GeneralInformation

Hostnames	shog2a6250868e917.1688.com szrobotine.1688.com dotodorks-nonoger-ogi.dd.ojibobo-ina.aon.alibaba-inc.com dotaher.ojibobo-ina.aon.alibaba-inc.com hhgoi-dsd-dsd44826-80.gas-svr.ojibobo-ina.aon.alibaba-inc.com gd-dork.ojibobo-ina.aon.alibaba-inc.com gre-oah2.ojibobo-ina.aon.alibaba-inc.com test-aenter.ojibobo-ina.aon.alibaba-inc.com vot.ojibobo-ina.aon.alibaba-inc.com aliyun.com cn.aliyun.com gre-stvdio.iot.aliyun.com pre-cockpit-test.aliyun.com regort.aliyun.com shop1432140437765.aliyun.com yjgts.aliyun.com ar-grivote-shore.ev-aentroj-1.aliyuncs.com sts.og-northeost-1.aliyuncs.com login.portal.hemaos.com lazada.cn solution.lazada.com.my webim.lazada.com.my shog36244836.taobao.com sell.xiangqing.taobao.com gjon-3d.tmall.com item.publish.tmall.com operate-api.yiupin.com
Domains	1688.com alibaba-inc.com aliyun.com aliyuncs.com hemaos.com lazada.cn lazada.com.my taobao.com tmall.com yiupin.com
Country	China
City	Beijing
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

13 15 17 21 23 25 37 43 49 53 70 93 94 96 98 100 102 104 110 111 119 135 143 175 179 195 221 234 264 314 343 389 427 444 449 502 503 515 541 548 554 591 593 636 666 771 772 789 801 808 809 832 873 880 993 995 1000 1012 1023 1025 1080 1099 1110 1153 1200 1234 1414 1433 1443 1458 1515 1521 1599 1604 1723 1800 1801 1830 1883 1911 1950 1957 1962 1973 1988 1989 2000 2002 2008 2078 2081 2083 2087 2108 2121 2154 2181 2196 2222 2323 2332 2345 2404 2433 2455 2567 2628 3001 3008 3050 3056 3064 3070 3079 3084 3091 3110 3116 3125 3139 3148 3150 3151 3162 3195 3198 3260 3268 3269 3299 3301 3306 3310 3345 3388 3389 3390 3401 3498 3521 3524 3551 3556 3580 3590 3780 3792 3793 3952 3953 4022 4063 4064 4100 4150 4157 4242 4282 4321 4400 4430 4432 4433 4434 4443 4444 4445 4447 4499 4500 4506 4734 4786 4821 4840 4899 4949 5001 5003 5004 5006 5009 5010 5025 5172 5190 5201 5222 5229 5263 5265 5268 5269 5272 5280 5435 5439 5444 5456 5494 5495 5523 5552 5557 5598 5609 5650 5672 5903 5904 5914 5938 5984 5986 5999 6000 6001 6022 6348 6379 6440 6443 6500 6622 6633 6653 6666 6667 6668 6697 6955 7001 7016 7071 7079 7283 7415 7434 7443 7548 7634 7788 7799 7801 8009 8037 8040 8043 8045 8048 8062 8064 8065 8073 8081 8083 8085 8089 8099 8103 8104 8110 8116 8126 8133 8134 8139 8145 8150 8161 8171 8172 8180 8182 8184 8193 8199 8200 8239 8300 8317 8383 8404 8418 8424 8431 8443 8455 8466 8480 8488 8526 8544 8551 8554 8585 8588 8597 8602 8649 8666 8707 8724 8745 8787 8813 8815 8827 8830 8834 8841 8844 8849 8857 8863 8880 8885 8887 8889 8902 9000 9001 9003 9005 9016 9020 9024 9026 9030 9039 9042 9049 9050 9055 9061 9073 9081 9091 9092 9108 9138 9147 9151 9155 9160 9175 9190 9201 9221 9245 9248 9257 9304 9308 9333 9345 9383 9398 9418 9443 9600 9606 9711 9761 9765 9802 9872 9876 9885 9888 9898 9900 9908 9916 9943 9966 9993 9998 9999 10000 10001 10002 10012 10015 10022 10023 10025 10027 10031 10032 10046 10083 10134 10254 10283 10554 11112 11211 11288 11601 11681 11701 11920 12000 12082 12103 12110 12114 12130 12131 12138 12183 12230 12232 12245 12254 12260 12262 12292 12300 12324 12327 12334 12337 12345 12360 12361 12367 12368 12390 12399 12402 12419 12428 12430 12435 12457 12461 12462 12484 12487 12488 12491 12495 12502 12504 12515 12517 12519 12520 12525 12526 12527 12534 12536 12545 12549 12580 12585 12586 12589 12601 13333 13443 14147 14265 14873 15503 16007 16032 16047 16050 16054 16064 16072 16087 16091 16096 16401 16402 16993 17778 17779 18002 18009 18010 18012 18017 18028 18034 18052 18053 18058 18080 18086 18094 18099 18102 18112 18245 19082 19100 20000 20030 20100 20256 20325 20547 21001 21025 21241 21242 21260 21272 21281 21295 21302 21312 21316 21320 21379 21381 22082 22345 25002 25003 25006 25010 25565 27015 28015 29799 30003 31337 32001 32202 32443 32444 32764 32922 33060 33222 33322 33389 33722 33822 34225 34322 34422 35000 35002 35153 35241 35422 35554 35559 36322 36501 36522 37022 37080 37122 37777 37822 38022 38222 40005 40222 40322 40422 40522 40722 40922 41022 41122 41222 41522 41722 41800 41822 42022 42222 42420 42422 42722 43022 43222 43322 43422 43522 44158 44303 44310 44322 44336 44345 44422 44444 44522 45039 45111 45122 45222 45322 45444 45722 45922 46022 46122 46522 46622 46722 46822 47022 47122 47222 47322 47422 47522 47622 47990 48013 48020 48122 48222 48322 48522 48622 48922 49422 49443 49822 50000 50004 50022 50100 50101 50104 50105 50106 50322 50522 50622 50722 50805 50998 51007 51022 51106 51201 51222 51422 51522 51722 52322 52622 53222 53322 53422 53722 53922 54222 54422 54522 54822 55000 55222 55443 55475 55522 55553 55554 55622 55722 55822 55922 56022 56222 56622 57122 57422 57522 57622 57780 57786 57922 58000 58022 58322 58422 59122 59622 59822 60001 60129 60443 61613 61616 61617 62078 63210 63256 65432

13 / tcp

-341265581 | 2025-01-30T06:13:34.171213

HTTP/1.1 404

15 / tcp

-2089734047 | 2025-01-13T06:00:42.932543

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

17 / tcp

-339084706 | 2025-02-03T02:16:51.312572

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

21 / tcp

1210838212 | 2025-02-02T19:13:25.416709

220 DiskStation FTP server ready.

23 / tcp

460589547 | 2025-02-06T12:18:50.706886

ZyXEL VDSL Router

25 / tcp

-653033013 | 2025-02-03T23:20:49.946279

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

37 / tcp

-886440009 | 2025-01-31T14:17:17.396643

\\xeb\\xd1~B

43 / tcp

171352214 | 2025-01-29T09:31:14.572241

-ERR client ip is not in whitelist

49 / tcp

-1909001798 | 2025-02-05T02:09:32.332121

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Tue, 21 Dec 2021 03:13:39 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

53 / tcp

-1156129152 | 2025-02-02T06:24:02.593741

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00G\x00\x16\x07clients\x01l\x06google\x03com\x00\xc01\x00\x01\x00\x01\x00\x00\x00\x85\x00\x04\x8e\xfb+\x0e
\x00\x06\x85\x80\x00\x01\x00\x01\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03\xc0\x00\x10\x00\x03\x00\x00\x00\x00\x00	\x08dnsmasq-

70 / tcp

857710896 | 2025-02-03T00:25:52.057356

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Mon, 27 Nov 2023 21:45:42 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

93 / tcp

819727972 | 2025-01-19T21:32:15.645389

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

94 / tcp

1911457608 | 2025-01-16T11:21:17.238665

\x00[\x00\x00\x00\x00\x00\x00

96 / tcp

-1032713145 | 2025-02-07T01:13:29.840894

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

98 / tcp

-2089734047 | 2025-01-31T08:55:58.695326

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

100 / tcp

-1399940268 | 2025-01-10T14:43:45.719606

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

102 / tcp

-1399940268 | 2025-01-21T11:08:52.221935

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

104 / tcp

1011407350 | 2025-02-01T01:52:11.965571

* OK GroupWise IMAP4rev1 Server Ready\r\n

110 / tcp

1623746877 | 2025-01-31T19:08:22.815365

500 Permission denied - closing connection.\r\n

111 / tcp

1492413928 | 2025-01-29T21:26:21.990023

SSH-2.0-OpenSSH_7.5

119 / tcp

141730637 | 2025-01-13T23:56:13.221298

HTTP/1.0 200 OK
Server: Proxy

135 / tcp

1040118286 | 2025-01-18T15:53:37.486509

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: WIN-IG71DFESOT5\n IP2: 60.199.208.208\n IP3: 2001:0:2851:782c:38f3:5c2:c338:2f2f\n\nNTLMSSP:\nTarget_Name: WIN-IG71DFESOT5\nProduct_Version: 10.0.14393 Ntlm 15\nOS: Windows 10, Version 1607/Windows Server 2016, Version 1607\nNetBIOS_Domain_Name: WIN-IG71DFESOT5\nNetBIOS_Computer_Name: WIN-IG71DFESOT5\nDNS_Domain_Name: WIN-IG71DFESOT5\nDNS_Computer_Name: WIN-IG71DFESOT5\nSystem_Time: 2024-01-22 08:14:35 +0

143 / tcp

-398621179 | 2025-02-06T11:22:42.088612

* OK everfull.com.cn IMAP4rev1 MDaemon 12.5.6 ready\r\n

175 / tcp

-1399940268 | 2025-01-13T17:36:58.351651

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

179 / tcp

-399606100 | 2025-01-30T07:36:46.445200

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

195 / tcp

1082732927 | 2025-01-12T19:57:21.533487

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

221 / tcp

-980525298 | 2025-01-29T11:56:45.219837

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

234 / tcp

-2140303521 | 2025-01-14T20:02:05.403789

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

264 / tcp

-1718229072 | 2025-01-11T11:09:17.317619

CheckPoint\nFirewall Host: gw2\nSmartCenter Host: SMS..6sxmht\\x00\n

314 / tcp

-1730858130 | 2025-01-10T22:10:02.901151

RFB 003.008
VNC:
  Protocol Version: 3.8

343 / tcp

205347087 | 2025-01-19T17:06:00.720712

SSH-25453-Cisco-3524665.35\n

389 / tcp

811247330 | 2025-01-12T20:48:42.299436

HTTP/1.1 200 OK
Server: Apache
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet, nosnippet, notranslate, noimageindex
Content-Type: text/html; charset=utf-8

427 / tcp

1530390632 | 2025-01-16T20:25:04.434102

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://127.0.0.1\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:cdserver\nservice:fdserver\nservice:hdserver\nservice:adviser\nservice:lighttpd\nB://l:87/x\n\nResponse of service:ipmi SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:ipmi://(none):623\n  Lifetime: 65535\n  URL: service:ipmi://IEI9CC2C4135A27:623\n\n\nResponse of service:ipmi Attr

