GeneralInformation

Country	China
City	Zhangjiakou
Organization	Hangzhou Alibaba Advertising Co.,Ltd.
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 17 21 37 43 53 70 79 89 94 99 102 104 111 119 122 135 175 179 195 199 221 234 243 263 264 285 311 340 389 427 444 503 513 515 548 554 556 587 593 636 771 789 831 873 992 993 995 1012 1023 1025 1080 1153 1177 1198 1234 1250 1355 1364 1414 1443 1452 1494 1515 1588 1599 1604 1723 1801 1830 1883 1926 1947 1958 1962 2000 2002 2003 2008 2055 2061 2062 2081 2083 2087 2100 2122 2154 2181 2201 2220 2222 2320 2323 2345 2375 2382 2404 2455 2480 2563 2628 2761 3001 3010 3050 3056 3057 3058 3064 3099 3101 3106 3117 3119 3124 3128 3130 3132 3141 3166 3174 3177 3197 3211 3221 3260 3268 3299 3306 3337 3388 3390 3401 3479 3523 3549 3551 3563 3780 3790 3922 3950 3951 3953 4000 4001 4043 4063 4100 4150 4200 4242 4250 4282 4321 4343 4369 4400 4433 4434 4436 4443 4500 4523 4550 4786 4840 4899 4911 4949 5001 5002 5006 5007 5009 5010 5022 5025 5070 5119 5150 5172 5201 5222 5236 5269 5270 5400 5432 5433 5435 5494 5495 5599 5602 5672 5678 5696 5858 5912 5916 5938 5984 5986 5987 5988 5999 6001 6002 6007 6352 6440 6443 6505 6653 6666 6667 6668 6697 7001 7011 7071 7100 7171 7218 7415 7433 7434 7443 7548 7603 7634 7687 7773 7780 7788 7999 8009 8026 8033 8050 8053 8054 8072 8081 8083 8085 8087 8089 8115 8128 8139 8140 8157 8160 8164 8170 8178 8181 8200 8230 8236 8237 8249 8300 8322 8407 8408 8444 8448 8457 8470 8484 8500 8531 8533 8553 8554 8556 8561 8575 8593 8596 8600 8602 8607 8622 8649 8680 8686 8767 8784 8805 8809 8816 8818 8822 8823 8832 8835 8838 8842 8846 8855 8859 8871 8874 8880 8889 8989 8991 8993 8999 9000 9001 9002 9012 9014 9025 9029 9030 9032 9038 9043 9050 9051 9052 9058 9068 9082 9091 9092 9099 9100 9108 9139 9141 9143 9146 9151 9155 9160 9164 9173 9176 9179 9184 9197 9200 9203 9217 9306 9333 9398 9399 9443 9530 9600 9633 9754 9779 9810 9876 9898 9908 9943 9994 9998 9999 10021 10039 10048 10052 10071 10090 10093 10134 10250 10397 10443 10554 10911 11000 11110 11112 11210 11211 11288 11300 12000 12084 12110 12122 12138 12139 12146 12152 12158 12166 12176 12187 12188 12189 12196 12206 12211 12221 12252 12299 12345 12393 12434 12450 12460 12503 12526 12530 12566 12569 12570 12572 12574 13228 14147 14265 14344 14400 14443 14895 14896 16001 16025 16032 16070 16078 16097 16667 17000 17184 17776 17779 18041 18045 18058 18069 18081 18182 18245 18368 18556 19000 19013 20000 20001 20010 20018 20110 20151 20202 20256 20512 20547 20880 21025 21081 21238 21251 21252 21267 21273 21274 21294 21304 21323 21327 21400 22345 22380 22556 22703 23023 23424 24472 25001 25002 25565 25782 27015 27017 28001 30000 30002 30003 30501 31337 32001 32764 33060 33333 35000 35554 41800 42420 43009 44309 44420 44818 45555 45622 46222 46422 46522 46622 46722 46822 47122 47222 47622 47722 47990 48022 48122 49122 49522 49622 49822 49922 50000 50001 50005 50100 50102 50107 50122 50422 50522 50722 50922 51122 51235 51294 51434 51522 51822 51922 52322 52422 52522 52722 53122 53222 53322 53522 54138 54322 54422 54522 54622 55000 55022 55222 55322 55443 55522 55553 55554 55622 56122 56322 56622 56722 56922 57122 57222 57322 57787 57922 58622 58722 59022 59922 60022 60129 61616 62078 63045 63210 63256 63260 64295 65004

11 / tcp

-1730858130 | 2025-01-14T00:19:59.698508

RFB 003.008
VNC:
  Protocol Version: 3.8

13 / tcp

-1296032851 | 2024-12-30T02:29:23.970844

\x01=\x01À\x06ÿÿ?"<ZDECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x01\x01

15 / tcp

-952165951 | 2025-01-13T20:44:14.129218

AB

17 / tcp

1662811133 | 2025-01-19T16:21:01.356130

MudNames 77 - (C) 1997-2001 Ragnar Hojland Espinosa <ragnar@ragnar-hojland.com>

21 / tcp

2116898107 | 2025-01-26T11:17:10.401131

220 (vsFTPd 3.0.2)

