GeneralInformation

Hostnames	reako188.1688.com done.alibaba-inc.com lha-lab-java.alibaba-inc.com barclay.aliexpress.com cainiao-ru.aliexpress.com gre-dvbbo.an-hongzhov.ojiyvn-ina.aon.aliyun-inc.com dh-an-shonghoi.ojiyvn-ina.aon.aliyun-inc.com aliyun.com hojostvdio-an-hongzhov.doto.aliyun.com qr.aliyun.com vone.aliyun.com www.aliyun.com devejogerojiyvnaon.aliyuncs.com eai-inner.og-sovtheost-2.aliyuncs.com wwwnode.daxue.dingtalk.com app75554.eapps.dingtalkcloud.com 0f5c5da9.lex.co.id vt.quark.cn acs-wapa.rmlogistics.sg aodng.taobao.com oovth.taobao.com rosechina.taobao.com shog36284243.taobao.com shop365682614.taobao.com
Domains	1688.com alibaba-inc.com aliexpress.com aliyun-inc.com aliyun.com aliyuncs.com dingtalk.com dingtalkcloud.com lex.co.id quark.cn rmlogistics.sg taobao.com
Country	China
City	Hangzhou
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 22 23 25 37 49 70 79 102 104 110 111 119 122 175 179 195 264 389 444 465 515 548 554 666 789 873 1023 1025 1080 1081 1099 1111 1177 1200 1234 1337 1433 1521 1800 1801 1911 1962 2000 2001 2002 2003 2067 2083 2181 2220 2222 2233 2323 2332 2345 2376 2404 2455 2566 2628 3001 3057 3071 3085 3099 3101 3128 3268 3269 3299 3306 3352 3388 3389 3407 3541 3550 3551 3559 3566 3780 4000 4022 4064 4150 4157 4242 4282 4321 4369 4430 4433 4443 4444 4500 4506 4786 4911 4949 5001 5003 5005 5006 5010 5025 5201 5222 5269 5432 5435 5542 5568 5592 5907 5938 6000 6001 6002 6443 6560 6633 6653 6666 6668 7171 7415 7443 7474 7634 7778 8013 8023 8024 8052 8066 8072 8081 8085 8087 8089 8099 8102 8126 8139 8140 8180 8181 8200 8238 8291 8333 8545 8586 8649 8723 8728 8790 8805 8808 8824 8848 8851 8852 8860 8871 8880 8889 9001 9031 9033 9035 9042 9051 9091 9092 9160 9306 9333 9418 9600 9633 9690 9876 9898 9998 10001 10134 10554 11000 11112 11288 12345 14344 16992 16993 18245 20000 20547 20880 21379 23424 25565 27015 30002 30003 30718 32764 33060 33889 37777 41022 44158 44818 48122 48899 49152 49522 50000 50100 51222 51235 51922 52022 52522 53322 53722 54122 54138 54622 54722 55000 55122 55322 55422 55443 55553 55554 55722 55922 56322 56822 57022 57122 58022 58422 58522 58722 58822 58922 59122 59422 59522 59622 59822 59922 60122 61616 62078 63256

60948681 | 2024-11-16T21:24:48.277153

11 / tcp

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).

-1346477807 | 2024-11-10T21:02:33.279583

22 / tcp

SSH-2.0-OpenSSH_X.X\r\n

676675086 | 2024-11-22T22:15:50.887731

23 / tcp



Password:

398077695 | 2024-10-31T06:55:51.797364

25 / tcp

1463575233 | 2024-11-16T11:48:19.272813

37 / tcp

\\xe9XQg

-1620040646 | 2024-11-07T03:47:34.170607

49 / tcp

\xc3\xbf\xc3\xbb\\x01\r\nWelcome to NetLinx v94 Copyright AMX Corp. 34395-49007\r\n>

1583167286 | 2024-10-26T09:28:54.511728

70 / tcp

\\x01remshd: Kerberos Authentication not enabled.\n

-1264324149 | 2024-11-05T00:53:54.516001

79 / tcp

Siemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready
ÿû\x01ÿû\x03ÿý\x01ÿþ\x01Username:

-1399940268 | 2024-11-09T15:27:44.052609

102 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2089734047 | 2024-11-20T01:41:43.556546

104 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-826610984 | 2024-11-17T09:29:43.496973

110 / tcp

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 602
Connect-To: https://member.aliyun.com/unshift-flush/object-trigger/jobs/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div id="other"></

2087396567 | 2024-11-03T14:09:01.438455

111 / tcp

kjnkjabhbanc283ubcsbhdc72

141730637 | 2024-11-22T09:46:38.279998

119 / tcp

HTTP/1.0 200 OK
Server: Proxy

1830697416 | 2024-11-21T11:47:25.801089

122 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

-2033111675 | 2024-11-05T20:49:26.643329

175 / tcp

~djb

-399606100 | 2024-11-16T05:20:21.326188

179 / tcp

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

-1990350878 | 2024-11-20T19:09:59.277726

195 / tcp

 
04 \...

-654288545 | 2024-10-31T08:31:52.473424

264 / tcp

CheckPoint\nFirewall Host: lcm4cp\nSmartCenter Host: cpmanager.cminl.oa.guof3x\\x00\n

-1743283776 | 2024-11-20T06:59:58.452206

389 / tcp

0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x04\\x04

988993235 | 2024-11-15T02:53:03.237167

444 / tcp

HTTP/1.1 200 OK
Date: Fri, 15 Nov 2024 02:53:03 GMT
Content-Type: text/html
Content-Length: 1540
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
Etag: "8cf10ee1-cbe"
Server: Tengine
Set-Cookie: SERVERID=1e768cc3be8851955e206e4db2731e15|1731639183|1731639183;Path=/
Vary: Accept-Encoding
Location: https://holostudio-cn-hangzhou.data.aliyun.com

897328069 | 2024-11-04T10:25:18.715850

465 / tcp

220 mail.scott000.com ESMTP

2033888749 | 2024-11-14T11:42:05.886699

515 / tcp

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

-969286897 | 2024-11-09T21:46:43.861993

548 / tcp

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: TNAS-0E01\nMachine Type: \\x0eNetatalk3.1.12\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: No User Authent\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

