GeneralInformation

Country	China
City	Zhangjiakou
Organization	CHINANET hebei province network
ISP	China Telecom
ASN	AS141771

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

13 / tcp

1297354658 | 2024-12-29T14:37:37.158069

J\x00\x00\x00
8.0.23\x00%\xc6\xec\x0e\x12X&/&?\x00\xff\xff-\x02\x00\xff\xcf\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00jde\x1d.9S\"\x1d:#\x00caching_sha2_password\x00

22 / tcp

1182368253 | 2025-01-07T01:01:44.318698

SSH-2.0-OpenSSH_8.6\r\n

37 / tcp

-886440009 | 2025-01-21T10:47:50.990454

\\xeb\\xd1~B

51 / tcp

-1139539254 | 2025-01-20T09:27:36.583182

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

70 / tcp

-972699072 | 2025-01-19T18:08:29.783936

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

CVE-2018-10088

79 / tcp

-876294238 | 2025-01-05T05:54:57.535990

HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Content-Type: text/html
Connection: close

80 / tcp

1608940450 | 2025-01-13T11:31:33.966248

Hashes

hash

1147825014

http.dom_hash

-1120882556

http.html_hash

1608940450

http.server_hash

994813033

http.title_hash

-1207101977

404 Not Found

HTTP/1.1 404 Not Found
Server: Tengine/2.1.3_400
Date: Mon, 13 Jan 2025 11:31:33 GMT
Content-Type: text/html
Content-Length: 629
Connection: keep-alive

113 / tcp

-1777894858 | 2025-01-22T07:59:00.741594

113 , 35054 : USERID : OTHER :99

143 / tcp

376198496 | 2024-12-24T19:07:57.485508

* OK Coremail System IMap Server Ready(mispb-151a50c7-932b-471d-b699-900151c4d82d-foreseahealth.com[c1988e81907d5583d41947167f416ce9])\r\n

222 / tcp

-1174972798 | 2025-01-12T04:25:09.783312

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6\r\n\n

311 / tcp

-1547976805 | 2025-01-20T17:34:11.418203

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

447 / tcp

-1810987450 | 2025-01-22T07:44:13.320897

\xc3\xbf

515 / tcp

-784071826 | 2025-01-19T16:56:27.262808

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

685 / tcp

1948301213 | 2025-01-13T19:06:44.886949

RFB 003.003
VNC:
  Protocol Version: 3.3

777 / tcp

-1346601424 | 2025-01-18T21:23:13.709424

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 13-38977912-0 0NNN RT(1705905272179 0) q(0 -1 -1 -1) r(0 -1)

