.119851

\x00[\x00\x00\x00\x00\x00\x00

2404 / tcp

-1399940268 | 2025-01-30T09:20:12.851581

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2455 / tcp

1741579575 | 2025-02-06T21:03:28.650000

2601 / tcp

-1804005872 | 2025-02-05T21:31:59.144164

\n\nWelcome to visit GOCLOUD S2A series router!\n\n\r\nUser Access Verification\r\n\r\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe"\\xff\\xfd\\x1fPassword:

2628 / tcp

1778988322 | 2025-01-17T15:44:52.133092

* OK GroupWise IMAP4rev1 Server Ready

2761 / tcp

-2089734047 | 2025-02-05T03:09:15.611533

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2762 / tcp

165188539 | 2025-01-26T19:43:36.749284

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3001 / tcp

-1435414831 | 2025-01-26T06:49:33.567487

roku: ready\r\n

3053 / tcp

-2089734047 | 2025-01-25T06:02:14.159566

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3054 / tcp

693973426 | 2025-01-11T14:00:30.343851

220 VMware Authentication Daemon Version 1.10: SSL Required, Se\nrverDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , , NFCSSL supported/t

3057 / tcp

-445721795 | 2025-01-25T22:14:35.119137

\x00[\xc3\xaed\x1a\x7f\x00\x00

3080 / tcp

1308377066 | 2025-01-31T05:36:55.228424

ncacn_http/1.0

3083 / tcp

-2033111675 | 2025-01-10T18:20:36.943516

~djb

3093 / tcp

819727972 | 2025-01-17T10:06:52.823499

SSH-2.0-OpenSSH_7.4

3108 / tcp

1761482307 | 2025-01-28T19:24:47.892314

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

3127 / tcp

1911457608 | 2025-01-25T20:29:05.582383

\x00[\x00\x00\x00\x00\x00\x00

3135 / tcp

-358801646 | 2025-01-25T08:00:56.167665

SSH-2.0-OpenSSH_6.6.1

3147 / tcp

-375604792 | 2025-01-27T16:53:18.702013

220 Microsoft FTP Service

3148 / tcp

321971019 | 2025-01-28T15:19:33.040948

-ERR client ip is not in whitelist\r

3168 / tcp

-1227409554 | 2025-01-30T22:37:08.585652

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3188 / tcp

-1327660293 | 2025-01-25T08:18:19.786700

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3194 / tcp

-1899074860 | 2025-01-13T15:58:10.493821

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

3260 / tcp

-1341662640 | 2025-01-24T04:55:23.358820

HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3269 / tcp

1308377066 | 2025-01-21T22:41:25.029536

ncacn_http/1.0

3299 / tcp

1353260875 | 2025-01-13T14:45:09.462277

\x00[g\xc2\x95N\x7f\x00\x00

3301 / tcp

820958131 | 2025-01-11T21:12:41.624945

kjnkjabhbanc283ubcsbhdc72\x02

3306 / tcp

-1036944024 | 2025-02-05T14:53:29.300582

F\\x00\\x00\\x00\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MySQL server

3310 / tcp

-2096652808 | 2025-01-09T14:46:44.821918

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

3388 / tcp

-1013082686 | 2025-01-11T07:09:32.768292

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

3523 / tcp

-1888448627 | 2025-02-05T10:15:10.655819

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3551 / tcp

198844676 | 2025-01-30T20:11:54.230005

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3556 / tcp

-1399940268 | 2025-01-25T18:46:07.119509

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3780 / tcp

2143387245 | 2025-01-23T23:38:24.706015

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

3953 / tcp

-2089734047 | 2025-02-04T19:13:07.469059

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4000 / tcp

1123187653 | 2025-01-27T16:55:31.626838

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/10.0
X-Frame-Options: SAMEORIGIN

4022 / tcp

2110865978 | 2025-01-11T18:25:38.290658

HTTP/1.0 408 Request Timeout
Content-Length: 0

4040 / tcp

0 | 2025-01-12T04:29:41.553220

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

4064 / tcp

-1399940268 | 2025-02-03T23:27:16.759139

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4150 / tcp

671605376 | 2025-01-28T14:19:20.915817

SSH-2.0-OpenSSH_X.X

4200 / tcp

-1399940268 | 2025-02-03T21:08:39.988316

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4242 / tcp

-1914158197 | 2025-01-28T12:36:29.692464

HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

4282 / tcp

1492413928 | 2025-02-01T12:12:23.331678

SSH-2.0-OpenSSH_7.5

4321 / tcp

-1250504565 | 2025-01-17T05:39:29.420506

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

4369 / tcp

1308377066 | 2025-02-04T22:28:29.194062

ncacn_http/1.0

4433 / tcp

539065883 | 2025-01-10T09:42:10.484367

4443 / tcp

-1060562267 | 2025-01-10T19:18:24.350862

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae29b6_PS-NKG-01Aqo82_2892-58968

4444 / tcp

-1476017887 | 2025-02-01T00:26:15.531733

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

4445 / tcp

1543809371 | 2025-01-22T14:33:02.046134

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

4500 / tcp

819727972 | 2025-01-27T19:30:57.860423

SSH-2.0-OpenSSH_7.4

4506 / tcp

-1730858130 | 2025-02-04T14:35:42.475161

RFB 003.008
VNC:
  Protocol Version: 3.8

4786 / tcp

1911457608 | 2025-01-27T22:34:10.267974

\x00[\x00\x00\x00\x00\x00\x00

4808 / tcp

-358801646 | 2025-01-14T19:56:37.847687

SSH-2.0-OpenSSH_6.6.1

4821 / tcp

-1399940268 | 2025-01-12T19:57:22.369921

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4899 / tcp

819727972 | 2025-01-17T22:27:32.716462

SSH-2.0-OpenSSH_7.4

4949 / tcp

-971970408 | 2025-01-24T18:51:23.369433

5006 / tcp

2087396567 | 2025-01-26T00:35:40.717651

kjnkjabhbanc283ubcsbhdc72

5009 / tcp

1017429513 | 2025-01-31T21:04:23.258019

HTTP/1.1 403 Forbidden
Content-Type: text/html
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET

5011 / tcp

1278527606 | 2025-01-18T23:36:14.331026

SSH-2.0-Teleport

5025 / tcp

1984588611 | 2025-01-31T10:49:24.075313

5051 / tcp

1574088840 | 2025-02-06T20:44:36.348364

">Application and Content Networking Software 3.9</a>)\n</BODY><

5201 / tcp

921225407 | 2025-02-02T17:29:43.869217

\x00\x00\x00\x04\x00\x00\x00\x00\x00

5233 / tcp

-1189269828 | 2025-01-30T15:25:34.034006

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5244 / tcp

709622286 | 2025-01-29T00:45:51.115572

OK Welcome <299685> on DirectUpdate server 7286\r\n

5254 / tcp

-1428621233 | 2025-02-05T17:24:50.561028

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

5271 / tcp

-1013082686 | 2025-02-06T19:47:09.189977

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

5432 / tcp

820958131 | 2025-02-05T22:03:28.722510

kjnkjabhbanc283ubcsbhdc72\x02

5433 / tcp

1353260875 | 2025-01-28T13:04:19.789240

\x00[g\xc2\x95N\x7f\x00\x00

5594 / tcp

1492413928 | 2025-01-18T12:35:31.256178

SSH-2.0-OpenSSH_7.5

5650 / tcp

-1399940268 | 2025-01-12T11:35:54.311560

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5672 / tcp

575925250 | 2025-01-15T22:48:55.207437

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5696 / tcp

-1733645023 | 2025-01-23T15:57:44.370056

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

5858 / tcp

-1681927087 | 2025-01-28T21:20:15.270879

kjnkjabhbanc283ubcsbhdc72

5938 / tcp

897328069 | 2025-01-24T15:32:50.207357

220 mail.scott000.com ESMTP

5986 / tcp

-971970408 | 2025-02-06T21:13:42.001063

6000 / tcp

1767345577 | 2025-01-29T18:21:17.674942

Hello, this is Quagga (version 0T).
Copyright 1996-200

6001 / tcp

-1013082686 | 2025-02-03T15:16:28.406513

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

6308 / tcp

-1810987450 | 2025-01-16T18:39:14.424420

\xc3\xbf

6511 / tcp

921225407 | 2025-01-12T22:56:58.407080

\x00\x00\x00\x04\x00\x00\x00\x00\x00

6514 / tcp

1948301213 | 2025-01-31T00:16:36.348389

RFB 003.003
VNC:
  Protocol Version: 3.3

6653 / tcp

671605376 | 2025-01-21T06:43:02.979110

SSH-2.0-OpenSSH_X.X

6664 / tcp

-2118655245 | 2025-01-26T14:36:21.572002

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

6666 / tcp

4935895 | 2025-02-06T07:21:51.924137

HTTP/1.1 400 Bad Request
Server: CloudWAF

6668 / tcp

-653033013 | 2025-01-31T22:49:33.780724

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

6697 / tcp

1761482307 | 2025-02-04T03:15:19.621880

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

6799 / tcp

-1730858130 | 2025-01-24T20:32:13.264189

RFB 003.008
VNC:
  Protocol Version: 3.8

7001 / tcp

1749359477 | 2025-01-31T01:02:24.859016

HTTP/1.1 403 Forbidden
Content-Type: text/html
Connection: keep-alive
NO_SERVICE: 1

7070 / tcp

941003269 | 2025-01-29T09:06:20.410497

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae245d_PS-WNZ-01DGy105_39693-41227

7078 / tcp

575925250 | 2025-01-11T13:33:53.959300

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

7086 / tcp

1332894250 | 2025-01-23T09:11:10.529721

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

7171 / tcp

-1810987450 | 2025-02-03T13:35:04.603566

\xc3\xbf

7218 / tcp

-1681927087 | 2025-01-25T08:27:25.881662

kjnkjabhbanc283ubcsbhdc72

7415 / tcp

820958131 | 2025-01-30T20:13:23.511842

kjnkjabhbanc283ubcsbhdc72\x02

7443 / tcp

1342763855 | 2025-01-09T03:16:36.027221

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Connection: close
Server: Nginx
Expires: 0
Pragma: no-cache
Cache-Control: no-cache
X-LANG: 1
X-Timezone: 0800
X-Timestamp: 1705912071
X-Arch: x86
X-Sysbit: x64
X-Enterprise: 0
X-Support-i18n: 0
X-Support-wifi: 0
Location: /login

7500 / tcp

-358801646 | 2025-01-08T22:38:58.290209

SSH-2.0-OpenSSH_6.6.1

7634 / tcp

2087396567 | 2025-01-14T09:38:32.550311

kjnkjabhbanc283ubcsbhdc72

7980 / tcp

-1059554316 | 2025-01-24T20:38:12.984514

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

8009 / tcp

2087396567 | 2025-02-01T04:02:42.947010

kjnkjabhbanc283ubcsbhdc72

8025 / tcp

-616720387 | 2025-01-25T20:11:11.324184

SSH-2.0-SSHD_0.7.6

8048 / tcp

-441419608 | 2025-01-15T08:14:41.401829

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

8055 / tcp

740837454 | 2025-01-26T16:42:27.569141

SSH-2.0-OpenSSH_5.3

8081 / tcp

2087396567 | 2025-01-15T20:46:24.744113

kjnkjabhbanc283ubcsbhdc72

8083 / tcp

2087396567 | 2025-01-31T17:03:01.462128

kjnkjabhbanc283ubcsbhdc72

8085 / tcp

-971970408 | 2025-02-04T07:48:35.455119

8087 / tcp

1911457608 | 2025-02-03T02:48:18.827312

\x00[\x00\x00\x00\x00\x00\x00

8089 / tcp

1741579575 | 2025-01-21T14:32:08.533316

8099 / tcp

648174097 | 2025-01-23T15:55:00.860158

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET

8103 / tcp

2098371729 | 2025-01-25T01:10:30.303410

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

8113 / tcp

-1428621233 | 2025-01-27T00:04:55.228645

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8117 / tcp

819727972 | 2025-01-25T13:21:32.564764

SSH-2.0-OpenSSH_7.4

8126 / tcp

-358707605 | 2025-01-10T20:22:53.377238

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 391
Connect-To: https://qd-gatway.aliyuncs.com/table/tree-land/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div id="other"></div>