735639583 | 2024-11-18T12:51:05.882551

554 / tcp

RTSP/1.0 200 OK
Server: H264DVR 1.0
Cseq: 1
Public: OPTIONS, DESCRIBE, SETUP, TEARDOWN, GET_PARAMETER, SET_PARAMETER, PLAY, PAUSE

-1420968138 | 2024-11-04T16:46:13.109085

666 / tcp

HTTP/1.0 200 OK
Server: SonicWALL
Expires: -1
Cache-Control: no-cache
Content-type: text/html; charset=UTF-8;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains

-1947777893 | 2024-11-22T20:22:44.448934

789 / tcp

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

-1970692834 | 2024-10-31T18:00:33.949449

873 / tcp

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

2033888749 | 2024-11-15T19:43:27.342811

1023 / tcp

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

575925250 | 2024-10-28T13:22:07.241585

1025 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

1362344524 | 2024-11-05T02:43:25.951860

1080 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

-971970408 | 2024-11-15T03:10:46.942040

1081 / tcp

1911457608 | 2024-11-17T15:55:22.754990

1099 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-358801646 | 2024-11-09T23:58:44.488220

1111 / tcp

SSH-2.0-OpenSSH_6.6.1

103159425 | 2024-11-15T13:31:19.430201

1177 / tcp

SSH-1.99-RGOS_SSH

-1730858130 | 2024-11-04T23:55:21.625322

1200 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1911457608 | 2024-10-30T13:44:18.859778

1234 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-2096652808 | 2024-11-01T09:31:26.272630

1337 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1781810481 | 2024-11-19T17:56:51.615429

1433 / tcp

MSSQL Server\nVersion: 150998979 (0x9000fc3)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: PULI\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: PULI\nNetBIOS_Computer_Name: CIXIAO\nDNS_Domain_Name: puli.gov.tw\nDNS_Computer_Name: cixiao.puli.gov.tw\nMsvAvDnsTreeName: puli.gov.tw\nSystem_Time: 2024-01-22 05:04:23 +0000 UTC\n\n

-1337747449 | 2024-11-03T14:24:37.712847

1521 / tcp

Version:12.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=203424000)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

-2089734047 | 2024-11-13T01:10:50.962995

1800 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1139999322 | 2024-11-04T10:11:11.476799

1801 / tcp

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xf2\\xdby\\x96\\xbb\\xb1LE\\xa1\\x1f.%\xd2\xbft\\xb692d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1370263973 | 2024-11-22T20:27:48.759241

1911 / tcp

dubbo>

1911457608 | 2024-10-27T18:28:59.851301

1962 / tcp

\x00[\x00\x00\x00\x00\x00\x00

921225407 | 2024-11-16T06:31:51.005773

2000 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1830187220 | 2024-11-18T12:57:48.989914

2001 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

819727972 | 2024-11-19T12:16:48.171570

2002 / tcp

SSH-2.0-OpenSSH_7.4

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-6111 13 moreCVE-2019-6110 CVE-2019-6109 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

-653033013 | 2024-11-09T01:25:49.820784

2003 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

416263569 | 2024-11-10T08:51:37.872114

2067 / tcp

BÿnToo many connections

-786044033 | 2024-10-24T03:03:08.321769

2083 / tcp

OK Welcome <299685> on DirectUpdate server 7286

546151771 | 2024-11-15T19:55:55.989795

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

-1399940268 | 2024-11-12T00:35:42.941840

2220 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

372433470 | 2024-11-14T08:57:35.867306

2222 / tcp

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

671605376 | 2024-10-31T01:27:39.028831

2233 / tcp

SSH-2.0-OpenSSH_X.X

1662205251 | 2024-11-10T18:35:49.203460

2323 / tcp

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

-1730858130 | 2024-10-29T16:00:14.546089

2332 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-136006866 | 2024-11-17T02:14:15.242348

2345 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

2087396567 | 2024-10-25T15:35:44.442849

2376 / tcp

kjnkjabhbanc283ubcsbhdc72

1632932802 | 2024-11-17T02:29:57.386441

2404 / tcp

585675468 | 2024-11-06T21:18:12.495114

2455 / tcp

@
05@ þ...

819727972 | 2024-11-07T18:02:09.122044

2566 / tcp

SSH-2.0-OpenSSH_7.4

114471724 | 2024-10-24T17:55:42.611787

2628 / tcp

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

1542849631 | 2024-10-31T17:20:57.892003

3001 / tcp

* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at

-1888448627 | 2024-11-05T06:05:27.873651

3057 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

198844676 | 2024-11-13T20:49:47.902590

3071 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

-1746074029 | 2024-11-01T18:43:22.296238

3085 / tcp

101 imqbroker =unV\r\n

-1538260461 | 2024-10-27T21:46:17.337042

3099 / tcp

\x01\x00\x00\x00

1161309183 | 2024-10-31T21:36:49.561346

3101 / tcp

ProxyServer is ready

1320285193 | 2024-11-15T05:12:09.562439

3128 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

-561021273 | 2024-10-28T12:04:05.214029

3268 / tcp

220 2.0.0 prod-cn-momentum2.webpowercn.local ESMTP ecelerity 4.2.1.51128 r(Core:4.2.1.5) Sun, 03 Dec 2023 10:04:37 +0800\r\n

-1730858130 | 2024-10-27T22:30:04.977583

3269 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-971970408 | 2024-11-02T05:18:55.025573

3299 / tcp

-1230509234 | 2024-11-16T17:44:10.642628

3306 / tcp

J\\x00\\x00\\x00\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MariaDB server

-1888448627 | 2024-11-19T08:37:53.074464

3352 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1730858130 | 2024-10-30T16:11:59.622684

3388 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1131713579 | 2024-11-08T16:54:16.675182

3389 / tcp

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x0f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: WL1BHKUZNIYOEK1\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: WL1BHKUZNIYOEK1\nNetBIOS_Computer_Name: WL1BHKUZNIYOEK1\nDNS_Domain_Name: wl1bhkuzniyoek1q\nDNS_Computer_Name: wl1bhkuzniyoek1q\nSystem_Time: 2024-01-22 08:40:53 +0000 UTC\n\n

