GeneralInformation

Country	China
City	Shanghai
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 15 17 19 21 23 24 25 37 53 70 79 80 81 102 104 111 113 119 122 135 175 179 195 221 264 311 389 427 443 444 448 465 502 503 515 548 554 593 636 666 771 789 801 843 873 992 993 1023 1025 1110 1153 1177 1200 1234 1337 1414 1433 1443 1515 1521 1599 1604 1723 1800 1801 1883 1911 1926 1962 1990 2000 2001 2002 2006 2008 2054 2061 2067 2081 2083 2086 2087 2121 2122 2126 2154 2181 2221 2222 2323 2332 2345 2375 2376 2382 2404 2455 2480 2556 2559 2563 2566 2568 2570 2628 2761 2762 3001 3050 3051 3053 3054 3062 3063 3081 3090 3108 3110 3112 3116 3260 3268 3269 3299 3301 3310 3388 3389 3402 3498 3548 3549 3551 3563 3780 3790 4000 4002 4022 4063 4064 4157 4200 4242 4282 4321 4369 4433 4434 4443 4444 4500 4506 4550 4700 4734 4899 4949 5001 5007 5009 5010 5025 5090 5172 5201 5222 5269 5321 5432 5435 5454 5595 5596 5672 5858 5900 5938 5984 5986 6000 6001 6002 6080 6379 6443 6511 6580 6590 6603 6633 6653 6666 6667 6668 6697 7001 7071 7171 7218 7434 7443 7548 7634 7776 8009 8012 8018 8019 8038 8041 8045 8071 8081 8083 8087 8092 8096 8126 8139 8140 8181 8200 8248 8282 8291 8333 8409 8410 8429 8430 8443 8448 8500 8545 8553 8554 8575 8586 8590 8623 8649 8728 8733 8788 8789 8791 8814 8822 8831 8834 8835 8844 8845 8850 8854 8860 8862 8869 8877 8880 8889 8999 9000 9001 9002 9010 9011 9012 9029 9032 9039 9042 9051 9091 9092 9095 9097 9100 9151 9160 9191 9208 9210 9213 9216 9217 9222 9295 9300 9301 9306 9398 9418 9530 9600 9633 9761 9876 9898 9943 9950 9998 9999 10000 10134 10250 10443 10554 10909 11112 11210 11211 11300 12000 14147 14265 16993 17000 18081 18245 19000 20256 20547 20880 21025 21379 23023 23424 25001 25565 27015 27017 28015 30002 30003 31337 32764 35000 39277 41800 44158 44818 50000 50050 50100 54138 55000 55443 55553 60129 61613 61616 62078

-1729629024 | 2024-10-10T06:20:34.469750

11 / tcp

101 imqbroker =unV

2087396567 | 2024-10-07T21:37:38.944489

15 / tcp

kjnkjabhbanc283ubcsbhdc72

-255236012 | 2024-10-10T05:30:08.703336

17 / tcp

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN

-1746074029 | 2024-09-30T23:33:03.502918

19 / tcp

101 imqbroker =unV\r\n

-731285715 | 2024-10-05T02:51:00.672172

21 / tcp

220 (vsFTPd 1.2.2)

460589547 | 2024-10-10T03:46:33.756296

23 / tcp

ZyXEL VDSL Router

-1795027372 | 2024-10-06T15:02:22.529213

24 / tcp

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

1282941221 | 2024-10-07T03:00:46.930062

25 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1288534451 | 2024-10-10T05:23:48.814055

37 / tcp

\\xe9XuK

1155744004 | 2024-10-09T23:43:58.373551

53 / tcp

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00\x1e\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x00\x1e\x00\x04\x8e\xfb+\x0e
\x00\x06\x85\x80\x00\x01\x00\x01\x00\x

-1986594217 | 2024-09-26T09:46:45.427352

70 / tcp

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

-876294238 | 2024-10-10T03:43:32.342962

79 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Content-Type: text/html
Connection: close

1288157422 | 2024-10-08T13:15:27.454326

80 / tcp

403 Forbidden

HTTP/1.1 403 Forbidden
Server: Tengine
Date: Tue, 08 Oct 2024 13:15:27 GMT
Content-Type: text/html
Content-Length: 223
Connection: keep-alive

-321444299 | 2024-09-14T07:06:29.176159

81 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

-1032713145 | 2024-10-04T02:32:55.333483

102 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-1399940268 | 2024-10-02T05:07:34.809054

104 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1681927087 | 2024-10-08T20:03:44.211675

111 / tcp

kjnkjabhbanc283ubcsbhdc72

-1845554491 | 2024-10-01T21:19:49.827655

113 / tcp

113 , 41358 : USERID : OTHER :99

141730637 | 2024-09-23T22:29:57.732818

119 / tcp

HTTP/1.0 200 OK
Server: Proxy

1623746877 | 2024-09-15T21:48:51.612019

122 / tcp

500 Permission denied - closing connection.\r\n

-646274631 | 2024-10-01T23:28:52.328571

135 / tcp

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: user-PC\n IP2: 192.168.1.104\n IP3: 220.129.89.73\n IP4: 2001:b011:3009:904e:d83e:3f80:66e3:747\n IP5: 2001:b011:3009:904e:901d:7e1d:524b:cf68\n IP6: 2001:b011:3009:ec00:d8a9:208f:6a7e:b9c3\n\nNTLMSSP:\nTarget_Name: USER-PC\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: USER-PC\nNetBIOS_Computer_Name: USER-PC\nDNS_Domain_Name:

1991883981 | 2024-09-21T03:38:25.798125

175 / tcp

B\x00\x00\x00\xc3\xbfn\x04Too many connections

-399606100 | 2024-09-24T13:52:25.747532

179 / tcp

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

60948681 | 2024-10-03T04:46:55.282649

195 / tcp

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).

-1399940268 | 2024-09-14T19:14:28.396213

221 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1022036431 | 2024-09-18T20:13:48.789683

264 / tcp

CheckPoint\nFirewall Host: CN05FWINT01\nSmartCenter Host: fw-go-mgmt-01..x6vcm5\\x00\n

676753056 | 2024-09-24T12:50:07.672023

311 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html

-1907080992 | 2024-10-02T21:37:47.666177

389 / tcp

0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x00\\x04\\x00\\x04\\x00

1801635450 | 2024-10-02T21:44:26.588783

427 / tcp

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://127.0.0.1\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:cdserver\nservice:fdserver\nservice:hdserver\nservice:adviser\nservice:lighttpd\nB://l:87/x\n\nResponse of service:ipmi SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:ipmi://(none):623\n  Lifetime: 65535\n  URL: service:ipmi://IEI9CC2C40E4251:623\n\n\nResponse of service:ipmi Attr

