GeneralInformation

Country	China
City	Beijing
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 17 19 21 25 43 49 53 70 79 80 85 87 89 100 101 102 104 110 111 113 119 122 135 143 175 179 195 264 311 389 427 444 450 451 465 502 515 522 541 548 554 587 593 636 666 743 771 789 808 809 853 873 902 995 1023 1025 1080 1081 1099 1153 1234 1365 1414 1433 1521 1557 1599 1604 1605 1800 1801 1883 1922 1955 1962 1976 2001 2002 2008 2055 2081 2082 2083 2087 2091 2122 2150 2154 2156 2181 2200 2222 2323 2332 2345 2362 2376 2404 2435 2443 2455 2602 2626 2628 2650 2761 2762 2985 2995 3001 3003 3008 3020 3049 3053 3060 3062 3065 3071 3073 3080 3092 3099 3103 3110 3111 3126 3131 3133 3146 3147 3148 3178 3179 3181 3186 3197 3221 3268 3269 3299 3306 3310 3352 3388 3389 3405 3540 3549 3556 3562 3563 3790 3792 3838 4000 4022 4063 4064 4072 4150 4157 4159 4165 4242 4250 4282 4321 4343 4369 4401 4402 4430 4443 4444 4445 4447 4500 4505 4506 4520 4530 4786 4808 4840 4899 4949 5001 5006 5007 5009 5010 5061 5070 5100 5150 5201 5222 5223 5227 5250 5254 5258 5267 5268 5271 5277 5351 5432 5435 5443 5446 5597 5598 5607 5620 5640 5905 5984 5987 6000 6002 6009 6379 6513 6514 6588 6653 6666 6667 6668 6697 6779 6887 7001 7011 7020 7070 7071 7086 7087 7171 7218 7272 7302 7415 7434 7443 7500 7510 7548 7601 7634 7771 7878 7979 8002 8007 8009 8017 8024 8032 8049 8057 8071 8081 8083 8085 8087 8089 8099 8103 8106 8109 8110 8126 8134 8139 8141 8167 8172 8181 8183 8187 8200 8250 8251 8280 8291 8300 8333 8383 8405 8409 8427 8435 8436 8440 8443 8447 8455 8500 8530 8545 8548 8550 8554 8564 8566 8569 8578 8579 8582 8591 8597 8598 8649 8700 8702 8707 8728 8743 8767 8789 8807 8819 8820 8833 8834 8856 8867 8870 8876 8878 8880 8884 8889 8891 8900 8908 8910 8915 9001 9002 9010 9019 9026 9029 9042 9050 9051 9062 9073 9084 9088 9091 9092 9095 9097 9100 9131 9139 9141 9148 9151 9152 9156 9162 9164 9170 9183 9204 9241 9250 9256 9280 9333 9398 9418 9480 9507 9527 9530 9595 9600 9633 9696 9710 9761 9773 9876 9885 9898 9923 9994 9998 9999 10000 10001 10034 10046 10052 10066 10100 10134 10250 10251 10393 10892 10911 11000 11112 11211 11288 11300 11481 12000 12001 12056 12105 12108 12114 12126 12134 12144 12151 12167 12173 12179 12182 12183 12193 12195 12199 12204 12217 12250 12280 12296 12300 12313 12331 12341 12345 12349 12352 12353 12377 12381 12385 12392 12394 12397 12399 12403 12417 12421 12434 12436 12457 12461 12462 12466 12469 12495 12496 12497 12499 12506 12510 12512 12516 12519 12525 12534 12536 12542 12544 12549 12565 12574 12585 12589 12615 13001 13443 14084 14130 14147 14182 14344 14404 14443 14894 14900 15502 15504 15588 15831 16019 16024 16031 16033 16036 16037 16047 16049 16068 16075 16080 16092 17771 17778 18001 18002 18007 18010 18028 18031 18043 18047 18050 18051 18053 18059 18062 18064 18066 18068 18088 18091 18113 18245 19000 19013 19014 19100 19443 20000 20010 20110 20121 20208 20256 20440 20880 21025 21083 21233 21236 21241 21245 21252 21275 21276 21278 21283 21288 21292 21316 21320 21379 22103 22556 23023 23184 25001 25003 25565 25952 27017 30002 30003 30009 30019 30106 30122 30123 30444 31001 31210 31337 32764 33060 34122 34322 34522 34722 34822 34922 35004 35122 35240 35422 35522 35524 36322 36422 36505 36622 36722 36822 37122 37222 37322 37522 37777 37822 38022 38122 38322 38522 38622 38822 38922 39022 39522 39622 39722 39822 40001 40022 40029 40522 40722 40922 41022 41122 41222 41322 41622 41722 41800 41822 41922 42222 42322 42422 42822 42922 43009 43022 43322 43522 43722 43822 44022 44158 44222 44337 44340 44520 44522 44722 44818 44822 45122 45222 45333 45444 45522 45722 45922 46122 46322 46522 46622 46722 46822 47000 47122 47222 47422 47522 48002 48018 48122 48222 48422 48622 48822 49122 49210 49322 49422 49443 49502 49622 49692 49822 49922 50000 50004 50009 50050 50080 50422 50443 50822 51007 51022 51222 51235 51322 51422 51722 51922 52322 52422 52922 53122 53422 53805 53822 54022 54122 54138 54222 54422 54622 54922 55000 55322 55442 55443 55490 55553 55554 55622 55722 55922 56222 56622 56822 56922 57222 57422 57522 57622 57783 57788 58022 58122 58222 58522 58722 58822 58922 59122 59222 59322 59622 59822 59922 60021 61613 61616 62078 62080 63210 63256 63260

11 / tcp

-971970408 | 2025-01-10T06:12:19.554954

13 / tcp

-341265581 | 2025-01-24T16:13:10.766385

HTTP/1.1 404

15 / tcp

799468586 | 2025-02-04T23:40:09.218388

ICA

17 / tcp

-2006293986 | 2025-01-31T21:25:50.266053

ÿû\x01
Welcome to NetLinx v94 Copyright AMX Corp. 34395-49007
>

19 / tcp

676476721 | 2025-01-31T18:27:51.443668

ELM Enterprise Manager _l
Copyright © 18668511-928641920 TNT Software, Inc.

21 / tcp

2116898107 | 2025-02-02T19:07:45.108932

220 (vsFTPd 3.0.2)

25 / tcp

-1795027372 | 2025-01-20T13:27:53.094735

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

43 / tcp

819727972 | 2025-01-25T00:18:40.593189

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

49 / tcp

-359657882 | 2025-02-03T22:52:31.527206

GBPK\xc3\xbb\xc3\xb7n\\xc2\\x93W\xc2\xaf\\xc2\\x86\\xc2\\x93x@\xc2\xa9\\x0e\xc3\x8a*\\xc2\\x9bS

53 / tcp

1369632081 | 2025-01-14T12:03:20.596600

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x01\x03\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x01\x14\x00\x04\xac٠N
\x00\x06\x85\x80\x00\x01\x00\x01\x00\x00\x00

70 / tcp

-972699072 | 2025-01-14T15:36:55.786825

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

CVE-2018-10088

79 / tcp

268196945 | 2025-01-30T21:51:26.865154

AB\x01

80 / tcp

0 | 2025-02-01T23:00:19.939614

Hashes

hash

1122893718

http.dom_hash

http.html_hash

http.server_hash

770118053

HTTP/1.1 404 Not Found
date: Sat, 01 Feb 2025 23:00:19 GMT
server: istio-envoy
x-request-id: 631b68c8-e968-4c63-9a78-df39bd8bea83
content-length: 0

85 / tcp

-1996280214 | 2025-01-29T07:02:32.353227

\x06\x04\x05@

87 / tcp

632542934 | 2025-01-28T17:42:19.611765

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

89 / tcp

-345718689 | 2025-01-25T19:16:14.078130

Vty password is not set.

100 / tcp

819727972 | 2025-01-09T02:51:48.203188

SSH-2.0-OpenSSH_7.4

101 / tcp

-1019343788 | 2025-01-27T14:07:47.646659

W!\x00\x00\x00\x00

102 / tcp

-1399940268 | 2025-01-10T03:54:07.986014

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

104 / tcp

-2096652808 | 2025-02-03T12:58:27.310042

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

110 / tcp

1623746877 | 2025-01-29T20:31:46.197480

500 Permission denied - closing connection.\r\n

111 / tcp

1220320909 | 2025-01-27T18:47:27.481786

[îd

113 / tcp

455076604 | 2025-01-30T22:41:17.657986

!\x07version\x04bind7 t{RPowerDNS Recursor 410

119 / tcp

-2107996212 | 2025-02-02T14:34:30.230263

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

122 / tcp

1911457608 | 2025-01-28T23:27:17.318810

\x00[\x00\x00\x00\x00\x00\x00

135 / tcp

-875843738 | 2025-02-03T20:03:37.380911

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: DESKTOP-QII9S59\n IP2: 192.168.2.2\n IP3: 192.168.80.1\n IP4: 172.28.112.1\n\nNTLMSSP:\nTarget_Name: DESKTOP-QII9S59\nProduct_Version: 10.0.19041 Ntlm 15\nOS: Windows 10, Version 2004/Windows Server, Version 2004\nNetBIOS_Domain_Name: DESKTOP-QII9S59\nNetBIOS_Computer_Name: DESKTOP-QII9S59\nDNS_Domain_Name: DESKTOP-QII9S59\nDNS_Computer_Name: DESKTOP-QII9S59\nSystem_Time: 2024-01-22 04:06:58 +0000 UTC\n\nDCE

143 / tcp

376198496 | 2025-02-03T21:14:48.937198

* OK Coremail System IMap Server Ready(mispb-151a50c7-932b-471d-b699-900151c4d82d-foreseahealth.com[c1988e81907d5583d41947167f416ce9])\r\n

175 / tcp

937756010 | 2025-01-22T17:44:29.681172

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

179 / tcp

-399606100 | 2025-01-27T23:46:29.720744

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

195 / tcp

1921398876 | 2025-01-31T21:08:36.805361

ÿý"
LinuxNode v06953 (ggfks)

login:

264 / tcp

-1709030885 | 2025-02-02T09:38:03.675023

SSH-

311 / tcp

-1547976805 | 2025-01-12T02:26:50.267005

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

389 / tcp

811247330 | 2025-01-12T15:17:15.496674

HTTP/1.1 200 OK
Server: Apache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, nosnippet, notranslate, noimageindex
Content-Type: text/html; charset=utf-8

427 / tcp

-525136240 | 2025-02-01T21:23:42.563928

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://bogon.xylink\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\nservice:wbem:https\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://bogon.xylink\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (

444 / tcp

1808124991 | 2025-01-23T19:38:04.193721

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Thu, 23 Jan 2025 19:38:03 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

450 / tcp

-1399940268 | 2025-01-11T12:30:44.944042

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

451 / tcp

-1428621233 | 2025-01-27T23:21:23.626190

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

465 / tcp

897328069 | 2025-01-31T22:14:32.222270

220 mail.scott000.com ESMTP

502 / tcp

-2089734047 | 2025-02-06T13:50:09.368320

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

515 / tcp

2087396567 | 2025-01-24T21:38:15.012331

kjnkjabhbanc283ubcsbhdc72

522 / tcp

-1399940268 | 2025-01-09T15:26:38.027007

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

541 / tcp

1497273505 | 2025-01-16T02:43:41.042500

\\x16\\x03\\x01\\x01P\\x01\\x00\\x01L\\x03\\x03\\x84L\\xcf\\x00\\x0e\xc4\x96Q\\xf3\\xb1\\x9f\\x88\\x08\\x92\\xd7S\\xf1\\xb7\\xc9\\xc79\\xcc\\xf6Tk\\x1dj\\xc6`\\x89\\x86\\xeb \\xbc\\xef\\xc3<\\xe5g\\x96\\xa4L\\x1c\\x1b]ea\\x81$D\\x99\\x92eH\\x85\\x82\\x1b*\\xc2*\\xaeb9n9\\x002\\x13\\x02\\x13\\x03\\x13\\x01\\x009\\x0

548 / tcp

-1769206458 | 2025-02-05T07:59:48.287508

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: NASDF59D2\nMachine Type: \\x10Netatalk3.1.9.q2\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: DHX2\\x0f,No User Authent\\x10,Cleartxt Passwrd\\x00\nServer Signature: 00000000008002000180030002800280

554 / tcp

1167995424 | 2025-01-13T04:31:15.832735

RTSP/1.0 200 OK
Server: Server/1.0.0
CSeq: 1
Public: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, GET_PARAMETER, SET_PARAMETER