632542934 | 2024-11-22T05:54:17.078843

3407 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-119996482 | 2024-11-08T17:52:07.998185

3541 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

-2089734047 | 2024-11-05T04:36:27.097146

3550 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

198844676 | 2024-11-10T13:27:17.512753

3551 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

-2096652808 | 2024-11-05T06:37:41.545016

3559 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

819727972 | 2024-11-22T18:53:51.778301

3566 / tcp

SSH-2.0-OpenSSH_7.4

-786044033 | 2024-11-21T08:04:06.490166

3780 / tcp

OK Welcome <299685> on DirectUpdate server 7286

1300162323 | 2024-11-19T01:56:42.469199

4000 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

819727972 | 2024-11-16T21:17:22.734014

4022 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-11-08T14:48:39.863400

4064 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1105333987 | 2024-11-20T23:09:17.197681

4150 / tcp

\x00[KpU\x7f\x00\x00

2087396567 | 2024-11-08T19:23:41.405393

4157 / tcp

kjnkjabhbanc283ubcsbhdc72

198844676 | 2024-10-30T13:52:45.627692

4242 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

2087396567 | 2024-11-22T23:17:26.640350

4282 / tcp

kjnkjabhbanc283ubcsbhdc72

-1250504565 | 2024-11-02T22:39:45.818793

4321 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

-1648456501 | 2024-11-05T02:25:09.899739

4369 / tcp

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

-1032713145 | 2024-11-09T22:07:09.618266

4430 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-971970408 | 2024-11-21T23:27:37.040386

4433 / tcp

751161953 | 2024-11-02T01:33:58.666591

4443 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae295529c967ad650ec3304d944abd

-2107996212 | 2024-11-19T11:10:17.051376

4444 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-1059554316 | 2024-11-19T14:05:55.398737

4500 / tcp

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

1308377066 | 2024-11-22T18:07:57.814393

4506 / tcp

ncacn_http/1.0

366084633 | 2024-11-20T21:08:02.438656

4786 / tcp

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

632542934 | 2024-11-05T12:30:29.271729

4911 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2087396567 | 2024-11-02T16:38:49.924791

4949 / tcp

kjnkjabhbanc283ubcsbhdc72

819727972 | 2024-11-10T01:13:43.232499

5001 / tcp

SSH-2.0-OpenSSH_7.4

1948301213 | 2024-11-03T20:10:48.146375

5003 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

-2118655245 | 2024-11-11T18:26:52.081843

5005 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

117101543 | 2024-11-02T21:46:48.933742

5006 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

410249975 | 2024-11-19T03:34:46.368658

5010 / tcp

LNS READY<>

550048729 | 2024-11-13T05:20:55.002685

5025 / tcp

ÿÿÿ
0 ...

1996932384 | 2024-11-20T19:15:58.363732

5201 / tcp

"raop" nonce

104385780 | 2024-11-06T19:19:36.164923

5222 / tcp

ceph v2

1359734371 | 2024-11-22T18:49:23.951519

5269 / tcp

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938451.076-w-waf01tjgt

321971019 | 2024-10-31T08:21:22.871731

5432 / tcp

-ERR client ip is not in whitelist\r

1911457608 | 2024-11-17T05:40:31.598871

5435 / tcp

\x00[\x00\x00\x00\x00\x00\x00

632542934 | 2024-11-15T23:01:35.535571

5542 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1888448627 | 2024-10-28T18:50:53.083314

5568 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1911457608 | 2024-11-14T14:49:46.483110

5592 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-10-29T21:14:50.593308

5907 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2024-11-11T18:01:34.306255