1288157422 | 2024-10-05T22:39:56.025992

443 / tcp

403 Forbidden

HTTP/1.1 403 Forbidden
Server: Tengine
Date: Sat, 05 Oct 2024 22:39:55 GMT
Content-Type: text/html
Content-Length: 223
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:14:4a:36:a2:92:9e:9c:54:97:99:92
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: Jun 18 08:48:01 2024 GMT
            Not After : Mar 22 08:21:01 2025 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=203.107.1.1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:8f:aa:b0:63:8c:e0:1d:6d:e4:2e:a0:4e:08:14:
                    67:bf:73:dc:89:ec:02:1a:ad:b5:74:f5:39:b6:66:
                    53:94:b5:3f:3d:a1:67:be:8f:5f:5a:70:9e:3b:f3:
                    05:74:f6:bb:f9:2d:46:19:e1:a4:a8:48:90:2c:f4:
                    c1:8a:70:be:8e:20:db:c0:79:86:64:62:80:57:a1:
                    70:15:32:58:93:f1:8f:c0:b0:3c:62:68:94:e6:c9:
                    c8:e2:f6:ac:7c:f2:a0:b3:89:7c:8c:44:fb:c4:8f:
                    d2:db:41:5f:3e:74:e2:43:a7:aa:bc:81:8d:f7:88:
                    76:97:e2:eb:12:cd:d1:e4:7c:33:14:c2:ed:e0:a8:
                    9d:b7:fe:2e:d4:31:37:ec:42:f2:1f:05:f2:cb:0e:
                    a1:24:e8:3a:98:bb:0b:9e:a0:01:43:23:e8:e7:28:
                    41:4d:01:3a:03:07:71:a0:a3:56:96:ef:f1:8c:75:
                    6f:ba:61:9a:0c:cd:11:bc:e6:dd:88:22:35:96:9f:
                    d9:14:d1:ef:c3:54:b4:30:d0:7d:0d:7f:f9:bf:ad:
                    0a:e7:f8:1e:98:5d:9b:5a:c4:b8:66:c0:59:bb:a9:
                    81:15:9f:75:e1:74:c8:f7:cb:dc:c1:77:41:27:a7:
                    01:68:97:89:1a:1e:d1:1e:48:2d:df:55:8f:24:e3:
                    56:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
            X509v3 Subject Alternative Name: 
                IP Address:203.107.1.1, IP Address:203.107.1.2, IP Address:203.107.1.3, IP Address:203.107.1.4, IP Address:203.107.1.33, IP Address:203.107.1.34, IP Address:203.107.1.35, IP Address:203.107.1.36, IP Address:203.107.1.65, IP Address:203.107.1.66, IP Address:203.107.1.67, IP Address:203.107.1.68, IP Address:203.107.1.97, IP Address:203.107.1.98, IP Address:203.107.1.99, IP Address:203.107.1.100, DNS:*.httpdns.aliyuncs.com, DNS:httpdns-sc.aliyuncs.com, DNS:httpdns-inner.aliyun-inc.com, DNS:httpdns.danuoyi.tbcache.com, DNS:httpdns.dingtalk.com, DNS:ops-httpdns.aliyuncs.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            X509v3 Subject Key Identifier: 
                EE:C0:B4:4E:60:A5:FE:D3:02:6B:22:F4:14:B9:F8:E1:97:D3:4F:B0
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Jun 18 08:48:03.096 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:EF:D4:A1:30:E5:16:3F:88:ED:D8:8B:
                                DE:1E:7A:DC:23:4F:03:94:79:98:53:CD:12:5D:DF:70:
                                2F:E1:58:8F:B4:02:21:00:F7:F5:EA:01:2A:CE:7D:32:
                                7F:33:83:0C:72:64:5A:D3:B8:11:1F:66:FD:BA:91:8F:
                                36:FA:C0:9E:33:D2:67:5D
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Jun 18 08:48:03.105 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:59:1A:52:62:56:36:43:CC:76:98:7A:57:
                                1C:93:FE:19:A7:BE:E7:6E:4F:8F:29:41:FE:C6:5B:1E:
                                D4:55:EC:D7:02:20:48:48:49:F3:03:3A:B8:E9:E7:C8:
                                6F:88:8B:08:B5:72:76:DA:89:D8:3C:BF:2A:57:69:70:
                                7B:9A:3B:B7:94:B2
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Jun 18 08:48:03.066 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:FD:5A:91:E5:59:19:F6:72:02:96:BF:
                                64:3C:F5:71:35:AC:B8:66:5C:00:57:66:E9:1C:12:EA:
                                A1:1A:CC:8E:28:02:21:00:D5:10:9E:A9:94:46:F4:52:
                                78:54:79:AB:CA:7A:59:05:4C:FA:D6:A3:1B:47:CC:3F:
                                B8:C8:FD:B2:80:4E:1A:EC
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        51:7c:23:2a:0a:5d:aa:0d:65:b7:26:72:15:5f:d2:e1:3e:7a:
        72:cd:dc:8b:da:11:c4:3f:36:a5:19:b4:b8:cb:b6:97:48:3e:
        a2:8e:42:5e:60:60:c2:51:57:dc:d9:64:14:fe:1f:fa:b0:40:
        41:ec:3e:79:2e:a9:43:2f:d0:b2:bc:58:49:8b:b3:71:80:64:
        73:1c:44:84:2a:fb:3a:d7:5f:1d:4c:dd:69:a4:68:36:a5:7e:
        a4:60:5d:47:8b:0e:6d:79:2c:1a:1a:f6:52:aa:c1:21:91:41:
        33:53:9e:0f:42:78:2f:4a:f0:25:cd:1e:7e:96:f5:df:62:16:
        47:2c:f8:4d:f9:ce:b4:f6:4e:13:a5:f2:c3:f6:9d:d2:a9:ea:
        2a:95:7a:42:d1:96:a0:ea:f9:9b:8b:b4:e2:73:8c:9d:e0:2b:
        3f:f2:76:1f:2b:c2:9f:a0:0b:d0:13:f9:da:6a:91:1f:76:31:
        7a:e7:0e:e4:7b:91:13:f3:86:07:a6:56:97:ff:6b:fb:4a:ab:
        e8:77:bb:b4:8c:b5:c6:b7:01:24:e3:6f:47:e1:52:3b:76:e0:
        6a:43:d1:ab:13:73:a4:1c:5e:4d:8c:61:1c:16:3c:c4:9c:50:
        55:01:c7:26:1f:65:de:bb:ea:8b:09:8a:d9:22:04:93:4c:59:
        b9:55:4e:59

-609061209 | 2024-10-10T01:04:17.155119

444 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Thu, 10 Oct 2024 01:04:15 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

-2046514463 | 2024-10-06T19:40:58.610325

448 / tcp

AB\x01\t

897328069 | 2024-09-21T00:08:32.728231

465 / tcp

220 mail.scott000.com ESMTP

-616720387 | 2024-10-08T07:27:15.530283

502 / tcp

SSH-2.0-SSHD_0.7.6

-136006866 | 2024-09-29T13:57:21.816857

503 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

-984990168 | 2024-10-09T16:43:09.562736

515 / tcp


0ÿñ

-773160241 | 2024-10-03T20:26:32.003417

548 / tcp

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: Yes\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: Yes\nCopy File: Yes\nServer Name: murphys-airport-time-capsule\nMachine Type: \\x10TimeCapsule8,119\nAFP Versions: AFP3.3, AFP3.2, AFP3.1\nUAMs: DHCAST128\\x04,DHX2\\x03,SRP\\x06,Recon1C\nServer Signature: 4338365332344c58463948350069672d

285770450 | 2024-09-25T09:19:36.291370

554 / tcp

RTSP/1.0 401 Unauthorized
CSeq: 1

1308377066 | 2024-10-08T21:38:18.512892

593 / tcp

ncacn_http/1.0

826560219 | 2024-10-06T14:17:23.100524

636 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 59-8951886-0 0NNN RT(1705909763732 169) q(-1 -1 -1 -1) r(0 -1) b1