806 / tcp

-1399940268 | 2025-01-19T01:12:45.171946

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

990 / tcp

1583167286 | 2025-01-19T01:49:06.008826

\\x01remshd: Kerberos Authentication not enabled.\n

992 / tcp

-1718295362 | 2025-01-02T19:03:07.161466

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8

1000 / tcp

-747911285 | 2025-01-12T18:44:07.521077

\xc2\xaa

1153 / tcp

632542934 | 2025-01-20T17:31:56.290012

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1457 / tcp

-2096652808 | 2025-01-21T05:14:21.353728

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1723 / tcp

2064046231 | 2025-01-20T18:36:19.248585

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1c77_tb143_15913-45531

1883 / tcp

1615193817 | 2025-01-03T18:00:55.888958

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

1922 / tcp

1208318993 | 2025-01-07T18:26:56.440548

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

1965 / tcp

921225407 | 2025-01-14T13:32:15.793215

\x00\x00\x00\x04\x00\x00\x00\x00\x00

2003 / tcp

819727972 | 2025-01-20T20:20:17.328064

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

2048 / tcp

-1399940268 | 2025-01-21T22:48:57.311274

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2081 / tcp

-2089734047 | 2025-01-08T09:04:30.839033

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2087 / tcp

-1373613804 | 2024-12-28T10:19:14.636742

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

2121 / tcp

141730637 | 2025-01-19T18:51:59.321909

HTTP/1.0 200 OK
Server: Proxy

2181 / tcp

546151771 | 2025-01-14T00:29:20.861370

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2196 / tcp

-2089734047 | 2025-01-14T21:37:17.746567

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2455 / tcp

-1900404274 | 2025-01-19T22:10:53.450016

Unknown command

2562 / tcp

-1140468363 | 2025-01-20T19:26:51.216343

\x02\t\x01

2628 / tcp

1690634669 | 2024-12-25T05:10:43.328328

2762 / tcp

-1399940268 | 2024-12-31T07:03:55.578041

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3003 / tcp

-1227409554 | 2025-01-20T19:30:09.225585

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3068 / tcp

-358801646 | 2025-01-15T07:37:08.250026

SSH-2.0-OpenSSH_6.6.1

3080 / tcp

632542934 | 2025-01-21T21:55:09.243650

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

3084 / tcp

921225407 | 2025-01-21T16:01:12.393897

\x00\x00\x00\x04\x00\x00\x00\x00\x00

3090 / tcp

819727972 | 2025-01-17T22:00:54.160805

SSH-2.0-OpenSSH_7.4

3116 / tcp

-2096652808 | 2025-01-18T18:40:55.001437

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

3123 / tcp

-2096652808 | 2025-01-13T19:49:49.838770

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

3167 / tcp

-2089734047 | 2025-01-20T00:01:23.748086

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3306 / tcp

292351399 | 2024-12-24T01:30:27.913439

Mysql Version: 5.5.24-log \r\nN\\x00\\x00\\x00\n5.5.24-log\\x00\\x87\\x00\\x00\\x00uF>E}hpx\\x00\\xff\\xf7!\\x02\\x00\\x0f\\x80\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00-rx$GyO\\aT]Z\\x00mysql_native_password\\x00