444 / tcp

0 | 2025-02-04T10:11:04.596464

Hashes

hash

-1781769271

http.dom_hash

http.html_hash

http.server_hash

1673621694

HTTP/1.1 200 OK
Date: Tue, 04 Feb 2025 10:11:04 GMT
Content-Type: application/json
Content-Length: 2029
Connection: keep-alive
Ali-Swift-Global-Savetime: 1738663864
Eagleeye-Traceid: 3b0565ed88ed080d7da35992d0
Eagleid: 3b0565ed88ed080d7da35992d0
S_group: tao-session
S_ip: 2036d74184d1cae1c1a03218d05b7d16
S_status: STATUS_SYS_ERR
S_tag: 667457978162384|483632377^|^^
S_tid: 3b0565ed88ed080d7da35992d0
S_ucode: CN:CENTER
S_v: 0.4.2.9
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://caldav.sg.aliyun.com
Ufe-Result: A5
Via: vcache67.90vcache5[406,887,108-0,M], vcache09.vcache02[258,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Tue, 04 Feb 2025 10:11:04 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:49:b2:86:90:3c:9b:46:7a:60:5b:87
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: May  5 06:21:16 2023 GMT
            Not After : Jun  5 06:21:15 2024 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:8c:48:08:48:af:89:01:66:08:4b:53:ed:
                    2a:fd:70:b2:61:40:46:9b:98:19:49:b9:9f:64:c8:
                    60:d6:2c:47:85:56:ca:c2:31:94:d2:3a:d3:c1:24:
                    91:c6:70:be:6f:53:3c:fb:ae:f2:e5:cf:3d:c5:6a:
                    95:ee:f3:5d:37:62:25:51:fb:69:dd:37:93:00:a3:
                    cf:dd:18:a9:af:5c:f7:6f:96:a2:92:27:65:21:92:
                    de:ff:c2:ec:d9:52:42:06:cd:84:44:20:f4:c1:15:
                    4b:13:27:c5:3d:f1:c3:e8:61:b2:41:f7:22:4d:3e:
                    08:20:b0:7c:b3:38:9c:ab:d6:fc:49:6b:b4:92:88:
                    16:2e:c7:62:23:33:43:a0:36:86:ca:80:8a:9e:b0:
                    73:01:50:54:33:06:4c:b9:a3:73:71:09:98:72:22:
                    6f:a7:9c:c3:3e:bd:ea:7f:57:dd:c2:d2:a0:85:21:
                    ae:a8:fb:16:d7:ef:a2:5b:8d:75:cf:b0:e5:cb:34:
                    78:cc:28:e6:27:13:6a:d4:96:f5:ac:de:f3:38:d5:
                    cc:7a:ba:c2:78:b9:5e:db:f8:2d:14:d1:4b:e0:6f:
                    31:e2:c9:5c:56:bd:31:2d:1c:94:d4:54:11:05:5f:
                    0f:54:cd:63:c3:98:af:33:c4:2e:ed:36:61:1a:66:
                    4b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
            X509v3 Subject Alternative Name: 
                DNS:*.aliyun.com, DNS:aliyun.com, DNS:hhgoi-dsd-dsd44826-80.gas-svr.ojibobo-ina.aon.alibaba-inc.com, DNS:ar-grivote-shore.ev-aentroj-1.aliyuncs.com, DNS:dotodorks-nonoger-ogi.dd.ojibobo-ina.aon.alibaba-inc.com, DNS:operate-api.yiupin.com, DNS:gd-dork.ojibobo-ina.aon.alibaba-inc.com, DNS:cn.aliyun.com, DNS:vot.ojibobo-ina.aon.alibaba-inc.com, DNS:pre-cockpit-test.aliyun.com, DNS:shop1432140437765.aliyun.com, DNS:gjon-3d.tmall.com, DNS:sell.xiangqing.taobao.com, DNS:gre-oah2.ojibobo-ina.aon.alibaba-inc.com, DNS:gre-stvdio.iot.aliyun.com, DNS:szrobotine.1688.com, DNS:dotaher.ojibobo-ina.aon.alibaba-inc.com, DNS:test-aenter.ojibobo-ina.aon.alibaba-inc.com, DNS:shog2a6250868e917.1688.com, DNS:solution.lazada.com.my, DNS:yjgts.aliyun.com, DNS:webim.lazada.com.my, DNS:regort.aliyun.com, DNS:shog36244836.taobao.com, DNS:login.portal.hemaos.com, DNS:lazada.cn, DNS:sts.og-northeost-1.aliyuncs.com, DNS:item.publish.tmall.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        46:8d:d5:3f:27:1b:ce:a8:1b:e1:d7:1b:99:f8:ca:ba:e6:33:
        d1:64:df:65:bb:34:91:1c:f5:08:f9:18:d7:14:e0:9b:70:d0:
        36:1b:c4:4d:88:bf:81:a5:6a:59:44:33:7e:99:66:01:99:5c:
        84:0d:e1:af:44:a7:58:25:d7:77:98:62:08:e2:53:0e:d6:6c:
        3a:d9:90:f6:ed:72:06:1a:2d:bb:d3:5f:c9:00:6f:48:c5:a7:
        ea:2b:7b:42:0b:12:e3:be:cf:c6:f8:39:68:25:ff:e2:6d:67:
        c2:13:29:7b:81:ea:67:83:66:b6:d2:e1:14:f1:45:75:0d:b5:
        53:0f:32:5a:f3:4c:61:c0:d1:03:82:9f:b7:d0:a4:3c:92:da:
        d1:28:c3:51:70:43:1e:aa:d8:51:76:4e:e7:5f:04:cb:56:c1:
        b8:b4:22:e1:3d:87:85:ea:81:c1:3a:bc:12:68:ac:d1:28:1d:
        ca:d0:cd:e8:be:62:34:62:2b:e8:d1:20:1e:c5:7c:9b:b2:41:
        09:81:d9:6c:7c:9c:5b:f4:55:4a:b8:67:41:d1:f7:6f:ce:b2:
        39:43:c2:5b:25:ec:08:67:51:51:b7:9c:85:40:27:eb:77:78:
        4e:35:7c:19:a5:b6:1a:92:0e:06:9a:7c:67:88:46:74:71:21:
        81:5f:47:41

449 / tcp

677934968 | 2025-01-14T05:06:31.867093

lm^)Q

502 / tcp

-1746074029 | 2025-02-04T03:27:14.939641

101 imqbroker =unV\r\n

503 / tcp

-904840257 | 2025-01-18T04:53:46.063539

572 Relay not authorized\r\n

515 / tcp

539065883 | 2025-01-23T02:46:23.661518

541 / tcp

-820381412 | 2025-02-05T04:10:24.691193

\\x16\\x03\\x01\\x01[\\x01\\x00\\x01W\\x03\\x03\\xf8\\x9dqe\\xf3\\x02\xd0\xa0\\x8c.M\x0bR\\xc9\\xeex\\x9d\\xb1)\\x07\\xe3\\x94\\x13z\\xfb\\x83xM\\x9a\\xcf9\\xad \r\\xb0%\\x01\\xb2\\xdb\\xf9%K7\\x99:\\xd9G\\xd2)\\xa7\\xab:\\x80\\xfd\\xfc\\x01\\x96BK\\xa1\\x83\\x0e\\xe8\\xa2b\\x002\\x13\\x02\\x13\\x03\\x13\\x01\\x009\\x0

548 / tcp

862587784 | 2025-01-28T20:54:53.573615

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: pangzinas\nMachine Type: \\x0eNetatalk3.1.12\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: Cleartxt Passwrd\\x0f,No User Authent\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

554 / tcp

-927382641 | 2025-02-02T22:23:43.681787

RTSP/1.0 200 OK
CSeq: 1
Public: OPTIONS, DESCRIBE, PLAY, PAUSE, SETUP, TEARDOWN, SET_PARAMETER, GET_PARAMETER

591 / tcp

1623746877 | 2025-01-14T21:04:25.927211

500 Permission denied - closing connection.\r\n

593 / tcp

1308377066 | 2025-01-30T14:29:51.468371

ncacn_http/1.0

636 / tcp

1732481781 | 2025-02-01T00:15:54.219390

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 8-38284903-0 0NNN RT(1705909933705 166) q(-1 -1 -1 -1) r(0 -1) b1

666 / tcp

1300162323 | 2025-02-03T01:32:21.000864

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

771 / tcp

819727972 | 2025-01-23T03:48:40.599903

SSH-2.0-OpenSSH_7.4

772 / tcp

740837454 | 2025-01-30T09:15:50.493960

SSH-2.0-OpenSSH_5.3

789 / tcp

921225407 | 2025-01-25T21:53:56.889502

\x00\x00\x00\x04\x00\x00\x00\x00\x00

801 / tcp

119860953 | 2025-01-09T18:59:58.937890

* OK ArGoSoft Mail Server IMAP Module v.YW at

808 / tcp

-1166978945 | 2025-01-30T22:37:40.234509

HTTP/1.1 407 Proxy Authentication Required
Server: Proxy
Proxy-Authenticate: Basic realm="CCProxy Authorization"
Connection: Close
Proxy-Connection: Close

809 / tcp

-801484042 | 2025-01-12T05:57:50.793569

ERR 27

832 / tcp

599074451 | 2025-01-10T20:30:53.128365

msg

873 / tcp

-1970692834 | 2025-01-31T13:04:16.322239

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

880 / tcp

-1256415508 | 2025-01-27T13:30:25.123518

HTTP/1.1 404 Not Found
Server: TornadoServer/6.1
Content-Type: text/html; charset=UTF-8

993 / tcp

165188539 | 2025-02-05T13:30:00.369048

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

995 / tcp

934210070 | 2025-01-27T13:30:15.244498

+OK mail.dupre.idv.tw IceWarp 11.2.1.2 x64 POP3 Mon, 22 Jan 2024 12:43:35 +0800 <20240122124334@mail.dupre.idv.tw>\r\n

1000 / tcp

819727972 | 2025-01-14T17:29:17.575121

SSH-2.0-OpenSSH_7.4

1012 / tcp

321971019 | 2025-01-21T13:27:26.075099

-ERR client ip is not in whitelist\r

1023 / tcp

-2089734047 | 2025-01-31T03:20:12.958953

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1025 / tcp

-1899074860 | 2025-01-09T02:06:09.818433

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

1080 / tcp

1362344524 | 2025-02-04T16:36:12.507379

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1099 / tcp

2063598737 | 2025-01-11T01:10:16.340871

/0 0 L\r\n/0 0 HUH\r\n

1110 / tcp

1893989126 | 2025-01-21T18:58:13.359418

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN

1153 / tcp

-1399940268 | 2025-02-04T00:24:05.023143

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1200 / tcp

819727972 | 2025-01-31T08:47:40.934336

SSH-2.0-OpenSSH_7.4

1234 / tcp

1911457608 | 2025-02-03T13:11:29.557317

\x00[\x00\x00\x00\x00\x00\x00

1414 / tcp

-1327660293 | 2025-02-04T23:59:08.004776

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

1433 / tcp

555056254 | 2025-01-08T19:09:25.560821

MSSQL Server\nVersion: 171050560 (0xa320640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: 3NXCU7QCCJGSTII\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: 3NXCU7QCCJGSTII\nNetBIOS_Computer_Name: 3NXCU7QCCJGSTII\nDNS_Domain_Name: 3NXCU7QCCJGSTII\nDNS_Computer_Name: 3NXCU7QCCJGSTII\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 01:19:47 +0000 UTC\n\n

1443 / tcp

-1715152554 | 2025-01-09T09:55:04.267200

Hashes

hash

1215690903

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Thu, 09 Jan 2025 09:55:04 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://123.57.230.15:443/

1458 / tcp

1911457608 | 2025-01-18T00:10:04.142863

\x00[\x00\x00\x00\x00\x00\x00

1515 / tcp

1082732927 | 2025-02-05T06:51:52.111035

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

1521 / tcp

-805164506 | 2025-02-05T17:38:29.169543

\xc3\xbf\xc3\xbd"\r\nL

1599 / tcp

539065883 | 2025-01-14T00:04:10.502537

1604 / tcp

-68075478 | 2025-01-09T05:05:54.524921

1723 / tcp

1103582599 | 2025-02-04T18:31:11.095401

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

1800 / tcp

165188539 | 2025-02-05T23:26:18.393946

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1801 / tcp

1725077471 | 2025-01-12T20:40:34.454408

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x92\\xb4\\xd9\\x13@w\\xa5F\\xbf\\xbd_\\x00\\xe9(Z\\x1992d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1830 / tcp

1911457608 | 2025-01-27T07:56:04.383249

\x00[\x00\x00\x00\x00\x00\x00

1883 / tcp

-971970408 | 2025-01-15T18:58:26.398828

1911 / tcp

-1399940268 | 2025-02-02T20:06:36.114624

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1950 / tcp

-1032713145 | 2025-01-19T16:03:26.428910

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

1957 / tcp

-2089734047 | 2025-01-27T13:53:13.518849

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1962 / tcp

-1839934832 | 2025-02-05T21:42:12.220643

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

1973 / tcp

1189133115 | 2025-02-05T13:33:00.357620

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

1988 / tcp

398077695 | 2025-01-23T12:46:21.418523

1989 / tcp

1948301213 | 2025-01-29T22:54:10.096922

RFB 003.003
VNC:
  Protocol Version: 3.3

2000 / tcp

-358801646 | 2025-01-25T07:18:55.631576

SSH-2.0-OpenSSH_6.6.1

2002 / tcp

-1681927087 | 2025-01-15T21:10:50.037449

kjnkjabhbanc283ubcsbhdc72

2008 / tcp

819727972 | 2025-01-09T11:20:36.802640

SSH-2.0-OpenSSH_7.4

2078 / tcp

117101543 | 2025-01-24T18:31:55.266698

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

2081 / tcp

-1399940268 | 2025-01-11T23:24:51.894649

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2083 / tcp

819727972 | 2025-02-07T05:12:37.636927

SSH-2.0-OpenSSH_7.4

2087 / tcp

1842524259 | 2025-02-05T05:47:55.789189

2108 / tcp

1767345577 | 2025-01-18T17:52:33.791553

Hello, this is Quagga (version 0T).
Copyright 1996-200

2121 / tcp

141730637 | 2025-01-29T11:37:45.055960

HTTP/1.0 200 OK
Server: Proxy

2154 / tcp

-971970408 | 2025-01-23T21:10:20.040412

2181 / tcp

546151771 | 2025-01-10T20:34:38.881069

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2196 / tcp

-1839934832 | 2025-02-06T13:47:54.087669

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

2222 / tcp

-1152923582 | 2025-01-14T01:17:43.420670

SSH-2.0-dropbear\r\n\\x00\\x00\\x01\\x84\\x07\\x14\\x82q\\xf3\\x1aG*9\\xe9\\xf7O\xc9\xad#\\xbbpG\\x00\\x00\\x00\\x82curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,kexguess2@matt.ucc.asn.au\\x00\\x00\\x00 ssh-ed25519,rsa-sha2-256,ssh-rsa\\x00\\x00\\x003chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr\\x00\\x00\\x003chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr\\x00\\x00\\x00\\x17hmac-sha1,hmac-sha2-256\\x00\\x00\\x00\\x17hmac-sha1,hmac-sha2-256\\x00\\x00\\x00\\x04none\\x00\\x00\\x00\\x04non

2323 / tcp

-2112953016 | 2025-02-05T18:51:42.401518

There are too many users,please wait a moment to log in!