37 / tcp

1472866667 | 2025-01-20T10:12:34.975052

AB\\x01\t

43 / tcp

-358801646 | 2025-01-24T20:13:50.811800

SSH-2.0-OpenSSH_6.6.1

53 / tcp

698891913 | 2025-01-08T05:04:43.294443

9\n\\x81\\x80\\x00\\x01\\x00\\x02\\x00\\x00\\x00\\x00\\x08clients1\\x06google\\x03com\\x00\\x00\\x01\\x00\\x01\\xc0\x0c\\x00\\x05\\x00\\x01\\x00\\x00\\x00G\\x00\\x16\\x07clients\\x01l\\x06google\\x03com\\x00\\xc01\\x00\\x01\\x00\\x01\\x00\\x00\\x00\\x85\\x00\\x04\\x8e\\xfb+\\x0e\n\\x00\\x06\\x85\\x80\\x00\\x01\\x00\\x01\\x00\\x00\\x00\\x00\\x07version\\x04bind\\x00\\x00\\x10\\x00\\x03\\xc0\x0c\\x00\\x10\\x00\\x03\\x00\\x00\\x00\\x00\\x00\t\\x08dnsmasq-

70 / tcp

857710896 | 2025-01-25T13:57:21.326014

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Mon, 27 Nov 2023 21:45:42 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

79 / tcp

-972699072 | 2025-01-24T00:09:02.375653

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

CVE-2018-10088

89 / tcp

2063598737 | 2025-01-11T03:57:55.514083

/0 0 L\r\n/0 0 HUH\r\n

94 / tcp

-1399940268 | 2025-01-12T14:18:44.726306

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

99 / tcp

1713556628 | 2025-01-11T19:37:30.169643

HTTP/1.1 400 Bad Request
Server: Jdcloud-FE
Content-Type: text/html
Connection: keep-alive
Keep-Alive: timeout=20

102 / tcp

1989907056 | 2025-01-17T22:20:45.361288

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

104 / tcp

165188539 | 2025-01-24T12:33:09.077725

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

111 / tcp

1187188851 | 2025-01-24T22:21:15.010064

Portmap
Program	Version	Protocol	Port

119 / tcp

141730637 | 2025-01-04T19:59:01.659264

HTTP/1.0 200 OK
Server: Proxy

122 / tcp

1543809371 | 2025-01-19T09:33:29.963568

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

135 / tcp

1302177452 | 2025-01-21T20:23:07.549337

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: Lou\n IP2: 192.168.5.66\n IP3: 240e:381:1b0a:900:40eb:cce6:2dc1:4045\n IP4: 240e:381:1b0a:900:504f:3a1f:a682:9ab5\n IP5: 240e:381:1b0a:900::2e6\n\nNTLMSSP:\nTarget_Name: LOU\nProduct_Version: 10.0.22621 Ntlm 15\nOS: Windows 11, Version 22H2\nNetBIOS_Domain_Name: LOU\nNetBIOS_Computer_Name: LOU\nDNS_Domain_Name: Lou\nDNS_Computer_Name: Lou\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 04:06:53 +0000 UTC\n\nDCE

175 / tcp

1396488228 | 2025-01-18T19:52:13.994138

HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html

179 / tcp

-399606100 | 2024-12-31T11:44:35.283604

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

195 / tcp

2087396567 | 2025-01-26T11:34:46.490400

kjnkjabhbanc283ubcsbhdc72

199 / tcp

1726594447 | 2025-01-21T10:54:45.367594

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

221 / tcp

-1810987450 | 2025-01-03T03:22:45.316643

\xc3\xbf

234 / tcp

1011407350 | 2025-01-15T15:47:22.993120

* OK GroupWise IMAP4rev1 Server Ready\r\n

243 / tcp

722711397 | 2025-01-22T02:12:50.755858

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

263 / tcp

819727972 | 2025-01-01T15:59:24.171051

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

264 / tcp

-1547821026 | 2025-01-10T10:06:02.482785

CheckPoint\nFirewall Host: CPFWVSX1A_Audi_ODP_S2S_vsfw\nSmartCenter Host: admin..afx8nn\\x00\n

285 / tcp

-1399940268 | 2025-01-14T10:40:17.218013

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

311 / tcp

-1547976805 | 2024-12-31T19:59:01.990152

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

340 / tcp

-444830029 | 2025-01-20T21:50:41.084310

HTTP/1.1 401 Unauthorized
Server: xhmmhttpsv130-20200310
Cache-Control: no-cache,no-store
Content-Type: text/html; charset=%s
Connection: close

389 / tcp

-1743283776 | 2025-01-20T15:46:04.784851

0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x04\\x04

427 / tcp

-349937125 | 2025-01-23T12:38:42.216718

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://192.168.118.88\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\nservice:wbem:https\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://192.168.118.88\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCE

444 / tcp

337692160 | 2025-01-25T23:52:26.965226

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Sat, 25 Jan 2025 23:52:26 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

503 / tcp

-2140303521 | 2025-01-27T15:07:06.131130

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

513 / tcp

-1399940268 | 2025-01-24T03:32:59.613687

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

515 / tcp

819727972 | 2025-01-28T16:56:47.062579

SSH-2.0-OpenSSH_7.4

548 / tcp

1801869778 | 2025-01-16T06:13:34.656232

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: DS1019Plus\nMachine Type: \rNetatalk3.1.8\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: Cleartxt Passwrd\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