3388 / tcp

-1399940268 | 2025-01-19T12:01:26.219094

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3524 / tcp

-1399940268 | 2025-01-17T00:34:30.810359

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3841 / tcp

-1399940268 | 2025-01-22T04:33:06.507588

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4506 / tcp

-222277909 | 2025-01-10T00:11:02.615945

0@@

4602 / tcp

1763259671 | 2025-01-12T07:47:04.859043

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

4786 / tcp

-1641514916 | 2025-01-20T02:19:29.870442

* OK Merak 1dFUa2 IMAP4rev1

4933 / tcp

1911457608 | 2025-01-12T08:28:59.558455

\x00[\x00\x00\x00\x00\x00\x00

5001 / tcp

1353260875 | 2025-01-18T07:51:09.400632

\x00[g\xc2\x95N\x7f\x00\x00

5006 / tcp

957278843 | 2025-01-21T09:46:17.790179

[|ox

5010 / tcp

1911457608 | 2025-01-02T21:21:29.044067

\x00[\x00\x00\x00\x00\x00\x00

5061 / tcp

-1399940268 | 2025-01-15T21:40:25.519270

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5201 / tcp

-1888448627 | 2025-01-22T12:45:31.753644

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

5269 / tcp

-1074907534 | 2025-01-20T01:55:28.313249

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938603.82-w-waf02tjgt

5432 / tcp

1911457608 | 2024-12-26T08:54:32.052347

\x00[\x00\x00\x00\x00\x00\x00

5435 / tcp

1189133115 | 2025-01-12T05:30:51.076655

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

5593 / tcp

1911457608 | 2025-01-21T21:38:56.553025

\x00[\x00\x00\x00\x00\x00\x00

5696 / tcp

1996932384 | 2025-01-16T03:54:20.455136

"raop" nonce

5917 / tcp

103159425 | 2025-01-11T21:09:57.919577

SSH-1.99-RGOS_SSH

5938 / tcp

819727972 | 2025-01-06T18:38:10.145163

SSH-2.0-OpenSSH_7.4

5985 / tcp

0 | 2024-12-27T23:16:27.521267

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

6002 / tcp

-1681927087 | 2025-01-04T22:24:36.987490

kjnkjabhbanc283ubcsbhdc72

6020 / tcp

1077013874 | 2025-01-10T00:47:35.932259

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

6666 / tcp

372433470 | 2024-12-23T21:56:39.929657

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

6697 / tcp

-1399940268 | 2024-12-25T22:36:43.060330

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7001 / tcp

265065882 | 2025-01-06T06:39:59.104517

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked

7218 / tcp

632542934 | 2024-12-27T03:26:08.441850

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

7445 / tcp

-1888448627 | 2025-01-17T06:59:10.095321

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

7500 / tcp

819727972 | 2025-01-19T05:46:15.986186

SSH-2.0-OpenSSH_7.4

7687 / tcp

-1114821551 | 2025-01-14T05:54:53.474672

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

8085 / tcp

1082732927 | 2024-12-24T16:33:01.311875

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

8087 / tcp

-136006866 | 2025-01-08T14:12:16.290087

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

8089 / tcp

660175493 | 2025-01-01T21:51:58.578772

8099 / tcp

-1416565584 | 2025-01-22T10:52:42.384222

HTTP/1.1 500 Internal Server Error
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Connection: close

8117 / tcp

819727972 | 2025-01-15T07:07:30.540116

SSH-2.0-OpenSSH_7.4

8126 / tcp

1278527606 | 2025-01-21T14:16:00.268458

SSH-2.0-Teleport

8146 / tcp

-1730858130 | 2025-01-09T16:20:13.018451

RFB 003.008
VNC:
  Protocol Version: 3.8

8151 / tcp

580340387 | 2025-01-11T00:06:02.547515

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

8162 / tcp

-1399940268 | 2025-01-10T09:11:52.702985

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8173 / tcp

165188539 | 2025-01-13T21:53:35.533180

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8238 / tcp

-2031152423 | 2025-01-09T19:41:23.050842

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8248 / tcp

819727972 | 2025-01-17T20:27:52.606714

SSH-2.0-OpenSSH_7.4

8333 / tcp

-1487943323 | 2025-01-11T07:56:54.032472

431 Unable to negotiate secure command connection.\r\n

8422 / tcp

-2140303521 | 2025-01-18T08:13:15.182314

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

8425 / tcp

1911457608 | 2025-01-17T01:40:18.581668

\x00[\x00\x00\x00\x00\x00\x00

8443 / tcp

1422157345 | 2024-12-31T09:22:13.396393

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 31 Dec 2024 09:22:03 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://123.182.48.168:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