587 / tcp

1332630808 | 2025-01-13T06:15:37.584009

220 ESMTP MAIL Server\r\n250-mail.kyoeisha.com.tw\r\n250-PIPELINING\r\n250-SIZE 20480000\r\n250-VRFY\r\n250-ETRN\r\n250-STARTTLS\r\n250-AUTH PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250-DSN\r\n250-SMTPUTF8\r\n250 CHUNKING\r\n502 5.5.2 Error: command not recognized\r\n

593 / tcp

1308377066 | 2025-02-01T13:46:00.070559

ncacn_http/1.0

636 / tcp

1732481781 | 2025-01-28T13:54:51.872231

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 8-38284903-0 0NNN RT(1705909933705 166) q(-1 -1 -1 -1) r(0 -1) b1

666 / tcp

-1420968138 | 2025-01-27T11:42:00.318052

HTTP/1.0 200 OK
Server: SonicWALL
Expires: -1
Cache-Control: no-cache
Content-type: text/html; charset=UTF-8;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains

743 / tcp

-2089734047 | 2025-01-22T12:25:20.155781

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

771 / tcp

1189133115 | 2025-01-09T21:22:31.459889

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

789 / tcp

-1713437100 | 2025-01-30T04:02:37.636764

\xc3\xbf\xc3\xbb\x01\r\nWelcome to NetLinx v94 Copyright AMX Corp. 34395-49007\r\n>

808 / tcp

-1166978945 | 2025-01-24T08:43:24.705138

HTTP/1.1 407 Proxy Authentication Required
Server: Proxy
Proxy-Authenticate: Basic realm="CCProxy Authorization"
Connection: Close
Proxy-Connection: Close

809 / tcp

165188539 | 2025-01-18T21:18:56.199029

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

853 / tcp

-1399940268 | 2025-01-27T18:35:31.180886

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

873 / tcp

-1970692834 | 2025-01-24T12:38:29.097880

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

902 / tcp

1956828827 | 2025-01-18T09:12:26.917872

220 VMware Authentication Daemon Version 1.10: SSL Required, Se
rverDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , , NFCSSL supported/t

995 / tcp

-740312032 | 2025-02-04T23:34:04.220081

+OK Dovecot (Ubuntu) ready.\r\n

1023 / tcp

1632932802 | 2025-01-28T17:57:34.675324

1025 / tcp

1189133115 | 2025-01-21T03:02:44.904983

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

1080 / tcp

1362344524 | 2025-01-30T16:34:52.267146

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1081 / tcp

-154107716 | 2025-01-17T13:14:48.884612

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST ...

1099 / tcp

-1099385124 | 2025-01-15T11:13:33.031316

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

1153 / tcp

-2089734047 | 2025-01-20T08:41:37.926807

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1234 / tcp

-2107996212 | 2025-01-10T06:28:20.226765

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

1365 / tcp

921225407 | 2025-01-15T18:35:14.714303

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1414 / tcp

1308377066 | 2025-01-30T22:44:05.550866

ncacn_http/1.0

1433 / tcp

555056254 | 2025-01-19T09:00:35.050406

MSSQL Server\nVersion: 171050560 (0xa320640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: 3NXCU7QCCJGSTII\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: 3NXCU7QCCJGSTII\nNetBIOS_Computer_Name: 3NXCU7QCCJGSTII\nDNS_Domain_Name: 3NXCU7QCCJGSTII\nDNS_Computer_Name: 3NXCU7QCCJGSTII\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 01:19:47 +0000 UTC\n\n

1521 / tcp

-541815454 | 2025-01-16T13:56:52.925145

Version:11.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=186646784)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

1557 / tcp

-1888448627 | 2025-01-13T13:35:13.098515

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1599 / tcp

-2107996212 | 2025-02-05T02:45:07.297343

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

1604 / tcp

819727972 | 2025-01-28T08:55:37.135730

SSH-2.0-OpenSSH_7.4

1605 / tcp

-1399940268 | 2025-01-27T01:26:35.119255

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1800 / tcp

1623746877 | 2025-01-28T06:44:27.613167

500 Permission denied - closing connection.\r\n

1801 / tcp

1745717579 | 2025-02-06T14:18:52.470746

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae224e_PS-CSX-01CvJ183_33983-2857

1883 / tcp

-122096153 | 2025-02-06T11:54:52.366627

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

1922 / tcp

1911457608 | 2025-01-07T18:35:01.948303

\x00[\x00\x00\x00\x00\x00\x00

1955 / tcp

-2089734047 | 2025-01-11T15:51:28.589266

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1962 / tcp

921225407 | 2025-02-05T23:54:26.549522

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1976 / tcp

1911457608 | 2025-02-04T21:46:15.599556

\x00[\x00\x00\x00\x00\x00\x00

2001 / tcp

1911457608 | 2025-01-22T21:48:17.959311

\x00[\x00\x00\x00\x00\x00\x00

2002 / tcp

1231376952 | 2025-01-16T15:32:02.516766

2008 / tcp

1741579575 | 2025-01-30T04:42:42.502124

2055 / tcp

-1839934832 | 2025-01-22T21:49:39.663543

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

2081 / tcp

1574088840 | 2025-01-18T20:46:23.325167

">Application and Content Networking Software 3.9</a>)\n</BODY><

2082 / tcp

-2118655245 | 2025-01-23T07:58:48.917688

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

2083 / tcp

-1013082686 | 2025-01-23T00:28:20.668824

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

2087 / tcp

1453929220 | 2025-02-04T19:48:01.930506

[ç

2091 / tcp

-2089734047 | 2025-01-29T22:57:25.110028

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2122 / tcp

-1626979812 | 2025-01-24T02:31:36.894463

220 Service ready for new user.

2150 / tcp

1212285915 | 2025-02-01T21:28:17.191053

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

2154 / tcp

171352214 | 2025-01-28T00:01:48.419882

-ERR client ip is not in whitelist

2156 / tcp

504717326 | 2025-02-03T18:58:08.988464

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

2181 / tcp

546151771 | 2025-02-04T20:28:09.945614

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2200 / tcp

1023953321 | 2025-01-29T04:10:46.568685

HTTP/1.0 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm="proxy"
Connection: close
Content-type: text/html; charset=utf-8

2222 / tcp

2051656595 | 2025-02-06T17:32:13.524168

SSH-2.0-OpenSSH_7.4\r\n\n

2323 / tcp

1662205251 | 2025-01-16T17:10:48.824810

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

2332 / tcp

-1681927087 | 2025-02-04T04:55:31.828198

kjnkjabhbanc283ubcsbhdc72

2345 / tcp

-653033013 | 2025-02-01T04:57:24.657478

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

2362 / tcp

-1399940268 | 2025-01-31T20:19:47.414605

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2376 / tcp

-971970408 | 2025-02-03T17:12:49.146315

2404 / tcp

632542934 | 2025-01-30T22:32:33.896033

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2435 / tcp

-1626979812 | 2025-01-23T08:47:30.656467

220 Service ready for new user.

2443 / tcp

401555314 | 2025-01-20T19:54:20.438630

NB[GFXjA^R

2455 / tcp

819727972 | 2025-01-22T17:15:45.664241

SSH-2.0-OpenSSH_7.4

2602 / tcp

1830187220 | 2025-01-25T19:22:12.594469

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

2626 / tcp

-1399940268 | 2025-02-05T20:18:18.115814

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2628 / tcp

1690634669 | 2025-02-05T21:54:12.978811

2650 / tcp

1911457608 | 2025-02-01T15:47:18.360280

\x00[\x00\x00\x00\x00\x00\x00

2761 / tcp

819727972 | 2025-01-14T20:57:34.077641

SSH-2.0-OpenSSH_7.4

2762 / tcp

580340387 | 2025-01-31T15:57:20.548136

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

2985 / tcp

-1399940268 | 2025-01-22T22:14:45.285860

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2995 / tcp

-585940771 | 2025-01-18T18:39:00.881620

Unknown command\r\n

3001 / tcp

819727972 | 2025-02-05T08:50:28.780094

SSH-2.0-OpenSSH_7.4

3003 / tcp

-1227409554 | 2025-02-01T00:11:44.103159

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3008 / tcp

632542934 | 2025-01-12T18:21:54.874449

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

3020 / tcp

-345718689 | 2025-01-15T08:05:27.077395

Vty password is not set.

3049 / tcp

-1399940268 | 2025-01-09T10:35:57.099693

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3053 / tcp

820958131 | 2025-01-19T03:55:35.507085

kjnkjabhbanc283ubcsbhdc72\x02

3060 / tcp

307999478 | 2025-01-23T06:09:49.160622

unknown command \r\nunknown command \r\n

3062 / tcp

-339084706 | 2025-01-30T03:51:01.494006

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

3065 / tcp

1948301213 | 2025-02-02T17:06:59.036045

RFB 003.003
VNC:
  Protocol Version: 3.3

3071 / tcp

198844676 | 2025-01-27T06:56:02.009207

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3073 / tcp

1911457608 | 2025-01-22T17:55:54.235699

\x00[\x00\x00\x00\x00\x00\x00

3080 / tcp

1011407350 | 2025-02-03T09:41:25.080456

* OK GroupWise IMAP4rev1 Server Ready\r\n

3092 / tcp

165188539 | 2025-02-05T13:49:56.978419

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3099 / tcp

1278527606 | 2025-01-24T21:39:26.358418

SSH-2.0-Teleport

3103 / tcp

165188539 | 2025-01-12T23:28:00.768692

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3110 / tcp

-1399940268 | 2025-01-21T18:15:18.507711

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3111 / tcp

1911457608 | 2025-02-03T23:41:24.874601

\x00[\x00\x00\x00\x00\x00\x00

3126 / tcp

-1399940268 | 2025-01-13T13:26:52.127862

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3131 / tcp

-1888448627 | 2025-01-31T16:24:46.934739

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3133 / tcp

-1839934832 | 2025-01-15T04:10:04.966420

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3146 / tcp

-805362002 | 2025-01-18T23:35:50.293828

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

3147 / tcp

-1399940268 | 2025-01-19T01:27:00.723290

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3148 / tcp

-1399940268 | 2025-01-08T22:37:29.959240

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3178 / tcp

-1733106930 | 2025-01-15T11:18:31.407729

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

3179 / tcp

-980525298 | 2025-01-11T00:28:20.704802

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3181 / tcp

410249975 | 2025-01-16T22:19:35.427134

LNS READY<>

3186 / tcp

-2089734047 | 2025-02-03T20:54:06.015868

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3197 / tcp

1620329124 | 2025-01-16T01:53:55.481029

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

3221 / tcp

-2019309480 | 2025-02-04T18:01:59.171802

<?xml version="1.0" encoding="us-ascii"?>\n

3268 / tcp

-2031078612 | 2025-01-10T10:37:13.478829

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: http://proxy.ces.org.tw:3000/login?url=http%3A%2F%2Floginbyurl.wanfangdata.com.cn%2F

3269 / tcp

921225407 | 2025-01-22T16:51:53.731616

\x00\x00\x00\x04\x00\x00\x00\x00\x00

3299 / tcp

1282941221 | 2025-02-06T09:04:59.886461

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

3306 / tcp

369808347 | 2025-01-31T13:07:22.836016

Mysql Version: 5.7.31-log \r\nN\\x00\\x00\\x00\n5.7.31-log\\x00Ut_\\x02S|d0n0s \\x00\\xff\\xff-\\x02\\x00\\xff\\xc1\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\x0c\\x04&+MJX\n#in8\\x00mysql_native_password\\x00

3310 / tcp

-1839934832 | 2025-02-01T13:52:43.789615

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3352 / tcp

1911457608 | 2025-02-06T10:02:35.872580

\x00[\x00\x00\x00\x00\x00\x00

3388 / tcp

-2017887953 | 2025-02-04T07:42:12.455397

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

3389 / tcp

623170236 | 2025-02-04T01:11:39.066690

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x1f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: PC82139\nProduct_Version: 10.0.19041 Ntlm 15\nOS: Windows 10, Version 2004/Windows Server, Version 2004\nNetBIOS_Domain_Name: PC82139\nNetBIOS_Computer_Name: PC82139\nDNS_Domain_Name: PC82139\nDNS_Computer_Name: PC82139\nSystem_Time: 2024-01-19 08:39:46 +0000 UTC\n\n