TELNET Negotiation:
will: Echo, Suppress Go Ahead
do: Echo, Negotiate About Window Size, Remote Flow Control

2332 / tcp

-1609150592 | 2025-01-24T15:19:40.333577

ÿÿÿ
0 ...

2345 / tcp

205347087 | 2025-02-03T18:10:42.581043

SSH-25453-Cisco-3524665.35\n

2404 / tcp

1911457608 | 2025-02-04T06:54:24.884511

\x00[\x00\x00\x00\x00\x00\x00

2433 / tcp

-1487943323 | 2025-01-15T02:51:03.440359

431 Unable to negotiate secure command connection.\r\n

2455 / tcp

1842524259 | 2025-01-23T09:18:04.099855

2567 / tcp

-441419608 | 2025-02-02T06:04:59.717690

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

2628 / tcp

366084633 | 2025-01-26T10:18:21.676070

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

3001 / tcp

-1399940268 | 2025-01-20T00:13:22.590311

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3008 / tcp

-2089734047 | 2025-02-05T05:51:41.818670

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3050 / tcp

1911457608 | 2025-02-05T14:56:15.493402

\x00[\x00\x00\x00\x00\x00\x00

3056 / tcp

-1399940268 | 2025-01-16T18:39:19.823413

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3064 / tcp

-1733645023 | 2025-02-05T15:15:03.098609

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

3070 / tcp

398077695 | 2025-01-25T22:47:19.621107

3079 / tcp

103159425 | 2025-01-12T03:08:17.040039

SSH-1.99-RGOS_SSH

3084 / tcp

-2089734047 | 2025-01-09T21:36:06.936109

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3091 / tcp

-1059554316 | 2025-01-27T01:34:03.668812

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

3110 / tcp

-2089734047 | 2025-01-18T23:51:48.158368

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3116 / tcp

1911457608 | 2025-01-29T04:55:36.744932

\x00[\x00\x00\x00\x00\x00\x00

3125 / tcp

-1105333987 | 2025-01-30T20:06:58.934016

\x00[KpU\x7f\x00\x00

3139 / tcp

819727972 | 2025-01-22T20:08:20.706802

SSH-2.0-OpenSSH_7.4

3148 / tcp

-1737707071 | 2025-01-22T23:51:23.844961

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

3150 / tcp

-288825733 | 2025-01-11T12:10:16.855391

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

3151 / tcp

1332894250 | 2025-01-26T06:24:16.027735

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

3162 / tcp

-2089734047 | 2025-01-20T00:26:43.439668

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3195 / tcp

819727972 | 2025-01-13T06:27:30.967128

SSH-2.0-OpenSSH_7.4

3198 / tcp

-1839934832 | 2025-02-02T19:38:56.507551

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3260 / tcp

-1341662640 | 2025-02-05T18:30:19.185207

HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3268 / tcp

-561021273 | 2025-01-23T09:50:43.534216

220 2.0.0 prod-cn-momentum2.webpowercn.local ESMTP ecelerity 4.2.1.51128 r(Core:4.2.1.5) Sun, 03 Dec 2023 10:04:37 +0800\r\n

3269 / tcp

1911457608 | 2025-01-25T18:12:57.889479

\x00[\x00\x00\x00\x00\x00\x00

3299 / tcp

-1265999252 | 2025-01-14T17:14:30.253980

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

3301 / tcp

-2046514463 | 2025-02-07T09:18:54.553683

AB\x01\t

3306 / tcp

1000685185 | 2025-02-07T06:18:38.160259

Mysql Version: 5.7.44-log \r\nN\\x00\\x00\\x00\n5.7.44-log\\x00r/\\x06\\x00u1Z3=}L\\x04\\x00\\xff\\xff-\\x02\\x00\\xff\\xc1\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00tKb,\\x0eS\\x19\\x7fD\\x15rQ\\x00mysql_native_password\\x00

3310 / tcp

-1810987450 | 2025-01-11T07:25:48.228751

\xc3\xbf

3345 / tcp

1077013874 | 2025-01-11T20:21:25.339001

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

3388 / tcp

740837454 | 2025-01-29T03:16:43.343771

SSH-2.0-OpenSSH_5.3

3389 / tcp

-2036484723 | 2025-02-05T02:00:54.027290

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x1f\\x08\\x00\\x08\\x00\\x00\\x00\n\nGuess_OS:Windows Server 2016 or 2019 or 2022\nFlag: PROTOCOL_HYBRID_EX\n

3390 / tcp

-2089734047 | 2025-01-28T16:44:23.126785

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3401 / tcp

-1399940268 | 2025-01-28T15:24:27.606992

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3498 / tcp

-616720387 | 2025-01-24T19:01:38.866558

SSH-2.0-SSHD_0.7.6

3521 / tcp

-1399940268 | 2025-02-03T04:38:45.731262

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3524 / tcp

-2089734047 | 2025-01-24T01:16:33.127128

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3551 / tcp

198844676 | 2025-02-01T05:40:25.984583

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3556 / tcp

1911457608 | 2025-01-19T09:37:20.202297

\x00[\x00\x00\x00\x00\x00\x00

3580 / tcp

-1227409554 | 2025-01-29T06:55:16.195895

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3590 / tcp

-2107996212 | 2025-01-14T16:13:44.329967

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

3780 / tcp

-971970408 | 2025-02-01T17:28:14.466058

3792 / tcp

669849225 | 2025-02-07T02:29:15.370510

SSH-98.60-SysaxSSH_81885..42\r\n

3793 / tcp

-1399940268 | 2025-01-18T08:10:55.857433

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3952 / tcp

-1230049476 | 2025-01-27T08:02:07.489422

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

3953 / tcp

165188539 | 2025-01-16T19:30:27.207570

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

4022 / tcp

1911457608 | 2025-01-17T19:11:22.369022

\x00[\x00\x00\x00\x00\x00\x00

4063 / tcp

1842524259 | 2025-02-02T01:41:58.308831

4064 / tcp

1504401647 | 2025-01-13T19:51:35.159345

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

4100 / tcp

-1487943323 | 2025-01-10T03:09:59.330371

431 Unable to negotiate secure command connection.\r\n

4150 / tcp

1543809371 | 2025-01-11T23:37:10.075336

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

4157 / tcp

1690634669 | 2025-02-05T19:14:11.098694

4242 / tcp

-1914158197 | 2025-02-03T06:31:27.269191

HTTP/1.1 500 Internal Server Error
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

4282 / tcp

1948301213 | 2025-02-02T21:05:54.493330

RFB 003.003
VNC:
  Protocol Version: 3.3

4321 / tcp

740837454 | 2025-01-15T01:19:01.878293

SSH-2.0-OpenSSH_5.3

4400 / tcp

-1399940268 | 2025-02-04T18:35:22.208167

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4430 / tcp

103159425 | 2025-01-30T19:34:41.796534

SSH-1.99-RGOS_SSH

4432 / tcp

-653033013 | 2025-01-29T00:09:26.198402

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

4433 / tcp

1778988322 | 2025-01-30T17:48:14.030051

* OK GroupWise IMAP4rev1 Server Ready

4434 / tcp

1282941221 | 2025-02-01T13:52:49.443531

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

4443 / tcp

594761768 | 2025-01-23T22:25:44.451285

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2a00_PS-NKG-01Aqo82_2843-52437

4444 / tcp

1690634669 | 2025-02-04T14:49:44.641832

4445 / tcp

1059192566 | 2025-01-12T02:07:30.223795

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div

4447 / tcp

-1888448627 | 2025-02-01T17:44:12.610990

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

4499 / tcp

-1779118422 | 2025-01-26T23:41:37.155249

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

4500 / tcp

-904840257 | 2025-01-24T06:14:55.554424

572 Relay not authorized\r\n

4506 / tcp

2067064333 | 2025-01-19T15:05:49.320810

athinfod: invalid query.

4734 / tcp

205347087 | 2025-01-27T06:14:53.421351

SSH-25453-Cisco-3524665.35\n

4786 / tcp

-801484042 | 2025-01-22T05:35:51.478400

ERR 27

4821 / tcp

1543809371 | 2025-02-05T15:43:16.374007

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

4840 / tcp

-1399940268 | 2025-02-05T18:03:17.500603

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4899 / tcp

632542934 | 2025-02-06T19:42:34.965761

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

4949 / tcp

-441419608 | 2025-01-24T20:06:43.749493

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

5001 / tcp

-1428621233 | 2025-01-08T18:12:59.964698

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

5003 / tcp

1278527606 | 2025-01-16T18:24:25.408407

SSH-2.0-Teleport

5004 / tcp

-1476017887 | 2025-01-27T10:48:26.076273

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

5006 / tcp

-409020351 | 2025-01-23T12:46:43.895060

NPC Telnet permit one connection.
 But One connection() already keep alive.
Good Bye !!

5009 / tcp

1578202979 | 2025-02-03T01:39:43.103892

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1a4c_wdx37_19919-36152

5010 / tcp

677934968 | 2025-01-24T19:47:55.419750

lm^)Q

5025 / tcp

2143387245 | 2025-01-29T19:58:55.463624

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

5172 / tcp

1978059005 | 2025-01-10T01:03:58.231590

Sorry, that nickname format is invalid.

5190 / tcp

-1056270173 | 2025-02-02T21:05:58.416602

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

5201 / tcp

307999478 | 2025-01-09T11:05:26.109084

unknown command \r\nunknown command \r\n

5222 / tcp

819727972 | 2025-01-24T23:14:26.347684

SSH-2.0-OpenSSH_7.4

5229 / tcp

-1399940268 | 2025-01-23T00:43:22.023629

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5263 / tcp

677934968 | 2025-02-06T17:30:02.662911

lm^)Q

5265 / tcp

-2089734047 | 2025-01-15T01:02:57.849381

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5268 / tcp

320677201 | 2025-01-29T11:09:06.052620

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

5269 / tcp

-1074907534 | 2025-01-22T19:52:43.658213

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938603.82-w-waf02tjgt

5272 / tcp

-1399940268 | 2025-01-31T18:21:17.491556

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5280 / tcp

1758883558 | 2025-02-06T19:43:44.268044

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2ade_PS-WNZ-01d9r44_16897-25523

5435 / tcp

-1373613804 | 2025-01-21T04:08:31.416922

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

5439 / tcp

165188539 | 2025-01-18T15:41:37.344566

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

5444 / tcp

-1019343788 | 2025-01-30T02:43:18.731987

W!\x00\x00\x00\x00

5456 / tcp

1948301213 | 2025-01-31T22:29:41.502579

RFB 003.003
VNC:
  Protocol Version: 3.3

5494 / tcp

-180163620 | 2025-02-05T19:52:20.425800

NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n

5495 / tcp

-1019343788 | 2025-01-16T18:15:11.203527

W!\x00\x00\x00\x00

5523 / tcp

-2089734047 | 2025-02-02T16:51:14.723376

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5552 / tcp

-1888448627 | 2025-01-18T15:12:41.112445

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

5557 / tcp

1655023012 | 2025-02-03T17:35:07.541252

athinfod: invalid query.\n

5598 / tcp

1726594447 | 2025-01-26T03:59:41.172524

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

5609 / tcp

1208318993 | 2025-01-31T18:20:23.440145

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

5650 / tcp

-1036370807 | 2025-01-19T23:18:15.994283

JDWP-Handshake

5672 / tcp

575925250 | 2025-02-05T20:18:49.634453

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5903 / tcp

1911457608 | 2025-01-26T07:11:43.024092

\x00[\x00\x00\x00\x00\x00\x00

5904 / tcp

1911457608 | 2025-02-03T03:49:38.545839

\x00[\x00\x00\x00\x00\x00\x00

5914 / tcp

-1399940268 | 2025-01-25T11:43:01.061255

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5938 / tcp

1011407350 | 2025-02-01T20:19:34.599991

* OK GroupWise IMAP4rev1 Server Ready\r\n

5984 / tcp

1999272906 | 2025-01-28T16:44:52.782007

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

-68075478 | 2025-02-01T15:09:11.883016

5999 / tcp

1396488228 | 2025-01-24T19:39:57.979601

HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html

6000 / tcp

580340387 | 2025-02-01T14:52:09.487819

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

6001 / tcp

-1598265216 | 2025-01-20T00:33:41.730343

@RSYNCD: 31.0

6022 / tcp

819727972 | 2025-02-06T04:08:14.577321

SSH-2.0-OpenSSH_7.4

6348 / tcp

1763259671 | 2025-01-18T00:37:33.387465

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

6379 / tcp

321971019 | 2025-01-31T01:58:40.289269

-ERR client ip is not in whitelist\r

6440 / tcp

-2096652808 | 2025-01-27T10:34:43.586729

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

6443 / tcp

-1255167438 | 2025-01-20T21:11:57.873862

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Mon, 20 Jan 2025 21:11:57 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://123.57.230.15:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