5938 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-11-22T03:55:43.085640

6000 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

120534451 | 2024-11-20T22:58:43.419626

6001 / tcp

X11 access denied

1887224352 | 2024-11-11T21:07:17.310731

6002 / tcp

-1334830891 | 2024-11-13T20:53:07.099407

6443 / tcp

HTTP/1.1 200 OK
Date: Wed, 13 Nov 2024 20:53:06 GMT
Content-Type: application/json
Content-Length: 1609
Connection: keep-alive
Ali-Swift-Global-Savetime: 1731531186
Eagleeye-Traceid: 0b45891f9c416cfbd5ca4ad6fc
Eagleid: 0b45891f9c416cfbd5ca4ad6fc
S_group: tao-session
S_ip: 97402837bb12aca48c316de8bd518a79
S_status: STATUS_SYS_ERR
S_tag: 608033039007318|460839577^|^^
S_tid: 0b45891f9c416cfbd5ca4ad6fc
S_ucode: CN:CENTER
S_v: 0.3.1.2
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://cp.iot.aliyun.com
Ufe-Result: A4
Via: vcache49.a6vcache1[540,428,541-0,M], vcache06.vcache41[261,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Wed, 13 Nov 2024 20:53:06 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:49:b2:86:90:3c:9b:46:7a:60:5b:87
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: May  5 06:21:16 2023 GMT
            Not After : Jun  5 06:21:15 2024 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cd:63:b4:e6:ec:59:0e:17:e4:45:57:82:09:a8:
                    51:4a:92:a5:84:e3:da:81:83:c5:6c:d1:8e:90:66:
                    15:6d:1b:a1:15:18:cc:d8:0d:db:93:10:70:27:7a:
                    01:9f:56:2b:b5:6c:0e:f4:1f:c9:8c:c9:b9:61:58:
                    7c:1e:3b:5a:83:c1:c3:ad:76:19:75:8b:6d:c7:0f:
                    c7:38:1d:7b:e9:aa:2b:eb:31:38:c6:8c:d7:52:d9:
                    29:e1:3d:e1:ad:30:fd:7d:21:f0:c4:ca:3d:9f:d3:
                    5c:b9:9f:17:81:c2:24:88:a1:82:bc:70:01:82:83:
                    49:79:62:0e:81:d6:5d:56:b1:17:c9:88:6c:c5:61:
                    4f:b7:5f:f9:ce:92:3c:0d:8b:3d:ad:06:28:d0:dc:
                    1c:b5:d3:cf:f2:ff:7d:06:07:fc:9e:11:c1:b0:0c:
                    4e:bf:93:da:c7:a4:f3:5c:ed:24:c9:95:4d:67:24:
                    2d:c9:41:da:50:a7:40:3e:b4:cb:2f:9b:12:cd:06:
                    c8:58:69:28:10:b0:53:9c:26:0e:b6:eb:b5:50:41:
                    7a:2a:fb:a1:a9:29:2f:34:84:bf:04:cb:20:f8:c1:
                    c1:3e:5e:82:b9:f6:f1:c0:e5:08:b1:21:7a:d3:fe:
                    8b:0a:0d:7b:71:76:7f:ae:7d:25:01:e1:6f:c0:d3:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
            X509v3 Subject Alternative Name: 
                DNS:*.aliyun.com, DNS:aliyun.com, DNS:rosechina.taobao.com, DNS:barclay.aliexpress.com, DNS:qr.aliyun.com, DNS:shop365682614.taobao.com, DNS:0f5c5da9.lex.co.id, DNS:cainiao-ru.aliexpress.com, DNS:acs-wapa.rmlogistics.sg, DNS:lha-lab-java.alibaba-inc.com, DNS:gre-dvbbo.an-hongzhov.ojiyvn-ina.aon.aliyun-inc.com, DNS:reako188.1688.com, DNS:dh-an-shonghoi.ojiyvn-ina.aon.aliyun-inc.com, DNS:vone.aliyun.com, DNS:app75554.eapps.dingtalkcloud.com, DNS:oovth.taobao.com, DNS:wwwnode.daxue.dingtalk.com, DNS:shog36284243.taobao.com, DNS:eai-inner.og-sovtheost-2.aliyuncs.com, DNS:devejogerojiyvnaon.aliyuncs.com, DNS:hojostvdio-an-hongzhov.doto.aliyun.com, DNS:vt.quark.cn, DNS:done.alibaba-inc.com, DNS:aodng.taobao.com, DNS:www.aliyun.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        78:03:66:2a:00:19:32:e4:35:e8:58:18:4d:b5:58:0b:b5:3b:
        da:47:99:a0:30:ee:18:76:b3:b1:68:ba:fd:f8:e3:1e:3a:c7:
        7a:a8:6b:7d:dc:cc:c5:30:af:91:fc:23:c1:e6:e9:d9:c2:8e:
        1a:a6:4e:59:2b:fb:f1:08:b6:69:95:a3:36:81:62:1e:e1:36:
        e2:7b:a8:3c:7c:87:0d:c7:94:8e:14:0a:0e:b8:64:17:8d:06:
        cf:a8:d8:7c:15:17:fe:ad:ed:60:08:51:24:fb:1f:4f:62:05:
        ab:6b:3c:1b:20:ca:77:3d:df:09:65:75:03:db:95:97:57:6c:
        92:e9:f4:ec:b2:5f:8e:4e:ef:ec:25:db:1c:98:87:b9:81:24:
        16:7b:07:26:b9:3c:39:d1:b3:eb:e8:ed:0b:b9:d3:d9:8c:f3:
        9b:35:00:38:71:24:f2:69:d4:07:a7:ec:78:a7:28:0c:f3:b4:
        ca:76:c6:af:64:78:84:e6:23:79:cb:83:44:6c:66:ba:f1:52:
        bb:78:87:7b:d8:dc:b0:4b:f4:8e:83:a7:16:03:18:cd:d2:28:
        97:d4:a8:bb:f7:1a:6c:c3:77:fb:e4:89:4a:7c:c7:bb:91:f3:
        12:5c:8e:56:18:a3:33:6a:77:8d:3e:9c:41:a0:94:4a:0f:7b:
        dc:8e:f1:fc

1767345577 | 2024-11-15T17:54:55.398021

6560 / tcp

Hello, this is Quagga (version 0T).
Copyright 1996-200

-1399940268 | 2024-11-16T09:52:50.308842

6633 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2046514463 | 2024-11-08T12:23:23.471175

6653 / tcp

AB\x01\t

4935895 | 2024-11-09T17:07:06.832888

6666 / tcp

HTTP/1.1 400 Bad Request
Server: CloudWAF

1767345577 | 2024-11-19T02:09:08.370708

6668 / tcp

Hello, this is Quagga (version 0T).
Copyright 1996-200

819727972 | 2024-11-13T20:29:56.702032

7171 / tcp

SSH-2.0-OpenSSH_7.4

632542934 | 2024-11-16T05:47:11.727466

7415 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-584993230 | 2024-11-20T19:25:37.125928

7443 / tcp

HTTP/1.1 400 Bad Request
Server:  
Content-Type: text/html
Connection: close

-2118655245 | 2024-11-04T14:35:27.625135

7474 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

171352214 | 2024-11-18T06:59:48.391918

7634 / tcp

-ERR client ip is not in whitelist

165188539 | 2024-10-31T17:12:56.284211

7778 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1248408558 | 2024-10-29T08:56:22.664051

8013 / tcp

220 MikroTik FTP server (MikroTik 6.44.3) ready

-1399940268 | 2024-11-05T17:04:35.016494

8023 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1641514916 | 2024-11-09T09:07:01.166026

8024 / tcp

* OK Merak 1dFUa2 IMAP4rev1

321971019 | 2024-10-24T05:38:52.465736

8052 / tcp

-ERR client ip is not in whitelist\r

1011407350 | 2024-11-15T22:37:10.668540

8066 / tcp

* OK GroupWise IMAP4rev1 Server Ready\r\n

-653033013 | 2024-11-09T08:04:06.093708

8072 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

841014058 | 2024-10-24T01:01:50.827168

8081 / tcp

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

-1032713145 | 2024-11-08T03:15:19.362036

8085 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

639175818 | 2024-10-25T17:13:13.648829

8087 / tcp

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

104385780 | 2024-11-22T17:51:08.007870

8089 / tcp

ceph v2

1825545421 | 2024-11-08T20:49:15.534345

8099 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-AREACMCC2-CACHE38[0]
X-CCDN-FORBID-CODE: 040001