</body>

8136 / tcp

-1810987450 | 2025-01-18T01:26:43.893579

\xc3\xbf

8147 / tcp

-1230049476 | 2025-01-25T08:36:44.091398

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

8164 / tcp

1911457608 | 2025-01-17T19:45:08.818046

\x00[\x00\x00\x00\x00\x00\x00

8169 / tcp

-1538260461 | 2025-01-30T19:58:00.251681

\x01\x00\x00\x00

8181 / tcp

2087396567 | 2025-01-26T15:39:58.292462

kjnkjabhbanc283ubcsbhdc72

8185 / tcp

-1297953727 | 2025-01-12T20:29:59.173083

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

8190 / tcp

-375604792 | 2025-01-14T11:31:27.920449

220 Microsoft FTP Service

8194 / tcp

-1399940268 | 2025-01-29T14:32:18.352151

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8199 / tcp

1911457608 | 2025-02-02T01:39:34.946061

\x00[\x00\x00\x00\x00\x00\x00

8431 / tcp

-1399940268 | 2025-01-25T22:45:42.841634

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8433 / tcp

2098371729 | 2025-01-19T22:38:41.939342

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

8449 / tcp

1332894250 | 2025-01-22T07:22:19.871292

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

8465 / tcp

580340387 | 2025-01-09T13:27:54.231141

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

8475 / tcp

819727972 | 2025-02-03T04:22:47.413539

SSH-2.0-OpenSSH_7.4

8484 / tcp

-2033111675 | 2025-01-16T07:56:44.069759

~djb

8502 / tcp

-1839934832 | 2025-02-03T20:34:56.715967

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8503 / tcp

-1996280214 | 2025-01-24T19:18:01.711435

\x06\x04\x05@

8536 / tcp

165188539 | 2025-01-23T11:53:16.855695

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8554 / tcp

1463575827 | 2025-01-09T21:25:52.662594

[ÈÝS

8580 / tcp

-792826324 | 2025-01-28T22:54:48.038248

220 FTP server ready - login please

8589 / tcp

-1399940268 | 2025-01-23T20:35:58.866528

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8640 / tcp

-1327660293 | 2025-01-16T08:58:34.106771

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

8728 / tcp

-1032713145 | 2025-01-16T07:20:09.975214

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8788 / tcp

165188539 | 2025-01-10T11:55:55.873275

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8801 / tcp

-2096652808 | 2025-01-29T23:53:56.410854

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8805 / tcp

-1839934832 | 2025-01-28T06:55:34.836336

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8811 / tcp

1308377066 | 2025-02-03T23:33:29.490867

ncacn_http/1.0

8819 / tcp

-980525298 | 2025-01-26T16:41:38.220535

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8834 / tcp

-971970408 | 2025-02-01T22:15:06.514983

8848 / tcp

-1399940268 | 2025-02-01T17:52:40.837188

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8861 / tcp

1911457608 | 2025-01-17T21:01:37.823370

\x00[\x00\x00\x00\x00\x00\x00

8880 / tcp

2087396567 | 2025-01-12T11:27:18.697533

kjnkjabhbanc283ubcsbhdc72

8889 / tcp

233634112 | 2025-02-03T01:52:42.149275

SSH-98.60-SysaxSSH_81885..42

8906 / tcp

1948301213 | 2025-01-11T00:00:51.303260

RFB 003.003
VNC:
  Protocol Version: 3.3

9001 / tcp

-1026951088 | 2025-01-09T16:23:42.069108

erro ip

9033 / tcp

1830187220 | 2025-01-20T00:42:26.339974

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

9048 / tcp

819727972 | 2025-01-30T22:59:28.384622

SSH-2.0-OpenSSH_7.4

9051 / tcp

2009276894 | 2025-02-06T18:57:51.835813

N
5.6.40-logÅTUNEgVX2
¢!xlB...

9065 / tcp

709622286 | 2025-01-19T17:03:41.352145

OK Welcome <299685> on DirectUpdate server 7286\r\n

9066 / tcp

-1399940268 | 2025-01-14T13:43:27.301528

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9070 / tcp

307999478 | 2025-01-30T12:48:58.179057

unknown command \r\nunknown command \r\n

9079 / tcp

819727972 | 2025-02-05T22:58:47.328699

SSH-2.0-OpenSSH_7.4

9081 / tcp

-1399940268 | 2025-01-24T01:06:58.655197

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9088 / tcp

165188539 | 2025-01-09T04:15:19.860605

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9091 / tcp

819727972 | 2025-01-22T09:04:12.216525

SSH-2.0-OpenSSH_7.4

9095 / tcp

1282941221 | 2025-01-25T16:47:11.094102

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

9100 / tcp

-2089734047 | 2025-02-02T01:21:48.901694

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9118 / tcp

-1139539254 | 2025-01-17T17:15:17.337898

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

9136 / tcp

-1399940268 | 2025-01-12T03:09:55.776970

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9140 / tcp

1282941221 | 2025-01-30T07:24:45.818739

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

9151 / tcp

-1729629024 | 2025-01-22T01:58:34.814651

101 imqbroker =unV

9152 / tcp

-1036370807 | 2025-02-02T12:51:48.580757

JDWP-Handshake

9159 / tcp

-454087041 | 2025-01-28T23:03:00.267809

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

9170 / tcp

819727972 | 2025-01-28T13:30:28.528729

SSH-2.0-OpenSSH_7.4

9175 / tcp

-1730858130 | 2025-01-11T00:21:43.761737

RFB 003.008
VNC:
  Protocol Version: 3.8

9207 / tcp

1911457608 | 2025-01-26T07:15:31.431879

\x00[\x00\x00\x00\x00\x00\x00

9223 / tcp

819727972 | 2025-01-25T04:19:55.508979

SSH-2.0-OpenSSH_7.4

9248 / tcp

-1373613804 | 2025-01-31T10:20:08.031983

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

9251 / tcp

-2089734047 | 2025-01-28T23:41:58.240813

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9292 / tcp

639175818 | 2025-01-25T04:20:19.541996

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

9306 / tcp

707919486 | 2025-01-14T04:54:12.387238

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

9398 / tcp

-971970408 | 2025-01-21T10:18:58.961622

9400 / tcp

-1779118422 | 2025-01-11T16:39:35.968573

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

9418 / tcp

1909672637 | 2025-01-22T15:48:56.970894

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff

9446 / tcp

-2107996212 | 2025-01-17T20:12:34.550574

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

9530 / tcp

-1795027372 | 2025-02-02T09:47:36.347799

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

9633 / tcp

-2033111675 | 2025-01-22T04:26:25.683555

~djb

9758 / tcp

165188539 | 2025-01-29T20:46:12.146194

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9810 / tcp

-249504111 | 2025-01-25T18:04:14.195478

\x00[xU-\x7f\x00\x00

9876 / tcp

-1709563712 | 2025-01-29T18:30:08.186828

\\x00\\x00\\x01+\\x00\\x00\\x00_{"code":0,"flag":1,"language":"JAVA","opaque":0,"serializeTypeCurrentRPC":"JSON","version":433}{"brokerAddrTable":{"broker-a":{"brokerAddrs":{0:"62.118.54.92:10911"},"brokerName":"broker-a","cluster":"DefaultCluster","enableActingMaster":false}},"clusterAddrTable":{"DefaultCluster":["broker-a"]}}

9898 / tcp

1304012963 | 2025-01-30T02:35:34.283988

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: close

9900 / tcp

152633068 | 2025-01-30T09:15:56.628165

HTTP/1.1 200 OK
Server: CK6u06Vu4
Content-Type: text/html; charset=utf-8

9943 / tcp

248249138 | 2025-02-01T09:15:51.675903

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24d3_xyd116_25356-2749

9998 / tcp

-347274959 | 2025-01-12T02:25:37.309117

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2831_PS-000-01PIX79_36197-59880