6500 / tcp

-1399940268 | 2025-01-26T16:36:06.146865

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6622 / tcp

-1139539254 | 2025-01-26T10:14:20.498929

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

6633 / tcp

1911457608 | 2025-01-31T04:26:07.276685

\x00[\x00\x00\x00\x00\x00\x00

6653 / tcp

819727972 | 2025-01-20T21:00:26.702170

SSH-2.0-OpenSSH_7.4

6666 / tcp

4935895 | 2025-02-03T12:04:06.001799

HTTP/1.1 400 Bad Request
Server: CloudWAF

6667 / tcp

1842524259 | 2025-01-31T16:00:49.530058

6668 / tcp

-1399940268 | 2025-01-30T04:02:15.599821

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6697 / tcp

-303199180 | 2025-01-13T20:09:51.625344

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

6955 / tcp

-1399940268 | 2025-01-24T11:30:52.394174

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7001 / tcp

1749359477 | 2025-01-18T23:34:54.772099

HTTP/1.1 403 Forbidden
Content-Type: text/html
Connection: keep-alive
NO_SERVICE: 1

7016 / tcp

321971019 | 2025-01-09T16:12:23.070368

-ERR client ip is not in whitelist\r

7071 / tcp

1948301213 | 2025-02-01T23:51:20.771574

RFB 003.003
VNC:
  Protocol Version: 3.3

7079 / tcp

632542934 | 2025-02-01T01:57:36.714123

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

7283 / tcp

-1399940268 | 2025-02-02T10:39:37.432947

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7415 / tcp

-2096652808 | 2025-01-25T11:53:13.779513

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

7434 / tcp

819727972 | 2025-01-10T15:58:40.291461

SSH-2.0-OpenSSH_7.4

7443 / tcp

-1006110807 | 2025-01-25T02:17:12.238116

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-GLOBAL1-CACHE20[3]
X-CCDN-ERRCODE-SRC: 01
X-CCDN-FORBID-CODE: 040001

7548 / tcp

171352214 | 2025-01-10T00:02:34.489321

-ERR client ip is not in whitelist

7634 / tcp

-2107996212 | 2025-01-20T09:51:03.375833

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

7788 / tcp

-441419608 | 2025-01-23T00:27:20.385461

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

7799 / tcp

-1453516345 | 2025-02-01T05:46:01.437171

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

7801 / tcp

1911457608 | 2025-02-06T15:11:30.680062

\x00[\x00\x00\x00\x00\x00\x00

8009 / tcp

2087396567 | 2025-01-28T17:54:04.598987

kjnkjabhbanc283ubcsbhdc72

8037 / tcp

-2089734047 | 2025-02-03T01:58:20.970613

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8040 / tcp

1223115691 | 2025-01-23T11:54:20.724058

connect

8043 / tcp

-1839934832 | 2025-01-25T18:43:16.722454

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8045 / tcp

932130308 | 2025-01-11T03:22:04.994616

HTTP/1.1 404 Not Found
content-type: text/plain;charset=utf-8
content-length: 10

8048 / tcp

-2089734047 | 2025-01-17T02:15:34.742835

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8062 / tcp

45131230 | 2025-01-24T18:49:46.626852

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

8064 / tcp

-1648456501 | 2025-02-04T18:45:09.163898

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

8065 / tcp

1504401647 | 2025-02-05T00:39:00.630814

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

8073 / tcp

-1297953727 | 2025-02-02T04:46:04.089141

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

8081 / tcp

2087396567 | 2025-02-03T21:42:21.219276

kjnkjabhbanc283ubcsbhdc72

8083 / tcp

-1648456501 | 2025-01-28T19:52:06.358944

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

8085 / tcp

-321444299 | 2025-02-02T10:51:36.205757

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

8089 / tcp

504717326 | 2025-02-06T19:23:34.380145

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

8099 / tcp

-1249500036 | 2025-01-28T19:12:50.793714

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

8103 / tcp

-339084706 | 2025-01-15T04:32:25.944121

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

8104 / tcp

-1140468363 | 2025-01-21T15:11:04.413476

\x02\t\x01

8110 / tcp

1911457608 | 2025-01-19T21:31:51.873990

\x00[\x00\x00\x00\x00\x00\x00

8116 / tcp

-1428621233 | 2025-01-30T14:20:48.703325

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8126 / tcp

1842524259 | 2025-01-30T19:47:44.203671

8133 / tcp

1911457608 | 2025-01-31T08:47:44.340217

\x00[\x00\x00\x00\x00\x00\x00

8134 / tcp

1911457608 | 2025-02-04T05:27:53.042147

\x00[\x00\x00\x00\x00\x00\x00

8139 / tcp

-345718689 | 2025-02-06T05:54:08.183307

Vty password is not set.

8145 / tcp

1077013874 | 2025-02-02T18:46:16.490132

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

8150 / tcp

819727972 | 2025-01-23T20:50:03.600705

SSH-2.0-OpenSSH_7.4

8161 / tcp

-1399940268 | 2025-02-05T09:51:32.058334

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8171 / tcp

1541211644 | 2025-01-21T20:13:36.851060

[\xc2\xba\x7fs\x7f

8172 / tcp

-653033013 | 2025-01-28T17:43:47.710159

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

8180 / tcp

-1229908350 | 2025-01-09T21:17:56.016317

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28cd_PSsdzbwt4uo91_26003-3517

8182 / tcp

51259122 | 2025-01-09T03:31:16.778730

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

8184 / tcp

-1399940268 | 2025-01-12T22:51:16.408588

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8193 / tcp

165188539 | 2025-01-27T20:43:58.104018

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8199 / tcp

-1810987450 | 2025-01-29T10:47:00.280270

\xc3\xbf

8200 / tcp

1320285193 | 2025-01-30T09:07:51.282379

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

8239 / tcp

-2031152423 | 2025-02-01T13:26:54.957157

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8300 / tcp

-734440417 | 2025-01-09T01:55:40.056665

HTTP/1.1 400 Bad Request
Content-Type: text/html
Connection: close
Server: nginx/1.17.3

8317 / tcp

-1399940268 | 2025-01-16T12:03:25.568470

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8383 / tcp

-1885823772 | 2025-02-01T23:22:54.830675

HTTP/1.1 403 Forbidden
Server: Tengine
Content-Type: text/html
Connection: keep-alive

8404 / tcp

639175818 | 2025-02-07T07:02:24.002541

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

8418 / tcp

1308377066 | 2025-01-12T23:41:02.036964

ncacn_http/1.0

8424 / tcp

-1839934832 | 2025-01-28T19:59:17.411204

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8431 / tcp

921225407 | 2025-02-06T20:25:07.659171

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8443 / tcp

0 | 2025-01-09T23:12:50.923110

Hashes

hash

1445598021

http.dom_hash

http.html_hash

http.server_hash

1673621694

HTTP/1.1 200 OK
Date: Thu, 09 Jan 2025 23:12:50 GMT
Content-Type: application/json
Content-Length: 2182
Connection: keep-alive
Ali-Swift-Global-Savetime: 1736464370
Eagleeye-Traceid: 571a16715c4220ce6d626aa8e7
Eagleid: 571a16715c4220ce6d626aa8e7
S_group: tao-session
S_ip: ef215f4c5470a0dcc4c1f82d41e439ad
S_status: STATUS_SYS_ERR
S_tag: 797073331695217|437291122^|^^
S_tid: 571a16715c4220ce6d626aa8e7
S_ucode: CN:CENTER
S_v: 4.0.4.4
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://87e40a4.umindex.com
Ufe-Result: A9
Via: vcache43.29vcache1[312,632,971-0,M], vcache32.vcache22[819,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Thu, 09 Jan 2025 23:12:50 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:49:b2:86:90:3c:9b:46:7a:60:5b:87
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: May  5 06:21:16 2023 GMT
            Not After : Jun  5 06:21:15 2024 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:aa:59:84:40:d9:af:34:7b:a7:ab:b2:6a:
                    93:99:f0:9c:8d:c6:88:e5:16:d9:92:a4:10:49:79:
                    da:fb:28:37:40:e7:a4:a8:e4:51:b6:46:ce:cd:1b:
                    a4:b9:0f:e8:93:d7:1b:83:d7:bb:a6:66:c2:65:f2:
                    ee:2c:60:6b:9a:40:36:94:87:c3:9e:8e:08:13:32:
                    c3:f6:fb:36:3f:75:e0:6f:3b:d9:72:b4:25:f8:e7:
                    d7:9d:c1:91:f4:78:69:c8:4e:05:cd:66:af:c9:0c:
                    60:d9:49:82:ca:97:ce:f5:8a:26:40:d0:73:05:7b:
                    22:4e:96:e8:3c:99:3f:12:aa:ce:29:5d:db:43:57:
                    78:4f:9e:77:e0:a0:95:02:cd:80:18:da:af:a8:4a:
                    89:20:e5:94:b6:1c:2d:0e:10:3a:87:85:54:f5:08:
                    3c:ef:17:e6:25:d3:32:20:37:f9:bf:88:77:f8:8b:
                    ec:91:10:73:7c:78:55:73:08:81:8a:0b:35:85:4a:
                    e3:0c:81:30:44:e1:d0:36:9d:8f:6a:0f:47:22:fd:
                    cf:4f:ca:b6:22:eb:ad:65:b5:40:b3:11:d0:df:c5:
                    3d:a8:3e:1c:bc:5f:ef:e7:ce:30:57:86:95:78:8d:
                    60:80:02:87:1e:27:77:a0:19:45:b6:da:ba:8d:30:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
            X509v3 Subject Alternative Name: 
                DNS:*.aliyun.com, DNS:aliyun.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        04:8b:a2:24:82:5c:b2:e7:b9:06:8d:cb:50:7a:af:b7:15:c7:
        a4:f2:9b:8e:43:5a:bf:60:50:9e:0c:2e:db:4d:4d:77:32:dd:
        67:68:3a:f3:89:c3:72:42:20:af:53:56:9e:d1:6f:77:02:f0:
        2f:61:55:23:b5:08:2c:b2:76:30:04:c8:04:ef:84:a5:b5:e3:
        d6:a3:0c:36:6f:e7:e6:58:08:cb:d9:a2:16:b0:9d:57:30:f7:
        1b:e6:b8:7e:0b:ea:76:86:00:b0:4a:f9:14:d7:c5:1b:20:69:
        fb:9d:74:d9:96:b1:56:5f:4f:83:45:c2:98:a4:12:cc:8a:dc:
        27:4f:ed:5b:a7:d9:de:ab:fd:f4:83:ce:f5:c5:2d:72:62:2e:
        e1:09:7c:60:4f:ad:66:0b:5d:f4:70:bd:c5:73:ba:e8:74:8b:
        b2:0c:3f:b2:fc:65:d4:fc:7e:9d:01:c4:6a:d4:d1:94:86:f6:
        57:c6:49:c1:21:3e:1f:00:97:31:ba:36:67:9b:85:ce:3b:f7:
        51:ab:77:30:ea:27:b0:da:00:13:b5:c0:fe:7b:b2:82:37:a9:
        d2:d9:61:9f:a6:fb:79:75:08:e3:79:bd:f0:1c:b2:6b:e2:20:
        68:ae:f9:36:74:53:29:dc:ae:a1:ec:d5:77:11:c8:7a:fb:09:
        52:4d:67:1c

8455 / tcp

-1888448627 | 2025-01-13T06:08:16.321601

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8466 / tcp

1911457608 | 2025-01-23T11:16:16.055956

\x00[\x00\x00\x00\x00\x00\x00

8480 / tcp

-1399940268 | 2025-01-12T23:18:27.125308

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8488 / tcp

-122096153 | 2025-01-16T20:32:41.622244

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

8526 / tcp

819727972 | 2025-01-19T18:18:57.374002

SSH-2.0-OpenSSH_7.4

8544 / tcp

-1399940268 | 2025-01-29T19:52:01.570609

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8551 / tcp

321971019 | 2025-01-31T10:09:24.560806

-ERR client ip is not in whitelist\r

8554 / tcp

550048729 | 2025-01-23T06:13:27.517293

ÿÿÿ
0 ...