3405 / tcp

-1648456501 | 2025-01-15T04:51:27.173014

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

3540 / tcp

1519486042 | 2025-01-14T18:21:53.109817

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

3549 / tcp

1911457608 | 2025-01-09T02:41:35.436253

\x00[\x00\x00\x00\x00\x00\x00

3556 / tcp

-2107996212 | 2025-01-22T18:01:04.775816

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

3562 / tcp

1911457608 | 2025-01-14T21:37:07.403753

\x00[\x00\x00\x00\x00\x00\x00

3563 / tcp

-1428621233 | 2025-01-24T23:54:36.825334

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

3790 / tcp

1741579575 | 2025-01-17T13:25:58.454641

3792 / tcp

-1399940268 | 2025-01-09T21:01:59.312429

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3838 / tcp

-1375131644 | 2025-02-05T11:14:46.182421

\x00[v\xc3\xbdC\x7f\x00\x00

4000 / tcp

141533638 | 2025-01-15T10:14:32.484730

HTTP/1.1 302 Found
Location: /index.html

4022 / tcp

165188539 | 2025-01-29T05:32:12.641082

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

4063 / tcp

539065883 | 2025-01-17T09:39:04.634383

4064 / tcp

-2096652808 | 2025-01-30T13:19:15.989826

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

4072 / tcp

1911457608 | 2025-02-02T21:46:27.617106

\x00[\x00\x00\x00\x00\x00\x00

4150 / tcp

-1327660293 | 2025-01-26T07:35:50.036396

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

4157 / tcp

-1230049476 | 2025-02-02T07:10:31.636329

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

4159 / tcp

-1399940268 | 2025-01-11T02:54:17.965472

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4165 / tcp

-1279886438 | 2025-01-10T22:03:20.562127

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

4242 / tcp

-1914158197 | 2025-01-31T05:05:11.992484

HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

4250 / tcp

671605376 | 2025-01-23T19:33:29.923585

SSH-2.0-OpenSSH_X.X

4282 / tcp

1690634669 | 2025-01-30T16:39:38.783682

4321 / tcp

-1250504565 | 2025-01-19T16:21:13.071923

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

4343 / tcp

1341276753 | 2025-01-27T20:31:08.472627

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae23e9_yd76_3544-29137

4369 / tcp

819727972 | 2025-01-11T16:04:11.518424

SSH-2.0-OpenSSH_7.4

4401 / tcp

-1399940268 | 2025-01-25T03:32:29.982776

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4402 / tcp

-2089734047 | 2025-01-13T07:45:33.328561

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4430 / tcp

2087396567 | 2025-02-03T22:57:08.516466

kjnkjabhbanc283ubcsbhdc72

4443 / tcp

2069201278 | 2025-02-02T17:14:59.527874

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Set-Cookie: login_err_num=0; path=/; secure=true;  httponly=true
Set-Cookie: topsecsvportalstyle=style1; path=/; secure=true;  httponly=true
Set-Cookie: topsecsvportallogodir=default; path=/; secure=true;  httponly=true
Set-Cookie: topsecsvportalname=default; path=/; secure=true;  httponly=true
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protectio

4444 / tcp

1911457608 | 2025-02-05T18:43:26.490075

\x00[\x00\x00\x00\x00\x00\x00

4445 / tcp

1911457608 | 2025-01-22T00:06:06.076796

\x00[\x00\x00\x00\x00\x00\x00

4447 / tcp

2098371729 | 2025-01-27T22:40:41.797464

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

4500 / tcp

819727972 | 2025-01-19T12:44:08.939977

SSH-2.0-OpenSSH_7.4

4505 / tcp

-1327660293 | 2025-01-21T16:29:09.458396

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

4506 / tcp

841014058 | 2025-01-26T16:34:48.576839

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

4520 / tcp

307999478 | 2025-01-11T20:15:56.083312

unknown command \r\nunknown command \r\n

4530 / tcp

1363464823 | 2025-01-20T01:02:16.784568

\x00[|ox\x7f\x00\x00

4786 / tcp

-2096652808 | 2025-01-22T14:02:08.377989

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

4808 / tcp

-2089734047 | 2025-01-12T10:54:10.017924

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4840 / tcp

-2089734047 | 2025-02-04T03:34:57.737618

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4899 / tcp

-984990168 | 2025-01-29T13:10:00.675066


0ÿñ

4949 / tcp

366084633 | 2025-01-23T17:20:09.343592

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

5001 / tcp

-1641514916 | 2025-02-04T16:52:39.077474

* OK Merak 1dFUa2 IMAP4rev1

5006 / tcp

2087396567 | 2025-01-08T22:11:44.524100

kjnkjabhbanc283ubcsbhdc72

5007 / tcp

1492413928 | 2025-01-29T05:41:41.726403

SSH-2.0-OpenSSH_7.5

5009 / tcp

-2015162143 | 2025-01-31T23:57:09.259298

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1c5f_PStjdxtk16_38859-13702

5010 / tcp

-1399940268 | 2025-02-06T16:27:53.900304

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5061 / tcp

819727972 | 2025-02-03T11:37:33.605356

SSH-2.0-OpenSSH_7.4

5070 / tcp

1911457608 | 2025-01-13T21:51:11.712437

\x00[\x00\x00\x00\x00\x00\x00

5100 / tcp

-1399940268 | 2025-02-05T16:34:08.864719

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5150 / tcp

819727972 | 2025-01-21T05:06:28.019745

SSH-2.0-OpenSSH_7.4

5201 / tcp

-653033013 | 2025-02-05T12:39:36.214390

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

5222 / tcp

-971970408 | 2025-01-25T17:21:29.769015

5223 / tcp

-1013082686 | 2025-02-04T16:57:41.068613

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

5227 / tcp

580340387 | 2025-01-24T04:25:18.631651

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

5250 / tcp

-1733645023 | 2025-01-08T21:49:48.077187

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

5254 / tcp

-1399940268 | 2025-01-20T18:32:44.877236

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5258 / tcp

-1888448627 | 2025-01-20T19:04:21.533838

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

5267 / tcp

-1399940268 | 2025-01-13T02:22:26.510903

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5268 / tcp

575925250 | 2025-01-31T17:24:26.732945

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5271 / tcp

-1839934832 | 2025-02-04T18:25:19.818051

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

5277 / tcp

1212285915 | 2025-02-04T03:18:50.668777

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

5351 / tcp

-358801646 | 2025-01-16T18:45:06.982493

SSH-2.0-OpenSSH_6.6.1

5432 / tcp

321971019 | 2025-01-22T08:13:26.804125

-ERR client ip is not in whitelist\r

5435 / tcp

-1399940268 | 2025-01-18T15:57:36.587668

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5443 / tcp

-358801646 | 2025-01-31T02:15:31.433463

SSH-2.0-OpenSSH_6.6.1

5446 / tcp

1632932802 | 2025-01-29T01:33:25.958927

5597 / tcp

1011407350 | 2025-01-16T14:39:59.406173

* OK GroupWise IMAP4rev1 Server Ready\r\n

5598 / tcp

-1032713145 | 2025-01-26T17:17:38.139280

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

5607 / tcp

-1399940268 | 2025-01-11T07:10:18.767026

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5620 / tcp

165188539 | 2025-02-05T08:06:57.087178

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

5640 / tcp

-2096652808 | 2025-01-09T22:54:56.704303

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5905 / tcp

-2033111675 | 2025-01-23T17:30:47.654459

~djb

5984 / tcp

1999272906 | 2025-02-04T16:20:08.415669

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5987 / tcp

378148627 | 2025-01-27T09:36:17.058873

HTTP/1.1 497 Http to Https
Server: nginx/1.20.1
Content-Type: text/html; charset=utf-8
Connection: close

6000 / tcp

-445721795 | 2025-01-17T08:14:05.613446

\x00[\xc3\xaed\x1a\x7f\x00\x00

6002 / tcp

-1733645023 | 2025-02-05T13:17:01.424571

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

6009 / tcp

-1795027372 | 2025-01-22T01:14:47.576186

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

6379 / tcp

321971019 | 2025-01-23T23:41:53.693441

-ERR client ip is not in whitelist\r

6513 / tcp

677934968 | 2025-02-04T18:05:33.038080

lm^)Q

6514 / tcp

1911457608 | 2025-01-22T08:18:36.673960

\x00[\x00\x00\x00\x00\x00\x00

6588 / tcp

819727972 | 2025-01-15T00:34:12.468128

SSH-2.0-OpenSSH_7.4

6653 / tcp

-1327660293 | 2025-01-28T13:03:31.903967

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

6666 / tcp

4935895 | 2025-01-16T13:18:15.331941

HTTP/1.1 400 Bad Request
Server: CloudWAF

6667 / tcp

-2033111675 | 2025-01-20T23:15:24.359453

~djb

6668 / tcp

-2089734047 | 2025-01-26T17:23:08.036455

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

6697 / tcp

-1746074029 | 2025-01-30T04:58:51.113397

101 imqbroker =unV\r\n

6779 / tcp

756886313 | 2025-02-06T09:56:21.310685

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html

6887 / tcp

-1839934832 | 2025-01-24T09:58:29.128520

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

7001 / tcp

1634746382 | 2025-01-13T14:47:11.484412

HTTP/1.1 200 OK
X-Current-Requests: 1
Vary: Origin
Content-Type: application/json; charset=utf-8
X-ReadTime: 51
Connection: keep-alive
Keep-Alive: timeout=5

7011 / tcp

-1327660293 | 2025-02-06T16:42:01.153836

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

7020 / tcp

165188539 | 2025-02-01T20:34:03.197485

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

7070 / tcp

572436013 | 2025-01-29T10:12:41.546359

HTTP/1.1 404 Not Found
Content-Type: text/plain

7071 / tcp

539065883 | 2025-02-06T14:23:39.773873

7086 / tcp

1011407350 | 2025-01-18T04:50:34.888462

* OK GroupWise IMAP4rev1 Server Ready\r\n

7087 / tcp

740837454 | 2025-01-20T02:02:02.105593

SSH-2.0-OpenSSH_5.3

7171 / tcp

-1453516345 | 2025-01-27T15:44:36.063282

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

7218 / tcp

128380719 | 2025-01-09T22:03:49.103840

7272 / tcp

819727972 | 2025-01-13T07:49:16.688026

SSH-2.0-OpenSSH_7.4

7302 / tcp

-1839934832 | 2025-02-01T00:19:57.484977

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

7415 / tcp

580340387 | 2025-01-25T23:15:14.736536

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

7434 / tcp

841014058 | 2025-01-30T01:17:16.830363

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

7443 / tcp

-584993230 | 2025-01-26T00:25:30.311503

HTTP/1.1 400 Bad Request
Server:  
Content-Type: text/html
Connection: close

7500 / tcp

117101543 | 2025-01-26T02:43:05.110866

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

7510 / tcp

945910976 | 2025-02-03T04:01:48.249411

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

7548 / tcp

2087396567 | 2025-01-08T23:29:50.663979

kjnkjabhbanc283ubcsbhdc72

7601 / tcp

1308377066 | 2025-01-30T09:59:30.655199

ncacn_http/1.0

7634 / tcp

-1839934832 | 2025-01-16T01:48:21.849208

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

7771 / tcp

321971019 | 2025-01-14T05:17:21.591336

-ERR client ip is not in whitelist\r

7878 / tcp

819727972 | 2025-02-06T17:59:40.113289

SSH-2.0-OpenSSH_7.4

7979 / tcp

-1399940268 | 2025-01-29T05:36:43.489858

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8002 / tcp

1911457608 | 2025-01-20T03:25:47.611123

\x00[\x00\x00\x00\x00\x00\x00

8007 / tcp

-445955279 | 2025-02-03T09:32:00.687776

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae24c26ba0b56f242738cbb7d05b70

8009 / tcp

-1795027372 | 2025-02-04T20:36:23.154392

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

8017 / tcp

-1399940268 | 2025-01-26T17:57:22.924740

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8024 / tcp

1767345577 | 2025-01-16T09:01:28.308330

Hello, this is Quagga (version 0T).
Copyright 1996-200

8032 / tcp

-1839934832 | 2025-01-23T22:14:47.404406

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8049 / tcp

-1399940268 | 2025-01-18T23:35:46.273252

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8057 / tcp

1911457608 | 2025-01-25T03:09:06.139673

\x00[\x00\x00\x00\x00\x00\x00

8071 / tcp

709622286 | 2025-01-13T07:25:45.645840

OK Welcome <299685> on DirectUpdate server 7286\r\n

8081 / tcp

2087396567 | 2025-01-22T20:35:59.533394

kjnkjabhbanc283ubcsbhdc72

8083 / tcp

-1733645023 | 2025-01-22T13:39:10.817039

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

8085 / tcp

-1729629024 | 2025-01-29T05:06:55.581983

101 imqbroker =unV

8087 / tcp

-1399940268 | 2025-02-05T23:35:30.934233

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8089 / tcp

-1990350878 | 2025-01-24T15:54:30.259307

 
04 \...