10001 / tcp

1492413928 | 2025-01-25T22:45:53.231494

SSH-2.0-OpenSSH_7.5

10033 / tcp

-1888448627 | 2025-01-30T08:35:23.672403

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

10036 / tcp

-616720387 | 2025-01-25T04:13:48.059196

SSH-2.0-SSHD_0.7.6

10039 / tcp

1332894250 | 2025-02-05T05:47:02.068838

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

10051 / tcp

-1036370807 | 2025-01-28T03:31:52.353465

JDWP-Handshake

10134 / tcp

819727972 | 2025-01-19T23:20:29.953597

SSH-2.0-OpenSSH_7.4

10250 / tcp

-971970408 | 2025-02-01T14:33:33.471263

10554 / tcp

819727972 | 2025-02-04T10:02:27.415768

SSH-2.0-OpenSSH_7.4

10911 / tcp

-1399940268 | 2025-01-13T08:52:17.594878

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11000 / tcp

-1399940268 | 2025-01-10T21:26:20.359432

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11112 / tcp

-1399940268 | 2025-01-22T12:12:59.846858

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11288 / tcp

-1399940268 | 2025-02-04T08:44:15.830782

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12000 / tcp

-1723613895 | 2025-01-19T20:12:24.483889

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2232_PS-HAK-01h6h34_6336-63973

