GeneralInformation

Hostnames	zotog168.1688.com imageconv.alibaba.net dodn-version.ojiyvn-ina.aon.aliyun-inc.com mail.aliyun.com log.aliyuncs.com account.kaola.com search-p.lazada.com.my pdpdesc.lazada.vn
Domains	1688.com alibaba.net aliyun-inc.com aliyun.com aliyuncs.com kaola.com lazada.com.my lazada.vn
Country	China
City	Beijing
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 17 19 23 25 26 43 49 53 70 79 80 95 96 102 104 110 111 119 135 139 143 175 180 195 199 221 225 264 311 340 389 427 443 444 450 502 503 515 541 548 554 593 636 666 789 873 888 992 995 1023 1025 1153 1177 1200 1290 1337 1433 1521 1588 1599 1604 1723 1801 1820 1883 1911 1926 1950 2000 2002 2008 2067 2081 2083 2087 2121 2150 2154 2181 2222 2223 2323 2332 2345 2404 2455 2567 2628 2761 3001 3002 3048 3050 3095 3097 3102 3221 3260 3268 3269 3299 3301 3306 3310 3388 3389 3410 3523 3551 3557 3780 3790 3793 3910 3953 4000 4001 4022 4063 4117 4118 4157 4242 4282 4321 4369 4433 4434 4444 4445 4500 4505 4506 4545 4646 4734 4786 4840 4899 4911 4949 5001 5007 5009 5010 5025 5172 5201 5222 5269 5400 5432 5435 5494 5593 5595 5601 5604 5606 5858 5938 5984 5986 6000 6001 6002 6379 6560 6601 6653 6666 6667 6668 6697 7001 7004 7014 7171 7218 7415 7434 7443 7445 7634 7654 7989 8009 8011 8016 8021 8051 8071 8081 8083 8085 8087 8088 8089 8099 8181 8200 8291 8333 8384 8405 8413 8425 8443 8500 8554 8590 8602 8649 8663 8728 8788 8806 8826 8834 8860 8863 8867 8889 8988 8993 9000 9001 9002 9007 9011 9012 9016 9027 9028 9042 9051 9082 9091 9092 9095 9100 9105 9151 9160 9189 9214 9222 9300 9304 9306 9333 9398 9418 9530 9600 9633 9761 9876 9898 9943 9944 9993 9998 9999 10000 10001 10134 10443 10554 10909 10911 11000 11112 11210 11300 12000 12345 14147 14265 14344 16993 18081 19000 19200 20000 20256 20547 20880 21025 21379 22001 22067 22070 23424 25001 25565 27015 27017 28015 28017 30002 30718 32764 33060 33889 35000 37215 37777 44158 44818 47808 47990 48899 49152 50000 50050 50070 50100 51235 51443 52869 53413 54138 55000 55442 55443 55553 60129 61613 61616 62078 64738

-288825733 | 2024-10-29T12:04:05.572281

11 / tcp

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

1297354658 | 2024-10-11T22:44:57.480916

13 / tcp

J\x00\x00\x00
8.0.23\x00%\xc6\xec\x0e\x12X&/&?\x00\xff\xff-\x02\x00\xff\xcf\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00jde\x1d.9S\"\x1d:#\x00caching_sha2_password\x00

1278527606 | 2024-10-20T16:27:29.591641

15 / tcp

SSH-2.0-Teleport

1852418385 | 2024-11-02T08:11:03.448533

17 / tcp

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

873425297 | 2024-10-08T06:06:12.893604

19 / tcp

200 NOD32SS 99 (3318497116)

164764193 | 2024-10-06T12:49:41.856766

23 / tcp


(none) login:

1911457608 | 2024-10-22T03:01:12.975304

25 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-904840257 | 2024-10-23T04:00:52.729193

26 / tcp

572 Relay not authorized\r\n

2087396567 | 2024-10-31T03:08:04.113824

43 / tcp

kjnkjabhbanc283ubcsbhdc72

-1867457549 | 2024-10-28T17:07:56.517559

49 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)

1252359125 | 2024-10-31T23:34:04.714205

53 / tcp

9
\x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01
\x00\x06\x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

-1763883228 | 2024-10-25T22:22:14.030563

70 / tcp

HTTP/1.1 400 Bad Request
Server: vista/0.7
Content-Type: text/html
Connection: close

-1846450790 | 2024-11-01T22:08:47.068864

79 / tcp

<html>
<head><title>400 Bad Request</title></head>
<body bgcolor="white">
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.4.7</center>
</body>
</html>

-1853249515 | 2024-10-30T18:30:57.436299

80 / tcp

HTTP/1.1 405 Method Not Allowed
Server: AliyunSLS
Date: Wed, 30 Oct 2024 18:30:57 GMT
Content-Type: application/json
Content-Length: 119
Connection: keep-alive
Access-Control-Allow-Origin: *
Authorization: OLS:r9pF8ucNUfzTwDhn+cxHSHcIWnc=

205347087 | 2024-10-04T23:36:10.821563

95 / tcp

SSH-25453-Cisco-3524665.35\n

-1399940268 | 2024-10-28T23:26:07.871225

96 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2098371729 | 2024-10-31T15:48:26.634771

102 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

-2089734047 | 2024-10-08T14:50:56.433462

104 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-345718689 | 2024-10-24T09:03:52.105056

110 / tcp

Vty password is not set.

539065883 | 2024-10-20T16:45:37.202338

111 / tcp

141730637 | 2024-10-20T09:55:19.262889

119 / tcp

HTTP/1.0 200 OK
Server: Proxy

1483120365 | 2024-11-03T13:41:02.182293

135 / tcp

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: OP2\n IP2: 192.168.0.20\n IP3: 61.230.135.142\n IP4: 2001:b011:2006:c3ef:18c0:9e02:ef7:84c8\n\nNTLMSSP:\nTarget_Name: OP2\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: OP2\nNetBIOS_Computer_Name: OP2\nDNS_Domain_Name: OP2\nDNS_Computer_Name: OP2\nSystem_Time: 2024-01-22 07:10:42 +0000 UTC\n\nDCERPC Dump:\n4b112204-0e19-11d3-b42b-

-1270998736 | 2024-10-28T13:26:03.791954

139 / tcp

\\x83\\x00\\x00\\x01\\x8f

-1939513550 | 2024-10-16T00:58:37.685515

143 / tcp

* OK The Microsoft Exchange IMAP4 service is ready.\r\n\nImap NTLM Info:\nTarget_Name: HEBEIHK\nProduct_Version: 6.0.6003 Ntlm 15\nOS: Windows Server 2008, Service Pack 2, Rollup KB4489887\nNetBIOS_Domain_Name: HEBEIHK\nNetBIOS_Computer_Name: MAILSERVER2\nDNS_Domain_Name: hebeihk.local\nDNS_Computer_Name: MAILSERVER2.hebeihk.local\nMsvAvDnsTreeName: hebeihk.local\nSystem_Time: 2024-01-22 08:26:31 +0000 UTC\n\n

-1996280214 | 2024-11-02T19:36:36.876784

175 / tcp

\x06\x04\x05@

722711397 | 2024-10-18T03:13:37.573791

180 / tcp

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

819727972 | 2024-11-03T06:45:41.417274

195 / tcp

SSH-2.0-OpenSSH_7.4

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-6111 13 moreCVE-2019-6110 CVE-2019-6109 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

1387411682 | 2024-10-23T23:46:10.721376

199 / tcp

A\\x01\\x02

-2089734047 | 2024-10-22T19:25:53.859608

221 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

632542934 | 2024-10-10T21:47:35.790157

225 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1709030885 | 2024-10-12T18:04:22.239356

264 / tcp

SSH-

-1547976805 | 2024-11-03T10:35:42.921222

311 / tcp

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

-444830029 | 2024-10-23T20:59:46.679554

340 / tcp

HTTP/1.1 401 Unauthorized
Server: xhmmhttpsv130-20200310
Cache-Control: no-cache,no-store
Content-Type: text/html; charset=%s
Connection: close