8447 / tcp

1911457608 | 2025-01-21T20:15:06.677360

\x00[\x00\x00\x00\x00\x00\x00

8463 / tcp

165188539 | 2025-01-21T03:53:16.943325

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8649 / tcp

842535728 | 2025-01-13T08:07:06.381546

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

8807 / tcp

-445721795 | 2025-01-10T19:09:01.149117

\x00[\xc3\xaed\x1a\x7f\x00\x00

8889 / tcp

1741579575 | 2025-01-15T04:33:57.334326

9001 / tcp

-1026951088 | 2025-01-06T04:35:03.111647

erro ip

9007 / tcp

1830697416 | 2025-01-21T09:47:59.301797

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

9051 / tcp

1911457608 | 2025-01-02T07:23:10.547055

\x00[\x00\x00\x00\x00\x00\x00

9091 / tcp

-527005584 | 2025-01-08T04:00:57.622275

/0 0 L
/0 0 HUH

9095 / tcp

539065883 | 2025-01-07T06:15:51.604565

9100 / tcp

1126993057 | 2025-01-19T22:01:05.581398

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

9109 / tcp

-1733645023 | 2025-01-21T03:41:06.393254

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

9165 / tcp

819727972 | 2025-01-18T09:49:12.500604

SSH-2.0-OpenSSH_7.4

9178 / tcp

-1435414831 | 2025-01-21T19:13:52.516850

roku: ready\r\n

9243 / tcp

632542934 | 2025-01-14T22:26:56.724388

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

9246 / tcp

-1013082686 | 2025-01-20T14:42:02.875722

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

9280 / tcp

-653033013 | 2025-01-12T04:32:33.838280

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

9295 / tcp

0 | 2025-01-01T02:46:03.018145

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

9307 / tcp

-1329831334 | 2025-01-14T00:21:46.420176

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

9333 / tcp

819727972 | 2024-12-24T21:35:44.825338

SSH-2.0-OpenSSH_7.4

9418 / tcp

694512854 | 2024-12-24T20:30:39.837988

220-FileZilla Server 中文版 0.9.60 beta
220-written by Tim Kosse (tim.kosse@filezilla-project.org)
220 Please visit https://filezilla-project.org/

9530 / tcp

-1399940268 | 2025-01-21T17:33:44.852419

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9606 / tcp

-1888448627 | 2025-01-15T10:26:12.793399

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9876 / tcp

1127011450 | 2025-01-13T16:17:25.329772

HTTP/1.1 200 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Accept-Ranges: bytes
Content-Type: text/html;charset=utf-8
Content-Language: en

9926 / tcp

493955023 | 2025-01-18T01:25:24.647079

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

9998 / tcp

-1901729922 | 2025-01-05T07:50:48.890153

HTTP/1.1 404 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Content-Type: application/json
Transfer-Encoding: chunked