12101 / tcp

321971019 | 2025-01-11T22:01:18.310693

-ERR client ip is not in whitelist\r

12103 / tcp

321971019 | 2025-01-16T20:19:54.559835

-ERR client ip is not in whitelist\r

12108 / tcp

504717326 | 2025-01-11T08:07:37.939730

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

12129 / tcp

740837454 | 2025-01-26T15:30:40.812931

SSH-2.0-OpenSSH_5.3

12134 / tcp

-1059554316 | 2025-01-16T03:03:45.908781

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

12179 / tcp

1919228981 | 2025-01-18T03:46:57.299696

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

12219 / tcp

971933601 | 2025-01-28T16:54:24.316727

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

12251 / tcp

-136006866 | 2025-01-27T06:33:28.682119

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

12261 / tcp

-1399940268 | 2025-01-29T05:40:26.208905

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12274 / tcp

632542934 | 2025-01-17T14:08:20.092237

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12278 / tcp

921225407 | 2025-01-18T05:31:55.313277

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12298 / tcp

-1733645023 | 2025-02-01T22:55:03.026792

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

12304 / tcp

-1399940268 | 2025-01-22T20:12:22.484370

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12355 / tcp

-1105333987 | 2025-01-25T13:17:42.701505

\x00[KpU\x7f\x00\x00

12357 / tcp

1911457608 | 2025-02-02T18:15:04.739703

\x00[\x00\x00\x00\x00\x00\x00

12366 / tcp

-297128567 | 2025-01-09T22:37:20.332296

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

12403 / tcp

-1888448627 | 2025-02-06T19:13:23.340802

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12427 / tcp

-1399940268 | 2025-01-10T00:53:21.761511

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12435 / tcp

819727972 | 2025-01-09T13:10:13.206405

SSH-2.0-OpenSSH_7.4

12450 / tcp

-784071826 | 2025-01-18T10:17:34.735247

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

12465 / tcp

1911457608 | 2025-01-14T17:23:56.137134

\x00[\x00\x00\x00\x00\x00\x00

12485 / tcp

1911457608 | 2025-01-31T11:33:05.726522

\x00[\x00\x00\x00\x00\x00\x00

12489 / tcp

-792826324 | 2025-01-29T23:19:05.696250

220 FTP server ready - login please

12502 / tcp

921225407 | 2025-01-22T04:40:24.067746

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12516 / tcp

-1730858130 | 2025-02-06T12:03:18.009834

RFB 003.008
VNC:
  Protocol Version: 3.8

12521 / tcp

-1947777893 | 2025-01-11T03:28:32.593198

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

12537 / tcp

-1399940268 | 2025-01-25T09:11:13.533174

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12552 / tcp

-1399940268 | 2025-01-20T03:13:16.041384

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12564 / tcp

-904840257 | 2025-01-14T00:59:02.506186

572 Relay not authorized\r\n

12576 / tcp

-1399940268 | 2025-01-11T16:28:30.081773

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12585 / tcp

1911457608 | 2025-01-27T03:07:41.712255

\x00[\x00\x00\x00\x00\x00\x00

12615 / tcp

740837454 | 2025-01-29T22:22:58.053938

SSH-2.0-OpenSSH_5.3

13443 / tcp

307999478 | 2025-01-31T01:56:44.433712

unknown command \r\nunknown command \r\n

14901 / tcp

-2089734047 | 2025-01-20T07:10:58.273030

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

16013 / tcp

1282941221 | 2025-01-19T19:48:49.969372

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

16029 / tcp

1975288991 | 2025-02-02T05:58:46.672400

OPTI

16045 / tcp

1911457608 | 2025-01-15T15:21:06.665312

\x00[\x00\x00\x00\x00\x00\x00

16052 / tcp

819727972 | 2025-01-12T18:44:14.011945

SSH-2.0-OpenSSH_7.4

16053 / tcp

-1399940268 | 2025-01-09T19:36:39.166753

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16057 / tcp

1426971893 | 2025-01-14T10:16:52.064567

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

16070 / tcp

1332894250 | 2025-02-03T01:26:12.929478

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

16084 / tcp

-1399940268 | 2025-01-15T23:57:30.384128

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16100 / tcp

-1996280214 | 2025-01-29T05:54:30.881306

\x06\x04\x05@

16403 / tcp

-1399940268 | 2025-01-09T13:10:00.239579

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

17775 / tcp

493955023 | 2025-01-10T21:09:57.863881

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

18018 / tcp

1308377066 | 2025-01-09T20:39:24.611166

ncacn_http/1.0

18027 / tcp

-1230049476 | 2025-01-31T22:48:27.988564

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

18052 / tcp

51259122 | 2025-02-04T05:52:25.341794

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

18058 / tcp

921225407 | 2025-01-28T02:03:41.418732

\x00\x00\x00\x04\x00\x00\x00\x00\x00

18064 / tcp

-1888448627 | 2025-01-09T08:35:09.055708

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

18067 / tcp

1911457608 | 2025-01-13T18:59:05.748323

\x00[\x00\x00\x00\x00\x00\x00

18081 / tcp

-653033013 | 2025-01-20T22:32:13.186789

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

18096 / tcp

-1453516345 | 2025-01-10T15:00:24.823111

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

18108 / tcp

-1399940268 | 2025-02-02T19:25:48.997351

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18111 / tcp

1011407350 | 2025-01-16T19:45:52.992190

* OK GroupWise IMAP4rev1 Server Ready\r\n

18245 / tcp

493955023 | 2025-01-28T05:55:15.294724

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

18443 / tcp

320677201 | 2025-01-23T13:14:02.029959

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

18765 / tcp

1911457608 | 2025-01-30T02:04:20.118180

\x00[\x00\x00\x00\x00\x00\x00

19000 / tcp

722711397 | 2025-01-08T05:02:07.582782

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

20000 / tcp

1900503736 | 2025-01-25T06:56:44.570821

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20020 / tcp

1911457608 | 2025-01-17T09:25:33.174692

\x00[\x00\x00\x00\x00\x00\x00

20070 / tcp

1278527606 | 2025-02-01T04:15:59.241179

SSH-2.0-Teleport

20185 / tcp

-454087041 | 2025-01-19T03:16:44.808281

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

20208 / tcp

-2089734047 | 2025-01-18T11:20:44.137475

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

20547 / tcp

2098371729 | 2025-01-25T07:54:44.812229

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

20880 / tcp

1370263973 | 2025-01-15T17:28:11.257452

dubbo>

21001 / tcp

1830187220 | 2025-01-16T21:56:50.696423

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

21025 / tcp

-971970408 | 2025-02-04T19:51:38.499162

21287 / tcp

-2089734047 | 2025-01-13T14:20:48.670766

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

21294 / tcp

-1032713145 | 2025-01-27T05:49:35.971135

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

21304 / tcp

408230060 | 2025-02-03T11:24:14.569675

\r\nSorry, that nickname format is invalid.\r\n

21310 / tcp

-1399940268 | 2025-01-19T16:53:51.264073

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21320 / tcp

-1737707071 | 2025-01-18T11:34:23.947034

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

21322 / tcp

1948301213 | 2025-01-10T19:34:30.788127

RFB 003.003
VNC:
  Protocol Version: 3.3

21326 / tcp

1911457608 | 2025-01-20T08:43:23.759459

\x00[\x00\x00\x00\x00\x00\x00

21379 / tcp

-1399940268 | 2025-01-10T09:55:56.106730

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21381 / tcp

820958131 | 2025-01-28T23:23:27.510917

kjnkjabhbanc283ubcsbhdc72\x02

22000 / tcp

921225407 | 2025-01-27T23:15:17.921598

\x00\x00\x00\x04\x00\x00\x00\x00\x00

22107 / tcp

-2140303521 | 2025-01-19T15:59:11.332989

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

22556 / tcp

-2089734047 | 2025-01-17T08:42:15.915970

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

23023 / tcp

-1965483753 | 2025-01-11T09:43:23.272242

0a

24082 / tcp

-1230049476 | 2025-01-22T02:02:53.676763

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

25001 / tcp

1991883981 | 2025-02-06T06:14:07.823934

B\x00\x00\x00\xc3\xbfn\x04Too many connections

25002 / tcp

1761482307 | 2025-01-24T21:09:32.931686

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

25565 / tcp

639175818 | 2025-01-30T14:58:33.833779

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

27015 / tcp

-80321085 | 2025-01-08T22:20:53.094763

Command: None
Size: 1802398315
ID: 1751277930
Type: 1668178274

28017 / tcp

0 | 2025-01-14T04:04:45.473213

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

30002 / tcp

546151771 | 2025-01-31T12:30:14.010349

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

30009 / tcp

-1839934832 | 2025-01-08T22:06:05.657155

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

30101 / tcp

1763259671 | 2025-01-12T12:05:55.938057

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

30112 / tcp

1761482307 | 2025-01-28T18:12:01.742220

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

30121 / tcp

-1248408558 | 2025-01-26T17:47:04.842437

220 MikroTik FTP server (MikroTik 6.44.3) ready

30468 / tcp

-1399940268 | 2025-01-24T13:49:47.365196

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

31337 / tcp

-1835577706 | 2025-01-23T16:25:49.424428

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

32101 / tcp

165188539 | 2025-01-09T23:34:04.061355

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

32400 / tcp

0 | 2025-01-11T09:53:02.894238

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

32444 / tcp

-2046514463 | 2025-01-15T10:42:24.824214

AB\x01\t

32764 / tcp

171352214 | 2025-01-22T19:31:13.217445

-ERR client ip is not in whitelist

33060 / tcp

2087396567 | 2025-01-29T15:53:46.473487

kjnkjabhbanc283ubcsbhdc72

33389 / tcp

819727972 | 2025-01-26T07:39:37.875559

SSH-2.0-OpenSSH_7.4

33522 / tcp

1690634669 | 2025-02-06T17:47:21.638520

34322 / tcp

1830187220 | 2025-02-06T12:24:18.828995

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

34722 / tcp

-1477838366 | 2025-02-05T10:39:04.621708

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

35000 / tcp

-903067560 | 2025-02-03T09:57:56.123786

\x00[\x13)\xc2\x81\x7f\x00\x00

35522 / tcp

-1730858130 | 2025-02-05T16:59:11.427547

RFB 003.008
VNC:
  Protocol Version: 3.8

35622 / tcp

-1441741890 | 2025-02-05T15:14:28.091835

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2
0181212])