-1713467553 | 2024-10-21T20:27:21.211394

389 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Connection: close

1327409218 | 2024-10-31T19:30:30.294436

427 / tcp

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://localhost.localdomain\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://localhost.localdomain\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (0

161801122 | 2024-10-28T01:56:10.895325

443 / tcp

HTTP/1.1 405 Method Not Allowed
Server: AliyunSLS
Date: Mon, 28 Oct 2024 01:56:10 GMT
Content-Type: application/json
Content-Length: 119
Connection: keep-alive
Access-Control-Allow-Origin: *
Authorization: OLS:Bqoe7Xzd5D1C2WFFfNPChnAnTHA=

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:10:03:f2:90:60:48:7e:9f:d4:e7:f4
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: May 14 07:21:02 2024 GMT
            Not After : Jun 15 07:21:01 2025 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.log.aliyuncs.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:2f:ea:57:52:71:1b:f1:7a:88:61:92:98:
                    ae:77:73:23:d7:54:22:09:7d:1b:7f:22:05:2c:12:
                    8f:7b:71:c9:df:c7:6d:fa:f3:97:fb:16:52:0c:4a:
                    ca:19:d5:15:8c:bb:63:ff:03:31:33:6d:14:52:4b:
                    f9:40:1e:50:03:93:e0:40:3f:6a:7a:9e:c6:cd:10:
                    9d:19:7b:f6:fa:9b:5a:ff:b4:78:7e:11:54:9f:4b:
                    b3:72:35:52:e2:b4:79:37:55:c3:8c:06:7d:18:3e:
                    77:35:9d:f0:04:78:1d:3b:bb:08:56:9e:4c:ef:96:
                    5c:6b:c3:1a:4e:9f:9c:3e:92:46:df:82:99:13:91:
                    1c:64:6e:9e:bd:ed:d2:01:ba:05:c7:2d:2e:cc:1b:
                    70:5d:aa:66:5d:d2:88:19:5a:8b:ee:a5:64:23:05:
                    9f:05:68:4b:d3:ff:ab:c3:4b:ab:8f:d5:c5:7f:48:
                    ef:16:f5:2a:fe:91:4b:61:ec:c5:1c:b7:6a:1f:fb:
                    7d:f0:06:03:6c:4e:3b:86:ec:82:6f:7e:28:25:62:
                    e5:a7:53:18:44:4b:dd:f7:f6:34:bf:2d:d0:0f:b4:
                    47:df:b7:39:25:af:c9:de:c2:d3:72:fe:8a:3f:0c:
                    8d:40:da:ee:65:cc:5a:2f:47:d9:67:3c:82:7f:a6:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
            X509v3 Subject Alternative Name: 
                DNS:*.log.aliyuncs.com, DNS:*.cn-beijing-ha-intranet.log.aliyuncs.com, DNS:*.cn-beijing-ha.log.aliyuncs.com, DNS:*.cn-beijing-ha-share.log.aliyuncs.com, DNS:*.cn-beijing-ha.dualstack.log.aliyuncs.com, DNS:*.cn-beijing-b.dualstack.log.aliyuncs.com, DNS:*.cn-beijing-b.log.aliyuncs.com, DNS:*.cn-beijing-b-intranet.log.aliyuncs.com, DNS:*.cn-beijing-b-share.log.aliyuncs.com, DNS:*.cn-beijing-intranet.log.aliyuncs.com, DNS:*.cn-beijing-vpc.log.aliyuncs.com, DNS:*.cn-beijing.log.aliyuncs.com, DNS:*.cn-beijing-share.log.aliyuncs.com, DNS:*.cn-beijing.dualstack.log.aliyuncs.com, DNS:*.log-global.aliyuncs.com, DNS:*.dualstack.log.aliyuncs.com, DNS:log.aliyuncs.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            X509v3 Subject Key Identifier: 
                B8:68:FD:F5:89:87:51:89:7B:FF:09:92:60:8D:2C:0C:9B:84:EA:46
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : May 14 07:21:04.752 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E9:02:43:67:70:02:C5:03:F8:BD:D3:
                                A7:7D:9A:35:C8:68:A1:2B:4A:D1:2A:02:66:F4:E1:0C:
                                92:FD:8B:48:D6:02:21:00:9C:A2:3C:58:8C:CA:06:CE:
                                99:6D:3E:AC:4E:44:9F:E3:B8:18:10:72:7F:5A:F7:12:
                                5A:3E:64:87:2C:41:47:5D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : May 14 07:21:04.755 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:89:90:2E:28:7E:D1:0A:52:A8:34:89:
                                5D:EF:4E:37:62:38:8A:7A:3E:42:93:35:12:86:67:77:
                                EA:22:13:C2:D2:02:21:00:B8:D0:56:DD:4A:1C:68:66:
                                08:20:17:0C:60:82:F0:83:B2:F0:4F:A2:A2:24:DD:12:
                                A2:69:35:EE:FE:FE:9A:E1
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : May 14 07:21:04.782 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:E6:9D:A6:74:DA:E5:09:43:A1:A2:26:
                                86:99:3A:32:8C:DA:CD:92:6D:8A:D9:B1:3D:14:9C:04:
                                C8:67:A6:3A:0F:02:21:00:B0:6E:30:09:CE:A4:5E:CD:
                                2C:DC:B0:B9:A0:AF:5E:F7:F7:9D:EA:DD:99:96:7E:DA:
                                83:0F:15:64:48:EE:50:D0
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b0:a6:79:05:65:02:08:19:ff:47:4e:fe:1f:8c:5e:0c:74:d3:
        eb:bb:ef:da:1c:ff:88:72:6a:cf:30:90:fc:ce:c8:33:af:92:
        82:37:bd:95:1a:df:3a:2e:d8:73:75:60:3f:95:0c:51:58:51:
        24:17:40:8c:50:d8:3a:56:b7:57:de:f9:c2:72:bd:13:6e:bf:
        27:7d:dd:42:56:55:1b:4c:95:60:83:d0:44:9f:b8:8c:07:16:
        b6:db:39:1b:87:81:b5:88:aa:4e:5a:bf:3c:96:4f:96:ea:bd:
        e6:0f:2c:7c:a6:d0:85:40:80:91:b0:de:87:10:01:de:11:70:
        fa:c3:45:08:5f:96:ed:bc:32:91:dd:d9:0d:6b:41:c1:33:8d:
        bf:2f:f1:ea:1f:b8:1f:ba:d0:52:ba:06:39:1c:c0:e4:56:74:
        46:d2:00:99:36:7e:cf:39:74:80:c5:dd:ae:46:f5:77:4f:8e:
        15:e1:a8:9e:68:b3:41:e1:cc:bb:37:98:d9:54:44:e0:4c:4f:
        34:7c:63:0c:96:bb:34:79:f3:b3:e0:8d:df:a7:8f:32:09:f0:
        7a:4a:b4:b3:e8:93:60:f0:83:82:6a:fe:1e:a7:1e:52:84:78:
        34:69:82:bf:65:99:7f:13:2d:5c:55:4b:b7:fd:33:9c:14:87:
        42:ab:a2:0f

1199739838 | 2024-10-27T23:06:48.788164

444 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Sun, 27 Oct 2024 23:06:48 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

-146605374 | 2024-10-26T14:20:38.644714

450 / tcp

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

398077695 | 2024-10-12T06:57:11.059450

502 / tcp

-1399940268 | 2024-10-24T14:10:14.787475

503 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

171352214 | 2024-11-03T02:22:18.631371

515 / tcp

-ERR client ip is not in whitelist

1497273505 | 2024-10-29T22:44:38.151860

541 / tcp

\\x16\\x03\\x01\\x01P\\x01\\x00\\x01L\\x03\\x03\\x84L\\xcf\\x00\\x0e\xc4\x96Q\\xf3\\xb1\\x9f\\x88\\x08\\x92\\xd7S\\xf1\\xb7\\xc9\\xc79\\xcc\\xf6Tk\\x1dj\\xc6`\\x89\\x86\\xeb \\xbc\\xef\\xc3<\\xe5g\\x96\\xa4L\\x1c\\x1b]ea\\x81$D\\x99\\x92eH\\x85\\x82\\x1b*\\xc2*\\xaeb9n9\\x002\\x13\\x02\\x13\\x03\\x13\\x01\\x009\\x0