2098371729 | 2024-11-05T15:55:22.557605

8102 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

-1231966337 | 2024-11-15T05:11:42.335876

8126 / tcp

[ºs

-146605374 | 2024-11-22T08:22:06.673646

8139 / tcp

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

-1428621233 | 2024-11-05T23:47:29.385813

8140 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

-2145024526 | 2024-11-02T01:03:00.006402

8180 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-SDjinan-CMCCZJ7-CACHE18[2]
X-CCDN-FORBID-CODE: 040001

1741579575 | 2024-10-27T11:36:07.647017

8181 / tcp

-877598700 | 2024-11-11T07:00:07.088798

8200 / tcp

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\\x01\xc3\xbf\xc3\xbb\\x03\xc3\xbf\xc3\xbd\\x01\xc3\xbf\xc3\xbe\\x01Username:

-1453516345 | 2024-11-02T17:41:05.097397

8238 / tcp

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

-653033013 | 2024-10-28T01:36:16.065984

8291 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-1261053701 | 2024-11-01T23:59:22.445288

8333 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

-1399940268 | 2024-11-13T18:19:20.634244

8545 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2080784861 | 2024-11-10T08:00:25.393735

8586 / tcp

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

842535728 | 2024-11-11T13:25:28.472173

8649 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

-802143704 | 2024-11-04T17:55:44.548661

8723 / tcp

HTTP/1.0 500 Internal Server Error
D
Connection: close

Command server error

-1399940268 | 2024-11-04T05:33:00.215177

8728 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-10-30T18:37:06.546157

8790 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1737707071 | 2024-10-25T21:28:32.045953

8805 / tcp

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

1426971893 | 2024-11-04T23:00:20.150301

8808 / tcp

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

114471724 | 2024-10-25T20:31:02.050885

8824 / tcp

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

855326179 | 2024-11-10T08:58:23.945215

8848 / tcp

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
X-Host: https://corp.aliyun.com/add-host/proceed/obfuscate/maintenance-whitelist/convert/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<

455076604 | 2024-11-17T16:43:23.066729

8851 / tcp

!\x07version\x04bind7 t{RPowerDNS Recursor 410

819727972 | 2024-11-13T05:21:02.347422

8852 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2024-10-28T12:48:49.377219

8860 / tcp

SSH-2.0-OpenSSH_7.4

1996932384 | 2024-11-14T20:12:25.481917

8871 / tcp

"raop" nonce

2087396567 | 2024-11-05T04:21:38.321069

8880 / tcp

kjnkjabhbanc283ubcsbhdc72

-2107996212 | 2024-11-01T23:48:33.534901

8889 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-1026951088 | 2024-11-05T11:35:01.848657

9001 / tcp

erro ip

707919486 | 2024-10-26T23:28:41.954137

9031 / tcp

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

921225407 | 2024-11-03T07:49:17.598442

9033 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-891714208 | 2024-10-31T19:24:39.919740

9035 / tcp

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

2087396567 | 2024-10-29T03:26:22.346238

9042 / tcp

kjnkjabhbanc283ubcsbhdc72

2087396567 | 2024-11-20T04:17:45.764693

9051 / tcp

kjnkjabhbanc283ubcsbhdc72

1332894250 | 2024-11-14T04:29:11.616593

9091 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

320677201 | 2024-11-22T14:56:24.088691

9092 / tcp

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

-1733645023 | 2024-11-13T03:03:15.555800

9160 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

165188539 | 2024-11-11T09:39:45.187654

9306 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1019343788 | 2024-11-13T05:27:57.002058

9333 / tcp

W!\x00\x00\x00\x00

1529351907 | 2024-11-09T11:24:59.753680

9418 / tcp

HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive

please add white ip *.*.*.*

1332894250 | 2024-11-22T18:35:59.810915

9600 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

957278843 | 2024-10-29T08:59:59.646697

9633 / tcp

[|ox

1991883981 | 2024-11-06T14:20:32.452871

9690 / tcp

B\x00\x00\x00\xc3\xbfn\x04Too many connections

1127011450 | 2024-11-13T21:51:26.743991

9876 / tcp

HTTP/1.1 200 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Accept-Ranges: bytes
Content-Type: text/html;charset=utf-8
Content-Language: en

1320285193 | 2024-10-29T00:08:19.707401

9898 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

-1340128872 | 2024-11-23T00:26:57.225869

9998 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25d2_PS-PEK-010xV14_15533-12109

1492413928 | 2024-11-01T19:49:54.959185

10001 / tcp

SSH-2.0-OpenSSH_7.5

740837454 | 2024-11-20T05:41:42.938383

10134 / tcp

SSH-2.0-OpenSSH_5.3

-319440554 | 2024-11-20T08:03:07.902638

10554 / tcp

819727972 | 2024-11-11T20:08:33.305058

11000 / tcp

SSH-2.0-OpenSSH_7.4

-1013082686 | 2024-11-20T05:32:21.016355

11112 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

1189133115 | 2024-11-03T19:50:33.173921

11288 / tcp

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

878900329 | 2024-11-13T04:11:38.894010

12345 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24ba_PStjkgwtss75_22411-43255

165188539 | 2024-11-04T00:38:36.982037

14344 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1128478250 | 2024-10-31T07:57:32.514499

16992 / tcp

HTTP/1.1 200 OK
Server: myself
Connection: close
Cache-Control: no-cache

-1059554316 | 2024-11-02T12:04:32.315997

16993 / tcp

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

-1399940268 | 2024-10-26T15:24:58.600036

18245 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1900503736 | 2024-10-30T16:10:58.961811

20000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

660175493 | 2024-10-30T07:49:05.320549

20547 / tcp

1370263973 | 2024-11-10T16:04:16.051963

20880 / tcp

dubbo>

1911457608 | 2024-11-19T03:20:43.780773

21379 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2024-10-29T20:56:28.840927

23424 / tcp

kjnkjabhbanc283ubcsbhdc72

165188539 | 2024-11-14T17:17:20.411980

25565 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-653033013 | 2024-10-31T17:11:07.291128

27015 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

307999478 | 2024-11-05T13:21:18.610941

30002 / tcp

unknown command \r\nunknown command \r\n

-1313892715 | 2024-11-20T09:11:41.023662

30003 / tcp


0 ...