554 / tcp

285770450 | 2025-01-19T21:12:00.488176

RTSP/1.0 401 Unauthorized
CSeq: 1

556 / tcp

921225407 | 2025-01-27T09:01:22.749996

\x00\x00\x00\x04\x00\x00\x00\x00\x00

587 / tcp

-1890071674 | 2025-01-05T11:02:12.431780

220 JH0PR01CA0066.outlook.office365.com Microsoft ESMTP MAIL Service ready at Mon, 22 Jan 2024 06:32:01 +0000\r\n250-JH0PR01CA0066.outlook.office365.com Hello [*.*.*.*]\r\n250-SIZE 157286400\r\n250-PIPELINING\r\n250-DSN\r\n250-ENHANCEDSTATUSCODES\r\n250-STARTTLS\r\n250-8BITMIME\r\n250-BINARYMIME\r\n250-CHUNKING\r\n250 SMTPUTF8\r\n214-This server supports the following commands:\r\n214 HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT\r\n

593 / tcp

-1261053701 | 2025-01-25T16:23:35.452083

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

636 / tcp

-779815868 | 2025-01-11T03:01:18.148607

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 3-22247063-0 0NNN RT(1705912086824 114) q(-1 -1 -1 -1) r(0 -1) b1

771 / tcp

-1399940268 | 2025-01-01T13:50:07.450755

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

789 / tcp

1975288991 | 2025-01-21T13:45:44.545301

OPTI

831 / tcp

-1399940268 | 2025-01-20T20:13:55.202470

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

873 / tcp

-1970692834 | 2025-01-10T12:44:49.164484

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

992 / tcp

-1835475271 | 2025-01-25T07:39:24.471867

200 NOD32SS 99 (3318497116)\r\n

993 / tcp

1911457608 | 2025-01-06T17:28:06.560575

\x00[\x00\x00\x00\x00\x00\x00

995 / tcp

-1199842642 | 2025-01-18T07:39:56.056498

+OK Welcome to RaidenMAILD POP3 SSL service v4902, Mon, 22 Jan 2024 14:24:46 +0800, (C)2001-2023 <1044592421@raidenmaild>\r\n

1012 / tcp

-1399940268 | 2025-01-25T00:14:51.829207

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1023 / tcp

-756825518 | 2025-01-28T00:24:11.918575

¥A,LConnectx57222

1025 / tcp

-1399940268 | 2025-01-19T10:46:41.937879

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1080 / tcp

1362344524 | 2025-01-26T16:44:59.197274

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1153 / tcp

-142686627 | 2025-01-15T21:29:35.342946

\x00[\xc2\xba\x7fs\x7f\x00\x00

1177 / tcp

599074451 | 2025-01-10T02:52:59.366736

msg

1198 / tcp

913379549 | 2025-01-11T20:33:09.103048

HTTP/1.1 200 OK
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Server: tydcdn

1234 / tcp

1911457608 | 2025-01-15T17:50:10.978958

\x00[\x00\x00\x00\x00\x00\x00

1250 / tcp

1615193817 | 2025-01-26T11:57:10.767098

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

1355 / tcp

1632932802 | 2025-01-07T01:06:43.481445

1364 / tcp

-2046514463 | 2025-01-14T05:53:50.469523

AB\x01\t

1414 / tcp

632542934 | 2025-01-27T01:29:57.638809

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1443 / tcp

-1715152554 | 2025-01-23T08:01:31.485658

Hashes

hash

758522643

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Thu, 23 Jan 2025 08:01:31 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://203.119.146.72:443/

1452 / tcp

-1399940268 | 2025-01-24T11:48:33.556061

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1494 / tcp

-1049213899 | 2025-01-23T01:44:10.305232

\\x7f\\x7fICA

1515 / tcp

-786044033 | 2025-01-15T15:24:43.832513

OK Welcome <299685> on DirectUpdate server 7286

1588 / tcp

-1261090339 | 2025-01-18T19:01:55.523998

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

1599 / tcp

2087396567 | 2025-01-15T01:09:51.266034

kjnkjabhbanc283ubcsbhdc72

1604 / tcp

-222277909 | 2025-01-21T18:35:04.936523

0@@

1723 / tcp

-1608241410 | 2025-01-24T12:30:01.981940

Firmware: 1\nHostname: local\nVendor: linux\n

1801 / tcp

1692069329 | 2025-01-13T05:52:36.095352

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xe14\\xf0\\xb6\\xb85\x0bB\\x86\\x99B\\xa5\\x07\\xb0\\xf6V92d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1830 / tcp

165188539 | 2025-01-12T08:34:19.168777

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1883 / tcp

1911457608 | 2025-01-21T07:52:23.357528

\x00[\x00\x00\x00\x00\x00\x00

1926 / tcp

2087396567 | 2025-01-25T17:18:50.644370

kjnkjabhbanc283ubcsbhdc72

1947 / tcp

-130294253 | 2025-01-07T05:33:51.716546

HTTP/1.1 401 Unauthorized
Content-Type: text/html
Server: Microsoft-IIS
X-Powered-By: ASP.NET