-1128967010 | 2024-10-17T06:53:49.582877

548 / tcp

HTTP/1.1 200 OK
Server: Server
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, nosnippet, notranslate, noimageindex
Content-Type: text/html; charset=utf-8

448214121 | 2024-11-03T16:39:40.425074

554 / tcp

RTSP/1.0 200 OK
Server: TVT RTSP Server/1.0.0
CSeq: 1
Public: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, GET_PARAMETER, SET_PARAMETER

-1261053701 | 2024-10-20T13:08:57.529923

593 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

4146400 | 2024-10-30T01:49:43.016693

636 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 8-26086461-0 0NNN RT(1705912253915 115) q(-1 -1 -1 -1) r(0 -1) b1

-1420968138 | 2024-11-02T19:44:34.679182

666 / tcp

HTTP/1.0 200 OK
Server: SonicWALL
Expires: -1
Cache-Control: no-cache
Content-type: text/html; charset=UTF-8;
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains

-1399940268 | 2024-10-22T20:06:02.951644

789 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-992671574 | 2024-10-30T21:08:05.305062

873 / tcp

@RSYNCD: 26

20021069 | 2024-10-11T05:09:33.389530

888 / tcp

HTTP/1.1 302 Found
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-X-WebKit-CSP: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' http: https: data:; frame-ancestors 'self';
Location: https://61.31.89.205:888/webmail

1814656027 | 2024-10-25T16:17:04.784049

992 / tcp

HTTP/1.1 403 Forbidden
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
Keep-Alive: timeout=15; max=19

-740312032 | 2024-10-28T00:58:06.015831

995 / tcp

+OK Dovecot (Ubuntu) ready.\r\n

-441419608 | 2024-10-21T03:20:15.177202

1023 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

-2096652808 | 2024-10-05T12:15:47.924979

1025 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

165188539 | 2024-10-08T17:42:19.992263

1153 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2087396567 | 2024-10-22T18:46:01.535487

1177 / tcp

kjnkjabhbanc283ubcsbhdc72

1830697416 | 2024-10-19T06:17:44.272922

1200 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

819727972 | 2024-10-14T00:28:27.123090

1290 / tcp

SSH-2.0-OpenSSH_7.4

1741579575 | 2024-10-23T18:57:25.237893

1337 / tcp

-1279739995 | 2024-11-03T22:22:37.211664

1433 / tcp

MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XINKE20190306\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XINKE20190306\nNetBIOS_Computer_Name: XINKE20190306\nDNS_Domain_Name: xinke20190306\nDNS_Computer_Name: xinke20190306\nSystem_Time: 2024-01-22 04:04:46 +0000 UTC\n\n

-1184558916 | 2024-10-25T08:14:57.932839

1521 / tcp

Version:11.2.0.4.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=186647552)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

1911457608 | 2024-10-20T17:21:38.265380

1588 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2024-10-31T09:43:41.810453

1599 / tcp

kjnkjabhbanc283ubcsbhdc72

1282941221 | 2024-11-02T12:01:27.758917

1604 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-1608241410 | 2024-11-03T22:19:16.737824

1723 / tcp

Firmware: 1\nHostname: local\nVendor: linux\n

-1139999322 | 2024-11-02T03:03:20.964286

1801 / tcp

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xf2\\xdby\\x96\\xbb\\xb1LE\\xa1\\x1f.%\xd2\xbft\\xb692d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

-1730858130 | 2024-10-28T18:28:06.646127

1820 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1911457608 | 2024-11-01T17:20:28.420956

1883 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-122096153 | 2024-11-02T02:40:30.443192

1911 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

-441419608 | 2024-10-12T01:08:12.751472

1926 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

632542934 | 2024-10-09T21:30:03.468894

1950 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1399940268 | 2024-10-24T13:32:19.836315

2000 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1681927087 | 2024-10-08T02:12:44.901355

2002 / tcp

kjnkjabhbanc283ubcsbhdc72

1741579575 | 2024-10-13T12:48:15.157664

2008 / tcp

2087396567 | 2024-11-03T18:00:42.618699

2067 / tcp

kjnkjabhbanc283ubcsbhdc72

-1399940268 | 2024-10-07T03:42:12.055748

2081 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-971970408 | 2024-11-02T22:48:20.172780

2083 / tcp

-1999117212 | 2024-10-11T04:57:47.459926

2087 / tcp

-2107996212 | 2024-10-07T21:09:47.084895

2121 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

921225407 | 2024-10-19T16:12:36.782007

2150 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-297128567 | 2024-10-22T11:13:13.629806

2154 / tcp

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

546151771 | 2024-11-02T11:48:13.439298

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

-1659353189 | 2024-10-31T15:20:53.105147

2222 / tcp

SSH-2.0-ssh-server\r\n\\x00\\x00\\x02\\x14\x0b\\x14\x0b\\xed\\x16\\xae\\x96\t\\xc5En\\xbd\\x1cgn\\xff\\xad\\xd7\\x00\\x00\\x00\\xbbcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha256,diffie-hellman-gr

-1327660293 | 2024-10-30T12:52:13.159801

2223 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

1662205251 | 2024-10-18T08:03:44.965221

2323 / tcp

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

-1694458451 | 2024-10-30T12:54:14.301829

2332 / tcp

@
05@ þ...

-1297953727 | 2024-10-17T10:00:27.348243

2345 / tcp

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

819727972 | 2024-10-23T19:12:33.360363

2404 / tcp

SSH-2.0-OpenSSH_7.4

2087396567 | 2024-11-02T22:31:04.124117

2455 / tcp

kjnkjabhbanc283ubcsbhdc72

321971019 | 2024-10-20T22:20:33.410095

2567 / tcp

-ERR client ip is not in whitelist\r

819727972 | 2024-10-20T05:55:51.562265

2628 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-10-10T20:08:56.423916

2761 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1261090339 | 2024-10-24T20:59:41.523508

3001 / tcp

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

-653033013 | 2024-10-24T21:07:25.848151

3002 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

1763259671 | 2024-10-10T18:36:02.300975

3048 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

-1399940268 | 2024-10-18T04:16:25.462306

3050 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1623746877 | 2024-10-24T21:19:35.030072

3095 / tcp

500 Permission denied - closing connection.\r\n

-1399940268 | 2024-10-16T09:19:37.146712

3097 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-10-10T21:39:04.779010

3102 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2019309480 | 2024-10-18T15:56:00.005294

3221 / tcp

<?xml version="1.0" encoding="us-ascii"?>\n

-271466677 | 2024-10-20T00:43:22.782988

3260 / tcp

RIFA\\x00\\x00\\x00\\x00\\x10\\x88\\x81\\x00\\x00\\x00\\x00\\x00\\x00\x0b\\x00\\x05\\x00\\x00\\x00:\\x00HD316\\x00\\x01\\x00

-879070264 | 2024-10-16T13:09:34.743051

3268 / tcp

\\xab\xca\xa5]\\x00\\x00\\x00\\x18\\xc0\\x00\\x00\\x01\\xff\\xff\\xff\\xff\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00

580340387 | 2024-11-02T21:33:55.805494

3269 / tcp

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

1911457608 | 2024-10-06T12:49:19.333661

3299 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-2096652808 | 2024-11-02T04:43:31.202396

3301 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

292351399 | 2024-10-24T19:58:20.556929

3306 / tcp

Mysql Version: 5.5.24-log \r\nN\\x00\\x00\\x00\n5.5.24-log\\x00\\x87\\x00\\x00\\x00uF>E}hpx\\x00\\xff\\xf7!\\x02\\x00\\x0f\\x80\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00-rx$GyO\\aT]Z\\x00mysql_native_password\\x00