1300162323 | 2024-09-29T13:23:22.407399

666 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

-1399940268 | 2024-09-23T13:31:10.060994

771 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

321971019 | 2024-10-10T17:48:23.541691

789 / tcp

-ERR client ip is not in whitelist\r

1911457608 | 2024-10-09T14:29:31.003423

801 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-2004989248 | 2024-10-05T17:39:38.619718

843 / tcp

<cross-domain-policy>\n   <allow-access-from domain="*" to-po\nrts="*" />\n</cross-domain-policy>

-1970692834 | 2024-09-29T18:20:29.775742

873 / tcp

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

-936692830 | 2024-09-14T02:33:10.010003

992 / tcp

HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19

-2031152423 | 2024-09-24T21:39:46.711303

993 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

171352214 | 2024-09-27T09:53:37.709183

1023 / tcp

-ERR client ip is not in whitelist

-1810987450 | 2024-09-25T04:45:51.462938

1025 / tcp

\xc3\xbf

1909672637 | 2024-10-05T04:41:37.033898

1110 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff

-1399940268 | 2024-10-09T17:29:11.776943

1153 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1880683805 | 2024-10-09T01:00:49.551752

1177 / tcp

ÿ

1850902677 | 2024-09-24T18:46:01.687024

1200 / tcp

W!

1353260875 | 2024-09-25T14:55:42.896335

1234 / tcp

\x00[g\xc2\x95N\x7f\x00\x00

-1375131644 | 2024-10-04T01:31:13.267437

1337 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

820958131 | 2024-10-03T05:27:47.687109

1414 / tcp

kjnkjabhbanc283ubcsbhdc72\x02

637263328 | 2024-09-23T11:55:41.413511

1433 / tcp

MSSQL Server\nVersion: 171050560 (0xa320640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: SERVER\nProduct_Version: 10.0.19041 Ntlm 15\nOS: Windows 10, Version 2004/Windows Server, Version 2004\nNetBIOS_Domain_Name: SERVER\nNetBIOS_Computer_Name: SERVER\nDNS_Domain_Name: server\nDNS_Computer_Name: server\nSystem_Time: 2024-01-22 01:21:33 +0000 UTC\n\n

-1715152554 | 2024-09-24T20:47:16.363742

1443 / tcp

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Tue, 24 Sep 2024 20:47:16 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://203.107.1.34:443/

740837454 | 2024-09-23T03:40:15.217272

1515 / tcp

SSH-2.0-OpenSSH_5.3

-541815454 | 2024-10-05T03:20:21.188568

1521 / tcp

Version:11.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=186646784)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

745343730 | 2024-09-20T06:57:54.600688

1599 / tcp

220 smtp.qq.com Esmtp QQ Mail Server

-653033013 | 2024-09-30T04:33:31.697081

1604 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-1608241410 | 2024-09-16T09:13:24.790681

1723 / tcp

Firmware: 1\nHostname: local\nVendor: linux\n

1911457608 | 2024-09-29T13:39:33.231467

1800 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1745717579 | 2024-09-22T12:07:39.796170

1801 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae224e_PS-CSX-01CvJ183_33983-2857

1208318993 | 2024-09-27T08:14:05.085940

1883 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

-438503381 | 2024-10-02T13:01:32.805562

1911 / tcp

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

-971970408 | 2024-10-07T10:22:57.556410

1926 / tcp

639175818 | 2024-10-03T15:19:51.082876

1962 / tcp

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

-1399940268 | 2024-10-09T22:44:20.641951

1990 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

677934968 | 2024-10-01T16:48:02.764717

2000 / tcp

lm^)Q

-1641514916 | 2024-09-13T12:10:49.737020

2001 / tcp

* OK Merak 1dFUa2 IMAP4rev1

-1609150592 | 2024-10-02T23:57:52.122825

2002 / tcp

ÿÿÿ
0 ...

945910976 | 2024-09-21T04:31:43.287220

2006 / tcp

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

-407828767 | 2024-10-07T11:52:10.241377

2008 / tcp

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

-2096652808 | 2024-09-30T22:09:24.799843

2054 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1991883981 | 2024-09-29T21:59:37.092458

2061 / tcp

B\x00\x00\x00\xc3\xbfn\x04Too many connections

1261582754 | 2024-10-10T10:49:18.404075

2067 / tcp

unknown command 
unknown command

-1399940268 | 2024-10-03T15:49:35.383984

2081 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

897328069 | 2024-10-10T22:21:57.654764

2083 / tcp

220 mail.scott000.com ESMTP

1865391109 | 2024-10-06T17:03:45.530946

2086 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0

-971970408 | 2024-10-09T06:37:52.802093

2087 / tcp

141730637 | 2024-09-13T08:10:02.056193

2121 / tcp

HTTP/1.0 200 OK
Server: Proxy

-1626979812 | 2024-09-25T02:05:56.201641

2122 / tcp

220 Service ready for new user.

-2080368173 | 2024-09-14T01:27:52.748403

2126 / tcp

\\x10\\x06\\x80\\x08\\x00\\x00\\x00 \\x00\\x18\x0b\\x01casa@packet.cable\\x00\\x00\\x00\\x10\\x08\\x80\\x08\\x00\\x00\\x00\\x10\\x00\\x08\\x08\\x01\\x00\t\\x00\\x00

-971970408 | 2024-10-05T05:05:18.285042

2154 / tcp

546151771 | 2024-10-04T09:58:40.068173

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

1911457608 | 2024-09-13T17:02:24.427477

2221 / tcp

\x00[\x00\x00\x00\x00\x00\x00

58083962 | 2024-10-08T19:05:12.517252

2222 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Content-Type: text/html
Connection: close

1662205251 | 2024-10-08T14:15:36.160239

2323 / tcp

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

1778988322 | 2024-09-24T08:25:20.031061

2332 / tcp

* OK GroupWise IMAP4rev1 Server Ready

-1230049476 | 2024-10-06T23:14:35.650732

2345 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

-1344535834 | 2024-09-13T04:53:31.738525

2375 / tcp

HTTP/1.0 200 OK
Server: Proxy

-1760806421 | 2024-10-10T18:15:22.773410

2376 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

597764502 | 2024-09-25T01:00:38.785317

2382 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

-1399940268 | 2024-10-09T10:12:34.009068

2404 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-971970408 | 2024-10-09T21:52:24.627309

2455 / tcp

996960436 | 2024-09-16T15:09:25.203488

2480 / tcp

572 Relay not authorized

1308377066 | 2024-10-03T10:20:26.628444

2556 / tcp

ncacn_http/1.0

-1839934832 | 2024-10-05T04:56:53.572618

2559 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

165188539 | 2024-09-14T21:55:53.829083

2563 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

707919486 | 2024-10-10T13:35:58.293069

2566 / tcp

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

1911457608 | 2024-09-16T09:50:23.151506

2568 / tcp

\x00[\x00\x00\x00\x00\x00\x00

819727972 | 2024-09-28T18:25:23.582847

2570 / tcp

SSH-2.0-OpenSSH_7.4

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-6111 13 moreCVE-2019-6110 CVE-2019-6109 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