8585 / tcp

-1428621233 | 2025-01-28T15:04:40.791285

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8588 / tcp

-1888448627 | 2025-02-02T07:24:24.160502

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8597 / tcp

-1779118422 | 2025-02-04T12:18:47.445476

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

8602 / tcp

1282941221 | 2025-01-31T18:23:33.339470

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

8649 / tcp

2098371729 | 2025-01-27T15:30:46.749722

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

8666 / tcp

-2089734047 | 2025-02-05T15:29:11.882967

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8707 / tcp

1492413928 | 2025-01-12T11:33:31.942356

SSH-2.0-OpenSSH_7.5

8724 / tcp

1911457608 | 2025-01-29T13:01:26.207753

\x00[\x00\x00\x00\x00\x00\x00

8745 / tcp

-2096652808 | 2025-01-12T11:59:23.396894

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8787 / tcp

2063598737 | 2025-02-03T08:22:15.750780

/0 0 L\r\n/0 0 HUH\r\n

8813 / tcp

-1399940268 | 2025-01-23T23:51:25.895398

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8815 / tcp

1911457608 | 2025-01-31T14:46:43.632380

\x00[\x00\x00\x00\x00\x00\x00

8827 / tcp

119860953 | 2025-01-13T20:35:23.537018

* OK ArGoSoft Mail Server IMAP Module v.YW at

8830 / tcp

-358801646 | 2025-01-15T15:33:04.360332

SSH-2.0-OpenSSH_6.6.1

8834 / tcp

-971970408 | 2025-01-30T05:00:41.020642

8841 / tcp

-1839934832 | 2025-01-23T14:33:40.414936

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8844 / tcp

819727972 | 2025-01-12T18:46:53.400048

SSH-2.0-OpenSSH_7.4

8849 / tcp

-136006866 | 2025-02-01T21:37:03.269403

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

8857 / tcp

-1399940268 | 2025-01-30T11:23:06.285625

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8863 / tcp

-980525298 | 2025-01-11T00:50:12.256727

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8880 / tcp

-971970408 | 2025-01-24T03:46:55.958465

8885 / tcp

-1399940268 | 2025-02-02T11:08:01.134296

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8887 / tcp

1208318993 | 2025-02-07T01:02:00.611196

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

8889 / tcp

2087396567 | 2025-02-02T13:06:09.011406

kjnkjabhbanc283ubcsbhdc72

8902 / tcp

165188539 | 2025-01-15T21:33:47.661186

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9000 / tcp

-1167054895 | 2025-01-24T12:36:44.521162

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24a9_VM-TPE-019Bk119_8663-62725

9001 / tcp

-1026951088 | 2025-01-21T19:37:54.123704

erro ip

9003 / tcp

-891714208 | 2025-02-06T21:32:19.636768

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

9005 / tcp

-1839934832 | 2025-02-01T20:52:06.716688

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9016 / tcp

165188539 | 2025-02-04T23:00:59.938080

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9020 / tcp

-2089734047 | 2025-01-08T19:10:12.009577

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9024 / tcp

819727972 | 2025-01-09T22:10:51.368427

SSH-2.0-OpenSSH_7.4

9026 / tcp

1011407350 | 2025-01-09T21:12:02.723794

* OK GroupWise IMAP4rev1 Server Ready\r\n

9030 / tcp

1126993057 | 2025-02-03T23:55:17.090555

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

9039 / tcp

321971019 | 2025-01-28T06:11:00.270818

-ERR client ip is not in whitelist\r

9042 / tcp

2087396567 | 2025-02-03T00:07:12.597068

kjnkjabhbanc283ubcsbhdc72

9049 / tcp

1911457608 | 2025-02-05T11:47:33.652838

\x00[\x00\x00\x00\x00\x00\x00

9050 / tcp

-372918070 | 2025-01-11T03:51:34.673749

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae251a_PS-TSN-01E7l172_16756-28906

9055 / tcp

-1730858130 | 2025-02-01T23:25:55.779283

RFB 003.008
VNC:
  Protocol Version: 3.8

9061 / tcp

1332894250 | 2025-01-24T19:50:22.405344

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

9073 / tcp

117101543 | 2025-01-24T21:29:21.380006

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

9081 / tcp

1911457608 | 2025-02-06T13:56:27.998048

\x00[\x00\x00\x00\x00\x00\x00

9091 / tcp

1741579575 | 2025-01-20T06:04:15.290957

9092 / tcp

-2017887953 | 2025-01-28T04:56:46.121453

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

9108 / tcp

-1230049476 | 2025-01-11T15:10:31.807465

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

9138 / tcp

819727972 | 2025-01-09T05:28:43.468345

SSH-2.0-OpenSSH_7.4

9147 / tcp

-2107996212 | 2025-01-27T09:41:05.834445

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

9151 / tcp

1212921144 | 2025-01-20T00:51:00.451003

0@

9155 / tcp

-1888448627 | 2025-02-06T02:31:18.040430

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9160 / tcp

-1399940268 | 2025-01-21T23:02:24.061221

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9175 / tcp

-1399940268 | 2025-02-06T08:42:29.745601

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9190 / tcp

819727972 | 2025-01-21T01:21:59.908897

SSH-2.0-OpenSSH_7.4

9201 / tcp

819727972 | 2025-01-26T21:22:34.837186

SSH-2.0-OpenSSH_7.4

9221 / tcp

1282941221 | 2025-01-09T02:20:29.337937

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

9245 / tcp

-1453516345 | 2025-01-14T06:32:09.555063

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

9248 / tcp

-249504111 | 2025-01-17T17:09:34.470433

\x00[xU-\x7f\x00\x00

9257 / tcp

-1733645023 | 2025-01-20T20:02:55.692031

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

9304 / tcp

-445721795 | 2025-01-19T05:07:33.418323

\x00[\xc3\xaed\x1a\x7f\x00\x00

9308 / tcp

-1399940268 | 2025-02-07T06:49:01.093722

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9333 / tcp

320677201 | 2025-02-02T05:04:11.451584

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

9345 / tcp

819727972 | 2025-01-26T17:11:35.734251

SSH-2.0-OpenSSH_7.4

9383 / tcp

-1428621233 | 2025-01-25T08:35:57.498751

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

9398 / tcp

-375604792 | 2025-01-29T15:53:09.245053

220 Microsoft FTP Service

9418 / tcp

1529351907 | 2025-02-04T19:54:56.314671

HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive

please add white ip *.*.*.*

9443 / tcp

370342393 | 2025-01-28T06:42:43.197328

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 28 Jan 2025 06:42:37 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://123.57.230.15:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

9600 / tcp

165188539 | 2025-02-04T12:26:05.513580

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9606 / tcp

1830697416 | 2025-01-18T17:48:24.058552

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

9711 / tcp

-585940771 | 2025-01-09T20:34:49.370903

Unknown command\r\n

9761 / tcp

-1399940268 | 2025-01-12T22:10:22.686336

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9765 / tcp

1665283070 | 2025-01-12T21:56:13.095798

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x00\x00\n0\x03\x00\x00\x00\x01\x00\x05\x00\x00@\x00\x00\x06\x00\x00\x1f@

9802 / tcp

921225407 | 2025-01-15T22:44:48.448462

\x00\x00\x00\x04\x00\x00\x00\x00\x00

9872 / tcp

-445721795 | 2025-02-02T13:55:57.335549

\x00[\xc3\xaed\x1a\x7f\x00\x00

9876 / tcp

1977569953 | 2025-01-29T21:24:21.464129

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2987_PS-SHA-01Jtm19_12756-43634

9885 / tcp

1426971893 | 2025-01-14T18:37:25.134352

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

9888 / tcp

165188539 | 2025-01-15T15:47:44.780979

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9898 / tcp

1320285193 | 2025-01-24T06:27:52.549238

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

9900 / tcp

2033575302 | 2025-01-20T11:48:49.828781

HTTP/1.1 200 OK
Server: nginx
Connection: keep-alive
Server: CK6u06Vu4

9908 / tcp

-1399940268 | 2025-01-18T18:39:13.805813

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9916 / tcp

103159425 | 2025-01-31T19:48:23.612978

SSH-1.99-RGOS_SSH

9943 / tcp

248249138 | 2025-02-01T11:19:37.103473

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24d3_xyd116_25356-2749

9966 / tcp

307999478 | 2025-01-27T07:58:31.027056

unknown command \r\nunknown command \r\n

9993 / tcp

-1641514916 | 2025-01-20T05:36:28.931167

* OK Merak 1dFUa2 IMAP4rev1

9998 / tcp

1637038794 | 2025-01-18T13:11:08.462367

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2521_PS-PEK-015Wj25_25111-50596

9999 / tcp

1161309183 | 2025-01-11T23:24:31.776772

ProxyServer is ready

10000 / tcp

-971970408 | 2025-01-29T17:21:25.669304

10001 / tcp

1492413928 | 2025-02-03T01:10:21.568081

SSH-2.0-OpenSSH_7.5

10002 / tcp

-339084706 | 2025-01-19T11:15:06.089729

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

10012 / tcp

939210732 | 2025-01-22T11:15:01.362070

\\x00[\'\\x1c\\xc0\\xa8Y\\xfd

10015 / tcp

1911457608 | 2025-01-13T23:42:57.393650

\x00[\x00\x00\x00\x00\x00\x00

10022 / tcp

819727972 | 2025-01-23T13:50:19.924598

SSH-2.0-OpenSSH_7.4

10023 / tcp

1370263973 | 2025-01-14T05:46:16.860990

dubbo>

10025 / tcp

-1399940268 | 2025-01-28T22:13:26.146326

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10027 / tcp

-1399940268 | 2025-01-31T06:57:07.340335

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10031 / tcp

307999478 | 2025-01-28T06:45:03.317160

unknown command \r\nunknown command \r\n

10032 / tcp

819727972 | 2025-01-22T07:14:12.918690

SSH-2.0-OpenSSH_7.4

10046 / tcp

-2089734047 | 2025-01-14T08:38:25.029427

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10083 / tcp

-1399940268 | 2025-01-12T21:49:23.738015

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10134 / tcp

1911457608 | 2025-01-28T00:03:24.604536

\x00[\x00\x00\x00\x00\x00\x00

10254 / tcp

632542934 | 2025-02-03T13:30:58.502527

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

10283 / tcp

-2089734047 | 2025-02-05T23:24:47.020007

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10554 / tcp

677934968 | 2025-02-03T10:26:52.603313

lm^)Q

11112 / tcp

-1996280214 | 2025-02-02T04:58:48.307502

\x06\x04\x05@

11211 / tcp

-136006866 | 2025-02-05T03:53:35.687946

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11288 / tcp

1212285915 | 2025-02-02T21:45:50.505805

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

11601 / tcp

165188539 | 2025-01-12T00:13:04.562857

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

11681 / tcp

1492413928 | 2025-01-08T22:29:39.308044

SSH-2.0-OpenSSH_7.5

11701 / tcp

51259122 | 2025-01-15T02:35:24.614026

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

11920 / tcp

-1399940268 | 2025-01-12T18:05:11.313131

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12000 / tcp

-1723613895 | 2025-01-18T22:05:41.075809

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2232_PS-HAK-01h6h34_6336-63973