HTTP NTLM Info:
Target_Name: PSH
Product_Version: 10.0.14393 Ntlm 15
OS: Windows 10, Version 1607/Windows Server 2016, Version 1607
NetBIOS_Domain_Name: PSH
NetBIOS_Computer_Name: PSH-VPN-02V
DNS_Domain_Name: PSH.CORP.PEGATRON
DNS_Computer_Name: PSH-VPN-02V.PSH.CORP.PEGATRON
MsvAvDnsTreeName: CORP.PEGATRON
System_Time: 2024-01-22 05:36:42 +0000 UTC

1958 / tcp

1911457608 | 2025-01-26T05:50:57.161656

\x00[\x00\x00\x00\x00\x00\x00

1962 / tcp

1161309183 | 2025-01-27T15:25:19.103799

ProxyServer is ready

2000 / tcp

-1036370807 | 2025-01-13T05:28:58.891669

JDWP-Handshake

2002 / tcp

-1681927087 | 2025-01-12T18:57:14.632712

kjnkjabhbanc283ubcsbhdc72

2003 / tcp

380146262 | 2025-01-26T02:56:05.005166

@RSYNCD: 30.0

2008 / tcp

-905685638 | 2025-01-26T11:28:39.442920

bxz437

2055 / tcp

921225407 | 2025-01-21T01:58:50.214127

\x00\x00\x00\x04\x00\x00\x00\x00\x00

2061 / tcp

-1036370807 | 2025-01-08T19:51:44.420598

JDWP-Handshake

2062 / tcp

580340387 | 2025-01-05T22:02:17.338112

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

2081 / tcp

2121220663 | 2025-01-11T01:38:36.959184

SSH-58-Ingrian_SSH\r\n

2083 / tcp

-971970408 | 2025-01-26T08:24:00.325909

2087 / tcp

-1373613804 | 2025-01-24T03:49:28.977338

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

2100 / tcp

-1399940268 | 2025-01-16T18:50:38.144123

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2122 / tcp

-1626979812 | 2025-01-23T13:16:20.804359

220 Service ready for new user.

2154 / tcp

1842524259 | 2025-01-10T14:46:15.464476

2181 / tcp

546151771 | 2025-01-14T10:35:08.610823

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2201 / tcp

-358801646 | 2025-01-04T07:50:48.558423

SSH-2.0-OpenSSH_6.6.1

2220 / tcp

1911457608 | 2025-01-08T19:25:21.451623

\x00[\x00\x00\x00\x00\x00\x00

2222 / tcp

372433470 | 2025-01-26T13:00:13.973817

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

2320 / tcp

819727972 | 2025-01-09T23:20:05.630514

SSH-2.0-OpenSSH_7.4

2323 / tcp

1662205251 | 2025-01-28T16:41:45.619730

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

2345 / tcp

103159425 | 2025-01-25T00:29:30.487601

SSH-1.99-RGOS_SSH

2375 / tcp

-2118655245 | 2025-01-27T03:09:31.110332

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

2382 / tcp

-375604792 | 2025-01-05T02:12:00.042705

220 Microsoft FTP Service

2404 / tcp

1911457608 | 2025-01-26T13:57:59.456674

\x00[\x00\x00\x00\x00\x00\x00

2455 / tcp

2087396567 | 2025-01-28T08:18:57.200783

kjnkjabhbanc283ubcsbhdc72

2480 / tcp

0 | 2025-01-20T19:06:24.081224

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

2563 / tcp

-136006866 | 2025-01-10T23:33:43.464406

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

2628 / tcp

677934968 | 2025-01-27T23:36:16.773443

lm^)Q

2761 / tcp

819727972 | 2024-12-29T23:14:22.352934

SSH-2.0-OpenSSH_7.4

3001 / tcp

2087396567 | 2025-01-20T12:13:55.373631

kjnkjabhbanc283ubcsbhdc72

3010 / tcp

1308377066 | 2025-01-15T17:57:29.933021

ncacn_http/1.0

3050 / tcp

-1114821551 | 2025-01-27T11:38:32.491847

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

3056 / tcp

1911457608 | 2025-01-26T11:41:53.169753

\x00[\x00\x00\x00\x00\x00\x00

3057 / tcp

819727972 | 2025-01-11T02:26:33.642041

SSH-2.0-OpenSSH_7.4

3058 / tcp

1996932384 | 2025-01-27T06:27:31.167588

"raop" nonce

3064 / tcp

-1399940268 | 2025-01-27T10:24:01.582055

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3099 / tcp

-1733645023 | 2025-01-09T20:33:16.839180

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

3101 / tcp

-2107996212 | 2025-01-12T22:57:45.403127

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

3106 / tcp

-1611764932 | 2024-12-31T22:14:06.514145

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

3117 / tcp

-122096153 | 2025-01-20T08:57:28.544875

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

3119 / tcp

1911457608 | 2025-01-22T22:16:22.311051

\x00[\x00\x00\x00\x00\x00\x00

3124 / tcp

-1730858130 | 2025-01-18T01:39:56.385010

RFB 003.008
VNC:
  Protocol Version: 3.8

3128 / tcp

1320285193 | 2025-01-17T01:46:36.201731

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

3130 / tcp

-1327660293 | 2025-01-16T21:34:20.785592

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3132 / tcp

1767345577 | 2025-01-16T16:54:24.631360

Hello, this is Quagga (version 0T).
Copyright 1996-200

3141 / tcp

165188539 | 2025-01-11T23:48:57.007872

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3166 / tcp

669849225 | 2025-01-12T11:21:12.474454

SSH-98.60-SysaxSSH_81885..42\r\n

3174 / tcp

-1947777893 | 2025-01-18T15:22:08.915841