36022 / tcp

1690634669 | 2025-02-05T03:05:59.154403

36122 / tcp

1690634669 | 2025-02-04T17:10:17.116060

36522 / tcp

-288825733 | 2025-02-04T21:47:10.029913

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

36822 / tcp

50497985 | 2025-02-04T14:35:32.533591

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

37022 / tcp

819727972 | 2025-02-04T11:33:39.008901

SSH-2.0-OpenSSH_7.4

37222 / tcp

-971970408 | 2025-02-04T06:20:30.863266

37777 / tcp

-1375131644 | 2025-01-29T14:07:14.265229

\x00[v\xc3\xbdC\x7f\x00\x00

38022 / tcp

971933601 | 2025-02-03T13:52:30.782389

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

38322 / tcp

-1681927087 | 2025-02-02T23:46:07.970883

kjnkjabhbanc283ubcsbhdc72

38722 / tcp

660175493 | 2025-02-03T03:17:33.094952

38822 / tcp

2087396567 | 2025-02-02T13:04:49.144154

kjnkjabhbanc283ubcsbhdc72

39001 / tcp

165188539 | 2025-01-22T04:31:14.104390

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

39022 / tcp

-971970408 | 2025-02-02T21:59:32.919711

39122 / tcp

-1648456501 | 2025-02-02T10:13:02.854854

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

39222 / tcp

1975288991 | 2025-02-02T18:25:00.784831

OPTI

39522 / tcp

819727972 | 2025-02-02T16:38:04.220968

SSH-2.0-OpenSSH_7.4

39622 / tcp

-1230049476 | 2025-02-01T20:57:16.981418

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

39722 / tcp

2087396567 | 2025-02-02T11:18:17.672759

kjnkjabhbanc283ubcsbhdc72

39922 / tcp

-1316491703 | 2025-02-02T04:37:05.192713

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

40122 / tcp

2087396567 | 2025-02-01T10:29:37.960431

kjnkjabhbanc283ubcsbhdc72

40322 / tcp

-1013082686 | 2025-02-02T00:48:50.092371

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

40822 / tcp

2087396567 | 2025-02-01T01:51:38.708215

kjnkjabhbanc283ubcsbhdc72

41222 / tcp

841014058 | 2025-02-01T05:12:22.478850

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

41322 / tcp

-786044033 | 2025-02-01T03:29:33.076059

OK Welcome <299685> on DirectUpdate server 7286

41522 / tcp

-2017887953 | 2025-01-31T20:17:18.818909

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

41722 / tcp

2087396567 | 2025-01-31T19:03:18.732663

kjnkjabhbanc283ubcsbhdc72

41822 / tcp

1741579575 | 2025-01-31T11:38:10.538628

42622 / tcp

539065883 | 2025-01-31T06:13:29.751835

43022 / tcp

366084633 | 2025-01-30T05:27:35.121238

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

43122 / tcp

819727972 | 2025-01-30T15:45:01.975304

SSH-2.0-OpenSSH_7.4

43422 / tcp

-971970408 | 2025-01-30T18:32:08.120697

43522 / tcp

2087396567 | 2025-01-30T16:46:07.137851

kjnkjabhbanc283ubcsbhdc72

43722 / tcp

2087396567 | 2025-01-30T09:47:38.927348

kjnkjabhbanc283ubcsbhdc72

44022 / tcp

366084633 | 2025-01-29T23:06:36.293987

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

44158 / tcp

-433302150 | 2025-01-26T16:47:19.511453

/multistream/1.0.0

44222 / tcp

-1598265216 | 2025-01-29T15:32:55.440670

@RSYNCD: 31.0

44722 / tcp

380146262 | 2025-01-30T01:08:10.738664

@RSYNCD: 30.0

44818 / tcp

921225407 | 2025-01-26T17:16:10.271573

\x00\x00\x00\x04\x00\x00\x00\x00\x00

44822 / tcp

957278843 | 2025-01-28T15:04:55.005395

[|ox

44922 / tcp

-1999117212 | 2025-01-29T12:26:48.113217

45002 / tcp

-1399940268 | 2025-01-29T14:07:58.313612

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

45022 / tcp

897328069 | 2025-01-29T01:57:17.107306

220 mail.scott000.com ESMTP

45622 / tcp

1426971893 | 2025-01-28T16:52:28.779973

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

45722 / tcp

2087396567 | 2025-01-28T19:28:48.321862

kjnkjabhbanc283ubcsbhdc72

45822 / tcp

660175493 | 2025-01-28T20:29:11.063537

45922 / tcp

-358801646 | 2025-01-27T20:51:53.065009

SSH-2.0-OpenSSH_6.6.1

46122 / tcp

1261582754 | 2025-01-28T13:24:54.869335

unknown command 
unknown command

46222 / tcp

1690634669 | 2025-01-28T07:57:19.401915

46422 / tcp

1370263973 | 2025-01-28T06:11:49.939847

dubbo>

46622 / tcp

2087396567 | 2025-01-27T22:47:20.497880

kjnkjabhbanc283ubcsbhdc72

46822 / tcp

-971970408 | 2025-01-27T15:53:36.093593

46922 / tcp

-1760806421 | 2025-01-27T17:21:21.994821

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

48001 / tcp

1911457608 | 2025-01-30T05:56:35.158494

\x00[\x00\x00\x00\x00\x00\x00

48122 / tcp

1690634669 | 2025-01-26T22:09:10.921300

48322 / tcp

1690634669 | 2025-01-26T19:35:19.553140

48422 / tcp

2087396567 | 2025-01-26T17:58:51.079627

kjnkjabhbanc283ubcsbhdc72

48722 / tcp

1741579575 | 2025-01-26T10:38:24.717393

48822 / tcp

2087396567 | 2025-01-26T08:52:45.528379

kjnkjabhbanc283ubcsbhdc72

49522 / tcp

2087396567 | 2025-01-25T23:48:02.638008

kjnkjabhbanc283ubcsbhdc72

49682 / tcp

1911457608 | 2025-01-16T00:09:21.308407

\x00[\x00\x00\x00\x00\x00\x00

50000 / tcp

-2089734047 | 2025-01-14T13:53:59.898064

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

50022 / tcp

819727972 | 2025-01-25T03:29:00.671317

SSH-2.0-OpenSSH_7.4

50042 / tcp

1911457608 | 2025-01-14T22:38:38.773994

\x00[\x00\x00\x00\x00\x00\x00

50122 / tcp

677934968 | 2025-01-20T15:39:16.833680

lm^)Q

51122 / tcp

971933601 | 2025-01-24T20:15:33.386298

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

51235 / tcp

819727972 | 2025-02-04T11:09:09.605976

SSH-2.0-OpenSSH_7.4

51322 / tcp

-971970408 | 2025-01-24T09:18:19.440761

52322 / tcp

-971970408 | 2025-01-23T17:42:45.798462

52931 / tcp

-1399940268 | 2025-02-05T08:53:07.401449

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

53222 / tcp

-1730858130 | 2025-01-22T20:15:27.856541

RFB 003.008
VNC:
  Protocol Version: 3.8

53322 / tcp

1842524259 | 2025-01-22T18:10:09.316964

53422 / tcp

-971970408 | 2025-01-22T16:17:32.438851

53622 / tcp

2087396567 | 2025-01-22T12:38:25.721664

kjnkjabhbanc283ubcsbhdc72

53722 / tcp

-971970408 | 2025-01-22T08:57:46.338877

55000 / tcp

-904840257 | 2025-01-08T05:59:57.268333

572 Relay not authorized\r\n

55322 / tcp

1690634669 | 2025-01-21T06:38:46.700502

55443 / tcp

-653033013 | 2025-01-18T17:16:26.318933

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

55481 / tcp

-358801646 | 2025-01-12T06:11:21.385495

SSH-2.0-OpenSSH_6.6.1

55722 / tcp

117101543 | 2025-01-20T22:17:54.254526

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

57122 / tcp

472902042 | 2025-01-19T23:14:41.713902

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

57622 / tcp

707919486 | 2025-01-19T12:28:39.260024

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

57922 / tcp

171352214 | 2025-01-18T23:21:51.995886

-ERR client ip is not in whitelist

58000 / tcp

897328069 | 2025-01-27T00:33:25.793984

220 mail.scott000.com ESMTP

58022 / tcp

546151771 | 2025-01-19T04:38:22.034742

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

58122 / tcp

-784071826 | 2025-01-19T01:06:53.028071

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

58322 / tcp

2087396567 | 2025-01-18T21:12:55.348431

kjnkjabhbanc283ubcsbhdc72

58522 / tcp

104385780 | 2025-01-18T11:52:43.134248

ceph v2

58585 / tcp

1632932802 | 2025-02-03T15:27:25.220586

58922 / tcp

2087396567 | 2025-01-18T10:18:57.867417

kjnkjabhbanc283ubcsbhdc72

59922 / tcp

745343730 | 2025-01-17T17:53:33.802022

220 smtp.qq.com Esmtp QQ Mail Server

60129 / tcp

660175493 | 2025-01-20T13:53:29.971019

61234 / tcp

2063598737 | 2025-01-25T23:08:34.413921

/0 0 L\r\n/0 0 HUH\r\n

61616 / tcp

819727972 | 2025-01-16T04:52:40.432680

SSH-2.0-OpenSSH_7.4

62443 / tcp

1911457608 | 2025-02-04T22:25:56.864695

\x00[\x00\x00\x00\x00\x00\x00

63210 / tcp

1632932802 | 2025-02-05T11:29:23.225534

63260 / tcp

1911457608 | 2025-01-12T09:59:35.905273

\x00[\x00\x00\x00\x00\x00\x00

121.40.250.225

Last Seen: 2025-02-06

Tags:

GeneralInformation

OpenPorts

11 / tcp 1261582754 | 2025-01-27T12:10:57.997970

13 / tcp 1412519768 | 2025-02-05T14:57:17.013817

15 / tcp 863754335 | 2025-01-08T20:16:23.512144

19 / tcp 873425297 | 2025-02-06T10:25:53.948904

22 / tcp 2039704282 | 2025-01-13T19:24:34.855938

23 / tcp -2107996212 | 2025-02-02T18:48:45.532090

43 / tcp -441419608 | 2025-01-10T18:53:32.761666

49 / tcp -801484042 | 2025-01-22T08:20:02.210348

70 / tcp -833941849 | 2025-01-29T00:44:37.041674

79 / tcp -972699072 | 2025-01-19T16:02:32.770925

102 / tcp 51259122 | 2025-01-10T09:02:04.581472

104 / tcp -1399940268 | 2025-01-24T09:48:08.375849

111 / tcp 897328069 | 2025-01-27T02:03:18.353278

122 / tcp -1648456501 | 2025-01-08T20:52:07.942502

175 / tcp 1991883981 | 2025-01-21T16:23:08.100709

177 / tcp -1730858130 | 2025-01-11T23:13:05.810724

179 / tcp -399606100 | 2025-01-30T15:19:26.169628

195 / tcp 2087396567 | 2025-01-28T19:04:30.798256

221 / tcp -1730858130 | 2025-02-06T00:21:07.299608

343 / tcp -1032713145 | 2025-01-10T07:19:18.019270

385 / tcp -1139539254 | 2025-01-11T14:16:27.380394

389 / tcp -1713467553 | 2025-01-13T13:03:14.090811

427 / tcp 928665344 | 2025-01-30T07:53:23.039797

443 / tcp -1715152554 | 2025-01-28T00:02:17.064241

Hashes

444 / tcp 1357555024 | 2025-01-24T17:22:32.940870

447 / tcp 580340387 | 2025-01-22T22:31:43.733916

480 / tcp -249504111 | 2025-02-05T23:57:37.774937

487 / tcp -2089734047 | 2025-01-14T10:06:12.566738

502 / tcp -1888448627 | 2025-01-25T23:45:19.326342

593 / tcp 1308377066 | 2025-01-14T04:54:20.456627

636 / tcp 1402312074 | 2025-02-05T19:54:57.596811

771 / tcp -1279886438 | 2025-01-16T21:22:30.042048

789 / tcp -146605374 | 2025-01-09T11:11:49.082528

873 / tcp -1970692834 | 2025-01-10T02:06:01.146758

992 / tcp -936692830 | 2025-01-22T22:34:45.988656

993 / tcp 1911457608 | 2025-01-29T17:17:53.154272

995 / tcp 1685649979 | 2025-01-08T17:15:29.310750

1023 / tcp 1231376952 | 2025-01-24T19:56:06.454897

1026 / tcp 921225407 | 2025-01-09T03:10:23.398164

1153 / tcp -2089734047 | 2025-01-12T12:10:25.672118

1177 / tcp -971970408 | 2025-01-19T08:16:33.938117

1193 / tcp 819727972 | 2025-01-28T15:14:54.368043

1200 / tcp 2087396567 | 2025-01-14T22:34:13.471009

1443 / tcp -1715152554 | 2025-01-28T00:02:12.055745

Hashes

1599 / tcp -358707605 | 2025-01-29T04:06:33.046518

1604 / tcp 408230060 | 2025-01-27T05:24:28.233155

1723 / tcp -1608241410 | 2025-01-14T15:07:23.573120

1800 / tcp 671605376 | 2025-02-01T23:02:38.648126

1833 / tcp -1105333987 | 2025-01-20T10:04:21.897441

1883 / tcp 1632932802 | 2025-01-23T07:11:37.817038

1911 / tcp -1888448627 | 2025-01-21T17:17:30.240223

1926 / tcp 819727972 | 2025-01-14T12:07:25.034951

1957 / tcp -1399940268 | 2025-01-31T19:21:35.142491

1962 / tcp -1538260461 | 2025-02-05T14:06:42.562046

1980 / tcp 165188539 | 2025-01-14T20:37:57.812889

1988 / tcp 1911457608 | 2025-01-27T00:03:45.116587

2008 / tcp 819727972 | 2025-01-12T10:24:30.306071

2016 / tcp -249504111 | 2025-01-29T04:36:07.959782

2022 / tcp 819727972 | 2025-01-21T09:45:53.075501

2064 / tcp 165188539 | 2025-01-26T12:43:15.666207

2067 / tcp -1230049476 | 2025-01-14T01:38:23.462454

2077 / tcp 1989907056 | 2025-01-27T13:25:37.424930

2081 / tcp -1099385124 | 2025-02-04T14:08:21.224068

2083 / tcp 2087396567 | 2025-01-29T20:38:29.874250

2087 / tcp 1842524259 | 2025-02-03T02:38:07.821418

2121 / tcp 141730637 | 2025-01-27T12:46:28.125046

2122 / tcp -1626979812 | 2025-02-06T21:45:10.770036

2181 / tcp -122096153 | 2025-01-25T17:50:37.451300

2195 / tcp -1733106930 | 2025-01-21T10:53:38.514534

2196 / tcp 165188539 | 2025-01-31T13:02:06.999457

2222 / tcp 58083962 | 2025-02-02T22:49:51.680899

2271 / tcp -2089734047 | 2025-02-01T13:48:22.848093

2323 / tcp 1662205251 | 2025-01-21T10:10:36.837429

11 / tcp

1261582754 | 2025-01-27T12:10:57.997970

13 / tcp

1412519768 | 2025-02-05T14:57:17.013817

15 / tcp

863754335 | 2025-01-08T20:16:23.512144

19 / tcp

873425297 | 2025-02-06T10:25:53.948904