9999 / tcp

1161309183 | 2025-01-20T14:05:27.488829

ProxyServer is ready

10001 / tcp

1492413928 | 2025-01-02T07:28:10.029535

SSH-2.0-OpenSSH_7.5

10250 / tcp

-358801646 | 2025-01-21T00:22:23.039021

SSH-2.0-OpenSSH_6.6.1

10554 / tcp

539065883 | 2024-12-29T00:44:00.032118

10894 / tcp

1911457608 | 2025-01-15T21:05:43.544935

\x00[\x00\x00\x00\x00\x00\x00

11000 / tcp

897328069 | 2025-01-15T06:03:54.145726

220 mail.scott000.com ESMTP

11112 / tcp

-1399940268 | 2025-01-05T22:22:41.941140

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11210 / tcp

-1399940268 | 2025-01-18T05:48:59.976839

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12127 / tcp

1426971893 | 2025-01-10T01:08:28.088655

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

12131 / tcp

1911457608 | 2025-01-09T23:07:33.680232

\x00[\x00\x00\x00\x00\x00\x00

12205 / tcp

-1327660293 | 2025-01-09T03:53:39.249747

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12287 / tcp

504717326 | 2025-01-18T15:40:53.316257

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

12309 / tcp

740837454 | 2025-01-18T22:48:16.152485

SSH-2.0-OpenSSH_5.3

12316 / tcp

1911457608 | 2025-01-11T19:05:05.906897

\x00[\x00\x00\x00\x00\x00\x00

12341 / tcp

-1399940268 | 2025-01-19T23:07:30.342860

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12416 / tcp

-1888448627 | 2025-01-20T02:22:43.795882

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12418 / tcp

-1059554316 | 2025-01-17T22:32:55.976635

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

12446 / tcp

-1888448627 | 2025-01-21T20:22:52.962225

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12479 / tcp

-249504111 | 2025-01-21T08:30:41.235788

\x00[xU-\x7f\x00\x00

12486 / tcp

-1399940268 | 2025-01-09T13:41:52.245438

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12534 / tcp

-2096652808 | 2025-01-18T22:58:54.832016

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

14026 / tcp

819727972 | 2025-01-20T21:54:20.955617

SSH-2.0-OpenSSH_7.4

14084 / tcp

117101543 | 2025-01-22T08:45:25.691178

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

15082 / tcp

-1327660293 | 2025-01-21T19:00:48.329780

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

15503 / tcp

1332894250 | 2025-01-20T15:58:29.948389

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

16008 / tcp

-1261090339 | 2025-01-18T14:12:36.945160

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

17778 / tcp

819727972 | 2025-01-17T14:02:28.037331

SSH-2.0-OpenSSH_7.4

18070 / tcp

819727972 | 2025-01-20T08:11:15.491522

SSH-2.0-OpenSSH_7.4

19080 / tcp

-249504111 | 2025-01-19T20:13:38.873574

\x00[xU-\x7f\x00\x00

20256 / tcp

1911457608 | 2024-12-24T21:06:47.149669

\x00[\x00\x00\x00\x00\x00\x00

20443 / tcp

819727972 | 2025-01-15T16:23:26.147932

SSH-2.0-OpenSSH_7.4

20880 / tcp

1370263973 | 2025-01-22T12:21:04.035620

dubbo>

21025 / tcp

-358801646 | 2024-12-29T04:31:12.011058

SSH-2.0-OpenSSH_6.6.1

21277 / tcp

-1538260461 | 2025-01-21T01:21:05.484065

\x01\x00\x00\x00

21296 / tcp

-1399940268 | 2025-01-10T05:05:05.651181

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

25008 / tcp

-2096652808 | 2025-01-22T10:23:57.585639

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

25010 / tcp

-1730858130 | 2025-01-18T01:00:17.274641

RFB 003.008
VNC:
  Protocol Version: 3.8

27017 / tcp

1763259671 | 2025-01-21T23:38:55.437078

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

30120 / tcp

-2140303521 | 2025-01-12T14:58:30.869319

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

31210 / tcp

117101543 | 2025-01-13T16:59:48.592604

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

32764 / tcp

-1399940268 | 2025-01-21T05:27:58.397213

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44158 / tcp

-433302150 | 2025-01-21T07:29:09.859284

/multistream/1.0.0

44305 / tcp

-1888448627 | 2025-01-20T16:47:42.734673

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

45003 / tcp

-1399940268 | 2025-01-13T03:03:40.840901

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

45555 / tcp

-2089734047 | 2025-01-08T21:23:05.597928

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

47990 / tcp

1887224352 | 2024-12-28T20:31:54.326085

50000 / tcp

1887224352 | 2025-01-06T20:05:36.276879

50100 / tcp

321971019 | 2025-01-21T06:56:26.610611

-ERR client ip is not in whitelist\r

51004 / tcp

1911457608 | 2025-01-19T00:17:26.172465

\x00[\x00\x00\x00\x00\x00\x00

54138 / tcp

1911457608 | 2025-01-22T11:06:19.749734

\x00[\x00\x00\x00\x00\x00\x00

54322 / tcp

2087396567 | 2025-01-22T00:10:52.392337

kjnkjabhbanc283ubcsbhdc72

54522 / tcp

1690634669 | 2025-01-21T20:21:16.491240

55000 / tcp

-1399940268 | 2025-01-21T21:23:26.535363

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

55122 / tcp

677934968 | 2025-01-21T01:16:07.906578

lm^)Q

55422 / tcp

-321444299 | 2025-01-21T08:58:40.625275

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

55443 / tcp

2087396567 | 2025-01-07T12:28:31.726550

kjnkjabhbanc283ubcsbhdc72

55822 / tcp

-971970408 | 2025-01-20T20:19:06.153769

55922 / tcp

-441419608 | 2025-01-20T19:00:53.807848

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

56122 / tcp

539065883 | 2025-01-20T12:03:05.636355

56422 / tcp

2087396567 | 2025-01-20T01:33:47.682580

kjnkjabhbanc283ubcsbhdc72

56722 / tcp

171352214 | 2025-01-20T03:26:54.903582

-ERR client ip is not in whitelist

58392 / tcp

-1476017887 | 2025-01-19T03:56:09.434854

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

63210 / tcp

-1694458451 | 2024-12-26T22:46:15.848782

@
05@ þ...