2087396567 | 2024-10-07T06:48:30.029418

2628 / tcp

kjnkjabhbanc283ubcsbhdc72

1911457608 | 2024-09-23T12:06:49.617073

2761 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-826610984 | 2024-10-07T06:36:01.268624

2762 / tcp

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 602
Connect-To: https://member.aliyun.com/unshift-flush/object-trigger/jobs/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div id="other"></

819727972 | 2024-10-02T12:01:28.412002

3001 / tcp

SSH-2.0-OpenSSH_7.4

-136006866 | 2024-10-08T19:21:49.401463

3050 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

1911457608 | 2024-09-29T17:06:56.273663

3051 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1911457608 | 2024-09-20T00:18:57.578666

3053 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-09-24T03:09:55.933409

3054 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2024-09-19T23:40:38.485676

3062 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-2140303521 | 2024-09-16T05:56:56.527507

3063 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

1911457608 | 2024-10-02T14:05:44.058409

3081 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1810987450 | 2024-09-12T23:07:21.291062

3090 / tcp

\xc3\xbf

-2089734047 | 2024-09-17T04:49:47.420984

3108 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1761482307 | 2024-09-21T15:37:14.684418

3110 / tcp

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

-2107996212 | 2024-10-05T15:59:31.411677

3112 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-445721795 | 2024-09-11T12:12:40.522929

3116 / tcp

\x00[\xc3\xaed\x1a\x7f\x00\x00

-1341662640 | 2024-10-09T02:15:01.661087

3260 / tcp

HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

1213931722 | 2024-10-09T19:34:43.550018

3268 / tcp

ICAP/1.0 501 Other\r\nServer: Traffic Spicer 7788179225\r\n

1381121983 | 2024-09-23T20:28:43.743200

3269 / tcp

Notify\r\n

-1399940268 | 2024-09-29T00:52:42.040094

3299 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-653033013 | 2024-09-30T01:27:29.822402

3301 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-1476017887 | 2024-10-02T02:44:11.506573

3310 / tcp

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

-1105333987 | 2024-10-01T22:19:17.435793

3388 / tcp

\x00[KpU\x7f\x00\x00

1131713579 | 2024-09-16T15:43:40.715440

3389 / tcp

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x0f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: WL1BHKUZNIYOEK1\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: WL1BHKUZNIYOEK1\nNetBIOS_Computer_Name: WL1BHKUZNIYOEK1\nDNS_Domain_Name: wl1bhkuzniyoek1q\nDNS_Computer_Name: wl1bhkuzniyoek1q\nSystem_Time: 2024-01-22 08:40:53 +0000 UTC\n\n

-1399940268 | 2024-10-05T00:49:29.068742

3402 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1623746877 | 2024-09-14T17:52:25.712669

3498 / tcp

500 Permission denied - closing connection.\r\n

-2031152423 | 2024-09-28T20:40:09.171651

3548 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

-1839934832 | 2024-10-04T06:05:41.630928

3549 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

198844676 | 2024-10-09T06:14:54.562541

3551 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

-441419608 | 2024-09-30T18:00:13.920232

3563 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

1541211644 | 2024-10-01T16:15:50.031420

3780 / tcp

[\xc2\xba\x7fs\x7f

2087396567 | 2024-10-08T09:48:29.085879

3790 / tcp

kjnkjabhbanc283ubcsbhdc72

-1148803158 | 2024-10-05T17:34:07.326526

4000 / tcp

Mysql Version: 8.0.34 \r\nJ\\x00\\x00\\x00\n8.0.34\\x009L\\x01\\x00NJSz;\\x01\\x19y\\x00\\xff\\xff!\\x02\\x00\\xff\\xdf\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00k\\x13VT\\x10\\x14YfV~^z\\x00caching_sha2_password\\x00

-2096652808 | 2024-09-29T19:15:34.652691

4002 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1911457608 | 2024-09-27T17:14:17.669828

4022 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2024-10-07T00:30:03.163828

4063 / tcp

kjnkjabhbanc283ubcsbhdc72

819727972 | 2024-10-03T11:09:02.174139

4064 / tcp

SSH-2.0-OpenSSH_7.4

-1453516345 | 2024-09-29T20:03:45.156550

4157 / tcp

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

-1888448627 | 2024-10-05T23:10:24.397712

4200 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

198844676 | 2024-10-06T19:16:52.525445

4242 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

2087396567 | 2024-10-02T10:21:32.832108

4282 / tcp

kjnkjabhbanc283ubcsbhdc72

-1250504565 | 2024-10-03T06:03:07.799563

4321 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

-1399940268 | 2024-10-06T01:25:07.037173

4369 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1839934832 | 2024-10-04T10:12:55.680429

4433 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

819727972 | 2024-10-05T22:01:52.343248

4434 / tcp

SSH-2.0-OpenSSH_7.4

751161953 | 2024-09-28T08:03:08.849011

4443 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae295529c967ad650ec3304d944abd

-1139539254 | 2024-10-05T08:04:51.595498

4444 / tcp

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

-2096652808 | 2024-10-02T15:56:25.708274

4500 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1399940268 | 2024-10-08T05:49:20.163488

4506 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1695841648 | 2024-10-04T22:48:39.082142

4550 / tcp

HTTP/1.1 404 Not Found
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

-1598265216 | 2024-10-05T01:29:08.613165

4700 / tcp

@RSYNCD: 31.0

398077695 | 2024-10-10T15:50:30.910092

4734 / tcp

-1999117212 | 2024-09-16T23:28:00.261415

4899 / tcp

504717326 | 2024-10-09T04:12:08.230769

4949 / tcp

SSH-2.0-OpenSSH_8.6

CVE-2008-3844 CVE-2021-41617 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 6 moreCVE-2024-6387 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368

-2096652808 | 2024-10-09T17:49:00.512124

5001 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-297128567 | 2024-10-04T10:53:28.015870

5007 / tcp

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

1578202979 | 2024-10-04T07:25:11.247704

5009 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1a4c_wdx37_19919-36152

408230060 | 2024-10-02T05:14:27.961802

5010 / tcp

\r\nSorry, that nickname format is invalid.\r\n

819727972 | 2024-10-03T14:28:17.955815

5025 / tcp

SSH-2.0-OpenSSH_7.4

-2096652808 | 2024-09-14T14:53:43.664338

5090 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1969169410 | 2024-09-25T04:38:34.248828

5172 / tcp

ÿû
-> GET / HTTP/1.0
GET / HTTP/1.0
undefined symbol: GET
-> 
->

1911457608 | 2024-10-10T07:25:31.999635

5201 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1689518693 | 2024-09-30T19:30:59.284750

5222 / tcp

[¼/

-1074907534 | 2024-09-25T15:17:32.251752

5269 / tcp

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938603.82-w-waf02tjgt

-1399940268 | 2024-09-15T18:51:42.637620

5321 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

401555314 | 2024-09-24T00:17:29.552336

5432 / tcp

NB[GFXjA^R

-358801646 | 2024-09-29T22:30:19.610296

5435 / tcp

SSH-2.0-OpenSSH_6.6.1

-1327660293 | 2024-09-13T22:03:13.949079

5454 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-801484042 | 2024-09-24T03:15:03.241765