22 / tcp

2039704282 | 2025-01-13T19:24:34.855938

23 / tcp

-2107996212 | 2025-02-02T18:48:45.532090

43 / tcp

-441419608 | 2025-01-10T18:53:32.761666

49 / tcp

-801484042 | 2025-01-22T08:20:02.210348

70 / tcp

-833941849 | 2025-01-29T00:44:37.041674

79 / tcp

-972699072 | 2025-01-19T16:02:32.770925

102 / tcp

51259122 | 2025-01-10T09:02:04.581472

104 / tcp

-1399940268 | 2025-01-24T09:48:08.375849

111 / tcp

897328069 | 2025-01-27T02:03:18.353278

122 / tcp

-1648456501 | 2025-01-08T20:52:07.942502

175 / tcp

1991883981 | 2025-01-21T16:23:08.100709

177 / tcp

-1730858130 | 2025-01-11T23:13:05.810724

179 / tcp

-399606100 | 2025-01-30T15:19:26.169628

195 / tcp

2087396567 | 2025-01-28T19:04:30.798256

221 / tcp

-1730858130 | 2025-02-06T00:21:07.299608

343 / tcp

-1032713145 | 2025-01-10T07:19:18.019270

385 / tcp

-1139539254 | 2025-01-11T14:16:27.380394

389 / tcp

-1713467553 | 2025-01-13T13:03:14.090811

427 / tcp

928665344 | 2025-01-30T07:53:23.039797

443 / tcp

-1715152554 | 2025-01-28T00:02:17.064241

444 / tcp

1357555024 | 2025-01-24T17:22:32.940870

447 / tcp

580340387 | 2025-01-22T22:31:43.733916

480 / tcp

-249504111 | 2025-02-05T23:57:37.774937

487 / tcp

-2089734047 | 2025-01-14T10:06:12.566738

502 / tcp

-1888448627 | 2025-01-25T23:45:19.326342

593 / tcp

1308377066 | 2025-01-14T04:54:20.456627

636 / tcp

1402312074 | 2025-02-05T19:54:57.596811

771 / tcp

-1279886438 | 2025-01-16T21:22:30.042048

789 / tcp

-146605374 | 2025-01-09T11:11:49.082528

873 / tcp

-1970692834 | 2025-01-10T02:06:01.146758

992 / tcp

-936692830 | 2025-01-22T22:34:45.988656

993 / tcp

1911457608 | 2025-01-29T17:17:53.154272

995 / tcp

1685649979 | 2025-01-08T17:15:29.310750

1023 / tcp

1231376952 | 2025-01-24T19:56:06.454897

1026 / tcp

921225407 | 2025-01-09T03:10:23.398164

1153 / tcp

-2089734047 | 2025-01-12T12:10:25.672118

1177 / tcp

-971970408 | 2025-01-19T08:16:33.938117

1193 / tcp

819727972 | 2025-01-28T15:14:54.368043

1200 / tcp

2087396567 | 2025-01-14T22:34:13.471009

1443 / tcp

-1715152554 | 2025-01-28T00:02:12.055745

1599 / tcp

-358707605 | 2025-01-29T04:06:33.046518

1604 / tcp

408230060 | 2025-01-27T05:24:28.233155

1723 / tcp

-1608241410 | 2025-01-14T15:07:23.573120

1800 / tcp

671605376 | 2025-02-01T23:02:38.648126

1833 / tcp

-1105333987 | 2025-01-20T10:04:21.897441

1883 / tcp

1632932802 | 2025-01-23T07:11:37.817038

1911 / tcp

-1888448627 | 2025-01-21T17:17:30.240223

1926 / tcp

819727972 | 2025-01-14T12:07:25.034951

1957 / tcp

-1399940268 | 2025-01-31T19:21:35.142491

1962 / tcp

-1538260461 | 2025-02-05T14:06:42.562046

1980 / tcp

165188539 | 2025-01-14T20:37:57.812889

1988 / tcp

1911457608 | 2025-01-27T00:03:45.116587

2008 / tcp

819727972 | 2025-01-12T10:24:30.306071

2016 / tcp

-249504111 | 2025-01-29T04:36:07.959782

2022 / tcp

819727972 | 2025-01-21T09:45:53.075501

2064 / tcp

165188539 | 2025-01-26T12:43:15.666207

2067 / tcp

-1230049476 | 2025-01-14T01:38:23.462454

2077 / tcp

1989907056 | 2025-01-27T13:25:37.424930

2081 / tcp

-1099385124 | 2025-02-04T14:08:21.224068

2083 / tcp

2087396567 | 2025-01-29T20:38:29.874250

2087 / tcp

1842524259 | 2025-02-03T02:38:07.821418

2121 / tcp

141730637 | 2025-01-27T12:46:28.125046

2122 / tcp

-1626979812 | 2025-02-06T21:45:10.770036

2181 / tcp

-122096153 | 2025-01-25T17:50:37.451300

2195 / tcp

-1733106930 | 2025-01-21T10:53:38.514534

2196 / tcp

165188539 | 2025-01-31T13:02:06.999457

2222 / tcp

58083962 | 2025-02-02T22:49:51.680899

2271 / tcp

-2089734047 | 2025-02-01T13:48:22.848093

2323 / tcp

1662205251 | 2025-01-21T10:10:36.837429

2345 / tcp

1911457608 | 2025-02-02T09:46:12.119851

2404 / tcp

-1399940268 | 2025-01-30T09:20:12.851581

2455 / tcp

1741579575 | 2025-02-06T21:03:28.650000

2601 / tcp

-1804005872 | 2025-02-05T21:31:59.144164

2628 / tcp

1778988322 | 2025-01-17T15:44:52.133092

2761 / tcp

-2089734047 | 2025-02-05T03:09:15.611533

2762 / tcp

165188539 | 2025-01-26T19:43:36.749284