123.182.48.168

Last Seen: 2025-01-22

Tags:

GeneralInformation

Vulnerabilities All ports Port 70 Port 515 Port 2003 Port 3090 Port 5938 Port 7500 Port 8117 Port 8248 Port 9165 Port 9333 Port 10001 Port 12287 Port 12309 Port 14026 Port 17778 Port 18070 Port 20443 Latest CVSS

OpenPorts

13 / tcp 1297354658 | 2024-12-29T14:37:37.158069

22 / tcp 1182368253 | 2025-01-07T01:01:44.318698

37 / tcp -886440009 | 2025-01-21T10:47:50.990454

51 / tcp -1139539254 | 2025-01-20T09:27:36.583182

70 / tcp -972699072 | 2025-01-19T18:08:29.783936

79 / tcp -876294238 | 2025-01-05T05:54:57.535990

80 / tcp 1608940450 | 2025-01-13T11:31:33.966248

Hashes

113 / tcp -1777894858 | 2025-01-22T07:59:00.741594

143 / tcp 376198496 | 2024-12-24T19:07:57.485508

222 / tcp -1174972798 | 2025-01-12T04:25:09.783312

311 / tcp -1547976805 | 2025-01-20T17:34:11.418203

447 / tcp -1810987450 | 2025-01-22T07:44:13.320897

515 / tcp -784071826 | 2025-01-19T16:56:27.262808

685 / tcp 1948301213 | 2025-01-13T19:06:44.886949

777 / tcp -1346601424 | 2025-01-18T21:23:13.709424

806 / tcp -1399940268 | 2025-01-19T01:12:45.171946

990 / tcp 1583167286 | 2025-01-19T01:49:06.008826

992 / tcp -1718295362 | 2025-01-02T19:03:07.161466

1000 / tcp -747911285 | 2025-01-12T18:44:07.521077

1153 / tcp 632542934 | 2025-01-20T17:31:56.290012

1457 / tcp -2096652808 | 2025-01-21T05:14:21.353728

1723 / tcp 2064046231 | 2025-01-20T18:36:19.248585

1883 / tcp 1615193817 | 2025-01-03T18:00:55.888958

1922 / tcp 1208318993 | 2025-01-07T18:26:56.440548

1965 / tcp 921225407 | 2025-01-14T13:32:15.793215

2003 / tcp 819727972 | 2025-01-20T20:20:17.328064

2048 / tcp -1399940268 | 2025-01-21T22:48:57.311274

2081 / tcp -2089734047 | 2025-01-08T09:04:30.839033

2087 / tcp -1373613804 | 2024-12-28T10:19:14.636742

2121 / tcp 141730637 | 2025-01-19T18:51:59.321909

2181 / tcp 546151771 | 2025-01-14T00:29:20.861370

2196 / tcp -2089734047 | 2025-01-14T21:37:17.746567

2455 / tcp -1900404274 | 2025-01-19T22:10:53.450016

2562 / tcp -1140468363 | 2025-01-20T19:26:51.216343

2628 / tcp 1690634669 | 2024-12-25T05:10:43.328328

2762 / tcp -1399940268 | 2024-12-31T07:03:55.578041

3003 / tcp -1227409554 | 2025-01-20T19:30:09.225585

3068 / tcp -358801646 | 2025-01-15T07:37:08.250026

3080 / tcp 632542934 | 2025-01-21T21:55:09.243650

3084 / tcp 921225407 | 2025-01-21T16:01:12.393897

3090 / tcp 819727972 | 2025-01-17T22:00:54.160805

3116 / tcp -2096652808 | 2025-01-18T18:40:55.001437

3123 / tcp -2096652808 | 2025-01-13T19:49:49.838770

3167 / tcp -2089734047 | 2025-01-20T00:01:23.748086

3306 / tcp 292351399 | 2024-12-24T01:30:27.913439

3388 / tcp -1399940268 | 2025-01-19T12:01:26.219094

3524 / tcp -1399940268 | 2025-01-17T00:34:30.810359