-1719756037 | 2024-10-28T13:30:40.613598

30718 / tcp

LH\xdb\xc6\xdd\xf6g\x10\x19\x00\x00\x00\x18\x00\x01\x02\x00\x10\x00\x04\x00\x00\x00\x01\x8fm\x0fN\xc7\x1e\x88"\xee\xd9\xd7\xf2x{\x04\x85

171352214 | 2024-11-05T20:49:16.512044

32764 / tcp

-ERR client ip is not in whitelist

1911457608 | 2024-11-20T03:51:05.936768

33060 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1332894250 | 2024-10-25T22:09:05.267662

33889 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

-1399940268 | 2024-11-22T09:54:36.796368

37777 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2087396567 | 2024-11-11T10:15:20.547976

41022 / tcp

kjnkjabhbanc283ubcsbhdc72

2054287019 | 2024-11-02T19:22:54.406083

44158 / tcp

\x13/multistream/1.0.0

-1399940268 | 2024-11-03T02:43:58.490403

44818 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

539065883 | 2024-11-08T23:19:49.111909

48122 / tcp

104385780 | 2024-10-27T18:03:48.176503

48899 / tcp

ceph v2

-1292343804 | 2024-10-27T15:02:20.280026

49152 / tcp

HTTP/1.1 500 Internal Server Error
CONTENT-LENGTH: 411
CONTENT-TYPE: text/xml; charset="utf-8"
DATE: Mon, 22 Jan 2024 16:32:35 GMT
EXT:
SERVER: Linux/3.10.0, UPnP/1.0, Portable SDK for UPnP devices/1.6.18
X-User-Agent: redsonic

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<s:Body>
<s:Fault>
<faultcode>s:Client</faultcode>
<faultstring>UPnPError</faultstring>
<detail>
<UPnPError xmlns="urn:schemas-upnp-org:control-1-0">

398077695 | 2024-11-07T23:37:21.826502

49522 / tcp

-653033013 | 2024-11-09T19:26:56.575508

50000 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-1461540015 | 2024-11-08T19:43:02.573288

50100 / tcp

audio 0 RTP/AVP 18 4 3 8 0 101
a

-1036370807 | 2024-11-22T13:48:42.441794

51222 / tcp

JDWP-Handshake

-441419608 | 2024-11-15T18:59:31.801539

51235 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

819727972 | 2024-11-21T23:51:34.961473

51922 / tcp

SSH-2.0-OpenSSH_7.4

2087396567 | 2024-11-21T22:26:11.034242

52022 / tcp

kjnkjabhbanc283ubcsbhdc72

-2033111675 | 2024-11-21T11:45:14.560775

52522 / tcp

~djb

-1999117212 | 2024-11-20T20:21:47.757290

53322 / tcp

1741579575 | 2024-11-10T19:34:10.450313

53722 / tcp

-1013082686 | 2024-11-20T05:04:09.965052

54122 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

1623746877 | 2024-10-29T18:44:54.903459

54138 / tcp

500 Permission denied - closing connection.\r\n

1690634669 | 2024-11-19T19:03:54.477533

54622 / tcp

2033888749 | 2024-11-19T20:28:55.362558

54722 / tcp

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

-1399940268 | 2024-10-29T22:00:48.585276

55000 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1975288991 | 2024-11-19T08:32:09.648153

55122 / tcp

OPTI

-319440554 | 2024-11-19T05:07:38.027679

55322 / tcp

-2031152423 | 2024-11-19T02:34:47.835773

55422 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

2087396567 | 2024-11-22T22:03:13.046398

55443 / tcp

kjnkjabhbanc283ubcsbhdc72

-358801646 | 2024-11-22T15:09:19.050723

55553 / tcp

SSH-2.0-OpenSSH_6.6.1

1989907056 | 2024-11-17T21:13:37.315517

55554 / tcp

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

-1611764932 | 2024-11-18T20:43:24.221017

55722 / tcp

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

-1626979812 | 2024-11-18T16:49:23.440298

55922 / tcp

220 Service ready for new user.

-1375131644 | 2024-11-18T11:00:05.348849

56322 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

2087396567 | 2024-11-17T23:36:03.776651

56822 / tcp

kjnkjabhbanc283ubcsbhdc72

1282941221 | 2024-11-17T19:37:47.069731

57022 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-992671574 | 2024-11-17T17:37:20.861373

57122 / tcp

@RSYNCD: 26

-441419608 | 2024-11-17T00:05:49.725793

58022 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

-375604792 | 2024-11-16T16:49:31.807583

58422 / tcp

220 Microsoft FTP Service

171352214 | 2024-11-16T14:13:40.067068

58522 / tcp

-ERR client ip is not in whitelist

1741579575 | 2024-11-16T10:34:08.438544

58722 / tcp

-321444299 | 2024-11-16T08:26:08.404174

58822 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

-2031152423 | 2024-11-16T06:49:52.540395

58922 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

-786044033 | 2024-11-13T05:58:30.117126

59122 / tcp

OK Welcome <299685> on DirectUpdate server 7286

-641479109 | 2024-11-15T20:53:40.400092

59422 / tcp

[xU-

539065883 | 2024-11-14T15:16:16.915334

59522 / tcp

2087396567 | 2024-11-15T16:47:32.110340

59622 / tcp

kjnkjabhbanc283ubcsbhdc72

398077695 | 2024-11-12T00:29:08.798883

59822 / tcp

-358801646 | 2024-11-15T11:05:48.556981

59922 / tcp

SSH-2.0-OpenSSH_6.6.1

819727972 | 2024-11-15T07:08:33.122348

60122 / tcp

SSH-2.0-OpenSSH_7.4

2087396567 | 2024-10-27T21:13:45.958028

61616 / tcp

kjnkjabhbanc283ubcsbhdc72

-860824904 | 2024-11-11T11:02:12.256497

62078 / tcp

\x00\x01)