8099 / tcp

-1416565584 | 2025-01-21T13:25:38.262204

HTTP/1.1 500 Internal Server Error
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Connection: close

8103 / tcp

-1327660293 | 2025-01-19T01:52:54.697446

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

8106 / tcp

1308377066 | 2025-01-12T12:50:43.995420

ncacn_http/1.0

8109 / tcp

-1428621233 | 2025-01-10T04:10:30.564429

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8110 / tcp

707919486 | 2025-01-24T16:08:58.187833

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

8126 / tcp

740837454 | 2025-01-30T02:47:47.853490

SSH-2.0-OpenSSH_5.3

8134 / tcp

-2096652808 | 2025-01-30T02:51:03.457722

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8139 / tcp

-1810987450 | 2025-01-14T22:37:21.200541

\xc3\xbf

8141 / tcp

-1399940268 | 2025-01-12T16:40:04.634121

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8167 / tcp

401555314 | 2025-01-20T21:01:23.155907

NB[GFXjA^R

8172 / tcp

51259122 | 2025-02-02T18:19:42.060156

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

8181 / tcp

2087396567 | 2025-01-09T19:24:26.006937

kjnkjabhbanc283ubcsbhdc72

8183 / tcp

1911457608 | 2025-01-09T19:10:35.979307

\x00[\x00\x00\x00\x00\x00\x00

8187 / tcp

819727972 | 2025-01-20T04:51:54.210412

SSH-2.0-OpenSSH_7.4

8200 / tcp

-1015019981 | 2025-02-01T10:07:50.794523

HTTP/1.1 200 OK
Content-Type: text/html
Connection: close
Server:  DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.1.4
EXT:

8250 / tcp

-2096652808 | 2025-01-31T14:43:04.856383

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8251 / tcp

1911457608 | 2025-01-23T00:42:51.161231

\x00[\x00\x00\x00\x00\x00\x00

8280 / tcp

1911457608 | 2025-01-10T14:57:54.615730

\x00[\x00\x00\x00\x00\x00\x00

8291 / tcp

632542934 | 2025-02-04T23:50:22.180598

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8300 / tcp

-734440417 | 2025-01-20T08:48:38.625175

HTTP/1.1 400 Bad Request
Content-Type: text/html
Connection: close
Server: nginx/1.17.3

8333 / tcp

-1487943323 | 2025-01-16T20:59:40.998920

431 Unable to negotiate secure command connection.\r\n

8383 / tcp

-42767839 | 2025-01-12T20:50:15.762977

RFB 005.000

VNC:
  Protocol Version: 5.0

8405 / tcp

1911457608 | 2025-01-17T17:52:39.595377

\x00[\x00\x00\x00\x00\x00\x00

8409 / tcp

-1399940268 | 2025-01-30T00:32:21.242309

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8427 / tcp

401555314 | 2025-01-15T19:46:10.754686

NB[GFXjA^R

8435 / tcp

-1105333987 | 2025-01-12T19:47:32.119853

\x00[KpU\x7f\x00\x00

8436 / tcp

-1476017887 | 2025-01-09T15:41:13.970792

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

8440 / tcp

-1105333987 | 2025-01-12T08:59:12.161848

\x00[KpU\x7f\x00\x00

8443 / tcp

-1482468663 | 2025-02-04T11:35:45.659305

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 04 Feb 2025 11:35:45 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://123.56.248.133:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

8447 / tcp

1767345577 | 2025-01-25T17:59:59.922902

Hello, this is Quagga (version 0T).
Copyright 1996-200

8455 / tcp

-441419608 | 2025-02-03T19:21:22.673737

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

8500 / tcp

-1455149952 | 2025-01-18T21:22:54.565452

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1e27_PS-000-01sNY99_31294-28028

8530 / tcp

-1399940268 | 2025-02-02T17:56:51.568488

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8545 / tcp

-1399940268 | 2025-02-04T00:15:53.409902

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8548 / tcp

165188539 | 2025-01-23T01:27:59.321775

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8550 / tcp

1543809371 | 2025-02-04T03:06:32.049335

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

8554 / tcp

-1373613804 | 2025-01-12T22:32:27.685804

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

8564 / tcp

-585940771 | 2025-01-22T19:17:03.545354

Unknown command\r\n

8566 / tcp

-1399940268 | 2025-02-03T12:55:15.563165

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8569 / tcp

-1888448627 | 2025-02-01T06:55:04.850503

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8578 / tcp

1830187220 | 2025-01-27T20:46:49.019827

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

8579 / tcp

-1013082686 | 2025-01-21T06:28:46.702642

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

8582 / tcp

-1105333987 | 2025-01-23T21:33:27.875048

\x00[KpU\x7f\x00\x00

8591 / tcp

-1648456501 | 2025-01-10T16:05:11.122739

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

8597 / tcp

-801484042 | 2025-02-01T08:44:14.065468

ERR 27

8598 / tcp

1830187220 | 2025-01-27T17:05:30.553344

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

8649 / tcp

842535728 | 2025-01-16T10:43:16.967297

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

8700 / tcp

-288825733 | 2025-01-31T03:53:42.275464

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

8702 / tcp

-136006866 | 2025-01-17T08:41:08.255010

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

8707 / tcp

921225407 | 2025-01-29T20:41:02.586324

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8728 / tcp

1911457608 | 2025-01-29T09:31:45.250119

\x00[\x00\x00\x00\x00\x00\x00

8743 / tcp

-1476017887 | 2025-01-29T06:53:37.966967

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

8767 / tcp

-2096652808 | 2025-01-24T04:26:51.158093

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8789 / tcp

165188539 | 2025-01-30T12:55:42.432235

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8807 / tcp

-1888448627 | 2025-01-30T17:29:31.093060

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8819 / tcp

921225407 | 2025-01-10T11:32:15.939449

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8820 / tcp

1911457608 | 2025-01-13T02:11:13.905732

\x00[\x00\x00\x00\x00\x00\x00

8833 / tcp

1911457608 | 2025-01-29T20:23:05.428921

\x00[\x00\x00\x00\x00\x00\x00

8834 / tcp

104385780 | 2025-01-29T19:08:21.897224

ceph v2

8856 / tcp

1830697416 | 2025-01-16T05:58:51.151209

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

8867 / tcp

819727972 | 2025-01-23T00:40:35.523155

SSH-2.0-OpenSSH_7.4

8870 / tcp

921225407 | 2025-01-09T10:34:42.657500

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8876 / tcp

921225407 | 2025-01-29T13:15:16.982522

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8878 / tcp

1426971893 | 2025-01-20T03:26:39.536655

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

8880 / tcp

2087396567 | 2025-01-08T07:10:13.613753

kjnkjabhbanc283ubcsbhdc72

8884 / tcp

897328069 | 2025-01-11T00:46:00.263234

220 mail.scott000.com ESMTP

8889 / tcp

1741579575 | 2025-01-31T01:55:02.920891

8891 / tcp

1911457608 | 2025-01-16T00:39:08.028670

\x00[\x00\x00\x00\x00\x00\x00

8900 / tcp

-1399940268 | 2025-01-09T07:35:08.071549

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8908 / tcp

1278527606 | 2025-01-20T17:23:40.211501

SSH-2.0-Teleport

8910 / tcp

1504401647 | 2025-01-10T00:53:36.357358

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

8915 / tcp

-303199180 | 2025-02-01T22:55:18.464725

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

9001 / tcp

-1026951088 | 2025-01-27T23:44:29.340451

erro ip

9002 / tcp

1082732927 | 2025-02-01T10:56:48.584529

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

9010 / tcp

-2096652808 | 2025-02-01T00:39:56.563280

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

9019 / tcp

-1399940268 | 2025-01-24T20:35:18.364259

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9026 / tcp

408230060 | 2025-01-15T15:31:30.367583

\r\nSorry, that nickname format is invalid.\r\n

9029 / tcp

819727972 | 2025-01-13T16:22:41.899083

SSH-2.0-OpenSSH_7.4

9042 / tcp

-2031152423 | 2025-01-14T14:07:35.111965

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

9050 / tcp

1620047053 | 2025-01-29T03:37:17.561271

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae16f5_PS-000-011nh7_28449-26544

9051 / tcp

671605376 | 2025-01-25T10:54:20.063865

SSH-2.0-OpenSSH_X.X

9062 / tcp

-1399940268 | 2025-01-15T15:52:37.679028

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9073 / tcp

307999478 | 2025-01-21T11:39:17.692245

unknown command \r\nunknown command \r\n

9084 / tcp

819727972 | 2025-01-09T22:51:27.833940

SSH-2.0-OpenSSH_7.4

9088 / tcp

-1399940268 | 2025-01-11T12:14:08.906181

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9091 / tcp

-786044033 | 2025-01-30T15:40:21.438309

OK Welcome <299685> on DirectUpdate server 7286

9092 / tcp

321971019 | 2025-01-16T00:49:39.068176

-ERR client ip is not in whitelist\r

9095 / tcp

1850902677 | 2025-01-08T20:07:34.981539

W!

9097 / tcp

-1399940268 | 2025-01-12T07:25:38.830446

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9100 / tcp

-445721795 | 2025-01-27T04:19:58.282532

\x00[\xc3\xaed\x1a\x7f\x00\x00

9131 / tcp

-1899074860 | 2025-01-26T13:15:25.469847

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

9139 / tcp

819727972 | 2025-02-01T14:11:56.954231

SSH-2.0-OpenSSH_7.4

9141 / tcp

165188539 | 2025-01-16T07:37:24.319927

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9148 / tcp

1911457608 | 2025-02-03T04:37:57.042903

\x00[\x00\x00\x00\x00\x00\x00

9151 / tcp

401555314 | 2025-01-18T16:18:26.395938

NB[GFXjA^R

9152 / tcp

-1730858130 | 2025-01-22T11:06:02.327933

RFB 003.008
VNC:
  Protocol Version: 3.8

9156 / tcp

-2107996212 | 2025-01-17T20:23:36.903319

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

9162 / tcp

819727972 | 2025-02-06T06:54:26.392752

SSH-2.0-OpenSSH_7.4

9164 / tcp

-1013082686 | 2025-01-31T10:59:19.077623

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

9170 / tcp

321971019 | 2025-01-25T06:32:25.893748

-ERR client ip is not in whitelist\r

9183 / tcp

165188539 | 2025-01-20T04:49:04.060776

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9204 / tcp

1212285915 | 2025-01-15T21:36:06.745846

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

9241 / tcp

-2089734047 | 2025-01-16T14:42:18.374569

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9250 / tcp

-457235091 | 2025-01-23T21:50:19.133560

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

9256 / tcp

-1399940268 | 2025-01-12T23:39:39.672767

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9280 / tcp

-1327660293 | 2025-01-29T20:48:35.104355

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

9333 / tcp

632542934 | 2025-02-04T07:11:36.416516

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

9398 / tcp

745343730 | 2025-01-26T09:07:21.339959

220 smtp.qq.com Esmtp QQ Mail Server

9418 / tcp

233634112 | 2025-01-22T16:38:34.463612

SSH-98.60-SysaxSSH_81885..42

9480 / tcp

-801484042 | 2025-01-12T07:18:58.936245

ERR 27

9507 / tcp

-1996280214 | 2025-02-04T18:54:28.003827

\x06\x04\x05@

9527 / tcp

165188539 | 2025-01-12T03:18:08.816038

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9530 / tcp

-1810987450 | 2025-02-04T03:20:14.172475

\xc3\xbf

9595 / tcp

-2118655245 | 2025-01-08T04:09:01.308771

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

9600 / tcp

-1611764932 | 2025-02-04T04:54:26.782336

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

9633 / tcp

472902042 | 2025-01-28T02:52:48.425058

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

9696 / tcp

321971019 | 2025-01-11T17:51:45.582830

-ERR client ip is not in whitelist\r

9710 / tcp

677934968 | 2025-01-18T13:36:12.334005

lm^)Q

9761 / tcp

165188539 | 2025-02-06T10:41:56.592048

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9773 / tcp

-1648456501 | 2025-01-28T18:02:26.789077

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

9876 / tcp

-1709563712 | 2025-01-10T06:27:02.413475

\\x00\\x00\\x01+\\x00\\x00\\x00_{"code":0,"flag":1,"language":"JAVA","opaque":0,"serializeTypeCurrentRPC":"JSON","version":433}{"brokerAddrTable":{"broker-a":{"brokerAddrs":{0:"62.118.54.92:10911"},"brokerName":"broker-a","cluster":"DefaultCluster","enableActingMaster":false}},"clusterAddrTable":{"DefaultCluster":["broker-a"]}}