5595 / tcp

ERR 27

-1399940268 | 2024-09-18T02:58:36.418898

5596 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

575925250 | 2024-10-05T17:17:14.352709

5672 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

660175493 | 2024-10-07T15:30:17.892968

5858 / tcp

-670840277 | 2024-09-13T22:58:24.751343

5900 / tcp

RFB 004.001

VNC:
  Protocol Version: 4.1

493955023 | 2024-09-22T14:59:14.667435

5938 / tcp

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

1999272906 | 2024-09-28T21:24:12.291549

5984 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

1077013874 | 2024-10-07T05:12:13.720517

5986 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

-1648456501 | 2024-09-25T11:00:22.473122

6000 / tcp

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

-1399940268 | 2024-10-10T02:57:25.021480

6001 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

546151771 | 2024-10-06T23:28:57.100166

6002 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

-984990168 | 2024-09-17T16:14:38.456202

6080 / tcp


0ÿñ

321971019 | 2024-09-17T04:41:45.996799

6379 / tcp

-ERR client ip is not in whitelist\r

-1715152554 | 2024-09-25T04:20:08.638551

6443 / tcp

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Wed, 25 Sep 2024 04:20:08 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://203.107.1.34:443/

-1045760528 | 2024-10-01T13:05:43.276033

6511 / tcp

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

-1056270173 | 2024-09-14T16:37:49.706718

6580 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

-1399940268 | 2024-10-07T06:07:35.921166

6590 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-445721795 | 2024-09-28T22:01:40.808848

6603 / tcp

\x00[\xc3\xaed\x1a\x7f\x00\x00

-1487943323 | 2024-10-04T11:19:25.173225

6633 / tcp

431 Unable to negotiate secure command connection.\r\n

321971019 | 2024-09-28T23:18:24.827008

6653 / tcp

-ERR client ip is not in whitelist\r

4935895 | 2024-10-08T12:18:00.480277

6666 / tcp

HTTP/1.1 400 Bad Request
Server: CloudWAF

-1872120160 | 2024-09-20T23:02:52.414361

6667 / tcp

">Application and Content Networking Software 3.9</a>)
</BODY><

1911457608 | 2024-09-11T07:11:10.652490

6668 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1126993057 | 2024-10-08T11:30:08.568002

6697 / tcp

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

1634746382 | 2024-10-06T00:26:52.689029

7001 / tcp

HTTP/1.1 200 OK
X-Current-Requests: 1
Vary: Origin
Content-Type: application/json; charset=utf-8
X-ReadTime: 51
Connection: keep-alive
Keep-Alive: timeout=5

-2107996212 | 2024-10-02T16:38:25.595230

7071 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-980525298 | 2024-10-08T18:00:27.550139

7171 / tcp

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-321444299 | 2024-10-08T19:30:26.156924

7218 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

1830697416 | 2024-09-11T03:30:50.687443

7434 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

1612309769 | 2024-10-09T03:41:19.419809

7443 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28e1_CS-000-01SZh112_7344-42222

117101543 | 2024-10-10T12:47:33.258445

7548 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

897328069 | 2024-10-06T13:31:51.535889

7634 / tcp

220 mail.scott000.com ESMTP

1161309183 | 2024-10-04T18:40:30.857879

7776 / tcp

ProxyServer is ready

-1730858130 | 2024-09-21T22:32:32.191796

8009 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-1888448627 | 2024-09-19T00:08:41.772178

8012 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1839934832 | 2024-09-13T09:29:18.703115

8018 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

1762042191 | 2024-10-08T14:08:24.816008

8019 / tcp

\x7f\x7fICA\x00

-1399940268 | 2024-09-22T10:07:16.012957

8038 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

165188539 | 2024-09-20T06:54:43.738424

8041 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-568526428 | 2024-09-22T16:17:39.351420

8045 / tcp

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 5-78951983-0 0NNN RT(1700835756666 1) q(0 -1 -1 -1) r(0 -1)

2103111368 | 2024-09-14T02:02:00.363637

8071 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

-2096652808 | 2024-10-05T00:32:36.160843

8081 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1620329124 | 2024-10-08T17:29:45.204771

8083 / tcp

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

819727972 | 2024-09-26T21:10:20.143455

8087 / tcp

SSH-2.0-OpenSSH_7.4

-1435414831 | 2024-09-27T01:02:05.445084

8092 / tcp

roku: ready\r\n

-1097188123 | 2024-10-10T01:15:18.185164

8096 / tcp

[g\xc2\x95N\x7f

676476721 | 2024-09-17T06:47:24.687933

8126 / tcp

ELM Enterprise Manager _l
Copyright © 18668511-928641920 TNT Software, Inc.

-1139539254 | 2024-09-25T20:52:39.866783

8139 / tcp

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

2087396567 | 2024-09-30T15:19:46.631206

8140 / tcp

kjnkjabhbanc283ubcsbhdc72

2087396567 | 2024-10-08T01:38:41.365172

8181 / tcp

kjnkjabhbanc283ubcsbhdc72

618338916 | 2024-10-03T05:33:19.412377

8200 / tcp

HTTP/1.1 302 Found
Connection: Keep-Alive
Transfer-Encoding: chunked
Keep-Alive: timeout=20
Location: /cgi-bin/luci/

-1230049476 | 2024-09-20T01:53:24.647497

8248 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

819727972 | 2024-09-23T10:24:02.889955

8282 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-10-06T01:05:16.824521

8291 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1723769361 | 2024-09-19T23:45:22.512745

8333 / tcp

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

819727972 | 2024-10-07T03:43:25.048469

8409 / tcp

SSH-2.0-OpenSSH_7.4

165188539 | 2024-09-12T04:36:28.346644

8410 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1032713145 | 2024-09-28T10:07:28.069581

8429 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-2031152423 | 2024-09-21T04:19:44.600765

8430 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

2051877625 | 2024-09-23T11:48:34.576818

8443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Mon, 23 Sep 2024 11:48:34 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://203.107.1.34:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

921225407 | 2024-09-20T10:00:00.376454

8448 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

1529351907 | 2024-10-10T23:35:19.304313

8500 / tcp

HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive

please add white ip *.*.*.*

-339084706 | 2024-10-06T21:00:39.533618

8545 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

-1598265216 | 2024-10-03T07:58:12.306063

8553 / tcp

@RSYNCD: 31.0

2087396567 | 2024-10-02T13:46:54.946630

8554 / tcp

kjnkjabhbanc283ubcsbhdc72

-2089734047 | 2024-09-18T20:56:41.691128

8575 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

819727972 | 2024-09-16T07:28:19.163935

8586 / tcp

SSH-2.0-OpenSSH_7.4

-1032713145 | 2024-09-11T09:08:57.479030

8590 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

119860953 | 2024-09-23T20:01:13.614547

8623 / tcp

* OK ArGoSoft Mail Server IMAP Module v.YW at

842535728 | 2024-10-07T15:03:44.389472

8649 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

819727972 | 2024-10-07T04:23:38.496623

8728 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2024-09-28T17:21:40.075599

8733 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-09-13T23:42:18.846164

8788 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-146605374 | 2024-09-24T13:39:47.999556

8789 / tcp

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

-585940771 | 2024-09-23T19:29:23.414445

8791 / tcp

Unknown command\r\n

1541211644 | 2024-10-08T00:10:29.854069

8814 / tcp

[\xc2\xba\x7fs\x7f

819727972 | 2024-10-08T20:52:11.171479

8822 / tcp

SSH-2.0-OpenSSH_7.4

632542934 | 2024-09-14T02:50:54.791920

8831 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1810987450 | 2024-09-29T06:15:46.075754

8834 / tcp

\xc3\xbf

-345718689 | 2024-09-11T12:37:35.080675

8835 / tcp

Vty password is not set.