12082 / tcp

1911457608 | 2025-02-05T18:04:42.175479

\x00[\x00\x00\x00\x00\x00\x00

12103 / tcp

-980525298 | 2025-01-20T06:04:59.446655

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12110 / tcp

-1907909544 | 2025-01-21T19:04:54.761067

\r\nHello, this is Quagga (version 0T).\r\nCopyright 1996-200

12114 / tcp

897328069 | 2025-01-24T21:42:27.608856

220 mail.scott000.com ESMTP

12130 / tcp

-1399940268 | 2025-01-25T15:45:58.186421

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12131 / tcp

1989907056 | 2025-01-22T20:26:23.111864

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

12138 / tcp

639175818 | 2025-02-04T10:42:05.200148

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

12183 / tcp

-1947777893 | 2025-01-10T08:15:03.143509

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

12230 / tcp

-653033013 | 2025-01-25T11:24:23.262102

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

12232 / tcp

-1626979812 | 2025-01-30T02:07:24.278759

220 Service ready for new user.

12245 / tcp

1911457608 | 2025-01-17T18:21:09.418871

\x00[\x00\x00\x00\x00\x00\x00

12254 / tcp

-1399940268 | 2025-01-31T04:07:00.201785

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12260 / tcp

-2089734047 | 2025-02-03T22:07:40.347752

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12262 / tcp

-1428621233 | 2025-01-31T01:22:11.079685

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

12292 / tcp

-1428621233 | 2025-01-22T22:10:40.611322

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

12300 / tcp

-1839934832 | 2025-02-04T07:29:58.482998

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12324 / tcp

-1099385124 | 2025-01-11T00:48:34.079135

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

12327 / tcp

-2031152423 | 2025-02-02T15:13:29.936540

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

12334 / tcp

1975288991 | 2025-01-31T14:11:27.534395

OPTI

12337 / tcp

-653033013 | 2025-01-30T14:44:45.269390

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

12345 / tcp

296364507 | 2025-01-31T05:57:48.027336

HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

12360 / tcp

1911457608 | 2025-01-14T14:13:47.633833

\x00[\x00\x00\x00\x00\x00\x00

12361 / tcp

-1329831334 | 2025-01-17T21:07:59.196715

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

12367 / tcp

165188539 | 2025-01-18T19:12:41.598322

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12368 / tcp

-2096652808 | 2025-01-09T21:32:49.627116

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12390 / tcp

-1139539254 | 2025-01-28T16:57:17.467391

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

12399 / tcp

-1399940268 | 2025-01-29T09:34:59.058932

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12402 / tcp

-441419608 | 2025-02-06T18:03:27.464260

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

12419 / tcp

321971019 | 2025-01-11T14:03:03.338070

-ERR client ip is not in whitelist\r

12428 / tcp

-2089734047 | 2025-01-18T21:21:21.970602

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12430 / tcp

-1105333987 | 2025-01-19T02:41:15.087836

\x00[KpU\x7f\x00\x00

12435 / tcp

165188539 | 2025-02-02T17:48:44.928287

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12457 / tcp

1134517380 | 2025-02-05T04:37:31.599245

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

12461 / tcp

-445721795 | 2025-01-20T13:14:56.487709

\x00[\xc3\xaed\x1a\x7f\x00\x00

12462 / tcp

455076604 | 2025-01-29T22:21:11.776844

!\x07version\x04bind7 t{RPowerDNS Recursor 410

12484 / tcp

-980525298 | 2025-02-05T10:40:49.197977

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12487 / tcp

-1839934832 | 2025-01-22T05:39:03.793391

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12488 / tcp

410249975 | 2025-02-03T22:16:18.349887

LNS READY<>

12491 / tcp

-1733106930 | 2025-01-27T21:32:31.057313

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

12495 / tcp

-1140468363 | 2025-01-31T00:23:19.316295

\x02\t\x01

12502 / tcp

-1399940268 | 2025-01-21T22:37:25.658174

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12504 / tcp

-784071826 | 2025-01-16T20:35:35.239908

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

12515 / tcp

-1795027372 | 2025-01-17T02:08:13.664410

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

12517 / tcp

-1261090339 | 2025-01-28T07:21:49.039086

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

12519 / tcp

677934968 | 2025-01-12T06:27:13.660811

lm^)Q

12520 / tcp

1134517380 | 2025-01-27T20:34:35.340407

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

12525 / tcp

1332894250 | 2025-01-27T07:34:17.772623

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

12526 / tcp

677934968 | 2025-01-21T23:44:39.284427

lm^)Q

12527 / tcp

-1611764932 | 2025-02-06T00:14:18.259639

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

12534 / tcp

1615193817 | 2025-01-09T20:05:12.788463

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

12536 / tcp

820958131 | 2025-01-26T06:40:54.599742

kjnkjabhbanc283ubcsbhdc72\x02

12545 / tcp

-274082663 | 2025-01-10T09:49:20.647531

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

12549 / tcp

-1099385124 | 2025-01-11T16:40:03.625055

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

12580 / tcp

1519486042 | 2025-01-24T17:59:25.100602

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

12585 / tcp

-653033013 | 2025-01-10T15:37:38.275409

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

12586 / tcp

1975288991 | 2025-01-30T09:04:25.884263

OPTI

12589 / tcp

-2046514463 | 2025-01-26T02:16:09.671272

AB\x01\t

12601 / tcp

1519486042 | 2025-01-30T02:16:54.927325

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

13333 / tcp

-1399940268 | 2025-01-20T00:24:07.123938

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

13443 / tcp

921225407 | 2025-01-16T15:04:18.250652

\x00\x00\x00\x04\x00\x00\x00\x00\x00

14147 / tcp

639175818 | 2025-02-06T08:26:44.965156

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

14265 / tcp

526659200 | 2025-01-23T14:29:40.657163

ÿÿÿ

14873 / tcp

398077695 | 2025-01-11T10:45:52.820515

15503 / tcp

632542934 | 2025-01-08T22:08:10.791437

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

16007 / tcp

-1399940268 | 2025-01-15T18:45:42.903985

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16032 / tcp

819727972 | 2025-01-26T06:39:21.894856

SSH-2.0-OpenSSH_7.4

16047 / tcp

-1538260461 | 2025-01-16T17:29:39.913283

\x01\x00\x00\x00

16050 / tcp

-1329831334 | 2025-01-16T19:43:11.719123

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

16054 / tcp

-303199180 | 2025-01-08T21:31:30.298346

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

16064 / tcp

819727972 | 2025-01-21T20:02:41.020851

SSH-2.0-OpenSSH_7.4

16072 / tcp

599074451 | 2025-02-05T07:23:53.079103

msg

16087 / tcp

819727972 | 2025-01-13T02:32:43.230567

SSH-2.0-OpenSSH_7.4

16091 / tcp

1911457608 | 2025-01-15T13:47:57.169845

\x00[\x00\x00\x00\x00\x00\x00

16096 / tcp

1189133115 | 2025-01-13T15:28:23.254725

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

16401 / tcp

1189133115 | 2025-01-29T06:56:24.906262

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

16402 / tcp

-653033013 | 2025-01-24T17:53:11.971974

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

16993 / tcp

1975288991 | 2025-01-20T16:24:39.515996

OPTI

17778 / tcp

671605376 | 2025-01-25T08:00:17.015270

SSH-2.0-OpenSSH_X.X

17779 / tcp

-1626979812 | 2025-01-22T16:47:27.666178

220 Service ready for new user.

18002 / tcp

1911457608 | 2025-01-18T23:03:20.092300

\x00[\x00\x00\x00\x00\x00\x00

18009 / tcp

-407828767 | 2025-01-30T20:39:23.923216

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

18010 / tcp

-438503381 | 2025-01-12T13:27:44.179846

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

18012 / tcp

1911457608 | 2025-01-29T16:25:57.232085

\x00[\x00\x00\x00\x00\x00\x00

18017 / tcp

103159425 | 2025-01-14T14:07:24.933098

SSH-1.99-RGOS_SSH

18028 / tcp

-1839934832 | 2025-01-14T04:57:47.333043

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

18034 / tcp

-1626979812 | 2025-01-19T10:56:28.442048

220 Service ready for new user.

18052 / tcp

-1327660293 | 2025-02-03T18:07:19.479054

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

18053 / tcp

-1327660293 | 2025-01-28T16:33:27.716466

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

18058 / tcp

-1487943323 | 2025-02-06T22:18:22.576966

431 Unable to negotiate secure command connection.\r\n

18080 / tcp

380146262 | 2025-01-09T19:29:04.950705

@RSYNCD: 30.0

18086 / tcp

-1888448627 | 2025-01-14T11:21:51.875337

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

18094 / tcp

1911457608 | 2025-01-18T00:30:09.386576

\x00[\x00\x00\x00\x00\x00\x00

18099 / tcp

-2089734047 | 2025-01-21T07:45:45.221384

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

18102 / tcp

1948301213 | 2025-02-06T19:52:53.456465

RFB 003.003
VNC:
  Protocol Version: 3.3

18112 / tcp

1126993057 | 2025-02-02T16:46:25.964890

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

18245 / tcp

-358801646 | 2025-01-29T06:28:34.183686

SSH-2.0-OpenSSH_6.6.1

19082 / tcp

-1730858130 | 2025-02-06T06:19:11.902690

RFB 003.008
VNC:
  Protocol Version: 3.8

19100 / tcp

-303199180 | 2025-01-21T01:47:55.226484

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

20000 / tcp

1900503736 | 2025-02-03T06:30:50.839827

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20030 / tcp

1492413928 | 2025-01-17T04:15:09.642404

SSH-2.0-OpenSSH_7.5

20100 / tcp

-1032713145 | 2025-01-21T09:28:22.444829

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

20256 / tcp

819727972 | 2025-01-25T22:07:08.008985

SSH-2.0-OpenSSH_7.4

20325 / tcp

-1399940268 | 2025-01-28T14:38:13.047331

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20547 / tcp

1353260875 | 2025-01-23T19:24:53.995788

\x00[g\xc2\x95N\x7f\x00\x00

21001 / tcp

-457235091 | 2025-01-19T14:04:09.476154

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

21025 / tcp

1842524259 | 2025-02-01T09:09:52.326270

21241 / tcp

707919486 | 2025-01-16T19:24:09.603640

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

21242 / tcp

707919486 | 2025-01-14T04:16:00.485368

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

21260 / tcp

165188539 | 2025-01-11T03:39:16.375384

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21272 / tcp

-1626979812 | 2025-01-28T13:00:34.297058

220 Service ready for new user.

21281 / tcp

-2089734047 | 2025-01-23T22:11:57.571696

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

21295 / tcp

819727972 | 2025-01-22T09:49:59.887288

SSH-2.0-OpenSSH_7.4

21302 / tcp

1911457608 | 2025-01-24T09:16:56.162334

\x00[\x00\x00\x00\x00\x00\x00

21312 / tcp

321971019 | 2025-01-09T10:25:54.520106

-ERR client ip is not in whitelist\r

21316 / tcp

-1248408558 | 2025-01-27T20:40:03.821630

220 MikroTik FTP server (MikroTik 6.44.3) ready

21320 / tcp

-1730858130 | 2025-01-23T07:59:56.245335

RFB 003.008
VNC:
  Protocol Version: 3.8

21379 / tcp

-1013082686 | 2025-01-30T09:29:57.475870

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

21381 / tcp

-1399940268 | 2025-01-26T09:18:05.141181

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

22082 / tcp

-2080784861 | 2025-01-19T13:23:54.491956

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

22345 / tcp

-375604792 | 2025-01-29T20:30:07.656645

220 Microsoft FTP Service

25002 / tcp

1830187220 | 2025-02-05T20:02:09.164618

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

25003 / tcp

-1888448627 | 2025-01-30T23:54:24.183853

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

25006 / tcp

-1140468363 | 2025-01-12T06:34:01.366215

\x02\t\x01

25010 / tcp

408230060 | 2025-02-01T20:50:01.410080

\r\nSorry, that nickname format is invalid.\r\n

25565 / tcp

-2089734047 | 2025-01-21T13:12:42.775897

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

27015 / tcp

-303199180 | 2025-02-03T23:34:26.671063

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

28015 / tcp

-2089734047 | 2025-02-06T14:56:21.926270

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

29799 / tcp

1308377066 | 2025-02-02T22:27:40.832575

ncacn_http/1.0

30003 / tcp

1887224352 | 2025-01-18T03:42:41.636786

31337 / tcp

-1992519278 | 2025-01-25T16:50:57.867224

\xc3\xbf\xc3\xbb\\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

32001 / tcp

-180163620 | 2025-01-18T05:51:37.165940

NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n

32202 / tcp

-2096652808 | 2025-02-03T23:36:30.636533

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

32443 / tcp

321971019 | 2025-01-14T16:50:50.901011

-ERR client ip is not in whitelist\r

32444 / tcp

-1428621233 | 2025-01-16T20:55:17.277207

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

32764 / tcp

455076604 | 2025-01-14T09:43:20.651503

!\x07version\x04bind7 t{RPowerDNS Recursor 410

32922 / tcp

-2096652808 | 2025-02-07T13:26:23.780511

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

33060 / tcp

1453929220 | 2025-01-30T21:41:33.137980

[ç