819727972 | 2024-10-08T02:54:46.408307

3310 / tcp

SSH-2.0-OpenSSH_7.4

-1114821551 | 2024-10-23T09:05:23.160875

3388 / tcp

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

623170236 | 2024-10-31T16:26:07.013303

3389 / tcp

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x1f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: PC82139\nProduct_Version: 10.0.19041 Ntlm 15\nOS: Windows 10, Version 2004/Windows Server, Version 2004\nNetBIOS_Domain_Name: PC82139\nNetBIOS_Computer_Name: PC82139\nDNS_Domain_Name: PC82139\nDNS_Computer_Name: PC82139\nSystem_Time: 2024-01-19 08:39:46 +0000 UTC\n\n

-1888448627 | 2024-10-22T17:21:59.976173

3410 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-10-12T04:07:52.401509

3523 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

198844676 | 2024-11-01T10:28:54.750506

3551 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

-747911285 | 2024-10-15T03:19:19.640069

3557 / tcp

\xc2\xaa

-1476017887 | 2024-10-21T11:16:52.647831

3780 / tcp

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

1778988322 | 2024-10-23T09:40:21.865971

3790 / tcp

* OK GroupWise IMAP4rev1 Server Ready

-801484042 | 2024-10-19T19:21:41.650968

3793 / tcp

ERR 27

1911457608 | 2024-11-03T03:08:56.387506

3910 / tcp

\x00[\x00\x00\x00\x00\x00\x00

321971019 | 2024-10-09T16:38:57.899837

3953 / tcp

-ERR client ip is not in whitelist\r

-1960639992 | 2024-10-27T17:18:34.265854

4000 / tcp

HTTP/1.1 401 Unauthorized

-2033111675 | 2024-10-05T08:40:57.993213

4001 / tcp

~djb

1015654041 | 2024-10-28T22:32:33.552134

4022 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

504717326 | 2024-10-22T22:17:10.663342

4063 / tcp

SSH-2.0-OpenSSH_8.6

CVE-2008-3844 CVE-2021-41617 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 6 moreCVE-2024-6387 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368

-1399940268 | 2024-10-04T23:05:06.508095

4117 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2024-10-19T17:49:41.987532

4118 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2024-10-19T01:13:20.881967

4157 / tcp

kjnkjabhbanc283ubcsbhdc72

-1695841648 | 2024-10-19T16:16:52.537632

4242 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

-1036370807 | 2024-10-24T22:06:59.790176

4282 / tcp

JDWP-Handshake

-1250504565 | 2024-11-03T13:59:42.945978

4321 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

-1032713145 | 2024-10-21T15:59:04.575699

4369 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-1839934832 | 2024-10-23T06:33:47.021177

4433 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

2103111368 | 2024-10-07T12:14:35.506274

4434 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

-1399940268 | 2024-11-03T20:33:11.933890

4444 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1615193817 | 2024-10-17T14:52:50.651065

4445 / tcp

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

-1399940268 | 2024-10-17T13:04:59.443828

4500 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1139539254 | 2024-10-12T14:57:17.545215

4505 / tcp

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

2087396567 | 2024-10-29T00:03:57.386657

4506 / tcp

kjnkjabhbanc283ubcsbhdc72

-1648456501 | 2024-10-09T19:39:35.079317

4545 / tcp

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

-2096652808 | 2024-10-25T09:46:51.148117

4646 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

165188539 | 2024-10-27T21:19:34.080902

4734 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1888448627 | 2024-10-27T21:21:01.546228

4786 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-805362002 | 2024-10-18T22:52:47.711594

4840 / tcp

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

-786044033 | 2024-10-25T05:49:06.139636

4899 / tcp

OK Welcome <299685> on DirectUpdate server 7286

-1399940268 | 2024-10-11T22:01:14.215848

4911 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2009276894 | 2024-11-01T23:35:32.324018

4949 / tcp

N
5.6.40-logÅTUNEgVX2
¢!xlB...

474736340 | 2024-10-23T11:42:41.940728

5001 / tcp

431 Unable to negotiate secure command connection.

-2096652808 | 2024-10-29T00:24:38.911028

5007 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

2118208326 | 2024-10-17T10:18:35.571826

5009 / tcp

HTTP/1.1 426 Upgrade Required
Content-Type: text/plain
Connection: keep-alive
Keep-Alive: timeout=5

-1399940268 | 2024-10-10T07:01:58.176354

5010 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-971970408 | 2024-10-21T19:02:10.592963

5025 / tcp

-1461540015 | 2024-10-21T22:45:19.651032

5172 / tcp

audio 0 RTP/AVP 18 4 3 8 0 101
a

165188539 | 2024-10-11T21:44:51.698059

5201 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

971933601 | 2024-10-07T12:38:19.491921

5222 / tcp

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

1359734371 | 2024-10-10T08:14:38.138988

5269 / tcp

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938451.076-w-waf01tjgt

1543809371 | 2024-10-30T22:24:26.650502

5400 / tcp

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

1504401647 | 2024-11-02T17:38:50.031369

5432 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

1911457608 | 2024-10-21T11:50:37.462063

5435 / tcp

\x00[\x00\x00\x00\x00\x00\x00

597764502 | 2024-10-19T00:03:56.908531

5494 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

-1399940268 | 2024-10-08T12:20:11.198598

5593 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

165188539 | 2024-10-07T12:44:00.006399

5595 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-2118655245 | 2024-10-07T21:17:32.393227

5601 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

819727972 | 2024-10-23T05:38:59.560586

5604 / tcp

SSH-2.0-OpenSSH_7.4

-2089734047 | 2024-10-05T19:54:18.210285

5606 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1189133115 | 2024-10-29T18:07:24.111619

5858 / tcp

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

1492413928 | 2024-10-25T19:49:01.488680

5938 / tcp

SSH-2.0-OpenSSH_7.5

1999272906 | 2024-10-15T10:51:07.544365

5984 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

171352214 | 2024-11-03T03:36:17.290971

5986 / tcp

-ERR client ip is not in whitelist

-1399940268 | 2024-10-18T00:12:14.472773

6000 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1487943323 | 2024-10-27T08:08:24.694283

6001 / tcp

431 Unable to negotiate secure command connection.\r\n

-1681927087 | 2024-11-02T14:25:39.730431

6002 / tcp

kjnkjabhbanc283ubcsbhdc72

321971019 | 2024-10-31T09:53:06.367994

6379 / tcp

-ERR client ip is not in whitelist\r

-1810987450 | 2024-10-12T22:44:36.552078

6560 / tcp

\xc3\xbf

819727972 | 2024-10-08T20:25:58.858915

6601 / tcp

SSH-2.0-OpenSSH_7.4

971933601 | 2024-10-21T07:32:37.922101

6653 / tcp

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

4935895 | 2024-10-30T02:07:43.459876

6666 / tcp

HTTP/1.1 400 Bad Request
Server: CloudWAF

550048729 | 2024-10-29T09:55:10.871953

6667 / tcp

ÿÿÿ
0 ...

819727972 | 2024-10-16T22:14:01.432978

6668 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2024-10-29T02:23:58.188863

6697 / tcp

SSH-2.0-OpenSSH_7.4

-1325031830 | 2024-10-10T22:52:42.242437

7001 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae26b2_PS-HFE-01DmZ24_34529-57897

-80416702 | 2024-10-10T20:15:17.553887

7004 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25e0_CS-NKG-015sn19_26533-338

580340387 | 2024-10-26T00:46:48.014520

7014 / tcp

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

819727972 | 2024-10-18T05:42:45.864357

7171 / tcp

SSH-2.0-OpenSSH_7.4

-1471513798 | 2024-10-20T22:54:17.926168

7218 / tcp

[gN

1189133115 | 2024-10-31T06:53:14.415672

7415 / tcp

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

1842524259 | 2024-10-16T18:49:38.391002

7434 / tcp

-1027277763 | 2024-10-17T07:30:49.155516

7443 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-GLOBAL1-CACHE107[2]
X-CCDN-ERRCODE-SRC: 01
X-CCDN-FORBID-CODE: 040001

921225407 | 2024-11-03T20:09:15.095433

7445 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

641705735 | 2024-10-17T09:21:53.992563

7634 / tcp



0
dø...