-1399940268 | 2024-10-07T02:10:51.345876

8844 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1308377066 | 2024-10-06T18:28:20.220497

8845 / tcp

ncacn_http/1.0

-904840257 | 2024-09-24T13:29:40.889527

8850 / tcp

572 Relay not authorized\r\n

165188539 | 2024-09-16T00:26:07.341826

8854 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

819727972 | 2024-09-21T16:34:59.363639

8860 / tcp

SSH-2.0-OpenSSH_7.4

1911457608 | 2024-10-03T13:09:08.496430

8862 / tcp

\x00[\x00\x00\x00\x00\x00\x00

820958131 | 2024-09-15T03:19:24.019137

8869 / tcp

kjnkjabhbanc283ubcsbhdc72\x02

1763259671 | 2024-10-09T19:25:13.231488

8877 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

1308377066 | 2024-10-10T12:04:07.176587

8880 / tcp

ncacn_http/1.0

819727972 | 2024-09-23T10:10:10.845564

8889 / tcp

SSH-2.0-OpenSSH_7.4

632542934 | 2024-09-17T22:10:57.238799

8999 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-2067028711 | 2024-10-06T11:19:54.089320

9000 / tcp

\x15\x03\x01\x00\x02\x02F

-1026951088 | 2024-10-01T01:50:36.075210

9001 / tcp

erro ip

1741579575 | 2024-09-26T05:00:30.540070

9002 / tcp

1282941221 | 2024-09-11T22:50:48.309058

9010 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1381121983 | 2024-09-25T21:59:26.286813

9011 / tcp

Notify\r\n

-1399940268 | 2024-09-25T17:15:51.019266

9012 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2024-09-30T20:11:50.656233

9029 / tcp

\x00[\x00\x00\x00\x00\x00\x00

921225407 | 2024-09-26T07:07:52.581752

9032 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-1399940268 | 2024-10-08T03:35:47.124577

9039 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-09-29T11:20:30.659042

9042 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1316398834 | 2024-09-30T16:48:18.941533

9051 / tcp

ÿ

-1730858130 | 2024-09-15T19:18:16.459831

9091 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1723769361 | 2024-10-09T18:54:07.539896

9092 / tcp

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

841014058 | 2024-10-10T05:50:18.564430

9095 / tcp

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

-1399940268 | 2024-09-30T04:01:42.864891

9097 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2103111368 | 2024-10-01T12:33:46.765413

9100 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

201984321 | 2024-09-30T19:30:40.003160

9151 / tcp

ÿû
Welcome to NetLinx v94 Copyright AMX Corp. 34395-49007
>

-1810987450 | 2024-10-07T10:03:14.403082

9160 / tcp

\xc3\xbf

-1969169410 | 2024-09-12T13:28:19.326976

9191 / tcp

ÿû
-> GET / HTTP/1.0
GET / HTTP/1.0
undefined symbol: GET
-> 
->

-1399940268 | 2024-10-01T09:22:16.858567

9208 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2024-09-22T23:30:56.721076

9210 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-10-01T16:48:53.811146

9213 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-10-08T00:30:45.200188

9216 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

820958131 | 2024-09-21T05:04:44.535219

9217 / tcp

kjnkjabhbanc283ubcsbhdc72\x02

-339084706 | 2024-09-12T19:53:54.765198

9222 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

104385780 | 2024-09-12T03:36:36.295465

9295 / tcp

ceph v2

165188539 | 2024-10-05T00:19:25.705244

9300 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-805362002 | 2024-09-21T12:21:03.587451

9301 / tcp

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

165188539 | 2024-10-05T07:11:29.343134

9306 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1611764932 | 2024-09-26T02:56:50.085533

9398 / tcp

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

1909672637 | 2024-10-07T19:43:49.321972

9418 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff

1642597142 | 2024-09-28T18:56:25.753181

9530 / tcp

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

321971019 | 2024-10-07T21:34:25.398255

9600 / tcp

-ERR client ip is not in whitelist\r

104385780 | 2024-09-28T01:09:04.582280

9633 / tcp

ceph v2

-136006866 | 2024-10-04T14:19:19.522837

9761 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

1977569953 | 2024-09-19T12:17:47.379065

9876 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2987_PS-SHA-01Jtm19_12756-43634

1320285193 | 2024-09-16T06:03:31.106864

9898 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

-1839864261 | 2024-09-17T05:43:42.761059

9943 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25a5_PS-TNH-01Vm9154_3387-14536

921225407 | 2024-09-12T21:23:40.898297

9950 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

372433470 | 2024-10-09T17:17:53.389230

9998 / tcp

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

1161309183 | 2024-10-03T19:18:24.957450

9999 / tcp

ProxyServer is ready

-1036370807 | 2024-10-01T19:05:02.601840

10000 / tcp

JDWP-Handshake

-1327660293 | 2024-10-02T13:03:42.606881

10134 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-1136600457 | 2024-10-07T02:10:08.956855

10250 / tcp

HELO:10.3.6.0.false
AS:2048
HL:19

-331037443 | 2024-09-27T22:32:12.442635

10443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 27 Sep 2024 22:32:12 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://203.107.1.34:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

819727972 | 2024-10-02T21:43:22.014485

10554 / tcp

SSH-2.0-OpenSSH_7.4

-747911285 | 2024-09-27T23:32:12.690530

10909 / tcp

\xc2\xaa

165188539 | 2024-09-23T05:16:38.351998

11112 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

632542934 | 2024-10-04T21:03:04.441253

11210 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-136006866 | 2024-09-30T01:22:26.585931

11211 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

819727972 | 2024-10-10T08:46:38.453669

11300 / tcp

SSH-2.0-OpenSSH_7.4

-1461540015 | 2024-10-09T03:38:10.527904

12000 / tcp

audio 0 RTP/AVP 18 4 3 8 0 101
a

-1737707071 | 2024-09-19T14:01:32.159498

14147 / tcp

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

921225407 | 2024-10-09T06:15:07.326195

14265 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-314039103 | 2024-09-15T15:06:21.973130

16993 / tcp

Surnom.
Sorry, that nickname format is invalid.