3841 / tcp -1399940268 | 2025-01-22T04:33:06.507588

4506 / tcp -222277909 | 2025-01-10T00:11:02.615945

4602 / tcp 1763259671 | 2025-01-12T07:47:04.859043

4786 / tcp -1641514916 | 2025-01-20T02:19:29.870442

4933 / tcp 1911457608 | 2025-01-12T08:28:59.558455

5001 / tcp 1353260875 | 2025-01-18T07:51:09.400632

5006 / tcp 957278843 | 2025-01-21T09:46:17.790179

5010 / tcp 1911457608 | 2025-01-02T21:21:29.044067

5061 / tcp -1399940268 | 2025-01-15T21:40:25.519270

5201 / tcp -1888448627 | 2025-01-22T12:45:31.753644

5269 / tcp -1074907534 | 2025-01-20T01:55:28.313249

5432 / tcp 1911457608 | 2024-12-26T08:54:32.052347

5435 / tcp 1189133115 | 2025-01-12T05:30:51.076655

5593 / tcp 1911457608 | 2025-01-21T21:38:56.553025

5696 / tcp 1996932384 | 2025-01-16T03:54:20.455136

5917 / tcp 103159425 | 2025-01-11T21:09:57.919577

5938 / tcp 819727972 | 2025-01-06T18:38:10.145163

5985 / tcp 0 | 2024-12-27T23:16:27.521267

Hashes

6002 / tcp -1681927087 | 2025-01-04T22:24:36.987490

6020 / tcp 1077013874 | 2025-01-10T00:47:35.932259

6666 / tcp 372433470 | 2024-12-23T21:56:39.929657

6697 / tcp -1399940268 | 2024-12-25T22:36:43.060330

7001 / tcp 265065882 | 2025-01-06T06:39:59.104517

7218 / tcp 632542934 | 2024-12-27T03:26:08.441850

7445 / tcp -1888448627 | 2025-01-17T06:59:10.095321

Vulnerabilities

13 / tcp

1297354658 | 2024-12-29T14:37:37.158069

22 / tcp

1182368253 | 2025-01-07T01:01:44.318698

37 / tcp

-886440009 | 2025-01-21T10:47:50.990454

51 / tcp

-1139539254 | 2025-01-20T09:27:36.583182

70 / tcp

-972699072 | 2025-01-19T18:08:29.783936

79 / tcp

-876294238 | 2025-01-05T05:54:57.535990

80 / tcp

1608940450 | 2025-01-13T11:31:33.966248

113 / tcp

-1777894858 | 2025-01-22T07:59:00.741594

143 / tcp

376198496 | 2024-12-24T19:07:57.485508

222 / tcp

-1174972798 | 2025-01-12T04:25:09.783312

311 / tcp

-1547976805 | 2025-01-20T17:34:11.418203

447 / tcp

-1810987450 | 2025-01-22T07:44:13.320897

515 / tcp

-784071826 | 2025-01-19T16:56:27.262808

685 / tcp

1948301213 | 2025-01-13T19:06:44.886949

777 / tcp

-1346601424 | 2025-01-18T21:23:13.709424

806 / tcp

-1399940268 | 2025-01-19T01:12:45.171946

990 / tcp

1583167286 | 2025-01-19T01:49:06.008826

992 / tcp

-1718295362 | 2025-01-02T19:03:07.161466

1000 / tcp

-747911285 | 2025-01-12T18:44:07.521077

1153 / tcp

632542934 | 2025-01-20T17:31:56.290012

1457 / tcp

-2096652808 | 2025-01-21T05:14:21.353728

1723 / tcp

2064046231 | 2025-01-20T18:36:19.248585

1883 / tcp

1615193817 | 2025-01-03T18:00:55.888958

1922 / tcp

1208318993 | 2025-01-07T18:26:56.440548

1965 / tcp

921225407 | 2025-01-14T13:32:15.793215

2003 / tcp

819727972 | 2025-01-20T20:20:17.328064

2048 / tcp

-1399940268 | 2025-01-21T22:48:57.311274

2081 / tcp