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

3177 / tcp

-1297953727 | 2025-01-20T08:01:01.488464

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

3197 / tcp

-1399940268 | 2025-01-09T19:08:38.664718

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3211 / tcp

2088483773 | 2025-01-16T18:16:52.875674

HTTP/1.1 500 Internal Server Error
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3221 / tcp

-2019309480 | 2025-01-17T18:50:00.087564

<?xml version="1.0" encoding="us-ascii"?>\n

3260 / tcp

-862070606 | 2025-01-21T08:48:50.873057

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n

3268 / tcp

921482974 | 2025-01-22T17:48:53.690666

HTTP/1.1 301 Moved Permanently
Location: /web/index.html
Server: HTTPD
Connection: close
Content-Type: text/html

3299 / tcp

2087396567 | 2025-01-27T04:29:11.759767

kjnkjabhbanc283ubcsbhdc72

3306 / tcp

1000685185 | 2025-01-27T01:52:25.676012

Mysql Version: 5.7.44-log \r\nN\\x00\\x00\\x00\n5.7.44-log\\x00r/\\x06\\x00u1Z3=}L\\x04\\x00\\xff\\xff-\\x02\\x00\\xff\\xc1\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00tKb,\\x0eS\\x19\\x7fD\\x15rQ\\x00mysql_native_password\\x00

3337 / tcp

580340387 | 2025-01-17T20:25:27.934162

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

3388 / tcp

408230060 | 2025-01-24T16:21:52.784344

\r\nSorry, that nickname format is invalid.\r\n

3390 / tcp

-1399940268 | 2025-01-19T22:30:02.494780

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3401 / tcp

707919486 | 2025-01-08T09:04:47.710668

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

3479 / tcp

-1399940268 | 2025-01-19T23:17:09.265299

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3523 / tcp

1911457608 | 2025-01-06T06:08:21.487063

\x00[\x00\x00\x00\x00\x00\x00

3549 / tcp

1975288991 | 2025-01-03T11:34:39.614876

OPTI

3551 / tcp

198844676 | 2025-01-10T02:06:20.464484

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3563 / tcp

1282941221 | 2025-01-19T04:45:53.989609

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

3780 / tcp

-1999117212 | 2024-12-31T23:55:08.243374

3790 / tcp

1541211644 | 2025-01-24T11:15:40.548374

[\xc2\xba\x7fs\x7f

3922 / tcp

321971019 | 2024-12-31T06:33:18.326433

-ERR client ip is not in whitelist\r

3950 / tcp

1911457608 | 2025-01-01T18:17:35.793917

\x00[\x00\x00\x00\x00\x00\x00

3951 / tcp

-1327660293 | 2025-01-03T05:51:56.852500

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3953 / tcp

819727972 | 2025-01-03T21:52:30.030988

SSH-2.0-OpenSSH_7.4

4000 / tcp

-1960639992 | 2025-01-06T22:25:24.239151

HTTP/1.1 401 Unauthorized

4001 / tcp

117101543 | 2025-01-22T10:28:52.318134

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

4043 / tcp

1911457608 | 2025-01-15T06:04:58.286459

\x00[\x00\x00\x00\x00\x00\x00

4063 / tcp

2087396567 | 2025-01-21T19:50:47.724686

kjnkjabhbanc283ubcsbhdc72

4100 / tcp

1332894250 | 2025-01-26T19:56:45.600143

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

4150 / tcp

-1399940268 | 2025-01-28T18:11:14.958420

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4200 / tcp

-345718689 | 2025-01-27T05:06:11.035487

Vty password is not set.

4242 / tcp

302222687 | 2025-01-27T19:52:52.300332

HTTP/1.1 301 Moved Permanently
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close

4250 / tcp

-1399940268 | 2025-01-12T19:31:13.447451

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4282 / tcp

539065883 | 2025-01-08T19:15:03.282424

4321 / tcp

-1250504565 | 2025-01-27T19:37:00.624901

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

4343 / tcp

304069997 | 2025-01-25T08:17:10.771352

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae23c0_hyd56_32143-35382

4369 / tcp

1996932384 | 2025-01-26T08:34:41.490158

"raop" nonce

4400 / tcp

897328069 | 2025-01-24T15:41:30.778989

220 mail.scott000.com ESMTP

4433 / tcp

-1032713145 | 2024-12-30T15:27:01.464327

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

4434 / tcp

707919486 | 2025-01-24T01:09:31.513239

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

4436 / tcp

-1399940268 | 2025-01-23T21:18:38.706027

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4443 / tcp

2069201278 | 2025-01-27T23:33:47.785405

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Set-Cookie: login_err_num=0; path=/; secure=true;  httponly=true
Set-Cookie: topsecsvportalstyle=style1; path=/; secure=true;  httponly=true
Set-Cookie: topsecsvportallogodir=default; path=/; secure=true;  httponly=true
Set-Cookie: topsecsvportalname=default; path=/; secure=true;  httponly=true
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-XSS-Protectio