9885 / tcp

165188539 | 2025-01-31T10:20:37.700647

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9898 / tcp

1320285193 | 2025-01-13T03:45:27.230315

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

9923 / tcp

-146605374 | 2025-01-18T23:00:33.907287

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

9994 / tcp

-1032713145 | 2025-01-23T23:39:29.718385

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

9998 / tcp

-696402907 | 2025-01-24T19:12:50.966010

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae298c_PS-HIA-01Q7y203_55153-4321

9999 / tcp

1161309183 | 2025-02-05T04:08:20.334660

ProxyServer is ready

10000 / tcp

2087396567 | 2025-01-12T09:23:33.554318

kjnkjabhbanc283ubcsbhdc72

10001 / tcp

1492413928 | 2025-01-20T21:20:22.295818

SSH-2.0-OpenSSH_7.5

10034 / tcp

321971019 | 2025-02-01T04:09:02.860185

-ERR client ip is not in whitelist\r

10046 / tcp

-1399940268 | 2025-01-12T16:37:02.901048

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10052 / tcp

-303199180 | 2025-01-17T21:54:11.928006

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

10066 / tcp

-1327660293 | 2025-01-23T13:31:03.212309

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

10100 / tcp

1574088840 | 2025-01-27T22:20:42.193982

">Application and Content Networking Software 3.9</a>)\n</BODY><

10134 / tcp

819727972 | 2025-02-04T20:24:11.115381

SSH-2.0-OpenSSH_7.4

10250 / tcp

2087396567 | 2025-02-03T10:09:12.959817

kjnkjabhbanc283ubcsbhdc72

10251 / tcp

-1399940268 | 2025-01-09T13:33:28.046776

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10393 / tcp

-1746074029 | 2025-01-26T01:20:53.381293

101 imqbroker =unV\r\n

10892 / tcp

-784071826 | 2025-01-19T05:11:27.835213

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

10911 / tcp

1911457608 | 2025-01-20T17:47:38.812636

\x00[\x00\x00\x00\x00\x00\x00

11000 / tcp

1911457608 | 2025-01-24T07:32:34.274941

\x00[\x00\x00\x00\x00\x00\x00

11112 / tcp

-1399940268 | 2025-02-06T06:38:02.239832

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11211 / tcp

-136006866 | 2025-02-06T17:02:17.498735

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11288 / tcp

819727972 | 2025-01-13T03:50:13.664640

SSH-2.0-OpenSSH_7.4

11300 / tcp

1574088840 | 2025-01-18T20:36:25.045569

">Application and Content Networking Software 3.9</a>)\n</BODY><

11481 / tcp

-1399940268 | 2025-02-02T12:40:48.281189

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12000 / tcp

-1245716040 | 2025-01-11T13:44:38.305167

220 welcome to connecting FTP server

12001 / tcp

1574088840 | 2025-01-23T11:06:15.751652

">Application and Content Networking Software 3.9</a>)\n</BODY><

12056 / tcp

669849225 | 2025-01-18T08:12:04.818310

SSH-98.60-SysaxSSH_81885..42\r\n

12105 / tcp

-454087041 | 2025-01-11T18:29:12.992825

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

12108 / tcp

1911457608 | 2025-01-22T07:43:29.196370

\x00[\x00\x00\x00\x00\x00\x00

12114 / tcp

819727972 | 2025-01-25T19:26:11.662320

SSH-2.0-OpenSSH_7.4

12126 / tcp

1767345577 | 2025-01-20T00:38:40.909496

Hello, this is Quagga (version 0T).
Copyright 1996-200

12134 / tcp

1911457608 | 2025-02-02T19:19:17.804823

\x00[\x00\x00\x00\x00\x00\x00

12144 / tcp

-1399940268 | 2025-01-11T19:28:25.733126

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12151 / tcp

321971019 | 2025-01-29T07:59:01.437213

-ERR client ip is not in whitelist\r

12167 / tcp

819727972 | 2025-01-23T09:35:07.967329

SSH-2.0-OpenSSH_7.4

12173 / tcp

-1399940268 | 2025-02-02T18:40:26.458780

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12179 / tcp

-1888448627 | 2025-02-03T02:17:19.927683

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12182 / tcp

-2033111675 | 2025-01-29T22:21:56.200929

~djb

12183 / tcp

-904840257 | 2025-01-24T23:31:08.792424

572 Relay not authorized\r\n

12193 / tcp

-122096153 | 2025-01-21T05:50:52.033004

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

12195 / tcp

820958131 | 2025-02-05T11:24:21.398591

kjnkjabhbanc283ubcsbhdc72\x02

12199 / tcp

1911457608 | 2025-01-16T22:56:31.862354

\x00[\x00\x00\x00\x00\x00\x00

12204 / tcp

-1399940268 | 2025-01-23T15:26:45.063023

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12217 / tcp

165188539 | 2025-01-30T16:50:17.385500

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12250 / tcp

-784071826 | 2025-01-08T21:03:33.919771

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

12280 / tcp

-1399940268 | 2025-01-29T08:43:41.820016

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12296 / tcp

819727972 | 2025-01-10T01:25:34.228567

SSH-2.0-OpenSSH_7.4

12300 / tcp

1911457608 | 2025-02-02T22:36:59.179934

\x00[\x00\x00\x00\x00\x00\x00

12313 / tcp

-1399940268 | 2025-01-15T07:16:42.357876

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12331 / tcp

1911457608 | 2025-01-13T23:11:54.356186

\x00[\x00\x00\x00\x00\x00\x00

12341 / tcp

1948301213 | 2025-01-16T18:50:23.500029

RFB 003.003
VNC:
  Protocol Version: 3.3

12345 / tcp

296364507 | 2025-01-22T08:13:34.123545

HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

12349 / tcp

-1888448627 | 2025-01-23T06:42:00.656343

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12352 / tcp

1134517380 | 2025-01-14T20:31:19.022972

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

12353 / tcp

-1888448627 | 2025-01-17T15:02:07.640330

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12377 / tcp

-1888448627 | 2025-01-10T18:24:06.980556

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12381 / tcp

-1399940268 | 2025-02-02T22:22:03.559182

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12385 / tcp

-1399940268 | 2025-02-02T03:40:10.535671

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12392 / tcp

-1947777893 | 2025-01-26T01:19:17.232082

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

12394 / tcp

-1730858130 | 2025-01-17T09:12:29.371962

RFB 003.008
VNC:
  Protocol Version: 3.8

12397 / tcp

-1399940268 | 2025-01-17T10:08:32.273548

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12399 / tcp

1282941221 | 2025-02-06T18:23:39.550783

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

12403 / tcp

1911457608 | 2025-01-12T09:45:23.309887

\x00[\x00\x00\x00\x00\x00\x00

12417 / tcp

-904840257 | 2025-01-31T02:05:35.549512

572 Relay not authorized\r\n

12421 / tcp

2143387245 | 2025-01-11T03:48:39.033586

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

12434 / tcp

-1399940268 | 2025-01-20T04:53:10.839650

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12436 / tcp

-1399940268 | 2025-01-17T04:29:42.433275

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12457 / tcp

1363464823 | 2025-02-05T18:11:42.334249

\x00[|ox\x7f\x00\x00

12461 / tcp

-1899074860 | 2025-02-02T21:13:30.585945

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

12462 / tcp

575925250 | 2025-01-19T19:12:00.443231

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

12466 / tcp

1574088840 | 2025-02-06T11:26:58.326183

">Application and Content Networking Software 3.9</a>)\n</BODY><

12469 / tcp

-1399940268 | 2025-01-21T22:55:08.142778

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12495 / tcp

1989907056 | 2025-01-29T19:59:43.275380

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

12496 / tcp

-1399940268 | 2025-01-15T20:17:42.438066

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12497 / tcp

-1375131644 | 2025-01-09T19:48:59.292866

\x00[v\xc3\xbdC\x7f\x00\x00

12499 / tcp

-1045760528 | 2025-02-04T19:07:34.402197

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

12506 / tcp

1989907056 | 2025-02-06T03:45:13.427969

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

12510 / tcp

165188539 | 2025-01-26T12:16:54.782084

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12512 / tcp

1189133115 | 2025-01-26T19:29:09.795194

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

12516 / tcp

-2096652808 | 2025-01-31T05:23:46.709745

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12519 / tcp

-2096652808 | 2025-01-27T09:01:15.135531

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12525 / tcp

-1399940268 | 2025-01-25T18:28:16.088259

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12534 / tcp

1911457608 | 2025-02-04T16:40:07.164024

\x00[\x00\x00\x00\x00\x00\x00

12536 / tcp

-2096652808 | 2025-01-25T23:09:08.056849

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12542 / tcp

-1399940268 | 2025-01-15T22:51:14.470964

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12544 / tcp

114471724 | 2025-01-25T20:40:52.207975

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

12549 / tcp

2103111368 | 2025-01-25T16:34:27.541222

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

12565 / tcp

1282941221 | 2025-01-19T07:40:07.540306

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

12574 / tcp

-1399940268 | 2025-01-09T14:24:23.783284

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12585 / tcp

165188539 | 2025-01-09T19:30:09.893058

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12589 / tcp

-2096652808 | 2025-01-13T20:37:41.714495

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12615 / tcp

-1399940268 | 2025-01-29T00:09:01.054771

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

13001 / tcp

-653033013 | 2025-01-17T14:53:55.104960

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

13443 / tcp

-1375131644 | 2025-01-26T17:52:50.971478

\x00[v\xc3\xbdC\x7f\x00\x00

14084 / tcp

-1888448627 | 2025-01-22T08:29:21.280037

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

14130 / tcp

-1032713145 | 2025-01-09T22:10:32.342648

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

14147 / tcp

321971019 | 2025-02-05T06:17:52.323823

-ERR client ip is not in whitelist\r

14182 / tcp

740837454 | 2025-01-14T17:05:21.598658

SSH-2.0-OpenSSH_5.3

14344 / tcp

1308377066 | 2025-01-09T20:49:26.580158

ncacn_http/1.0

14404 / tcp

921225407 | 2025-01-11T03:52:16.318143

\x00\x00\x00\x04\x00\x00\x00\x00\x00

14443 / tcp

-407828767 | 2025-02-04T13:13:12.567622

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

14894 / tcp

-1839934832 | 2025-02-01T13:24:45.258416

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

14900 / tcp

51259122 | 2025-01-24T18:23:36.598212

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

15502 / tcp

1767345577 | 2025-01-15T19:16:31.490745

Hello, this is Quagga (version 0T).
Copyright 1996-200

15504 / tcp

-1399940268 | 2025-01-16T07:48:08.465351

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

15588 / tcp

-1399940268 | 2025-01-10T00:07:22.141076

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

15831 / tcp

-457235091 | 2025-02-04T04:51:42.077158

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

16019 / tcp

1615193817 | 2025-02-04T19:43:46.171854

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

16024 / tcp

1996932384 | 2025-01-19T17:07:53.324117

"raop" nonce

16031 / tcp

-1733645023 | 2025-01-24T17:33:50.099647

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

16033 / tcp

1911457608 | 2025-01-26T08:14:42.215388

\x00[\x00\x00\x00\x00\x00\x00

16036 / tcp

-1399940268 | 2025-02-02T20:24:06.085574

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16037 / tcp

1948301213 | 2025-01-15T20:14:42.831026

RFB 003.003
VNC:
  Protocol Version: 3.3

16047 / tcp

-801484042 | 2025-01-23T21:53:23.043728

ERR 27

16049 / tcp

-1327660293 | 2025-01-11T00:56:00.913995

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

16068 / tcp

-1329831334 | 2025-01-21T15:14:07.740176

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

16075 / tcp

-457235091 | 2025-01-27T04:35:20.416115

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

16080 / tcp

-147424911 | 2025-02-01T16:27:43.004076

HTTP/1.1 404 Not Found
Content Length: 0

16092 / tcp

-1399940268 | 2025-01-12T18:02:49.399511

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

17771 / tcp

-1399940268 | 2025-02-04T23:55:53.479066

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

17778 / tcp

-1399940268 | 2025-01-13T00:29:00.244252

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18001 / tcp

-1399940268 | 2025-01-30T15:42:46.352153

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18002 / tcp

819727972 | 2025-01-11T18:07:04.398940

SSH-2.0-OpenSSH_7.4

18007 / tcp

-1996280214 | 2025-01-09T21:12:51.944444

\x06\x04\x05@

18010 / tcp

51259122 | 2025-01-22T12:42:57.519048

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

18028 / tcp

1911457608 | 2025-01-28T08:18:56.348007

\x00[\x00\x00\x00\x00\x00\x00

18031 / tcp

-1399940268 | 2025-01-12T10:00:48.251387

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18043 / tcp

-1428621233 | 2025-01-28T03:47:46.862051

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

18047 / tcp

1991883981 | 2025-01-10T09:27:06.642567

B\x00\x00\x00\xc3\xbfn\x04Too many connections

18050 / tcp

-784071826 | 2025-01-19T22:01:08.348717

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

18051 / tcp

-1795027372 | 2025-01-23T07:51:27.328450

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

18053 / tcp

-2089734047 | 2025-01-23T19:29:29.202272

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

18059 / tcp

1911457608 | 2025-02-06T09:46:40.436791

\x00[\x00\x00\x00\x00\x00\x00

18062 / tcp

1665283070 | 2025-01-21T07:45:18.475193

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x00\x00\n0\x03\x00\x00\x00\x01\x00\x05\x00\x00@\x00\x00\x06\x00\x00\x1f@