-2089734047 | 2025-01-08T09:04:30.839033

2087 / tcp

-1373613804 | 2024-12-28T10:19:14.636742

2121 / tcp

141730637 | 2025-01-19T18:51:59.321909

2181 / tcp

546151771 | 2025-01-14T00:29:20.861370

2196 / tcp

-2089734047 | 2025-01-14T21:37:17.746567

2455 / tcp

-1900404274 | 2025-01-19T22:10:53.450016

2562 / tcp

-1140468363 | 2025-01-20T19:26:51.216343

2628 / tcp

1690634669 | 2024-12-25T05:10:43.328328

2762 / tcp

-1399940268 | 2024-12-31T07:03:55.578041

3003 / tcp

-1227409554 | 2025-01-20T19:30:09.225585

3068 / tcp

-358801646 | 2025-01-15T07:37:08.250026

3080 / tcp

632542934 | 2025-01-21T21:55:09.243650

3084 / tcp

921225407 | 2025-01-21T16:01:12.393897

3090 / tcp

819727972 | 2025-01-17T22:00:54.160805

3116 / tcp

-2096652808 | 2025-01-18T18:40:55.001437

3123 / tcp

-2096652808 | 2025-01-13T19:49:49.838770

3167 / tcp

-2089734047 | 2025-01-20T00:01:23.748086

3306 / tcp

292351399 | 2024-12-24T01:30:27.913439

3388 / tcp

-1399940268 | 2025-01-19T12:01:26.219094

3524 / tcp

-1399940268 | 2025-01-17T00:34:30.810359

3841 / tcp

-1399940268 | 2025-01-22T04:33:06.507588

4506 / tcp

-222277909 | 2025-01-10T00:11:02.615945

4602 / tcp

1763259671 | 2025-01-12T07:47:04.859043

4786 / tcp

-1641514916 | 2025-01-20T02:19:29.870442

4933 / tcp

1911457608 | 2025-01-12T08:28:59.558455

5001 / tcp

1353260875 | 2025-01-18T07:51:09.400632

5006 / tcp

957278843 | 2025-01-21T09:46:17.790179

5010 / tcp

1911457608 | 2025-01-02T21:21:29.044067

5061 / tcp

-1399940268 | 2025-01-15T21:40:25.519270

5201 / tcp

-1888448627 | 2025-01-22T12:45:31.753644

5269 / tcp

-1074907534 | 2025-01-20T01:55:28.313249

5432 / tcp

1911457608 | 2024-12-26T08:54:32.052347

5435 / tcp

1189133115 | 2025-01-12T05:30:51.076655

5593 / tcp

1911457608 | 2025-01-21T21:38:56.553025

5696 / tcp

1996932384 | 2025-01-16T03:54:20.455136

5917 / tcp

103159425 | 2025-01-11T21:09:57.919577

5938 / tcp

819727972 | 2025-01-06T18:38:10.145163

5985 / tcp

0 | 2024-12-27T23:16:27.521267

6002 / tcp

-1681927087 | 2025-01-04T22:24:36.987490

6020 / tcp

1077013874 | 2025-01-10T00:47:35.932259

6666 / tcp

372433470 | 2024-12-23T21:56:39.929657

6697 / tcp

-1399940268 | 2024-12-25T22:36:43.060330

7001 / tcp

265065882 | 2025-01-06T06:39:59.104517

7218 / tcp

632542934 | 2024-12-27T03:26:08.441850

7445 / tcp

-1888448627 | 2025-01-17T06:59:10.095321

7500 / tcp

819727972 | 2025-01-19T05:46:15.986186

7687 / tcp

-1114821551 | 2025-01-14T05:54:53.474672

8085 / tcp

1082732927 | 2024-12-24T16:33:01.311875

8087 / tcp

-136006866 | 2025-01-08T14:12:16.290087

8089 / tcp

660175493 | 2025-01-01T21:51:58.578772

8099 / tcp

-1416565584 | 2025-01-22T10:52:42.384222

8117 / tcp

819727972 | 2025-01-15T07:07:30.540116