4500 / tcp

1830187220 | 2025-01-28T15:58:20.632269

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

4523 / tcp

2103111368 | 2025-01-04T00:16:28.023058

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

4550 / tcp

-271515508 | 2025-01-27T10:12:42.543089

HTTP/1.1 302 Moved Temporarily
Server: DrcomServer1.0
Location: http://192.168.254.3
Cache-Control: no-cache
Connection: close

4786 / tcp

-1059554316 | 2025-01-16T03:43:32.963622

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

4840 / tcp

1723769361 | 2025-01-10T00:31:36.756216

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

4899 / tcp

1880683805 | 2025-01-20T18:29:22.392693

ÿ

4911 / tcp

-1399940268 | 2025-01-17T00:10:25.052991

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4949 / tcp

819727972 | 2025-01-17T11:29:20.318143

SSH-2.0-OpenSSH_7.4

5001 / tcp

1741579575 | 2025-01-28T09:22:13.055555

5002 / tcp

114471724 | 2025-01-10T10:37:06.996210

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

5006 / tcp

1741579575 | 2025-01-24T03:26:53.053805

5007 / tcp

-2089734047 | 2025-01-20T18:32:58.459786

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5009 / tcp

-1413918021 | 2025-01-03T00:51:26.253335

acpp\\x00\\x03\\x00\\x01E\\xe2\\x05\\x98\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xff\\xff\\xff\\xf0\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00