18064 / tcp

-358801646 | 2025-01-17T21:39:16.252025

SSH-2.0-OpenSSH_6.6.1

18066 / tcp

-1399940268 | 2025-01-22T06:18:11.668884

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18068 / tcp

-891714208 | 2025-01-09T22:53:29.392701

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

18088 / tcp

-1986594217 | 2025-02-04T20:25:45.639533

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

18091 / tcp

-288825733 | 2025-01-24T22:49:06.339072

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

18113 / tcp

-1399940268 | 2025-01-25T22:13:35.688071

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18245 / tcp

1911457608 | 2025-01-28T12:27:45.611925

\x00[\x00\x00\x00\x00\x00\x00

19000 / tcp

-2089734047 | 2025-01-13T17:45:19.561912

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

19013 / tcp

1308377066 | 2025-01-13T04:49:57.494203

ncacn_http/1.0

19014 / tcp

165188539 | 2025-01-22T09:09:09.758799

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

19100 / tcp

-2096652808 | 2025-01-17T21:53:59.012767

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

19443 / tcp

819727972 | 2025-01-20T15:06:36.909883

SSH-2.0-OpenSSH_7.4

20000 / tcp

1900503736 | 2025-01-19T04:52:25.105119

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20010 / tcp

1911457608 | 2025-01-21T06:11:49.944568

\x00[\x00\x00\x00\x00\x00\x00

20110 / tcp

-1648456501 | 2025-01-15T12:33:04.118029

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

20121 / tcp

-1148066627 | 2025-02-03T14:57:48.173372

\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00

20208 / tcp

1911457608 | 2025-02-01T21:20:19.606267

\x00[\x00\x00\x00\x00\x00\x00

20256 / tcp

1911457608 | 2025-02-06T07:06:53.797745

\x00[\x00\x00\x00\x00\x00\x00

20440 / tcp

-1399940268 | 2025-01-21T21:35:45.551465

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20880 / tcp

1370263973 | 2025-02-04T09:50:56.550190

dubbo>

21025 / tcp

-1887823886 | 2025-01-31T15:49:01.056756

K%~)J/\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

21083 / tcp

307999478 | 2025-02-04T14:13:41.269846

unknown command \r\nunknown command \r\n

21233 / tcp

1911457608 | 2025-02-05T02:41:36.587468

\x00[\x00\x00\x00\x00\x00\x00

21236 / tcp

1665283070 | 2025-01-15T08:13:50.172912

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x00\x00\n0\x03\x00\x00\x00\x01\x00\x05\x00\x00@\x00\x00\x06\x00\x00\x1f@

21241 / tcp

2063598737 | 2025-01-14T05:55:39.411584

/0 0 L\r\n/0 0 HUH\r\n

21245 / tcp

-1373613804 | 2025-01-16T03:42:09.402354

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

21252 / tcp

-1399940268 | 2025-02-02T21:25:33.318797

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21275 / tcp

819727972 | 2025-01-13T13:07:03.518709

SSH-2.0-OpenSSH_7.4

21276 / tcp

1911457608 | 2025-02-03T20:33:41.988810

\x00[\x00\x00\x00\x00\x00\x00

21278 / tcp

632542934 | 2025-01-26T14:54:01.843040

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

21283 / tcp

-1477838366 | 2025-01-21T11:54:39.491844

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

21288 / tcp

599074451 | 2025-01-11T11:29:59.062111

msg

21292 / tcp

1911457608 | 2025-01-19T18:26:44.669207

\x00[\x00\x00\x00\x00\x00\x00

21316 / tcp

165188539 | 2025-01-16T18:09:59.344545

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21320 / tcp

-1453516345 | 2025-02-01T06:46:15.431293

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

21379 / tcp

921225407 | 2025-01-26T00:38:57.878405

\x00\x00\x00\x04\x00\x00\x00\x00\x00

22103 / tcp

-1996280214 | 2025-01-18T18:36:37.660614

\x06\x04\x05@

22556 / tcp

-1598265216 | 2025-01-12T21:17:03.223713

@RSYNCD: 31.0

23023 / tcp

-1508080900 | 2025-02-03T07:35:00.728556


0ÿñ

23184 / tcp

740837454 | 2025-02-03T07:29:01.153476

SSH-2.0-OpenSSH_5.3

25001 / tcp

669849225 | 2025-01-11T23:36:10.336816

SSH-98.60-SysaxSSH_81885..42\r\n

25003 / tcp

-1327660293 | 2025-02-04T13:19:51.600559

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

25565 / tcp

-2096652808 | 2025-01-24T21:18:48.212418

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

25952 / tcp

819727972 | 2025-01-17T10:05:26.443694

SSH-2.0-OpenSSH_7.4

27017 / tcp

1763259671 | 2025-02-05T09:41:25.911342

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

30002 / tcp

1632932802 | 2025-01-30T04:00:24.104508

30003 / tcp

-1694458451 | 2025-01-17T04:28:06.919033

@
05@ þ...

30009 / tcp

-1733106930 | 2025-01-29T12:22:10.240232

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

30019 / tcp

-1399940268 | 2025-01-10T04:59:27.511525

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

30106 / tcp

1911457608 | 2025-01-21T23:37:13.890348

\x00[\x00\x00\x00\x00\x00\x00

30122 / tcp

-653033013 | 2025-01-17T19:12:39.574698

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

30123 / tcp

-136006866 | 2025-01-31T16:39:04.096789

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

30444 / tcp

-2089734047 | 2025-02-01T00:35:39.335815

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

31001 / tcp

-2096652808 | 2025-01-17T17:59:42.995087

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

31210 / tcp

819727972 | 2025-01-10T15:57:09.969760

SSH-2.0-OpenSSH_7.4

31337 / tcp

-1992519278 | 2025-01-30T04:49:22.937586

\xc3\xbf\xc3\xbb\\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

32764 / tcp

1830697416 | 2025-01-17T00:32:06.041924

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

33060 / tcp

819727972 | 2025-01-27T20:03:46.147734

SSH-2.0-OpenSSH_7.4

34122 / tcp

-314039103 | 2025-02-06T17:11:20.669859

Surnom.
Sorry, that nickname format is invalid.

34322 / tcp

957278843 | 2025-02-06T13:01:12.302933

[|ox

34522 / tcp

-1316491703 | 2025-02-05T21:17:19.865821

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

34722 / tcp

2087396567 | 2025-02-05T10:39:33.591372

kjnkjabhbanc283ubcsbhdc72

34822 / tcp

1282941221 | 2025-02-05T23:02:23.343973

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

34922 / tcp

2103111368 | 2025-02-06T00:50:03.047614

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

35004 / tcp

-2089734047 | 2025-02-05T05:49:40.582628

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

35122 / tcp

-445721795 | 2025-02-06T04:21:44.428737

\x00[\xc3\xaed\x1a\x7f\x00\x00

35240 / tcp

-142686627 | 2025-01-20T04:45:34.632664

\x00[\xc2\xba\x7fs\x7f\x00\x00

35422 / tcp

-445721795 | 2025-02-05T14:01:35.975371

\x00[\xc3\xaed\x1a\x7f\x00\x00

35522 / tcp

-1013082686 | 2025-02-05T17:44:31.460140

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

35524 / tcp

1911457608 | 2025-01-27T01:43:58.283868

\x00[\x00\x00\x00\x00\x00\x00

36322 / tcp

104385780 | 2025-02-04T20:36:35.766504

ceph v2

36422 / tcp

-2017887953 | 2025-02-05T00:37:27.648741

SSH-2.0-OpenSSH_7.9

36505 / tcp

1911457608 | 2025-01-19T02:51:25.524680

\x00[\x00\x00\x00\x00\x00\x00

36622 / tcp

1842524259 | 2025-02-04T19:05:36.965821

36722 / tcp

-441419608 | 2025-02-04T13:26:24.620725

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

36822 / tcp

-971970408 | 2025-02-04T16:32:12.164250

37122 / tcp

-971970408 | 2025-02-04T11:41:19.927452

37222 / tcp

-79865617 | 2025-02-04T07:00:09.709333

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )

37322 / tcp

-992671574 | 2025-02-04T05:16:58.774196

@RSYNCD: 26

37522 / tcp

2087396567 | 2025-02-04T03:32:25.434068

kjnkjabhbanc283ubcsbhdc72

37777 / tcp

819727972 | 2025-01-29T02:16:21.712213

SSH-2.0-OpenSSH_7.4

37822 / tcp

-1648456501 | 2025-02-03T09:53:41.941717

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

38022 / tcp

291723434 | 2025-02-03T14:31:00.942112


Lantronix MSS100 Version V118/523(045538937)

Type HELP at the 'Local_61349> ' prompt for assistance.



Username>

38122 / tcp

-2096652808 | 2025-02-03T13:49:09.307241

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

38322 / tcp

-345718689 | 2025-02-03T00:28:51.636838

Vty password is not set.

38522 / tcp

-1681927087 | 2025-02-03T02:10:55.754839

kjnkjabhbanc283ubcsbhdc72

38622 / tcp

-905685638 | 2025-02-03T05:43:01.462847

bxz437

38822 / tcp

819727972 | 2025-02-02T14:11:49.737123

SSH-2.0-OpenSSH_7.4

38922 / tcp

1261582754 | 2025-02-02T20:50:38.083119

unknown command 
unknown command

39022 / tcp

1059192566 | 2025-02-02T22:50:28.927229

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div

39522 / tcp

-653033013 | 2025-02-02T17:34:37.265540

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

39622 / tcp

-971970408 | 2025-02-01T21:35:23.982905

39722 / tcp

-641479109 | 2025-02-02T12:03:10.230827

[xU-

39822 / tcp

-971970408 | 2025-02-02T06:38:34.752431

40001 / tcp

-2089734047 | 2025-01-21T00:56:32.630120

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

40022 / tcp

1492413928 | 2025-02-02T00:32:28.073182

SSH-2.0-OpenSSH_7.5

40029 / tcp

-375604792 | 2025-01-17T11:20:41.155086

220 Microsoft FTP Service

40522 / tcp

2087396567 | 2025-02-01T18:06:08.006028

kjnkjabhbanc283ubcsbhdc72

40722 / tcp

1948301213 | 2025-02-01T17:06:31.110421

RFB 003.003
VNC:
  Protocol Version: 3.3

40922 / tcp

819727972 | 2025-02-01T12:51:57.482960

SSH-2.0-OpenSSH_7.4

41022 / tcp

2087396567 | 2025-02-01T09:22:22.910932

kjnkjabhbanc283ubcsbhdc72

41122 / tcp

171352214 | 2025-02-01T07:40:26.441465

-ERR client ip is not in whitelist

41222 / tcp

-2107996212 | 2025-02-01T05:52:25.307317

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

41322 / tcp

-971970408 | 2025-02-01T04:04:25.123471

41622 / tcp

-345718689 | 2025-01-31T23:21:24.752189

Vty password is not set.

41722 / tcp

-1189269828 | 2025-01-31T19:11:54.623210

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

41800 / tcp

-1453516345 | 2025-02-04T03:52:58.993544

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

41822 / tcp

-1839934832 | 2025-01-31T12:07:24.365764

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

41922 / tcp

-971970408 | 2025-01-31T17:22:29.638709

42222 / tcp

-1730858130 | 2025-01-31T13:52:35.130555

RFB 003.008
VNC:
  Protocol Version: 3.8

42322 / tcp

-1013082686 | 2025-01-30T23:00:00.640013

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

42422 / tcp

660175493 | 2025-01-30T12:08:29.498692

42822 / tcp

-1114821551 | 2025-01-31T03:20:43.989294

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

42922 / tcp

-1148066627 | 2025-01-31T01:53:26.584210

\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00

43009 / tcp

1911457608 | 2025-01-10T05:47:43.407440

\x00[\x00\x00\x00\x00\x00\x00

43022 / tcp

-1990350878 | 2025-01-30T05:13:41.286579

 
04 \...