-1810987450 | 2024-09-21T09:52:20.120588

17000 / tcp

\xc3\xbf

-1399940268 | 2024-09-13T21:45:20.093824

18081 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1019343788 | 2024-09-26T19:59:08.914023

18245 / tcp

W!\x00\x00\x00\x00

819727972 | 2024-09-17T13:01:44.125517

19000 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2024-09-18T18:08:16.413317

20256 / tcp

SSH-2.0-OpenSSH_7.4

-1013082686 | 2024-09-18T17:03:07.952481

20547 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

1370263973 | 2024-10-10T21:26:12.192188

20880 / tcp

dubbo>

474736340 | 2024-10-08T13:33:33.995621

21025 / tcp

431 Unable to negotiate secure command connection.

-1399940268 | 2024-10-10T08:57:10.105933

21379 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1681927087 | 2024-10-09T00:01:06.255570

23023 / tcp

kjnkjabhbanc283ubcsbhdc72

-984990168 | 2024-09-16T04:02:56.074238

23424 / tcp


0ÿñ

1830187220 | 2024-10-02T19:57:17.845686

25001 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

-1435414831 | 2024-10-02T14:27:29.380667

25565 / tcp

roku: ready\r\n

-1730858130 | 2024-09-30T19:20:16.866326

27015 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1763259671 | 2024-09-26T18:21:51.640304

27017 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

819727972 | 2024-10-01T05:00:23.076767

28015 / tcp

SSH-2.0-OpenSSH_7.4

-1508080900 | 2024-09-30T20:56:48.483277

30002 / tcp


0ÿñ

-2107996212 | 2024-09-30T15:17:54.982441

30003 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

1024374118 | 2024-10-10T14:26:33.218868

31337 / tcp

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

2087396567 | 2024-10-04T06:29:38.174979

32764 / tcp

kjnkjabhbanc283ubcsbhdc72

-249504111 | 2024-10-09T22:10:50.316913

35000 / tcp

\x00[xU-\x7f\x00\x00

339872247 | 2024-09-12T19:39:17.946120

39277 / tcp


0 ...

-1099385124 | 2024-10-04T21:26:39.911111

41800 / tcp

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

2054287019 | 2024-10-07T05:14:01.846977

44158 / tcp

\x13/multistream/1.0.0

-2017887953 | 2024-09-11T23:27:42.471308

44818 / tcp

SSH-2.0-OpenSSH_7.9

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-16905 11 moreCVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

104385780 | 2024-10-05T21:06:09.721983

50000 / tcp

ceph v2

-119996482 | 2024-10-04T00:02:29.227328

50050 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

-1681927087 | 2024-10-09T12:21:57.639337

50100 / tcp

kjnkjabhbanc283ubcsbhdc72

-1399940268 | 2024-10-05T21:48:46.505276

54138 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-904840257 | 2024-10-09T23:54:34.971166

55000 / tcp

572 Relay not authorized\r\n

-1559123399 | 2024-10-03T20:38:52.882725

55443 / tcp

500 Permission denied - closing connection.

1741579575 | 2024-09-29T14:59:27.124399

55553 / tcp

-971970408 | 2024-09-23T11:35:09.393181

60129 / tcp

-1189269828 | 2024-10-09T04:17:04.910047

61613 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1729629024 | 2024-09-26T08:27:07.217229

61616 / tcp

101 imqbroker =unV

-1113435755 | 2024-10-08T16:03:29.942266

62078 / tcp

/1.1 404 Not Found
Content Length: 0

203.107.1.34

Last Seen: 2024-10-10

Tags:

GeneralInformation

Vulnerabilities All ports Port 1515 Port 2570 Port 3001 Port 4064 Port 4434 Port 4949 Port 5025 Port 8087 Port 8282 Port 8409 Port 8586 Port 8728 Port 8822 Port 8860 Port 8889 Port 10554 Port 11300 Port 19000 Port 20256 Port 28015 Port 44818 Latest CVSS