33222 / tcp

819727972 | 2025-02-07T05:33:56.458360

SSH-2.0-OpenSSH_7.4

33322 / tcp

-1477838366 | 2025-02-07T07:20:00.120470

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

33389 / tcp

455076604 | 2025-02-05T19:19:19.389551

!\x07version\x04bind7 t{RPowerDNS Recursor 410

33722 / tcp

-992671574 | 2025-02-06T22:31:09.624548

@RSYNCD: 26

33822 / tcp

1308377066 | 2025-02-06T20:45:53.365400

ncacn_http/1.0

34225 / tcp

321971019 | 2025-01-24T19:21:09.133384

-ERR client ip is not in whitelist\r

34322 / tcp

539065883 | 2025-02-06T13:57:42.703520

34422 / tcp

1632932802 | 2025-02-06T10:22:13.276397

35000 / tcp

1332894250 | 2025-02-05T14:23:53.729913

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

35002 / tcp

51259122 | 2025-01-09T12:54:24.917839

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

35153 / tcp

-1435414831 | 2025-01-24T22:16:46.751047

roku: ready\r\n

35241 / tcp

1948301213 | 2025-01-15T14:25:30.247662

RFB 003.003
VNC:
  Protocol Version: 3.3

35422 / tcp

2103111368 | 2025-02-05T13:11:10.475771

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

35554 / tcp

819727972 | 2025-01-28T21:41:25.551359

SSH-2.0-OpenSSH_7.4

35559 / tcp

722711397 | 2025-01-19T11:29:49.514094

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

36322 / tcp

-146605374 | 2025-02-04T21:26:37.301702

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

36501 / tcp

-249504111 | 2025-01-17T01:55:45.047133

\x00[xU-\x7f\x00\x00

36522 / tcp

-321444299 | 2025-02-04T23:04:13.056517

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

37022 / tcp

2087396567 | 2025-02-04T10:42:58.091527

kjnkjabhbanc283ubcsbhdc72

37080 / tcp

820958131 | 2025-01-31T03:15:47.471460

kjnkjabhbanc283ubcsbhdc72\x02

37122 / tcp

1426971893 | 2025-02-04T12:29:00.236689

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

37777 / tcp

819727972 | 2025-02-05T13:22:06.305692

SSH-2.0-OpenSSH_7.4

37822 / tcp

-1248408558 | 2025-02-03T10:20:06.762017

220 MikroTik FTP server (MikroTik 6.44.3) ready

38022 / tcp

897328069 | 2025-02-03T15:46:52.035282

220 mail.scott000.com ESMTP

38222 / tcp

104385780 | 2025-02-03T11:47:40.461603

ceph v2

40005 / tcp

632542934 | 2025-01-27T18:32:45.695910

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

40222 / tcp

2087396567 | 2025-02-02T03:48:57.838841

kjnkjabhbanc283ubcsbhdc72

40322 / tcp

1690634669 | 2025-02-02T02:26:14.462609

40422 / tcp

1842524259 | 2025-02-01T20:39:55.464001

40522 / tcp

474736340 | 2025-02-01T18:54:31.371023

431 Unable to negotiate secure command connection.

40722 / tcp

660175493 | 2025-02-01T17:09:42.768310

40922 / tcp

819727972 | 2025-02-01T13:40:33.471132

SSH-2.0-OpenSSH_7.4

41022 / tcp

171352214 | 2025-02-01T10:12:43.735877

-ERR client ip is not in whitelist

41122 / tcp

1741579575 | 2025-02-01T08:27:38.189395

41222 / tcp

1208318993 | 2025-02-01T06:43:18.339370

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

41522 / tcp

2087396567 | 2025-01-31T21:45:32.219771

kjnkjabhbanc283ubcsbhdc72

41722 / tcp

-2080784861 | 2025-01-31T21:26:56.608559

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

41800 / tcp

1308377066 | 2025-01-17T01:26:20.457523

ncacn_http/1.0

41822 / tcp

1208318993 | 2025-01-31T12:55:54.868424

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

42022 / tcp

-1779118422 | 2025-01-31T11:19:56.342661

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

42222 / tcp

117101543 | 2025-01-31T14:40:34.046948

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

42420 / tcp

1911457608 | 2025-01-10T09:07:45.517665

\x00[\x00\x00\x00\x00\x00\x00

42422 / tcp

-653033013 | 2025-01-30T12:59:26.100350

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

42722 / tcp

2087396567 | 2025-01-31T06:03:24.857948

kjnkjabhbanc283ubcsbhdc72

43022 / tcp

-1230049476 | 2025-01-30T05:55:29.421673

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

43222 / tcp

-971970408 | 2025-01-30T21:45:37.365791

43322 / tcp

2087396567 | 2025-01-29T20:54:34.131453

kjnkjabhbanc283ubcsbhdc72

43422 / tcp

119860953 | 2025-01-30T20:00:00.701543

* OK ArGoSoft Mail Server IMAP Module v.YW at

43522 / tcp

539065883 | 2025-01-30T18:13:35.962148

44158 / tcp

-433302150 | 2025-02-03T17:15:43.421524

/multistream/1.0.0

44303 / tcp

-2096652808 | 2025-01-18T21:51:18.451343

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

44310 / tcp

165188539 | 2025-01-16T21:29:34.438685

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

44322 / tcp

1741579575 | 2025-01-29T01:33:39.783348

44336 / tcp

740837454 | 2025-01-23T23:31:21.203051

SSH-2.0-OpenSSH_5.3

44345 / tcp

-1399940268 | 2025-01-30T11:54:33.146583

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44422 / tcp

2087396567 | 2025-01-29T23:14:20.447210

kjnkjabhbanc283ubcsbhdc72

44444 / tcp

-801484042 | 2025-01-31T09:22:49.006945

ERR 27

44522 / tcp

-1316491703 | 2025-01-29T19:09:47.391592

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

45039 / tcp

-1399940268 | 2025-01-21T22:00:06.633575

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

45111 / tcp

-375604792 | 2025-01-25T09:27:47.319971

220 Microsoft FTP Service

45122 / tcp

-2081419599 | 2025-01-29T11:52:00.355452

@
03d

45222 / tcp

-971970408 | 2025-01-29T06:08:02.372580

45322 / tcp

740837454 | 2025-01-29T06:59:54.316421

SSH-2.0-OpenSSH_5.3

45444 / tcp

117101543 | 2025-02-01T23:06:54.724739

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

45722 / tcp

-1529979118 | 2025-01-28T20:11:08.014767

inv2W

45922 / tcp

-2107996212 | 2025-01-27T22:24:19.659454

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

46022 / tcp

-1311598826 | 2025-01-28T13:24:37.090225

AMQP:
cluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local
copyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.
information:Licensed under the MPL 2.0. Website: https://rabbitmq.com
platform:Erlang/OTP 24.1
product:RabbitMQ
version:3.9.7
Capabilities:
publisher_confirms:true
exchange_exchange_bindings:true
basic.nack:true
consumer_cancel_notify:true
connection.blocked:true
consumer_priorities:true
authentication_failure_close:true
per_consumer_qos:true
direct_reply_to:tru

46122 / tcp

1741579575 | 2025-01-28T14:44:23.027261

46522 / tcp

1542849631 | 2025-01-28T02:05:41.795878

* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at

46622 / tcp

-358801646 | 2025-01-28T00:15:59.819254

SSH-2.0-OpenSSH_6.6.1

46722 / tcp

2087396567 | 2025-01-28T03:54:53.294743

kjnkjabhbanc283ubcsbhdc72

46822 / tcp

-314039103 | 2025-01-27T17:15:07.250506

Surnom.
Sorry, that nickname format is invalid.

47022 / tcp

2087396567 | 2025-01-27T11:29:30.467499

kjnkjabhbanc283ubcsbhdc72

47122 / tcp

2087396567 | 2025-01-27T21:00:57.561950

kjnkjabhbanc283ubcsbhdc72

47222 / tcp

707919486 | 2025-01-27T02:29:04.535839

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

47322 / tcp

-805362002 | 2025-01-27T15:04:36.500090

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

47422 / tcp

1632932802 | 2025-01-27T13:16:31.599075

47522 / tcp

819727972 | 2025-01-27T10:07:09.603228

SSH-2.0-OpenSSH_7.4

47622 / tcp

-445721795 | 2025-01-27T07:54:00.270869

\x00[\xc3\xaed\x1a\x7f\x00\x00

47990 / tcp

1636811864 | 2025-01-19T08:41:34.023647

48013 / tcp

1911457608 | 2025-01-15T16:04:34.115787

\x00[\x00\x00\x00\x00\x00\x00

48020 / tcp

-1013082686 | 2025-01-13T19:11:04.379771

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

48122 / tcp

1842524259 | 2025-01-26T22:51:50.106128

48222 / tcp

410249975 | 2025-01-26T15:37:53.634037

LNS READY<>

48322 / tcp

-971970408 | 2025-01-26T21:04:19.401818

48522 / tcp

2087396567 | 2025-01-26T13:51:01.988724

kjnkjabhbanc283ubcsbhdc72

48622 / tcp

1282941221 | 2025-01-26T04:54:53.686555

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

48922 / tcp

1282941221 | 2025-01-25T18:39:23.883138

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

49422 / tcp

-653033013 | 2025-01-25T14:29:57.208785

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

49443 / tcp

-2089734047 | 2025-02-06T00:25:06.926010

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

49822 / tcp

-971970408 | 2025-01-25T12:41:44.436144

50000 / tcp

2087396567 | 2025-01-26T08:55:26.328170

kjnkjabhbanc283ubcsbhdc72

50004 / tcp

-1453516345 | 2025-01-31T04:52:44.940270

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

50022 / tcp

819727972 | 2025-01-25T05:08:40.903253

SSH-2.0-OpenSSH_7.4

50100 / tcp

-1888448627 | 2025-01-29T02:32:19.616792

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

50101 / tcp

-891714208 | 2025-02-06T17:08:03.622677

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

50104 / tcp

1975288991 | 2025-02-01T20:36:14.474199

OPTI

50105 / tcp

-1399940268 | 2025-01-18T22:58:18.471200

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

50106 / tcp

819727972 | 2025-01-11T18:20:56.009657

SSH-2.0-OpenSSH_7.4

50322 / tcp

819727972 | 2025-01-24T20:16:11.842996

SSH-2.0-OpenSSH_7.4

50522 / tcp

-971970408 | 2025-01-25T07:06:06.268166

50622 / tcp

-1032713145 | 2025-01-24T08:53:00.578715

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

50722 / tcp

2087396567 | 2025-01-25T01:28:47.945514

kjnkjabhbanc283ubcsbhdc72

50805 / tcp

-1032713145 | 2025-01-13T11:25:08.793338

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

50998 / tcp

-1399940268 | 2025-02-01T14:20:29.096435

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

51007 / tcp

-1810987450 | 2025-01-19T15:36:00.057287

\xc3\xbf

51022 / tcp

2087396567 | 2025-01-24T17:50:15.492993

kjnkjabhbanc283ubcsbhdc72

51106 / tcp

0 | 2025-01-19T01:00:41.823161

Hashes

hash

1865391109

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
content-length: 0

51201 / tcp

1911457608 | 2025-02-02T23:26:31.141922

\x00[\x00\x00\x00\x00\x00\x00

51222 / tcp

-971970408 | 2025-01-24T07:11:34.904740

51422 / tcp

1741579575 | 2025-01-24T05:01:51.260323

51522 / tcp

2103111368 | 2025-01-24T14:25:27.119468

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

51722 / tcp

2087396567 | 2025-01-23T21:47:12.854149

kjnkjabhbanc283ubcsbhdc72

52322 / tcp

1308377066 | 2025-01-23T19:22:39.871906

ncacn_http/1.0

52622 / tcp

2087396567 | 2025-01-23T08:31:27.479306

kjnkjabhbanc283ubcsbhdc72

53222 / tcp

1261582754 | 2025-01-22T21:26:13.970414

unknown command 
unknown command

53322 / tcp

2087396567 | 2025-01-22T19:35:00.600695

kjnkjabhbanc283ubcsbhdc72

53422 / tcp

2087396567 | 2025-01-22T17:46:11.655097

kjnkjabhbanc283ubcsbhdc72

53722 / tcp

-971970408 | 2025-01-22T10:28:04.274197

53922 / tcp

-971970408 | 2025-01-22T06:51:48.205781

54222 / tcp

841014058 | 2025-01-22T03:03:40.081290

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

54422 / tcp

-1036370807 | 2025-01-21T19:46:10.267818

JDWP-Handshake

54522 / tcp

-1611764932 | 2025-01-21T21:34:48.537025

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

54822 / tcp

-321444299 | 2025-01-21T06:17:23.289658

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

55000 / tcp

921225407 | 2025-01-28T13:08:54.976512

\x00\x00\x00\x04\x00\x00\x00\x00\x00

55222 / tcp

1690634669 | 2025-01-21T12:01:35.692378

55443 / tcp

-1013082686 | 2025-01-13T09:31:14.485418

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

55475 / tcp

819727972 | 2025-01-12T18:39:14.399625

SSH-2.0-OpenSSH_7.4

55522 / tcp

380146262 | 2025-01-20T17:40:12.509331

@RSYNCD: 30.0

55553 / tcp

1492413928 | 2025-02-07T10:17:26.459863

SSH-2.0-OpenSSH_7.5

55554 / tcp

1261582754 | 2025-01-30T04:43:06.821337

unknown command 
unknown command

55622 / tcp

-1316491703 | 2025-01-21T04:15:34.099724

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

55722 / tcp

2087396567 | 2025-01-21T00:31:32.994228

kjnkjabhbanc283ubcsbhdc72

55822 / tcp

2087396567 | 2025-01-20T21:47:25.204521

kjnkjabhbanc283ubcsbhdc72

55922 / tcp

2087396567 | 2025-01-20T19:38:04.194209

kjnkjabhbanc283ubcsbhdc72

56022 / tcp

971933601 | 2025-01-20T13:52:33.651217

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

56222 / tcp

1492413928 | 2025-01-20T06:28:49.687709

SSH-2.0-OpenSSH_7.5

56622 / tcp

-375604792 | 2025-01-19T21:12:19.136680

220 Microsoft FTP Service

57122 / tcp

819727972 | 2025-01-20T01:04:29.922476

SSH-2.0-OpenSSH_7.4

57422 / tcp

-441419608 | 2025-01-19T15:28:51.612468

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

57522 / tcp

539065883 | 2025-01-19T08:52:59.934206

57622 / tcp

-971970408 | 2025-01-19T13:42:47.947552

57780 / tcp

639175818 | 2025-02-06T08:44:01.956669

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

57786 / tcp

-1297953727 | 2025-01-24T13:10:51.764208

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

57922 / tcp

1690634669 | 2025-01-19T00:35:20.324160

58000 / tcp

-1399940268 | 2025-01-22T22:15:50.181489

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

58022 / tcp

1690634669 | 2025-01-19T06:09:46.824624

58322 / tcp

2087396567 | 2025-01-18T22:45:03.854805

kjnkjabhbanc283ubcsbhdc72

58422 / tcp

-1013082686 | 2025-01-18T18:58:23.986667

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

59122 / tcp

1850902677 | 2025-01-18T07:48:41.074543

W!