43322 / tcp

1077013874 | 2025-01-29T20:04:38.728129

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

43522 / tcp

1082732927 | 2025-01-30T17:45:43.758855

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

43722 / tcp

1690634669 | 2025-01-30T10:43:50.633495

43822 / tcp

-2096652808 | 2025-01-30T08:46:49.711558

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

44022 / tcp

1741579575 | 2025-01-29T23:39:43.501301

44158 / tcp

-433302150 | 2025-01-16T18:54:36.171551

/multistream/1.0.0

44222 / tcp

-146605374 | 2025-01-29T14:41:48.730752

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

44337 / tcp

103159425 | 2025-01-28T01:14:31.526972

SSH-1.99-RGOS_SSH

44340 / tcp

2063598737 | 2025-01-20T10:00:30.623716

/0 0 L\r\n/0 0 HUH\r\n

44520 / tcp

-2046514463 | 2025-01-12T09:23:44.389023

AB\x01\t

44522 / tcp

2087396567 | 2025-01-29T18:15:24.426783

kjnkjabhbanc283ubcsbhdc72

44722 / tcp

-1013082686 | 2025-01-30T01:28:10.206509

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

44818 / tcp

632542934 | 2025-01-15T13:00:49.420609

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

44822 / tcp

2087396567 | 2025-01-28T16:29:12.190802

kjnkjabhbanc283ubcsbhdc72

45122 / tcp

-641479109 | 2025-01-29T09:01:40.898206

[xU-

45222 / tcp

971933601 | 2025-01-29T04:20:31.644780

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

45333 / tcp

-2089734047 | 2025-01-09T08:59:48.851892

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

45444 / tcp

-1327660293 | 2025-01-29T00:03:26.551667

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

45522 / tcp

863754335 | 2025-01-28T22:56:07.667897

0a

45722 / tcp

320677201 | 2025-01-28T19:28:09.295098

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

45922 / tcp

-1036370807 | 2025-01-27T22:51:42.607146

JDWP-Handshake

46122 / tcp

104385780 | 2025-01-28T13:55:02.295784

ceph v2

46322 / tcp

1842524259 | 2025-01-28T10:30:32.098529

46522 / tcp

472902042 | 2025-01-28T01:40:23.427511

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

46622 / tcp

819727972 | 2025-01-27T23:22:41.962561

SSH-2.0-OpenSSH_7.4

46722 / tcp

819727972 | 2025-01-28T03:03:42.926327

SSH-2.0-OpenSSH_7.4

46822 / tcp

-971970408 | 2025-01-27T16:02:55.904417

47000 / tcp

-2089734047 | 2025-01-27T17:35:23.321614

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

47122 / tcp

-653033013 | 2025-01-27T19:41:59.483975

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

47222 / tcp

1353260875 | 2025-01-27T01:38:09.869986

\x00[g\xc2\x95N\x7f\x00\x00

47422 / tcp

-1392039491 | 2025-01-27T12:35:09.869992

"Broadband Router"

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

47522 / tcp

-1990350878 | 2025-01-27T09:01:59.542534

 
04 \...

48002 / tcp

1911457608 | 2025-01-30T20:19:13.588665

\x00[\x00\x00\x00\x00\x00\x00

48018 / tcp

117101543 | 2025-01-28T23:47:27.954150

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

48122 / tcp

2087396567 | 2025-01-26T22:02:04.526719

kjnkjabhbanc283ubcsbhdc72

48222 / tcp

2087396567 | 2025-01-26T14:48:31.890287

kjnkjabhbanc283ubcsbhdc72

48422 / tcp

-653033013 | 2025-01-26T18:45:41.658022

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

48622 / tcp

-345718689 | 2025-01-26T04:09:05.907711

Vty password is not set.

48822 / tcp

-1611764932 | 2025-01-26T11:11:50.360521

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

49122 / tcp

819727972 | 2025-01-25T22:42:13.877676

SSH-2.0-OpenSSH_7.4

49210 / tcp

-1428621233 | 2025-01-13T18:08:46.011721

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

49322 / tcp

1620329124 | 2025-01-26T02:21:13.738297

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

49422 / tcp

-1316491703 | 2025-01-25T13:40:01.835902

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

49443 / tcp

1996932384 | 2025-01-28T03:27:16.821975

"raop" nonce

49502 / tcp

-1399940268 | 2025-01-25T17:03:08.308096

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

49622 / tcp

-438503381 | 2025-01-25T20:50:50.703501

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

49692 / tcp

-653033013 | 2025-01-16T07:31:24.759692

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

49822 / tcp

660175493 | 2025-01-25T14:04:21.010718

49922 / tcp

1975288991 | 2025-01-25T19:36:37.379079

OPTI

50000 / tcp

1077013874 | 2025-02-03T18:13:38.195042

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

CVE-2023-46846 CVE-2020-15049 CVE-2020-11945 CVE-2019-12526 CVE-2019-12525 CVE-2019-12524 CVE-2019-12523 CVE-2019-12519 55 moreCVE-2024-45802 CVE-2023-50269 CVE-2023-49288 CVE-2023-49286 CVE-2023-49285 CVE-2023-46847 CVE-2023-46728 CVE-2023-46724 CVE-2023-5824 CVE-2022-41318 CVE-2021-28651 CVE-2020-25097 CVE-2020-24606 CVE-2020-14058 CVE-2020-8517 CVE-2020-8450 CVE-2020-8449 CVE-2019-18679 CVE-2019-18676 CVE-2019-12528 CVE-2019-12520 CVE-2018-1000027 CVE-2018-1000024 CVE-2016-10003 CVE-2016-10002 CVE-2016-4556 CVE-2016-4555 CVE-2016-4554 CVE-2016-4553 CVE-2016-4054 CVE-2016-4052 CVE-2016-4051 CVE-2016-3948 CVE-2016-3947 CVE-2024-25617 CVE-2021-46784 CVE-2021-33620 CVE-2021-31808 CVE-2021-31807 CVE-2021-31806 CVE-2021-28652 CVE-2020-15811 CVE-2020-15810 CVE-2019-18860 CVE-2019-18678 CVE-2019-18677 CVE-2019-13345 CVE-2019-12529 CVE-2019-12522 CVE-2019-12521 CVE-2018-19132 CVE-2018-19131 CVE-2016-2390 CVE-2021-28116 CVE-2016-4053

50004 / tcp

-339084706 | 2025-02-05T04:25:06.557101

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

50009 / tcp

-1097188123 | 2025-02-02T15:06:32.781407

[g\xc2\x95N\x7f

50050 / tcp

0 | 2025-01-27T16:31:46.479858

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

50080 / tcp

1911457608 | 2025-02-02T13:59:58.779432

\x00[\x00\x00\x00\x00\x00\x00

50422 / tcp

171352214 | 2025-01-25T02:46:23.333923

-ERR client ip is not in whitelist

50443 / tcp

51259122 | 2025-01-28T08:31:03.845210

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

50822 / tcp

1642597142 | 2025-01-24T22:42:24.465678

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

51007 / tcp

-1899074860 | 2025-01-31T07:41:23.385210

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

51022 / tcp

1282941221 | 2025-01-24T20:05:40.920035

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

51222 / tcp

-971970408 | 2025-01-24T06:16:13.911128

51235 / tcp

-441419608 | 2025-01-09T03:55:27.375755

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

51322 / tcp

103159425 | 2025-01-24T09:55:38.792639

SSH-1.99-RGOS_SSH

51422 / tcp

2087396567 | 2025-01-24T02:37:32.311566

kjnkjabhbanc283ubcsbhdc72

51722 / tcp

1282941221 | 2025-01-23T20:02:16.852289

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

51922 / tcp

401555314 | 2025-01-24T04:45:24.318961

NB[GFXjA^R

52322 / tcp

2087396567 | 2025-01-23T18:12:56.813151

kjnkjabhbanc283ubcsbhdc72

52422 / tcp

1741579575 | 2025-01-23T11:21:59.694061

52922 / tcp

1741579575 | 2025-01-23T00:15:10.408819

53122 / tcp

-1032713145 | 2025-01-22T22:25:17.057836

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

53422 / tcp

-297128567 | 2025-01-22T17:21:14.920420

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

53805 / tcp

-1399940268 | 2025-01-09T14:52:17.399957

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

53822 / tcp

1077013874 | 2025-01-22T11:30:21.252047

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

54022 / tcp

-1114821551 | 2025-01-22T05:53:20.029073

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

54122 / tcp

-1730858130 | 2025-01-22T07:47:22.098785

RFB 003.008
VNC:
  Protocol Version: 3.8

54138 / tcp

-1399940268 | 2025-02-02T15:04:43.164370

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

54222 / tcp

-1026951088 | 2025-01-22T02:12:52.557507

erro ip

54422 / tcp

2087396567 | 2025-01-21T21:37:47.589440

kjnkjabhbanc283ubcsbhdc72

54622 / tcp

819727972 | 2025-01-21T16:55:27.074648

SSH-2.0-OpenSSH_7.4

54922 / tcp

-971970408 | 2025-01-21T12:52:58.664242

55000 / tcp

-2107996212 | 2025-01-18T08:53:06.804709

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

55322 / tcp

740837454 | 2025-01-21T07:19:01.858766

SSH-2.0-OpenSSH_5.3

55442 / tcp

-2118655245 | 2025-01-15T08:30:15.395733

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

55443 / tcp

2087396567 | 2025-01-24T10:47:15.063172

kjnkjabhbanc283ubcsbhdc72

55490 / tcp

-358801646 | 2025-01-13T01:46:10.551179

SSH-2.0-OpenSSH_6.6.1

55553 / tcp

1412519768 | 2025-02-04T07:29:54.826176

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

55554 / tcp

2087396567 | 2025-02-05T19:46:14.402814

kjnkjabhbanc283ubcsbhdc72

55622 / tcp

-1230049476 | 2025-01-21T06:10:53.902518

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

55722 / tcp

-345718689 | 2025-01-20T23:42:53.094758

Vty password is not set.

55922 / tcp

-971970408 | 2025-01-20T18:39:36.690936

56222 / tcp

819727972 | 2025-01-20T05:47:13.395064

SSH-2.0-OpenSSH_7.4

56622 / tcp

-1139539254 | 2025-01-19T20:11:48.238877

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

56822 / tcp

1161309183 | 2025-01-20T07:40:40.447166

ProxyServer is ready

56922 / tcp

2087396567 | 2025-01-19T18:22:19.585002

kjnkjabhbanc283ubcsbhdc72

57222 / tcp

104385780 | 2025-01-19T22:18:45.376835

ceph v2

57422 / tcp

-1032713145 | 2025-01-19T14:45:40.645325

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

57522 / tcp

2087396567 | 2025-01-19T07:10:11.456526

kjnkjabhbanc283ubcsbhdc72

57622 / tcp

819727972 | 2025-01-19T12:43:12.816327

SSH-2.0-OpenSSH_7.4

57783 / tcp

-1888448627 | 2025-01-23T12:25:58.738335

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

57788 / tcp

1911457608 | 2025-01-11T05:35:04.594834

\x00[\x00\x00\x00\x00\x00\x00

58022 / tcp

1741579575 | 2025-01-19T05:17:41.390612

58122 / tcp

-1730858130 | 2025-01-19T02:36:19.148661

RFB 003.008
VNC:
  Protocol Version: 3.8

58222 / tcp

1426971893 | 2025-01-18T21:05:12.720917

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

58522 / tcp

-2096652808 | 2025-01-18T12:33:55.795187

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

58722 / tcp

2087396567 | 2025-01-18T14:51:34.229108

kjnkjabhbanc283ubcsbhdc72

58822 / tcp

-1648456501 | 2025-01-18T16:16:29.946332

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

58922 / tcp

2087396567 | 2025-01-18T10:42:33.872555

kjnkjabhbanc283ubcsbhdc72

59122 / tcp

2087396567 | 2025-01-18T07:15:01.682059

kjnkjabhbanc283ubcsbhdc72

59222 / tcp

-747911285 | 2025-01-18T02:43:09.820754

\xc2\xaa

59322 / tcp

819727972 | 2025-01-18T05:05:18.604587

SSH-2.0-OpenSSH_7.4

59622 / tcp

-2031152423 | 2025-01-17T17:01:31.703747

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

59822 / tcp

2087396567 | 2025-01-17T20:25:34.058264

kjnkjabhbanc283ubcsbhdc72

59922 / tcp

1261582754 | 2025-01-17T19:45:51.825634

unknown command 
unknown command

60021 / tcp

-792826324 | 2025-02-04T19:14:37.786258

220 FTP server ready - login please

61613 / tcp

677934968 | 2025-01-16T13:25:40.704828

lm^)Q

61616 / tcp

641705735 | 2025-01-14T16:41:49.185626



0
dø...