5010 / tcp

1332894250 | 2025-01-20T22:54:18.821486

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

5022 / tcp

-1641514916 | 2025-01-12T22:17:04.147059

* OK Merak 1dFUa2 IMAP4rev1

5025 / tcp

1690634669 | 2025-01-15T05:40:11.423845

5070 / tcp

-2089734047 | 2025-01-13T18:39:18.482452

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5119 / tcp

-1399940268 | 2025-01-27T22:51:48.138500

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5150 / tcp

165188539 | 2025-01-18T17:44:27.731055

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

5172 / tcp

1261582754 | 2025-01-05T05:35:00.643296

unknown command 
unknown command

5201 / tcp

398077695 | 2025-01-16T08:08:52.736013

5222 / tcp

1842524259 | 2025-01-08T13:44:39.638138

5236 / tcp

-1375131644 | 2025-01-25T17:23:01.707198

\x00[v\xc3\xbdC\x7f\x00\x00

5269 / tcp

-1854630806 | 2025-01-20T05:42:20.317282

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705937491.237-w-waf01tjgt

5270 / tcp

410249975 | 2025-01-15T14:05:20.960963

LNS READY<>

5400 / tcp

1353260875 | 2025-01-03T09:01:06.623240

\x00[g\xc2\x95N\x7f\x00\x00

5432 / tcp

165188539 | 2025-01-17T04:38:59.672008

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

5433 / tcp

-1399940268 | 2025-01-19T01:50:57.627491

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5435 / tcp

165188539 | 2024-12-31T09:47:44.736675

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

5494 / tcp

51259122 | 2025-01-23T09:25:12.617050

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

5495 / tcp

-1626979812 | 2025-01-14T15:37:13.487021

220 Service ready for new user.

5599 / tcp

307999478 | 2025-01-19T22:03:11.550328

unknown command \r\nunknown command \r\n

5602 / tcp

819727972 | 2025-01-12T08:17:57.428105

SSH-2.0-OpenSSH_7.4

5672 / tcp

575925250 | 2025-01-12T06:16:58.616320

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5678 / tcp

372433470 | 2025-01-09T15:41:52.001707

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

5696 / tcp

632542934 | 2025-01-18T19:42:39.534397

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

5858 / tcp

-952165951 | 2025-01-18T21:52:42.182231

AB

5912 / tcp

-303199180 | 2025-01-26T07:45:48.068274

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

5916 / tcp

1911457608 | 2025-01-10T23:32:37.145579

\x00[\x00\x00\x00\x00\x00\x00

5938 / tcp

1911457608 | 2025-01-15T15:37:33.124361

\x00[\x00\x00\x00\x00\x00\x00

5984 / tcp

1999272906 | 2025-01-13T20:51:31.549587

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

-2031152423 | 2024-12-31T21:46:28.364945

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

5987 / tcp

396974173 | 2025-01-19T21:24:44.620941

SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u2\r\n\n

5988 / tcp

1308377066 | 2025-01-12T05:37:41.369788

ncacn_http/1.0

5999 / tcp

1363464823 | 2025-01-27T20:10:06.671995

\x00[|ox\x7f\x00\x00

6001 / tcp

819727972 | 2025-01-09T06:29:30.806090

SSH-2.0-OpenSSH_7.4

6002 / tcp

1308377066 | 2025-01-23T18:32:27.177434

ncacn_http/1.0

6007 / tcp

669849225 | 2025-01-15T20:04:48.563711

SSH-98.60-SysaxSSH_81885..42\r\n

6352 / tcp

-2096652808 | 2025-01-12T06:08:29.310359

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

6440 / tcp

-1399940268 | 2025-01-14T04:21:48.623472

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6443 / tcp

0 | 2025-01-22T22:25:47.362626

Hashes

hash

79411264

http.dom_hash

http.html_hash

http.server_hash

1673621694

HTTP/1.1 200 OK
Date: Wed, 22 Jan 2025 22:25:47 GMT
Content-Type: application/json
Content-Length: 2123
Connection: keep-alive
Ali-Swift-Global-Savetime: 1737584747
Eagleeye-Traceid: cffd62c113a9e367154d11da32
Eagleid: cffd62c113a9e367154d11da32
S_group: tao-session
S_ip: d58a3ca6829dd01219dd16ffce99caa2
S_status: STATUS_SYS_ERR
S_tag: 271371712556644|579780078^|^^
S_tid: cffd62c113a9e367154d11da32
S_ucode: CN:CENTER
S_v: 2.0.5.2
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://cloud.cainiao.com
Ufe-Result: A8
Via: live33.62live9[403,469,386-0,M], live98.live94[695,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Wed, 22 Jan 2025 22:25:47 GMT

6505 / tcp

-1835475271 | 2025-01-14T19:18:29.990644

200 NOD32SS 99 (3318497116)\r\n

6653 / tcp

971933601 | 2025-01-19T22:31:07.305117

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

6666 / tcp

4935895 | 2025-01-25T07:19:12.600729

HTTP/1.1 400 Bad Request
Server: CloudWAF

6667 / tcp

2098371729 | 2025-01-27T08:12:48.756491

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

6668 / tcp

-826610984 | 2025-01-25T22:38:39.427180

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 602
Connect-To: https://member.aliyun.com/unshift-flush/object-trigger/jobs/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div id="other"></

6697 / tcp

1504401647 | 2025-01-26T11:41:49.473171

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

7001 / tcp

265065882 | 2025-01-25T00:44:19.533410

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked

7011 / tcp

-653033013 | 2025-01-22T19:54:38.236450

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

7071 / tcp

-2096652808 | 2025-01-02T11:50:04.103109

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

7100 / tcp

1138325193 | 2025-01-22T19:37:42.511996

HTTP/1.1 400 Bad Request

7171 / tcp

921225407 | 2025-01-27T23:46:44.214800

\x00\x00\x00\x04\x00\x00\x00\x00\x00

7218 / tcp

1208318993 | 2025-01-13T15:41:23.596559

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

7415 / tcp

-1476017887 | 2025-01-28T08:58:17.963296

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

7433 / tcp

-1453516345 | 2025-01-09T15:28:14.197849

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

7434 / tcp

599074451 | 2025-01-26T22:47:22.756221

msg

7443 / tcp

1612309769 | 2025-01-08T20:51:39.304387

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28e1_CS-000-01SZh112_7344-42222

7548 / tcp

-971970408 | 2025-01-02T04:37:26.033766

7603 / tcp

-2089734047 | 2025-01-16T05:40:40.292097

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

7634 / tcp

1308377066 | 2025-01-09T04:04:49.678172

ncacn_http/1.0

7687 / tcp

-1399940268 | 2025-01-24T16:06:48.243958

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7773 / tcp

-903067560 | 2025-01-15T16:06:35.271520

\x00[\x13)\xc2\x81\x7f\x00\x00

7780 / tcp

-1733106930 | 2025-01-20T19:47:16.270174

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

7788 / tcp

-441419608 | 2025-01-19T15:03:21.063582

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

7999 / tcp

-1259524839 | 2025-01-25T13:54:47.067964

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

8009 / tcp

291723434 | 2025-01-28T20:15:59.161378


Lantronix MSS100 Version V118/523(045538937)

Type HELP at the 'Local_61349> ' prompt for assistance.