59622 / tcp

2087396567 | 2025-01-17T17:48:19.064439

kjnkjabhbanc283ubcsbhdc72

59822 / tcp

863754335 | 2025-01-17T21:18:22.852341

0a

60001 / tcp

0 | 2025-01-15T22:13:34.255625

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

60129 / tcp

-1230049476 | 2025-02-05T20:20:07.185665

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

60443 / tcp

179185434 | 2025-01-17T06:04:47.668505

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705921161.799-w-waf03cqt

61613 / tcp

1208318993 | 2025-01-22T09:05:12.503219

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

61616 / tcp

897328069 | 2025-01-10T11:34:47.958444

220 mail.scott000.com ESMTP

61617 / tcp

-1399940268 | 2025-01-25T08:51:14.804167

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

62078 / tcp

1443792109 | 2025-01-29T14:38:18.729726

\\x00\\x00\\x01)

63210 / tcp

-1626979812 | 2025-01-30T02:31:06.876431

220 Service ready for new user.

63256 / tcp

-1036370807 | 2025-01-13T22:22:46.238804

JDWP-Handshake

65432 / tcp

1210754493 | 2025-01-18T03:36:37.712985

0\x0c\x02\x01\x01a\x07\n\x01\x00\x04\x00\x04\x00

123.57.230.15

Last Seen: 2025-02-07

Tags:

GeneralInformation

OpenPorts

13 / tcp -341265581 | 2025-01-30T06:13:34.171213

15 / tcp -2089734047 | 2025-01-13T06:00:42.932543

17 / tcp -339084706 | 2025-02-03T02:16:51.312572

21 / tcp 1210838212 | 2025-02-02T19:13:25.416709

23 / tcp 460589547 | 2025-02-06T12:18:50.706886

25 / tcp -653033013 | 2025-02-03T23:20:49.946279

37 / tcp -886440009 | 2025-01-31T14:17:17.396643

43 / tcp 171352214 | 2025-01-29T09:31:14.572241

49 / tcp -1909001798 | 2025-02-05T02:09:32.332121

53 / tcp -1156129152 | 2025-02-02T06:24:02.593741

70 / tcp 857710896 | 2025-02-03T00:25:52.057356

93 / tcp 819727972 | 2025-01-19T21:32:15.645389

94 / tcp 1911457608 | 2025-01-16T11:21:17.238665

96 / tcp -1032713145 | 2025-02-07T01:13:29.840894

98 / tcp -2089734047 | 2025-01-31T08:55:58.695326

100 / tcp -1399940268 | 2025-01-10T14:43:45.719606

102 / tcp -1399940268 | 2025-01-21T11:08:52.221935

104 / tcp 1011407350 | 2025-02-01T01:52:11.965571

110 / tcp 1623746877 | 2025-01-31T19:08:22.815365

111 / tcp 1492413928 | 2025-01-29T21:26:21.990023

119 / tcp 141730637 | 2025-01-13T23:56:13.221298

135 / tcp 1040118286 | 2025-01-18T15:53:37.486509

143 / tcp -398621179 | 2025-02-06T11:22:42.088612

175 / tcp -1399940268 | 2025-01-13T17:36:58.351651

179 / tcp -399606100 | 2025-01-30T07:36:46.445200

195 / tcp 1082732927 | 2025-01-12T19:57:21.533487

221 / tcp -980525298 | 2025-01-29T11:56:45.219837

234 / tcp -2140303521 | 2025-01-14T20:02:05.403789

264 / tcp -1718229072 | 2025-01-11T11:09:17.317619

314 / tcp -1730858130 | 2025-01-10T22:10:02.901151

343 / tcp 205347087 | 2025-01-19T17:06:00.720712

389 / tcp 811247330 | 2025-01-12T20:48:42.299436

427 / tcp 1530390632 | 2025-01-16T20:25:04.434102

444 / tcp 0 | 2025-02-04T10:11:04.596464

Hashes

449 / tcp 677934968 | 2025-01-14T05:06:31.867093

502 / tcp -1746074029 | 2025-02-04T03:27:14.939641

503 / tcp -904840257 | 2025-01-18T04:53:46.063539

515 / tcp 539065883 | 2025-01-23T02:46:23.661518

541 / tcp -820381412 | 2025-02-05T04:10:24.691193

548 / tcp 862587784 | 2025-01-28T20:54:53.573615

554 / tcp -927382641 | 2025-02-02T22:23:43.681787

591 / tcp 1623746877 | 2025-01-14T21:04:25.927211

593 / tcp 1308377066 | 2025-01-30T14:29:51.468371

636 / tcp 1732481781 | 2025-02-01T00:15:54.219390

666 / tcp 1300162323 | 2025-02-03T01:32:21.000864

771 / tcp 819727972 | 2025-01-23T03:48:40.599903

772 / tcp 740837454 | 2025-01-30T09:15:50.493960

789 / tcp 921225407 | 2025-01-25T21:53:56.889502

801 / tcp 119860953 | 2025-01-09T18:59:58.937890

808 / tcp -1166978945 | 2025-01-30T22:37:40.234509

809 / tcp -801484042 | 2025-01-12T05:57:50.793569

832 / tcp 599074451 | 2025-01-10T20:30:53.128365

873 / tcp -1970692834 | 2025-01-31T13:04:16.322239

880 / tcp -1256415508 | 2025-01-27T13:30:25.123518

993 / tcp 165188539 | 2025-02-05T13:30:00.369048

995 / tcp 934210070 | 2025-01-27T13:30:15.244498

1000 / tcp 819727972 | 2025-01-14T17:29:17.575121

1012 / tcp 321971019 | 2025-01-21T13:27:26.075099

1023 / tcp -2089734047 | 2025-01-31T03:20:12.958953

1025 / tcp -1899074860 | 2025-01-09T02:06:09.818433

1080 / tcp 1362344524 | 2025-02-04T16:36:12.507379

1099 / tcp 2063598737 | 2025-01-11T01:10:16.340871

1110 / tcp 1893989126 | 2025-01-21T18:58:13.359418

1153 / tcp -1399940268 | 2025-02-04T00:24:05.023143

1200 / tcp 819727972 | 2025-01-31T08:47:40.934336

1234 / tcp 1911457608 | 2025-02-03T13:11:29.557317

1414 / tcp -1327660293 | 2025-02-04T23:59:08.004776

1433 / tcp 555056254 | 2025-01-08T19:09:25.560821

1443 / tcp -1715152554 | 2025-01-09T09:55:04.267200

Hashes

1458 / tcp 1911457608 | 2025-01-18T00:10:04.142863

1515 / tcp 1082732927 | 2025-02-05T06:51:52.111035

1521 / tcp -805164506 | 2025-02-05T17:38:29.169543

1599 / tcp 539065883 | 2025-01-14T00:04:10.502537

13 / tcp

-341265581 | 2025-01-30T06:13:34.171213

15 / tcp

-2089734047 | 2025-01-13T06:00:42.932543

17 / tcp

-339084706 | 2025-02-03T02:16:51.312572

21 / tcp

1210838212 | 2025-02-02T19:13:25.416709

23 / tcp

460589547 | 2025-02-06T12:18:50.706886

25 / tcp

-653033013 | 2025-02-03T23:20:49.946279

37 / tcp

-886440009 | 2025-01-31T14:17:17.396643

43 / tcp

171352214 | 2025-01-29T09:31:14.572241

49 / tcp

-1909001798 | 2025-02-05T02:09:32.332121

53 / tcp

-1156129152 | 2025-02-02T06:24:02.593741

70 / tcp

857710896 | 2025-02-03T00:25:52.057356

93 / tcp

819727972 | 2025-01-19T21:32:15.645389

94 / tcp

1911457608 | 2025-01-16T11:21:17.238665

96 / tcp

-1032713145 | 2025-02-07T01:13:29.840894

98 / tcp

-2089734047 | 2025-01-31T08:55:58.695326

100 / tcp

-1399940268 | 2025-01-10T14:43:45.719606

102 / tcp

-1399940268 | 2025-01-21T11:08:52.221935

104 / tcp

1011407350 | 2025-02-01T01:52:11.965571

110 / tcp

1623746877 | 2025-01-31T19:08:22.815365

111 / tcp

1492413928 | 2025-01-29T21:26:21.990023

119 / tcp

141730637 | 2025-01-13T23:56:13.221298

135 / tcp

1040118286 | 2025-01-18T15:53:37.486509

143 / tcp

-398621179 | 2025-02-06T11:22:42.088612

175 / tcp

-1399940268 | 2025-01-13T17:36:58.351651

179 / tcp

-399606100 | 2025-01-30T07:36:46.445200

195 / tcp

1082732927 | 2025-01-12T19:57:21.533487

221 / tcp

-980525298 | 2025-01-29T11:56:45.219837

234 / tcp

-2140303521 | 2025-01-14T20:02:05.403789

264 / tcp

-1718229072 | 2025-01-11T11:09:17.317619

314 / tcp

-1730858130 | 2025-01-10T22:10:02.901151

343 / tcp

205347087 | 2025-01-19T17:06:00.720712

389 / tcp

811247330 | 2025-01-12T20:48:42.299436

427 / tcp

1530390632 | 2025-01-16T20:25:04.434102

444 / tcp

0 | 2025-02-04T10:11:04.596464

449 / tcp

677934968 | 2025-01-14T05:06:31.867093

502 / tcp

-1746074029 | 2025-02-04T03:27:14.939641

503 / tcp

-904840257 | 2025-01-18T04:53:46.063539

515 / tcp

539065883 | 2025-01-23T02:46:23.661518

541 / tcp

-820381412 | 2025-02-05T04:10:24.691193

548 / tcp

862587784 | 2025-01-28T20:54:53.573615

554 / tcp

-927382641 | 2025-02-02T22:23:43.681787

591 / tcp

1623746877 | 2025-01-14T21:04:25.927211

593 / tcp

1308377066 | 2025-01-30T14:29:51.468371

636 / tcp

1732481781 | 2025-02-01T00:15:54.219390

666 / tcp

1300162323 | 2025-02-03T01:32:21.000864

771 / tcp

819727972 | 2025-01-23T03:48:40.599903

772 / tcp

740837454 | 2025-01-30T09:15:50.493960

789 / tcp

921225407 | 2025-01-25T21:53:56.889502

801 / tcp

119860953 | 2025-01-09T18:59:58.937890

808 / tcp

-1166978945 | 2025-01-30T22:37:40.234509

809 / tcp

-801484042 | 2025-01-12T05:57:50.793569

832 / tcp

599074451 | 2025-01-10T20:30:53.128365

873 / tcp

-1970692834 | 2025-01-31T13:04:16.322239

880 / tcp

-1256415508 | 2025-01-27T13:30:25.123518

993 / tcp

165188539 | 2025-02-05T13:30:00.369048

995 / tcp

934210070 | 2025-01-27T13:30:15.244498

1000 / tcp

819727972 | 2025-01-14T17:29:17.575121

1012 / tcp

321971019 | 2025-01-21T13:27:26.075099

1023 / tcp

-2089734047 | 2025-01-31T03:20:12.958953

1025 / tcp

-1899074860 | 2025-01-09T02:06:09.818433

1080 / tcp

1362344524 | 2025-02-04T16:36:12.507379

1099 / tcp

2063598737 | 2025-01-11T01:10:16.340871

1110 / tcp

1893989126 | 2025-01-21T18:58:13.359418

1153 / tcp

-1399940268 | 2025-02-04T00:24:05.023143

1200 / tcp

819727972 | 2025-01-31T08:47:40.934336

1234 / tcp

1911457608 | 2025-02-03T13:11:29.557317

1414 / tcp

-1327660293 | 2025-02-04T23:59:08.004776

1433 / tcp

555056254 | 2025-01-08T19:09:25.560821

1443 / tcp

-1715152554 | 2025-01-09T09:55:04.267200

1458 / tcp

1911457608 | 2025-01-18T00:10:04.142863

1515 / tcp

1082732927 | 2025-02-05T06:51:52.111035

1521 / tcp

-805164506 | 2025-02-05T17:38:29.169543

1599 / tcp

539065883 | 2025-01-14T00:04:10.502537

1604 / tcp

-68075478 | 2025-01-09T05:05:54.524921

1723 / tcp

1103582599 | 2025-02-04T18:31:11.095401

1800 / tcp

165188539 | 2025-02-05T23:26:18.393946

1801 / tcp

1725077471 | 2025-01-12T20:40:34.454408

1830 / tcp

1911457608 | 2025-01-27T07:56:04.383249

1883 / tcp

-971970408 | 2025-01-15T18:58:26.398828

1911 / tcp

-1399940268 | 2025-02-02T20:06:36.114624