62078 / tcp

-860824904 | 2025-01-31T11:24:28.461900

\x00\x01)

62080 / tcp

-1730858130 | 2025-02-05T11:42:18.390190

RFB 003.008
VNC:
  Protocol Version: 3.8

63210 / tcp

-321444299 | 2025-02-04T11:30:29.398697

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

63256 / tcp

-756825518 | 2025-01-27T17:12:33.292626

¥A,LConnectx57222

63260 / tcp

-805362002 | 2025-02-06T09:13:41.459402

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

123.56.248.133

Last Seen: 2025-02-06

Tags:

GeneralInformation

OpenPorts

11 / tcp -971970408 | 2025-01-10T06:12:19.554954

13 / tcp -341265581 | 2025-01-24T16:13:10.766385

15 / tcp 799468586 | 2025-02-04T23:40:09.218388

17 / tcp -2006293986 | 2025-01-31T21:25:50.266053

19 / tcp 676476721 | 2025-01-31T18:27:51.443668

21 / tcp 2116898107 | 2025-02-02T19:07:45.108932

25 / tcp -1795027372 | 2025-01-20T13:27:53.094735

43 / tcp 819727972 | 2025-01-25T00:18:40.593189

49 / tcp -359657882 | 2025-02-03T22:52:31.527206

53 / tcp 1369632081 | 2025-01-14T12:03:20.596600

70 / tcp -972699072 | 2025-01-14T15:36:55.786825

79 / tcp 268196945 | 2025-01-30T21:51:26.865154

80 / tcp 0 | 2025-02-01T23:00:19.939614

Hashes

85 / tcp -1996280214 | 2025-01-29T07:02:32.353227

87 / tcp 632542934 | 2025-01-28T17:42:19.611765

89 / tcp -345718689 | 2025-01-25T19:16:14.078130

100 / tcp 819727972 | 2025-01-09T02:51:48.203188

101 / tcp -1019343788 | 2025-01-27T14:07:47.646659

102 / tcp -1399940268 | 2025-01-10T03:54:07.986014

104 / tcp -2096652808 | 2025-02-03T12:58:27.310042

110 / tcp 1623746877 | 2025-01-29T20:31:46.197480

111 / tcp 1220320909 | 2025-01-27T18:47:27.481786

113 / tcp 455076604 | 2025-01-30T22:41:17.657986

119 / tcp -2107996212 | 2025-02-02T14:34:30.230263

122 / tcp 1911457608 | 2025-01-28T23:27:17.318810

135 / tcp -875843738 | 2025-02-03T20:03:37.380911

143 / tcp 376198496 | 2025-02-03T21:14:48.937198

175 / tcp 937756010 | 2025-01-22T17:44:29.681172

179 / tcp -399606100 | 2025-01-27T23:46:29.720744

195 / tcp 1921398876 | 2025-01-31T21:08:36.805361

264 / tcp -1709030885 | 2025-02-02T09:38:03.675023

311 / tcp -1547976805 | 2025-01-12T02:26:50.267005

389 / tcp 811247330 | 2025-01-12T15:17:15.496674

427 / tcp -525136240 | 2025-02-01T21:23:42.563928

444 / tcp 1808124991 | 2025-01-23T19:38:04.193721

450 / tcp -1399940268 | 2025-01-11T12:30:44.944042

451 / tcp -1428621233 | 2025-01-27T23:21:23.626190

465 / tcp 897328069 | 2025-01-31T22:14:32.222270

502 / tcp -2089734047 | 2025-02-06T13:50:09.368320

515 / tcp 2087396567 | 2025-01-24T21:38:15.012331

522 / tcp -1399940268 | 2025-01-09T15:26:38.027007

541 / tcp 1497273505 | 2025-01-16T02:43:41.042500

548 / tcp -1769206458 | 2025-02-05T07:59:48.287508

554 / tcp 1167995424 | 2025-01-13T04:31:15.832735

587 / tcp 1332630808 | 2025-01-13T06:15:37.584009

593 / tcp 1308377066 | 2025-02-01T13:46:00.070559

636 / tcp 1732481781 | 2025-01-28T13:54:51.872231

666 / tcp -1420968138 | 2025-01-27T11:42:00.318052

743 / tcp -2089734047 | 2025-01-22T12:25:20.155781

771 / tcp 1189133115 | 2025-01-09T21:22:31.459889

789 / tcp -1713437100 | 2025-01-30T04:02:37.636764

808 / tcp -1166978945 | 2025-01-24T08:43:24.705138

809 / tcp 165188539 | 2025-01-18T21:18:56.199029

853 / tcp -1399940268 | 2025-01-27T18:35:31.180886

873 / tcp -1970692834 | 2025-01-24T12:38:29.097880

902 / tcp 1956828827 | 2025-01-18T09:12:26.917872

995 / tcp -740312032 | 2025-02-04T23:34:04.220081

1023 / tcp 1632932802 | 2025-01-28T17:57:34.675324

1025 / tcp 1189133115 | 2025-01-21T03:02:44.904983

1080 / tcp 1362344524 | 2025-01-30T16:34:52.267146

1081 / tcp -154107716 | 2025-01-17T13:14:48.884612

1099 / tcp -1099385124 | 2025-01-15T11:13:33.031316

1153 / tcp -2089734047 | 2025-01-20T08:41:37.926807

1234 / tcp -2107996212 | 2025-01-10T06:28:20.226765

1365 / tcp 921225407 | 2025-01-15T18:35:14.714303

1414 / tcp 1308377066 | 2025-01-30T22:44:05.550866

1433 / tcp 555056254 | 2025-01-19T09:00:35.050406

1521 / tcp -541815454 | 2025-01-16T13:56:52.925145

1557 / tcp -1888448627 | 2025-01-13T13:35:13.098515

1599 / tcp -2107996212 | 2025-02-05T02:45:07.297343

1604 / tcp 819727972 | 2025-01-28T08:55:37.135730

1605 / tcp -1399940268 | 2025-01-27T01:26:35.119255

1800 / tcp 1623746877 | 2025-01-28T06:44:27.613167

1801 / tcp 1745717579 | 2025-02-06T14:18:52.470746

11 / tcp

-971970408 | 2025-01-10T06:12:19.554954

13 / tcp

-341265581 | 2025-01-24T16:13:10.766385

15 / tcp

799468586 | 2025-02-04T23:40:09.218388

17 / tcp

-2006293986 | 2025-01-31T21:25:50.266053

19 / tcp

676476721 | 2025-01-31T18:27:51.443668

21 / tcp

2116898107 | 2025-02-02T19:07:45.108932

25 / tcp

-1795027372 | 2025-01-20T13:27:53.094735

43 / tcp

819727972 | 2025-01-25T00:18:40.593189

49 / tcp

-359657882 | 2025-02-03T22:52:31.527206

53 / tcp

1369632081 | 2025-01-14T12:03:20.596600

70 / tcp

-972699072 | 2025-01-14T15:36:55.786825

79 / tcp

268196945 | 2025-01-30T21:51:26.865154

80 / tcp

0 | 2025-02-01T23:00:19.939614

85 / tcp

-1996280214 | 2025-01-29T07:02:32.353227

87 / tcp

632542934 | 2025-01-28T17:42:19.611765

89 / tcp

-345718689 | 2025-01-25T19:16:14.078130

100 / tcp

819727972 | 2025-01-09T02:51:48.203188

101 / tcp

-1019343788 | 2025-01-27T14:07:47.646659

102 / tcp

-1399940268 | 2025-01-10T03:54:07.986014

104 / tcp

-2096652808 | 2025-02-03T12:58:27.310042

110 / tcp

1623746877 | 2025-01-29T20:31:46.197480

111 / tcp

1220320909 | 2025-01-27T18:47:27.481786

113 / tcp

455076604 | 2025-01-30T22:41:17.657986

119 / tcp

-2107996212 | 2025-02-02T14:34:30.230263

122 / tcp

1911457608 | 2025-01-28T23:27:17.318810

135 / tcp

-875843738 | 2025-02-03T20:03:37.380911

143 / tcp

376198496 | 2025-02-03T21:14:48.937198

175 / tcp

937756010 | 2025-01-22T17:44:29.681172

179 / tcp

-399606100 | 2025-01-27T23:46:29.720744

195 / tcp

1921398876 | 2025-01-31T21:08:36.805361

264 / tcp

-1709030885 | 2025-02-02T09:38:03.675023

311 / tcp

-1547976805 | 2025-01-12T02:26:50.267005

389 / tcp

811247330 | 2025-01-12T15:17:15.496674

427 / tcp

-525136240 | 2025-02-01T21:23:42.563928

444 / tcp

1808124991 | 2025-01-23T19:38:04.193721

450 / tcp

-1399940268 | 2025-01-11T12:30:44.944042

451 / tcp

-1428621233 | 2025-01-27T23:21:23.626190

465 / tcp

897328069 | 2025-01-31T22:14:32.222270

502 / tcp

-2089734047 | 2025-02-06T13:50:09.368320

515 / tcp

2087396567 | 2025-01-24T21:38:15.012331

522 / tcp

-1399940268 | 2025-01-09T15:26:38.027007

541 / tcp

1497273505 | 2025-01-16T02:43:41.042500

548 / tcp

-1769206458 | 2025-02-05T07:59:48.287508

554 / tcp

1167995424 | 2025-01-13T04:31:15.832735

587 / tcp

1332630808 | 2025-01-13T06:15:37.584009

593 / tcp

1308377066 | 2025-02-01T13:46:00.070559

636 / tcp

1732481781 | 2025-01-28T13:54:51.872231

666 / tcp

-1420968138 | 2025-01-27T11:42:00.318052

743 / tcp

-2089734047 | 2025-01-22T12:25:20.155781

771 / tcp

1189133115 | 2025-01-09T21:22:31.459889

789 / tcp

-1713437100 | 2025-01-30T04:02:37.636764

808 / tcp

-1166978945 | 2025-01-24T08:43:24.705138

809 / tcp

165188539 | 2025-01-18T21:18:56.199029

853 / tcp

-1399940268 | 2025-01-27T18:35:31.180886

873 / tcp

-1970692834 | 2025-01-24T12:38:29.097880

902 / tcp

1956828827 | 2025-01-18T09:12:26.917872

995 / tcp

-740312032 | 2025-02-04T23:34:04.220081

1023 / tcp

1632932802 | 2025-01-28T17:57:34.675324

1025 / tcp

1189133115 | 2025-01-21T03:02:44.904983

1080 / tcp

1362344524 | 2025-01-30T16:34:52.267146

1081 / tcp

-154107716 | 2025-01-17T13:14:48.884612

1099 / tcp

-1099385124 | 2025-01-15T11:13:33.031316

1153 / tcp

-2089734047 | 2025-01-20T08:41:37.926807

1234 / tcp

-2107996212 | 2025-01-10T06:28:20.226765

1365 / tcp

921225407 | 2025-01-15T18:35:14.714303

1414 / tcp

1308377066 | 2025-01-30T22:44:05.550866

1433 / tcp

555056254 | 2025-01-19T09:00:35.050406

1521 / tcp

-541815454 | 2025-01-16T13:56:52.925145

1557 / tcp

-1888448627 | 2025-01-13T13:35:13.098515

1599 / tcp

-2107996212 | 2025-02-05T02:45:07.297343

1604 / tcp

819727972 | 2025-01-28T08:55:37.135730

1605 / tcp

-1399940268 | 2025-01-27T01:26:35.119255

1800 / tcp

1623746877 | 2025-01-28T06:44:27.613167

1801 / tcp

1745717579 | 2025-02-06T14:18:52.470746

1883 / tcp

-122096153 | 2025-02-06T11:54:52.366627

1922 / tcp

1911457608 | 2025-01-07T18:35:01.948303

1955 / tcp

-2089734047 | 2025-01-11T15:51:28.589266

1962 / tcp

921225407 | 2025-02-05T23:54:26.549522

1976 / tcp

1911457608 | 2025-02-04T21:46:15.599556

2001 / tcp

1911457608 | 2025-01-22T21:48:17.959311