-1888448627 | 2024-11-19T11:25:25.071243

63256 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

121.40.84.26

Last Seen: 2024-11-23

Tags:

GeneralInformation

Vulnerabilities All ports Port 2002 Port 2566 Port 3566 Port 4022 Port 5001 Port 7171 Port 8852 Port 8860 Port 10001 Port 10134 Port 11000 Port 51922 Port 60122 Latest CVSS

OpenPorts

60948681 | 2024-11-16T21:24:48.277153 11 / tcp

-1346477807 | 2024-11-10T21:02:33.279583 22 / tcp

676675086 | 2024-11-22T22:15:50.887731 23 / tcp

398077695 | 2024-10-31T06:55:51.797364 25 / tcp

1463575233 | 2024-11-16T11:48:19.272813 37 / tcp

-1620040646 | 2024-11-07T03:47:34.170607 49 / tcp

1583167286 | 2024-10-26T09:28:54.511728 70 / tcp

-1264324149 | 2024-11-05T00:53:54.516001 79 / tcp

-1399940268 | 2024-11-09T15:27:44.052609 102 / tcp

-2089734047 | 2024-11-20T01:41:43.556546 104 / tcp

-826610984 | 2024-11-17T09:29:43.496973 110 / tcp

2087396567 | 2024-11-03T14:09:01.438455 111 / tcp

141730637 | 2024-11-22T09:46:38.279998 119 / tcp

1830697416 | 2024-11-21T11:47:25.801089 122 / tcp

-2033111675 | 2024-11-05T20:49:26.643329 175 / tcp

-399606100 | 2024-11-16T05:20:21.326188 179 / tcp

-1990350878 | 2024-11-20T19:09:59.277726 195 / tcp

-654288545 | 2024-10-31T08:31:52.473424 264 / tcp

-1743283776 | 2024-11-20T06:59:58.452206 389 / tcp

988993235 | 2024-11-15T02:53:03.237167 444 / tcp

897328069 | 2024-11-04T10:25:18.715850 465 / tcp

2033888749 | 2024-11-14T11:42:05.886699 515 / tcp

-969286897 | 2024-11-09T21:46:43.861993 548 / tcp

735639583 | 2024-11-18T12:51:05.882551 554 / tcp

-1420968138 | 2024-11-04T16:46:13.109085 666 / tcp

-1947777893 | 2024-11-22T20:22:44.448934 789 / tcp

-1970692834 | 2024-10-31T18:00:33.949449 873 / tcp

2033888749 | 2024-11-15T19:43:27.342811 1023 / tcp

575925250 | 2024-10-28T13:22:07.241585 1025 / tcp

1362344524 | 2024-11-05T02:43:25.951860 1080 / tcp

-971970408 | 2024-11-15T03:10:46.942040 1081 / tcp

1911457608 | 2024-11-17T15:55:22.754990 1099 / tcp

-358801646 | 2024-11-09T23:58:44.488220 1111 / tcp

103159425 | 2024-11-15T13:31:19.430201 1177 / tcp

-1730858130 | 2024-11-04T23:55:21.625322 1200 / tcp

1911457608 | 2024-10-30T13:44:18.859778 1234 / tcp

-2096652808 | 2024-11-01T09:31:26.272630 1337 / tcp

-1781810481 | 2024-11-19T17:56:51.615429 1433 / tcp

-1337747449 | 2024-11-03T14:24:37.712847 1521 / tcp

-2089734047 | 2024-11-13T01:10:50.962995 1800 / tcp

-1139999322 | 2024-11-04T10:11:11.476799 1801 / tcp

1370263973 | 2024-11-22T20:27:48.759241 1911 / tcp

1911457608 | 2024-10-27T18:28:59.851301 1962 / tcp

921225407 | 2024-11-16T06:31:51.005773 2000 / tcp

1830187220 | 2024-11-18T12:57:48.989914 2001 / tcp

819727972 | 2024-11-19T12:16:48.171570 2002 / tcp

-653033013 | 2024-11-09T01:25:49.820784 2003 / tcp

416263569 | 2024-11-10T08:51:37.872114 2067 / tcp

-786044033 | 2024-10-24T03:03:08.321769 2083 / tcp

546151771 | 2024-11-15T19:55:55.989795 2181 / tcp

-1399940268 | 2024-11-12T00:35:42.941840 2220 / tcp

372433470 | 2024-11-14T08:57:35.867306 2222 / tcp

671605376 | 2024-10-31T01:27:39.028831 2233 / tcp

1662205251 | 2024-11-10T18:35:49.203460 2323 / tcp

-1730858130 | 2024-10-29T16:00:14.546089 2332 / tcp

-136006866 | 2024-11-17T02:14:15.242348 2345 / tcp

2087396567 | 2024-10-25T15:35:44.442849 2376 / tcp

1632932802 | 2024-11-17T02:29:57.386441 2404 / tcp

585675468 | 2024-11-06T21:18:12.495114 2455 / tcp

819727972 | 2024-11-07T18:02:09.122044 2566 / tcp

114471724 | 2024-10-24T17:55:42.611787 2628 / tcp

1542849631 | 2024-10-31T17:20:57.892003 3001 / tcp

-1888448627 | 2024-11-05T06:05:27.873651 3057 / tcp

198844676 | 2024-11-13T20:49:47.902590 3071 / tcp

-1746074029 | 2024-11-01T18:43:22.296238 3085 / tcp

-1538260461 | 2024-10-27T21:46:17.337042 3099 / tcp

1161309183 | 2024-10-31T21:36:49.561346 3101 / tcp

1320285193 | 2024-11-15T05:12:09.562439 3128 / tcp

-561021273 | 2024-10-28T12:04:05.214029 3268 / tcp

-1730858130 | 2024-10-27T22:30:04.977583 3269 / tcp

-971970408 | 2024-11-02T05:18:55.025573 3299 / tcp

-1230509234 | 2024-11-16T17:44:10.642628 3306 / tcp

-1888448627 | 2024-11-19T08:37:53.074464 3352 / tcp