-801484042 | 2024-10-27T23:17:52.588383

7654 / tcp

ERR 27

-2118655245 | 2024-10-06T03:07:35.545229

7989 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

-1140468363 | 2024-10-16T13:27:34.718966

8009 / tcp

\x02\t\x01

380146262 | 2024-10-27T00:37:45.359125

8011 / tcp

@RSYNCD: 30.0

-457235091 | 2024-10-26T18:23:23.134385

8016 / tcp

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

-73658652 | 2024-11-01T06:42:45.234417

8021 / tcp

HTTP/1.1 404 Not Found
Cache-Control: must-revalidate,no-cache,no-store
Content-Type: text/html; charset=ISO-8859-1
Server: Jetty(9.2.13.v20150730)

-2089734047 | 2024-10-12T05:01:36.342372

8051 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1911457608 | 2024-11-02T12:02:53.389754

8071 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1842524259 | 2024-10-25T16:03:50.599833

8081 / tcp

-1839934832 | 2024-10-11T16:38:06.077308

8083 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1032713145 | 2024-11-01T22:34:41.602190

8085 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

1574088840 | 2024-10-29T17:03:18.835990

8087 / tcp

">Application and Content Networking Software 3.9</a>)\n</BODY><

-1888448627 | 2024-10-17T11:16:55.692459

8088 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1741579575 | 2024-10-30T18:50:29.807171

8089 / tcp

-1416565584 | 2024-10-28T12:47:29.699089

8099 / tcp

HTTP/1.1 500 Internal Server Error
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1
Connection: close

398077695 | 2024-10-11T17:44:05.335461

8181 / tcp

-877598700 | 2024-10-13T09:59:12.403830

8200 / tcp

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\\x01\xc3\xbf\xc3\xbb\\x03\xc3\xbf\xc3\xbd\\x01\xc3\xbf\xc3\xbe\\x01Username:

455076604 | 2024-10-21T22:50:40.624605

8291 / tcp

!\x07version\x04bind7 t{RPowerDNS Recursor 410

1335782347 | 2024-11-02T19:33:19.208600

8333 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705940700.09-waf02bjtp3

-971970408 | 2024-11-01T01:48:25.736091

8384 / tcp

1282941221 | 2024-10-05T08:00:32.836381

8405 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1911457608 | 2024-10-25T15:57:46.480069

8413 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-10-28T18:19:14.859536

8425 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1107402866 | 2024-10-18T09:27:21.643902

8443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 18 Oct 2024 09:27:21 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://123.56.37.132:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

1652191202 | 2024-10-20T09:00:20.192067

8500 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae296b_PS-NTG-014eQ157_14943-13699

677934968 | 2024-11-01T12:53:37.056767

8554 / tcp

lm^)Q

677934968 | 2024-10-23T06:35:32.538801

8590 / tcp

lm^)Q

-2033111675 | 2024-10-16T23:25:21.455509

8602 / tcp

~djb

842535728 | 2024-10-23T21:36:12.138515

8649 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

-2096652808 | 2024-10-31T16:49:15.540862

8663 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1045760528 | 2024-10-09T10:17:54.732837

8728 / tcp

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

-1399940268 | 2024-10-07T15:58:58.544910

8788 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-616720387 | 2024-10-18T22:53:13.279610

8806 / tcp

SSH-2.0-SSHD_0.7.6

-1399940268 | 2024-10-13T04:29:39.289299

8826 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1032713145 | 2024-10-30T17:13:53.429056

8834 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

669849225 | 2024-10-15T20:28:07.504732

8860 / tcp

SSH-98.60-SysaxSSH_81885..42\r\n

-1907909544 | 2024-10-15T03:51:23.122068

8863 / tcp

\r\nHello, this is Quagga (version 0T).\r\nCopyright 1996-200

575925250 | 2024-10-15T23:17:50.277460

8867 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

842535728 | 2024-10-27T21:36:47.630206

8889 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

1911457608 | 2024-10-31T08:59:38.386977

8988 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-10-19T03:03:10.181994

8993 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2067028711 | 2024-10-22T20:13:18.497077

9000 / tcp

\x15\x03\x01\x00\x02\x02F

-1026951088 | 2024-10-29T21:01:23.321837

9001 / tcp

erro ip

-641479109 | 2024-10-08T17:46:44.418132

9002 / tcp

[xU-

-1399940268 | 2024-10-25T23:28:24.993209

9007 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1888448627 | 2024-10-06T15:44:55.469841

9011 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-2096652808 | 2024-10-16T18:53:22.295660

9012 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1911457608 | 2024-11-03T08:16:24.143382

9016 / tcp

\x00[\x00\x00\x00\x00\x00\x00

401555314 | 2024-10-15T22:52:13.287386

9027 / tcp

NB[GFXjA^R

1911457608 | 2024-10-08T18:30:58.215419

9028 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1453516345 | 2024-11-03T04:18:11.260288

9042 / tcp

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

-1839934832 | 2024-10-28T09:55:39.676203

9051 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

165188539 | 2024-10-20T10:39:55.156075

9082 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1375131644 | 2024-10-23T19:09:02.605934

9091 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

-1399940268 | 2024-10-19T17:08:43.475634

9092 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-971970408 | 2024-10-27T21:01:45.793027

9095 / tcp

-1810987450 | 2024-11-02T23:03:48.671510

9100 / tcp

\xc3\xbf

-1013082686 | 2024-10-19T11:16:17.371674

9105 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

-1559123399 | 2024-10-05T22:52:08.593184

9151 / tcp

500 Permission denied - closing connection.

1381121983 | 2024-10-25T16:56:01.808660

9160 / tcp

Notify\r\n

-1327660293 | 2024-10-22T23:44:45.661332

9189 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-1839934832 | 2024-10-28T07:24:12.286174

9214 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1032713145 | 2024-10-24T14:47:43.984481

9222 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

1911457608 | 2024-10-05T13:24:51.152662

9300 / tcp

\x00[\x00\x00\x00\x00\x00\x00

819727972 | 2024-10-23T19:18:12.798715

9304 / tcp

SSH-2.0-OpenSSH_7.4

1911457608 | 2024-11-01T17:21:44.783745

9306 / tcp

\x00[\x00\x00\x00\x00\x00\x00

945910976 | 2024-11-02T07:02:01.687118

9333 / tcp

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

842535728 | 2024-11-02T23:40:54.751687

9398 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

1004056929 | 2024-10-05T17:42:05.091138

9418 / tcp

Invalid request string: Request string is: "
"

819727972 | 2024-10-21T03:35:47.450850

9530 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-10-28T20:58:23.261095

9600 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2087396567 | 2024-11-01T21:10:03.625765

9633 / tcp

kjnkjabhbanc283ubcsbhdc72

819727972 | 2024-10-29T02:34:41.353247

9761 / tcp

SSH-2.0-OpenSSH_7.4

1127011450 | 2024-10-30T10:27:18.817901

9876 / tcp

HTTP/1.1 200 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Accept-Ranges: bytes
Content-Type: text/html;charset=utf-8
Content-Language: en