OpenPorts

-1729629024 | 2024-10-10T06:20:34.469750 11 / tcp

2087396567 | 2024-10-07T21:37:38.944489 15 / tcp

-255236012 | 2024-10-10T05:30:08.703336 17 / tcp

-1746074029 | 2024-09-30T23:33:03.502918 19 / tcp

-731285715 | 2024-10-05T02:51:00.672172 21 / tcp

460589547 | 2024-10-10T03:46:33.756296 23 / tcp

-1795027372 | 2024-10-06T15:02:22.529213 24 / tcp

1282941221 | 2024-10-07T03:00:46.930062 25 / tcp

1288534451 | 2024-10-10T05:23:48.814055 37 / tcp

1155744004 | 2024-10-09T23:43:58.373551 53 / tcp

-1986594217 | 2024-09-26T09:46:45.427352 70 / tcp

-876294238 | 2024-10-10T03:43:32.342962 79 / tcp

1288157422 | 2024-10-08T13:15:27.454326 80 / tcp

-321444299 | 2024-09-14T07:06:29.176159 81 / tcp

-1032713145 | 2024-10-04T02:32:55.333483 102 / tcp

-1399940268 | 2024-10-02T05:07:34.809054 104 / tcp

-1681927087 | 2024-10-08T20:03:44.211675 111 / tcp

-1845554491 | 2024-10-01T21:19:49.827655 113 / tcp

141730637 | 2024-09-23T22:29:57.732818 119 / tcp

1623746877 | 2024-09-15T21:48:51.612019 122 / tcp

-646274631 | 2024-10-01T23:28:52.328571 135 / tcp

1991883981 | 2024-09-21T03:38:25.798125 175 / tcp

-399606100 | 2024-09-24T13:52:25.747532 179 / tcp

60948681 | 2024-10-03T04:46:55.282649 195 / tcp

-1399940268 | 2024-09-14T19:14:28.396213 221 / tcp

-1022036431 | 2024-09-18T20:13:48.789683 264 / tcp

676753056 | 2024-09-24T12:50:07.672023 311 / tcp

-1907080992 | 2024-10-02T21:37:47.666177 389 / tcp

1801635450 | 2024-10-02T21:44:26.588783 427 / tcp

1288157422 | 2024-10-05T22:39:56.025992 443 / tcp

-609061209 | 2024-10-10T01:04:17.155119 444 / tcp

-2046514463 | 2024-10-06T19:40:58.610325 448 / tcp

897328069 | 2024-09-21T00:08:32.728231 465 / tcp

-616720387 | 2024-10-08T07:27:15.530283 502 / tcp

-136006866 | 2024-09-29T13:57:21.816857 503 / tcp

-984990168 | 2024-10-09T16:43:09.562736 515 / tcp

-773160241 | 2024-10-03T20:26:32.003417 548 / tcp

285770450 | 2024-09-25T09:19:36.291370 554 / tcp

1308377066 | 2024-10-08T21:38:18.512892 593 / tcp

826560219 | 2024-10-06T14:17:23.100524 636 / tcp

1300162323 | 2024-09-29T13:23:22.407399 666 / tcp

-1399940268 | 2024-09-23T13:31:10.060994 771 / tcp

321971019 | 2024-10-10T17:48:23.541691 789 / tcp

1911457608 | 2024-10-09T14:29:31.003423 801 / tcp

-2004989248 | 2024-10-05T17:39:38.619718 843 / tcp

-1970692834 | 2024-09-29T18:20:29.775742 873 / tcp

-936692830 | 2024-09-14T02:33:10.010003 992 / tcp

-2031152423 | 2024-09-24T21:39:46.711303 993 / tcp

171352214 | 2024-09-27T09:53:37.709183 1023 / tcp

-1810987450 | 2024-09-25T04:45:51.462938 1025 / tcp

1909672637 | 2024-10-05T04:41:37.033898 1110 / tcp

-1399940268 | 2024-10-09T17:29:11.776943 1153 / tcp

1880683805 | 2024-10-09T01:00:49.551752 1177 / tcp

1850902677 | 2024-09-24T18:46:01.687024 1200 / tcp

1353260875 | 2024-09-25T14:55:42.896335 1234 / tcp

-1375131644 | 2024-10-04T01:31:13.267437 1337 / tcp

820958131 | 2024-10-03T05:27:47.687109 1414 / tcp

637263328 | 2024-09-23T11:55:41.413511 1433 / tcp

-1715152554 | 2024-09-24T20:47:16.363742 1443 / tcp

740837454 | 2024-09-23T03:40:15.217272 1515 / tcp

-541815454 | 2024-10-05T03:20:21.188568 1521 / tcp

745343730 | 2024-09-20T06:57:54.600688 1599 / tcp

-653033013 | 2024-09-30T04:33:31.697081 1604 / tcp

-1608241410 | 2024-09-16T09:13:24.790681 1723 / tcp

1911457608 | 2024-09-29T13:39:33.231467 1800 / tcp

1745717579 | 2024-09-22T12:07:39.796170 1801 / tcp

1208318993 | 2024-09-27T08:14:05.085940 1883 / tcp

-438503381 | 2024-10-02T13:01:32.805562 1911 / tcp

-971970408 | 2024-10-07T10:22:57.556410 1926 / tcp

639175818 | 2024-10-03T15:19:51.082876 1962 / tcp

-1399940268 | 2024-10-09T22:44:20.641951 1990 / tcp

677934968 | 2024-10-01T16:48:02.764717 2000 / tcp

-1641514916 | 2024-09-13T12:10:49.737020 2001 / tcp

-1609150592 | 2024-10-02T23:57:52.122825 2002 / tcp

Vulnerabilities

-1729629024 | 2024-10-10T06:20:34.469750
11 / tcp

2087396567 | 2024-10-07T21:37:38.944489
15 / tcp

-255236012 | 2024-10-10T05:30:08.703336
17 / tcp

-1746074029 | 2024-09-30T23:33:03.502918
19 / tcp

-731285715 | 2024-10-05T02:51:00.672172
21 / tcp

460589547 | 2024-10-10T03:46:33.756296
23 / tcp

-1795027372 | 2024-10-06T15:02:22.529213
24 / tcp

1282941221 | 2024-10-07T03:00:46.930062
25 / tcp

1288534451 | 2024-10-10T05:23:48.814055
37 / tcp

1155744004 | 2024-10-09T23:43:58.373551
53 / tcp

-1986594217 | 2024-09-26T09:46:45.427352
70 / tcp

-876294238 | 2024-10-10T03:43:32.342962
79 / tcp

1288157422 | 2024-10-08T13:15:27.454326
80 / tcp

-321444299 | 2024-09-14T07:06:29.176159
81 / tcp

-1032713145 | 2024-10-04T02:32:55.333483
102 / tcp

-1399940268 | 2024-10-02T05:07:34.809054
104 / tcp

-1681927087 | 2024-10-08T20:03:44.211675
111 / tcp

-1845554491 | 2024-10-01T21:19:49.827655
113 / tcp

141730637 | 2024-09-23T22:29:57.732818
119 / tcp

1623746877 | 2024-09-15T21:48:51.612019
122 / tcp

-646274631 | 2024-10-01T23:28:52.328571
135 / tcp

1991883981 | 2024-09-21T03:38:25.798125
175 / tcp

-399606100 | 2024-09-24T13:52:25.747532
179 / tcp

60948681 | 2024-10-03T04:46:55.282649
195 / tcp

-1399940268 | 2024-09-14T19:14:28.396213
221 / tcp

-1022036431 | 2024-09-18T20:13:48.789683
264 / tcp

676753056 | 2024-09-24T12:50:07.672023
311 / tcp

-1907080992 | 2024-10-02T21:37:47.666177
389 / tcp

1801635450 | 2024-10-02T21:44:26.588783
427 / tcp

1288157422 | 2024-10-05T22:39:56.025992
443 / tcp

-609061209 | 2024-10-10T01:04:17.155119
444 / tcp

-2046514463 | 2024-10-06T19:40:58.610325
448 / tcp

897328069 | 2024-09-21T00:08:32.728231
465 / tcp

-616720387 | 2024-10-08T07:27:15.530283
502 / tcp

-136006866 | 2024-09-29T13:57:21.816857
503 / tcp

-984990168 | 2024-10-09T16:43:09.562736
515 / tcp

-773160241 | 2024-10-03T20:26:32.003417
548 / tcp

285770450 | 2024-09-25T09:19:36.291370
554 / tcp

1308377066 | 2024-10-08T21:38:18.512892
593 / tcp

826560219 | 2024-10-06T14:17:23.100524
636 / tcp

1300162323 | 2024-09-29T13:23:22.407399
666 / tcp

-1399940268 | 2024-09-23T13:31:10.060994
771 / tcp

321971019 | 2024-10-10T17:48:23.541691
789 / tcp

1911457608 | 2024-10-09T14:29:31.003423
801 / tcp

-2004989248 | 2024-10-05T17:39:38.619718
843 / tcp

-1970692834 | 2024-09-29T18:20:29.775742
873 / tcp

-936692830 | 2024-09-14T02:33:10.010003
992 / tcp

-2031152423 | 2024-09-24T21:39:46.711303
993 / tcp

171352214 | 2024-09-27T09:53:37.709183
1023 / tcp

-1810987450 | 2024-09-25T04:45:51.462938
1025 / tcp

1909672637 | 2024-10-05T04:41:37.033898
1110 / tcp

-1399940268 | 2024-10-09T17:29:11.776943
1153 / tcp

1880683805 | 2024-10-09T01:00:49.551752
1177 / tcp

1850902677 | 2024-09-24T18:46:01.687024
1200 / tcp

1353260875 | 2024-09-25T14:55:42.896335
1234 / tcp

-1375131644 | 2024-10-04T01:31:13.267437
1337 / tcp

820958131 | 2024-10-03T05:27:47.687109
1414 / tcp

637263328 | 2024-09-23T11:55:41.413511
1433 / tcp

-1715152554 | 2024-09-24T20:47:16.363742
1443 / tcp

740837454 | 2024-09-23T03:40:15.217272
1515 / tcp

-541815454 | 2024-10-05T03:20:21.188568
1521 / tcp

745343730 | 2024-09-20T06:57:54.600688
1599 / tcp

-653033013 | 2024-09-30T04:33:31.697081
1604 / tcp

-1608241410 | 2024-09-16T09:13:24.790681
1723 / tcp

1911457608 | 2024-09-29T13:39:33.231467
1800 / tcp

1745717579 | 2024-09-22T12:07:39.796170
1801 / tcp

1208318993 | 2024-09-27T08:14:05.085940
1883 / tcp

-438503381 | 2024-10-02T13:01:32.805562
1911 / tcp

-971970408 | 2024-10-07T10:22:57.556410
1926 / tcp

639175818 | 2024-10-03T15:19:51.082876
1962 / tcp

-1399940268 | 2024-10-09T22:44:20.641951
1990 / tcp

677934968 | 2024-10-01T16:48:02.764717
2000 / tcp

-1641514916 | 2024-09-13T12:10:49.737020
2001 / tcp

-1609150592 | 2024-10-02T23:57:52.122825
2002 / tcp

945910976 | 2024-09-21T04:31:43.287220
2006 / tcp

-407828767 | 2024-10-07T11:52:10.241377
2008 / tcp

-2096652808 | 2024-09-30T22:09:24.799843
2054 / tcp

1991883981 | 2024-09-29T21:59:37.092458
2061 / tcp

1261582754 | 2024-10-10T10:49:18.404075
2067 / tcp