-1730858130 | 2024-10-30T16:11:59.622684 3388 / tcp

Vulnerabilities

60948681 | 2024-11-16T21:24:48.277153
11 / tcp

-1346477807 | 2024-11-10T21:02:33.279583
22 / tcp

676675086 | 2024-11-22T22:15:50.887731
23 / tcp

398077695 | 2024-10-31T06:55:51.797364
25 / tcp

1463575233 | 2024-11-16T11:48:19.272813
37 / tcp

-1620040646 | 2024-11-07T03:47:34.170607
49 / tcp

1583167286 | 2024-10-26T09:28:54.511728
70 / tcp

-1264324149 | 2024-11-05T00:53:54.516001
79 / tcp

-1399940268 | 2024-11-09T15:27:44.052609
102 / tcp

-2089734047 | 2024-11-20T01:41:43.556546
104 / tcp

-826610984 | 2024-11-17T09:29:43.496973
110 / tcp

2087396567 | 2024-11-03T14:09:01.438455
111 / tcp

141730637 | 2024-11-22T09:46:38.279998
119 / tcp

1830697416 | 2024-11-21T11:47:25.801089
122 / tcp

-2033111675 | 2024-11-05T20:49:26.643329
175 / tcp

-399606100 | 2024-11-16T05:20:21.326188
179 / tcp

-1990350878 | 2024-11-20T19:09:59.277726
195 / tcp

-654288545 | 2024-10-31T08:31:52.473424
264 / tcp

-1743283776 | 2024-11-20T06:59:58.452206
389 / tcp

988993235 | 2024-11-15T02:53:03.237167
444 / tcp

897328069 | 2024-11-04T10:25:18.715850
465 / tcp

2033888749 | 2024-11-14T11:42:05.886699
515 / tcp

-969286897 | 2024-11-09T21:46:43.861993
548 / tcp

735639583 | 2024-11-18T12:51:05.882551
554 / tcp

-1420968138 | 2024-11-04T16:46:13.109085
666 / tcp

-1947777893 | 2024-11-22T20:22:44.448934
789 / tcp

-1970692834 | 2024-10-31T18:00:33.949449
873 / tcp

2033888749 | 2024-11-15T19:43:27.342811
1023 / tcp

575925250 | 2024-10-28T13:22:07.241585
1025 / tcp

1362344524 | 2024-11-05T02:43:25.951860
1080 / tcp

-971970408 | 2024-11-15T03:10:46.942040
1081 / tcp

1911457608 | 2024-11-17T15:55:22.754990
1099 / tcp

-358801646 | 2024-11-09T23:58:44.488220
1111 / tcp

103159425 | 2024-11-15T13:31:19.430201
1177 / tcp

-1730858130 | 2024-11-04T23:55:21.625322
1200 / tcp

1911457608 | 2024-10-30T13:44:18.859778
1234 / tcp

-2096652808 | 2024-11-01T09:31:26.272630
1337 / tcp

-1781810481 | 2024-11-19T17:56:51.615429
1433 / tcp

-1337747449 | 2024-11-03T14:24:37.712847
1521 / tcp

-2089734047 | 2024-11-13T01:10:50.962995
1800 / tcp

-1139999322 | 2024-11-04T10:11:11.476799
1801 / tcp

1370263973 | 2024-11-22T20:27:48.759241
1911 / tcp

1911457608 | 2024-10-27T18:28:59.851301
1962 / tcp

921225407 | 2024-11-16T06:31:51.005773
2000 / tcp

1830187220 | 2024-11-18T12:57:48.989914
2001 / tcp

819727972 | 2024-11-19T12:16:48.171570
2002 / tcp

-653033013 | 2024-11-09T01:25:49.820784
2003 / tcp

416263569 | 2024-11-10T08:51:37.872114
2067 / tcp

-786044033 | 2024-10-24T03:03:08.321769
2083 / tcp

546151771 | 2024-11-15T19:55:55.989795
2181 / tcp

-1399940268 | 2024-11-12T00:35:42.941840
2220 / tcp

372433470 | 2024-11-14T08:57:35.867306
2222 / tcp

671605376 | 2024-10-31T01:27:39.028831
2233 / tcp

1662205251 | 2024-11-10T18:35:49.203460
2323 / tcp

-1730858130 | 2024-10-29T16:00:14.546089
2332 / tcp

-136006866 | 2024-11-17T02:14:15.242348
2345 / tcp

2087396567 | 2024-10-25T15:35:44.442849
2376 / tcp

1632932802 | 2024-11-17T02:29:57.386441
2404 / tcp

585675468 | 2024-11-06T21:18:12.495114
2455 / tcp

819727972 | 2024-11-07T18:02:09.122044
2566 / tcp

114471724 | 2024-10-24T17:55:42.611787
2628 / tcp

1542849631 | 2024-10-31T17:20:57.892003
3001 / tcp

-1888448627 | 2024-11-05T06:05:27.873651
3057 / tcp

198844676 | 2024-11-13T20:49:47.902590
3071 / tcp

-1746074029 | 2024-11-01T18:43:22.296238
3085 / tcp

-1538260461 | 2024-10-27T21:46:17.337042
3099 / tcp

1161309183 | 2024-10-31T21:36:49.561346
3101 / tcp

1320285193 | 2024-11-15T05:12:09.562439
3128 / tcp

-561021273 | 2024-10-28T12:04:05.214029
3268 / tcp

-1730858130 | 2024-10-27T22:30:04.977583
3269 / tcp

-971970408 | 2024-11-02T05:18:55.025573
3299 / tcp

-1230509234 | 2024-11-16T17:44:10.642628
3306 / tcp

-1888448627 | 2024-11-19T08:37:53.074464
3352 / tcp

-1730858130 | 2024-10-30T16:11:59.622684
3388 / tcp

1131713579 | 2024-11-08T16:54:16.675182
3389 / tcp

632542934 | 2024-11-22T05:54:17.078843
3407 / tcp

-119996482 | 2024-11-08T17:52:07.998185
3541 / tcp

-2089734047 | 2024-11-05T04:36:27.097146
3550 / tcp

198844676 | 2024-11-10T13:27:17.512753
3551 / tcp