1304012963 | 2024-10-19T07:47:04.768477

9898 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: close

491999737 | 2024-10-21T03:34:59.310100

9943 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705935095.837-s5jhg

398077695 | 2024-10-17T01:52:13.527229

9944 / tcp

-1230049476 | 2024-10-06T08:56:15.401176

9993 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

372433470 | 2024-10-18T15:56:35.667965

9998 / tcp

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

1161309183 | 2024-10-26T16:53:41.541886

9999 / tcp

ProxyServer is ready

2087396567 | 2024-10-25T21:52:33.307739

10000 / tcp

kjnkjabhbanc283ubcsbhdc72

1492413928 | 2024-10-17T05:45:05.294804

10001 / tcp

SSH-2.0-OpenSSH_7.5

-1538260461 | 2024-10-17T10:15:11.594209

10134 / tcp

\x01\x00\x00\x00

-1316530936 | 2024-10-25T17:46:56.808464

10443 / tcp

HTTP/1.1 200 OK
Date: Fri, 25 Oct 2024 17:46:56 GMT
Content-Type: application/json
Content-Length: 1256
Connection: keep-alive
Ali-Swift-Global-Savetime: 1729878416
Eagleeye-Traceid: 10fbae540da263159d0cbed4ac
Eagleid: 10fbae540da263159d0cbed4ac
S_group: tao-session
S_ip: 3fe964c4558a29636ed506928ac56571
S_status: STATUS_SYS_ERR
S_tag: 736830415293431|704217850^|^^
S_tid: 10fbae540da263159d0cbed4ac
S_ucode: CN:CENTER
S_v: 3.3.3.0
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://api-alsc-cominsu.alibaba-inc.com
Ufe-Result: A2
Via: cache92.a9cache2[870,555,373-0,M], cache02.cache57[209,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Fri, 25 Oct 2024 17:46:56 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e4:36:78:7d:ba:5a:13:e3:9b:fd:03
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: Jun  2 06:02:03 2023 GMT
            Not After : Jul  3 05:56:05 2024 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.tanx.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:2b:33:73:69:dc:e0:03:49:db:10:72:af:d0:1d:
                    fc:35:0e:82:05:32:d6:66:e9:18:5f:45:db:ab:11:
                    ac:b5:39:60:b7:f2:9c:29:58:65:96:38:bc:b4:ff:
                    aa:87:3c:a2:f6:f4:ae:87:c0:3e:d3:b5:79:46:a9:
                    cb:00:cb:18:70
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                0B:5E:80:D7:DA:75:94:A4:FE:20:AD:A4:ED:06:5C:63:34:13:08:23
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
            X509v3 Subject Alternative Name: 
                DNS:*.tanx.com, DNS:*.45E.alibaba-inc.com, DNS:*.8.shareyouli.com, DNS:*.9game.cn, DNS:*.a-map.cn, DNS:*.a-map.co, DNS:*.a-map.link, DNS:*.a-map.vip, DNS:*.abs-sign.amap.com, DNS:*.ac.uc.cn, DNS:*.acis.amap.com, DNS:*.admin.alihealth.cn, DNS:*.admin.hemaos.com, DNS:*.aikit.alibaba-inc.com, DNS:*.ailab.alibaba-inc.com, DNS:mail.aliyun.com, DNS:pdpdesc.lazada.vn, DNS:account.kaola.com, DNS:imageconv.alibaba.net, DNS:dodn-version.ojiyvn-ina.aon.aliyun-inc.com, DNS:zotog168.1688.com, DNS:search-p.lazada.com.my
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        7e:d6:91:16:73:28:8a:1f:d3:7d:58:89:3a:be:9c:32:3d:d3:
        d6:fb:a7:7b:a1:bc:71:7e:d6:3a:3c:3a:26:87:db:74:94:a4:
        a2:cf:a3:cf:ff:43:12:98:6c:01:a8:42:bb:09:58:d9:51:eb:
        92:7b:52:d1:db:04:91:8b:48:8f:78:fd:6e:ae:cb:39:25:67:
        ba:e4:ac:61:c7:44:9b:af:64:75:ae:68:10:f5:90:61:9b:2a:
        6e:90:90:6a:d8:fd:d8:c2:3c:a2:e2:76:1f:bb:17:43:d1:88:
        f6:8b:3e:b4:1d:99:6e:7b:a9:db:fc:f9:fb:d2:10:d6:f3:89:
        69:c2:ab:a9:2e:e0:ed:5a:f9:49:59:86:c1:a0:e2:cf:54:58:
        ba:e3:56:52:70:90:6b:a4:2b:bd:bf:d6:eb:7a:4c:64:28:2b:
        b8:98:03:b8:40:94:77:63:40:32:43:ef:5c:13:c2:a1:9c:d6:
        6d:84:8f:84:f5:36:e1:d2:f0:bf:93:e3:8d:ac:26:90:1d:49:
        8b:5c:4e:57:80:b7:7e:59:c7:a3:e1:4f:59:a3:cd:9b:71:14:
        7d:7b:1f:7e:6e:e1:ed:ca:2e:32:b8:9f:8a:ef:3f:f2:13:8a:
        9a:4c:0f:b0:95:31:96:fe:23:aa:bc:ba:f9:80:e5:03:7f:32:
        32:b7:cd:55

819727972 | 2024-10-27T21:51:13.265733

10554 / tcp

SSH-2.0-OpenSSH_7.4

1126993057 | 2024-10-20T15:57:20.279519

10909 / tcp

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

-1730858130 | 2024-10-09T18:48:00.228936

10911 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-1538260461 | 2024-11-02T23:55:11.908957

11000 / tcp

\x01\x00\x00\x00

165188539 | 2024-11-03T22:36:55.518391

11112 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-2089734047 | 2024-10-22T22:01:00.544961

11210 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1810987450 | 2024-10-31T16:57:24.361518

11300 / tcp

\xc3\xbf

1734465113 | 2024-10-15T19:50:03.863488

12000 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705938548.385-w-waf05cqt

265065882 | 2024-10-28T05:33:54.753094

12345 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked

1911457608 | 2024-10-26T02:16:56.533277

14147 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1733645023 | 2024-10-17T18:39:57.767844

14265 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

-358707605 | 2024-10-30T20:18:17.847217

14344 / tcp

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 391
Connect-To: https://qd-gatway.aliyuncs.com/table/tree-land/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div id="other"></div>

</body>

819727972 | 2024-10-31T02:44:52.578793

16993 / tcp

SSH-2.0-OpenSSH_7.4

-801484042 | 2024-11-01T02:02:39.025629

18081 / tcp

ERR 27

1492413928 | 2024-10-11T20:05:02.666150

19000 / tcp

SSH-2.0-OpenSSH_7.5

-971970408 | 2024-10-17T08:52:28.655823

19200 / tcp

1900503736 | 2024-10-31T21:50:36.196364

20000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

-2107996212 | 2024-10-10T23:54:30.870313

20256 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

1911457608 | 2024-10-05T12:42:52.271215

20547 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1370263973 | 2024-11-01T16:56:37.119368

20880 / tcp

dubbo>

-2096652808 | 2024-10-29T07:30:57.034203

21025 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

819727972 | 2024-10-10T17:58:48.453669

21379 / tcp

SSH-2.0-OpenSSH_7.4

-1779118422 | 2024-10-31T21:43:40.592216

22001 / tcp

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

2087396567 | 2024-10-22T05:34:49.881892

22067 / tcp

kjnkjabhbanc283ubcsbhdc72

539065883 | 2024-10-31T17:58:56.968017

22070 / tcp

-1248408558 | 2024-10-29T19:19:29.860564

23424 / tcp

220 MikroTik FTP server (MikroTik 6.44.3) ready

165188539 | 2024-10-26T16:19:52.054017

25001 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-345718689 | 2024-11-03T19:47:42.593826

25565 / tcp

Vty password is not set.

398077695 | 2024-10-23T09:54:10.887905

27015 / tcp

422524323 | 2024-10-28T23:10:52.183707

27017 / tcp

{
"Version": "3.4.18",
"VersionArray": [
3,
4,
18,
0
],
"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",
"OpenSSLVersion": "",
"SysInfo": "",
"Bits": 64,
"Debug": false,
"MaxObjectSize": 16777216
}

1911457608 | 2024-10-27T13:42:11.642639

28015 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1730858130 | 2024-10-28T15:23:40.425919

28017 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-1399940268 | 2024-10-19T00:07:15.420015

30002 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-512818614 | 2024-10-28T12:09:07.844491

30718 / tcp

LH\\xdb\\xc6\\xdd\\xf6g\x0c\\x10\\x19\\x00\\x00\\x00\\x18\\x00\\x01\\x02\\x00\\x10\\x00\\x04\\x00\\x00\\x00\\x01\\xce\xdd\xb7\\x9d\\x86F\\xc7t\\x01\\xc1\\xcbU\xc8\x9c\\xe0_

1842524259 | 2024-10-26T21:40:19.104811

32764 / tcp

819727972 | 2024-11-01T21:01:19.450322

33060 / tcp

SSH-2.0-OpenSSH_7.4

-2089734047 | 2024-10-25T21:34:42.181854

33889 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-653033013 | 2024-10-22T23:43:42.948336

35000 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

996960436 | 2024-10-28T02:06:35.756259

37215 / tcp

572 Relay not authorized

-1487943323 | 2024-10-19T21:30:25.515476

37777 / tcp

431 Unable to negotiate secure command connection.\r\n

-433302150 | 2024-11-01T14:21:40.502419

44158 / tcp

/multistream/1.0.0

1574088840 | 2024-10-08T02:22:26.473076

44818 / tcp

">Application and Content Networking Software 3.9</a>)\n</BODY><

539065883 | 2024-10-27T20:48:33.770399

47808 / tcp

1519486042 | 2024-10-25T07:31:11.580692

47990 / tcp

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

-1626979812 | 2024-10-27T16:46:52.136997

48899 / tcp

220 Service ready for new user.

1449779382 | 2024-10-27T13:20:26.180767

49152 / tcp

HTTP/1.1 500 Internal Server Error
CONTENT-LENGTH: 411
CONTENT-TYPE: text/xml; charset="utf-8"
DATE: Mon, 22 Jan 2024 08:04:18 GMT
EXT:
SERVER: Linux/3.3.0, UPnP/1.0, Portable SDK for UPnP devices/1.6.18
X-User-Agent: redsonic

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<s:Body>
<s:Fault>
<faultcode>s:Client</faultcode>
<faultstring>UPnPError</faultstring>
<detail>
<UPnPError xmlns="urn:schemas-upnp-org:control-1-0">
<

2087396567 | 2024-10-16T05:06:38.950381

50000 / tcp

kjnkjabhbanc283ubcsbhdc72

-222277909 | 2024-10-19T16:54:24.090815

50050 / tcp

0@@

-345718689 | 2024-10-27T10:07:36.600119

50070 / tcp

Vty password is not set.

819727972 | 2024-10-24T07:54:32.262072

50100 / tcp

SSH-2.0-OpenSSH_7.4

2103111368 | 2024-10-25T13:41:04.768464

51235 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

1842524259 | 2024-10-16T22:34:21.834389

51443 / tcp

-1072158793 | 2024-10-17T14:56:51.565533

52869 / tcp

HTTP/1.1 500 Internal Server Error
SERVER: Linux/2.6.21.5, UPnP/1.0, Portable SDK for UPnP devices/1.6.6
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

-1036370807 | 2024-10-19T02:35:30.121921

53413 / tcp

JDWP-Handshake

-1399940268 | 2024-10-23T00:12:57.598989

54138 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1013082686 | 2024-10-31T11:55:52.634449

55000 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

-319440554 | 2024-10-26T21:52:08.450493

55442 / tcp

1690634669 | 2024-10-29T19:48:53.884356

55443 / tcp

171352214 | 2024-11-03T12:40:23.587321

55553 / tcp

-ERR client ip is not in whitelist

1741579575 | 2024-10-26T09:17:17.781398

60129 / tcp

321971019 | 2024-10-10T15:59:34.432730

61613 / tcp

-ERR client ip is not in whitelist\r

819727972 | 2024-10-31T09:38:37.799005

61616 / tcp

SSH-2.0-OpenSSH_7.4

1842317374 | 2024-10-26T07:46:32.492541

62078 / tcp

/1.1 400 Bad Request
Server: nginx/1.13.0
Content-Type: text/html
Connection: close

1690634669 | 2024-10-26T02:40:32.415770

64738 / tcp

123.56.37.132

Last Seen: 2024-11-03

Tags:

GeneralInformation

Vulnerabilities All ports Port 195 Port 1290 Port 2404 Port 2628 Port 3310 Port 4063 Port 5604 Port 5938 Port 6601 Port 6668 Port 6697 Port 7171 Port 9304 Port 9530 Port 9761 Port 10001 Port 10554 Port 16993 Port 19000 Port 21379 Port 33060 Port 50100 Port 61616 Latest CVSS

OpenPorts

-288825733 | 2024-10-29T12:04:05.572281 11 / tcp

1297354658 | 2024-10-11T22:44:57.480916 13 / tcp

1278527606 | 2024-10-20T16:27:29.591641 15 / tcp

1852418385 | 2024-11-02T08:11:03.448533 17 / tcp

873425297 | 2024-10-08T06:06:12.893604 19 / tcp

164764193 | 2024-10-06T12:49:41.856766 23 / tcp

1911457608 | 2024-10-22T03:01:12.975304 25 / tcp

-904840257 | 2024-10-23T04:00:52.729193 26 / tcp

2087396567 | 2024-10-31T03:08:04.113824 43 / tcp

-1867457549 | 2024-10-28T17:07:56.517559 49 / tcp

1252359125 | 2024-10-31T23:34:04.714205 53 / tcp

-1763883228 | 2024-10-25T22:22:14.030563 70 / tcp

-1846450790 | 2024-11-01T22:08:47.068864 79 / tcp

-1853249515 | 2024-10-30T18:30:57.436299 80 / tcp

205347087 | 2024-10-04T23:36:10.821563 95 / tcp

-1399940268 | 2024-10-28T23:26:07.871225 96 / tcp

2098371729 | 2024-10-31T15:48:26.634771 102 / tcp

-2089734047 | 2024-10-08T14:50:56.433462 104 / tcp

-345718689 | 2024-10-24T09:03:52.105056 110 / tcp

539065883 | 2024-10-20T16:45:37.202338 111 / tcp

141730637 | 2024-10-20T09:55:19.262889 119 / tcp

1483120365 | 2024-11-03T13:41:02.182293 135 / tcp

-1270998736 | 2024-10-28T13:26:03.791954 139 / tcp

-1939513550 | 2024-10-16T00:58:37.685515 143 / tcp

-1996280214 | 2024-11-02T19:36:36.876784 175 / tcp

722711397 | 2024-10-18T03:13:37.573791 180 / tcp

819727972 | 2024-11-03T06:45:41.417274 195 / tcp

1387411682 | 2024-10-23T23:46:10.721376 199 / tcp

-2089734047 | 2024-10-22T19:25:53.859608 221 / tcp

632542934 | 2024-10-10T21:47:35.790157 225 / tcp

-1709030885 | 2024-10-12T18:04:22.239356 264 / tcp

-1547976805 | 2024-11-03T10:35:42.921222 311 / tcp

-444830029 | 2024-10-23T20:59:46.679554 340 / tcp

-1713467553 | 2024-10-21T20:27:21.211394 389 / tcp

1327409218 | 2024-10-31T19:30:30.294436 427 / tcp

161801122 | 2024-10-28T01:56:10.895325 443 / tcp

1199739838 | 2024-10-27T23:06:48.788164 444 / tcp

-146605374 | 2024-10-26T14:20:38.644714 450 / tcp

398077695 | 2024-10-12T06:57:11.059450 502 / tcp

-1399940268 | 2024-10-24T14:10:14.787475 503 / tcp

171352214 | 2024-11-03T02:22:18.631371 515 / tcp

1497273505 | 2024-10-29T22:44:38.151860 541 / tcp

-1128967010 | 2024-10-17T06:53:49.582877 548 / tcp

448214121 | 2024-11-03T16:39:40.425074 554 / tcp

-1261053701 | 2024-10-20T13:08:57.529923 593 / tcp

4146400 | 2024-10-30T01:49:43.016693 636 / tcp

-1420968138 | 2024-11-02T19:44:34.679182 666 / tcp

-1399940268 | 2024-10-22T20:06:02.951644 789 / tcp

-992671574 | 2024-10-30T21:08:05.305062 873 / tcp

20021069 | 2024-10-11T05:09:33.389530 888 / tcp

1814656027 | 2024-10-25T16:17:04.784049 992 / tcp

-740312032 | 2024-10-28T00:58:06.015831 995 / tcp

-441419608 | 2024-10-21T03:20:15.177202 1023 / tcp

-2096652808 | 2024-10-05T12:15:47.924979 1025 / tcp

165188539 | 2024-10-08T17:42:19.992263 1153 / tcp

2087396567 | 2024-10-22T18:46:01.535487 1177 / tcp

1830697416 | 2024-10-19T06:17:44.272922 1200 / tcp

819727972 | 2024-10-14T00:28:27.123090 1290 / tcp

1741579575 | 2024-10-23T18:57:25.237893 1337 / tcp

-1279739995 | 2024-11-03T22:22:37.211664 1433 / tcp

-1184558916 | 2024-10-25T08:14:57.932839 1521 / tcp

1911457608 | 2024-10-20T17:21:38.265380 1588 / tcp

2087396567 | 2024-10-31T09:43:41.810453 1599 / tcp

1282941221 | 2024-11-02T12:01:27.758917 1604 / tcp

-1608241410 | 2024-11-03T22:19:16.737824 1723 / tcp

-1139999322 | 2024-11-02T03:03:20.964286 1801 / tcp

-1730858130 | 2024-10-28T18:28:06.646127 1820 / tcp

1911457608 | 2024-11-01T17:20:28.420956 1883 / tcp

-122096153 | 2024-11-02T02:40:30.443192 1911 / tcp

-441419608 | 2024-10-12T01:08:12.751472 1926 / tcp

632542934 | 2024-10-09T21:30:03.468894 1950 / tcp

-1399940268 | 2024-10-24T13:32:19.836315 2000 / tcp

-1681927087 | 2024-10-08T02:12:44.901355 2002 / tcp

1741579575 | 2024-10-13T12:48:15.157664 2008 / tcp

Vulnerabilities

-288825733 | 2024-10-29T12:04:05.572281
11 / tcp

1297354658 | 2024-10-11T22:44:57.480916
13 / tcp

1278527606 | 2024-10-20T16:27:29.591641
15 / tcp

1852418385 | 2024-11-02T08:11:03.448533
17 / tcp

873425297 | 2024-10-08T06:06:12.893604
19 / tcp

164764193 | 2024-10-06T12:49:41.856766
23 / tcp

1911457608 | 2024-10-22T03:01:12.975304
25 / tcp

-904840257 | 2024-10-23T04:00:52.729193
26 / tcp

2087396567 | 2024-10-31T03:08:04.113824
43 / tcp

-1867457549 | 2024-10-28T17:07:56.517559
49 / tcp

1252359125 | 2024-10-31T23:34:04.714205
53 / tcp

-1763883228 | 2024-10-25T22:22:14.030563
70 / tcp

-1846450790 | 2024-11-01T22:08:47.068864
79 / tcp

-1853249515 | 2024-10-30T18:30:57.436299
80 / tcp

205347087 | 2024-10-04T23:36:10.821563
95 / tcp

-1399940268 | 2024-10-28T23:26:07.871225
96 / tcp

2098371729 | 2024-10-31T15:48:26.634771
102 / tcp

-2089734047 | 2024-10-08T14:50:56.433462
104 / tcp

-345718689 | 2024-10-24T09:03:52.105056
110 / tcp

539065883 | 2024-10-20T16:45:37.202338
111 / tcp

141730637 | 2024-10-20T09:55:19.262889
119 / tcp

1483120365 | 2024-11-03T13:41:02.182293
135 / tcp

-1270998736 | 2024-10-28T13:26:03.791954
139 / tcp

-1939513550 | 2024-10-16T00:58:37.685515
143 / tcp

-1996280214 | 2024-11-02T19:36:36.876784
175 / tcp

722711397 | 2024-10-18T03:13:37.573791
180 / tcp

819727972 | 2024-11-03T06:45:41.417274
195 / tcp

1387411682 | 2024-10-23T23:46:10.721376
199 / tcp

-2089734047 | 2024-10-22T19:25:53.859608
221 / tcp

632542934 | 2024-10-10T21:47:35.790157
225 / tcp

-1709030885 | 2024-10-12T18:04:22.239356
264 / tcp

-1547976805 | 2024-11-03T10:35:42.921222
311 / tcp

-444830029 | 2024-10-23T20:59:46.679554
340 / tcp

-1713467553 | 2024-10-21T20:27:21.211394
389 / tcp

1327409218 | 2024-10-31T19:30:30.294436
427 / tcp

161801122 | 2024-10-28T01:56:10.895325
443 / tcp

1199739838 | 2024-10-27T23:06:48.788164
444 / tcp

-146605374 | 2024-10-26T14:20:38.644714
450 / tcp

398077695 | 2024-10-12T06:57:11.059450
502 / tcp

-1399940268 | 2024-10-24T14:10:14.787475
503 / tcp

171352214 | 2024-11-03T02:22:18.631371
515 / tcp

1497273505 | 2024-10-29T22:44:38.151860
541 / tcp

-1128967010 | 2024-10-17T06:53:49.582877
548 / tcp

448214121 | 2024-11-03T16:39:40.425074
554 / tcp

-1261053701 | 2024-10-20T13:08:57.529923
593 / tcp

4146400 | 2024-10-30T01:49:43.016693
636 / tcp

-1420968138 | 2024-11-02T19:44:34.679182
666 / tcp

-1399940268 | 2024-10-22T20:06:02.951644
789 / tcp

-992671574 | 2024-10-30T21:08:05.305062
873 / tcp

20021069 | 2024-10-11T05:09:33.389530
888 / tcp

1814656027 | 2024-10-25T16:17:04.784049
992 / tcp

-740312032 | 2024-10-28T00:58:06.015831
995 / tcp

-441419608 | 2024-10-21T03:20:15.177202
1023 / tcp

-2096652808 | 2024-10-05T12:15:47.924979
1025 / tcp

165188539 | 2024-10-08T17:42:19.992263
1153 / tcp

2087396567 | 2024-10-22T18:46:01.535487
1177 / tcp

1830697416 | 2024-10-19T06:17:44.272922
1200 / tcp

819727972 | 2024-10-14T00:28:27.123090
1290 / tcp

1741579575 | 2024-10-23T18:57:25.237893
1337 / tcp

-1279739995 | 2024-11-03T22:22:37.211664
1433 / tcp

-1184558916 | 2024-10-25T08:14:57.932839
1521 / tcp

1911457608 | 2024-10-20T17:21:38.265380
1588 / tcp

2087396567 | 2024-10-31T09:43:41.810453
1599 / tcp

1282941221 | 2024-11-02T12:01:27.758917
1604 / tcp

-1608241410 | 2024-11-03T22:19:16.737824
1723 / tcp

-1139999322 | 2024-11-02T03:03:20.964286
1801 / tcp

-1730858130 | 2024-10-28T18:28:06.646127
1820 / tcp

1911457608 | 2024-11-01T17:20:28.420956
1883 / tcp

-122096153 | 2024-11-02T02:40:30.443192
1911 / tcp

-441419608 | 2024-10-12T01:08:12.751472
1926 / tcp

632542934 | 2024-10-09T21:30:03.468894
1950 / tcp

-1399940268 | 2024-10-24T13:32:19.836315
2000 / tcp

-1681927087 | 2024-10-08T02:12:44.901355
2002 / tcp

1741579575 | 2024-10-13T12:48:15.157664
2008 / tcp

2087396567 | 2024-11-03T18:00:42.618699
2067 / tcp

-1399940268 | 2024-10-07T03:42:12.055748
2081 / tcp

-971970408 | 2024-11-02T22:48:20.172780
2083 / tcp

-1999117212 | 2024-10-11T04:57:47.459926
2087 / tcp

-2107996212 | 2024-10-07T21:09:47.084895
2121 / tcp