Username>

8026 / tcp

669849225 | 2025-01-08T19:27:40.327927

SSH-98.60-SysaxSSH_81885..42\r\n

8033 / tcp

819727972 | 2025-01-18T14:49:40.878307

SSH-2.0-OpenSSH_7.4

8050 / tcp

-407828767 | 2025-01-27T23:08:14.789589

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

8053 / tcp

-1730858130 | 2025-01-19T07:30:36.571025

RFB 003.008
VNC:
  Protocol Version: 3.8

8054 / tcp

-1399940268 | 2025-01-08T20:54:32.089619

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8072 / tcp

819727972 | 2025-01-21T20:39:26.050796

SSH-2.0-OpenSSH_7.4

8081 / tcp

-1032713145 | 2025-01-25T17:29:29.118977

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8083 / tcp

2033888749 | 2025-01-20T14:32:37.114306

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

8085 / tcp

819727972 | 2025-01-27T19:55:24.471802

SSH-2.0-OpenSSH_7.4

8087 / tcp

819727972 | 2025-01-19T13:40:32.422549

SSH-2.0-OpenSSH_7.4

8089 / tcp

-971970408 | 2024-12-31T22:55:37.631345

8115 / tcp

1308377066 | 2025-01-25T09:22:14.545250

ncacn_http/1.0

8128 / tcp

-1399940268 | 2025-01-16T21:42:48.353055

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8139 / tcp

-1529979118 | 2025-01-27T22:40:53.526909

inv2W

8140 / tcp

366084633 | 2025-01-26T09:26:18.634759

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

8157 / tcp

1911457608 | 2025-01-11T01:42:45.736441

\x00[\x00\x00\x00\x00\x00\x00

8160 / tcp

-1265999252 | 2025-01-12T19:39:22.420124

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

8164 / tcp

-1399940268 | 2025-01-13T02:23:47.475873

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8170 / tcp

1208318993 | 2025-01-21T02:16:36.055893

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

8178 / tcp

-1399940268 | 2025-01-19T18:00:23.093706

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8181 / tcp

660175493 | 2025-01-13T18:57:07.001314

8200 / tcp

1320285193 | 2025-01-21T10:06:39.867734

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

8230 / tcp

1541211644 | 2025-01-27T18:42:49.264869

[\xc2\xba\x7fs\x7f

8236 / tcp

1911457608 | 2025-01-27T09:40:09.523856

\x00[\x00\x00\x00\x00\x00\x00

8237 / tcp

-1730858130 | 2025-01-22T06:26:49.501581

RFB 003.008
VNC:
  Protocol Version: 3.8

8249 / tcp

-1375131644 | 2025-01-23T04:31:45.496542

\x00[v\xc3\xbdC\x7f\x00\x00

8300 / tcp

-734440417 | 2025-01-20T05:46:18.317223

HTTP/1.1 400 Bad Request
Content-Type: text/html
Connection: close
Server: nginx/1.17.3

8322 / tcp

-441419608 | 2025-01-10T23:04:50.147020

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

8407 / tcp

740837454 | 2025-01-18T09:49:58.901430

SSH-2.0-OpenSSH_5.3

8408 / tcp

819727972 | 2025-01-28T00:04:34.136513

SSH-2.0-OpenSSH_7.4

8444 / tcp

632542934 | 2025-01-21T22:03:31.053784

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8448 / tcp

-1399940268 | 2025-01-08T11:53:48.385751

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8457 / tcp

1996932384 | 2025-01-23T11:52:27.592680

"raop" nonce

8470 / tcp

1911457608 | 2025-01-08T23:34:47.302839

\x00[\x00\x00\x00\x00\x00\x00

8484 / tcp

-1399940268 | 2025-01-21T00:50:32.844875

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8500 / tcp

1662811133 | 2025-01-24T03:58:44.004656

MudNames 77 - (C) 1997-2001 Ragnar Hojland Espinosa <ragnar@ragnar-hojland.com>

8531 / tcp

1363464823 | 2025-01-15T18:39:53.574165

\x00[|ox\x7f\x00\x00

8533 / tcp

709622286 | 2025-01-24T23:38:14.468974

OK Welcome <299685> on DirectUpdate server 7286\r\n

8553 / tcp

669849225 | 2025-01-04T11:34:05.410292

SSH-98.60-SysaxSSH_81885..42\r\n

8554 / tcp

2087396567 | 2025-01-14T00:12:03.148249

kjnkjabhbanc283ubcsbhdc72

8556 / tcp

-801484042 | 2025-01-22T09:11:17.560573

ERR 27

8561 / tcp

-2089734047 | 2025-01-24T03:57:08.376050

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8575 / tcp

639175818 | 2025-01-27T02:01:16.272413

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

8593 / tcp

1615193817 | 2025-01-26T02:50:38.913016

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

8596 / tcp

-1428621233 | 2025-01-27T11:36:01.022925

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8600 / tcp

-695812793 | 2025-01-21T14:05:32.003336

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705939066.771-w-waf01shgt2

8602 / tcp

1911457608 | 2025-01-08T14:05:51.336297

\x00[\x00\x00\x00\x00\x00\x00

8607 / tcp

2121220663 | 2025-01-22T08:54:36.576578

SSH-58-Ingrian_SSH\r\n

8622 / tcp

-1399940268 | 2025-01-17T19:43:30.762822

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8649 / tcp

842535728 | 2025-01-18T19:18:11.641877

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

8680 / tcp

-1032713145 | 2025-01-19T07:25:45.520379

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8686 / tcp

1911457608 | 2025-01-20T18:20:42.955067

\x00[\x00\x00\x00\x00\x00\x00

8767 / tcp

819727972 | 2025-01-19T00:38:42.329592

SSH-2.0-OpenSSH_7.4

8784 / tcp

-1888448627 | 2025-01-09T18:40:19.736342

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8805 / tcp

-2089734047 | 2025-01-11T11:52:17.778511

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8809 / tcp

819727972 | 2025-01-07T20:05:20.964624

SSH-2.0-OpenSSH_7.4

8816 / tcp

-358707605 | 2025-01-23T04:33:52.524917

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 391
Connect-To: https://qd-gatway.aliyuncs.com/table/tree-land/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div id="other"></div>

</body>

8818 / tcp

1911457608 | 2025-01-01T01:10:25.273829

\x00[\x00\x00\x00\x00\x00\x00

8822 / tcp

819727972 | 2025-01-19T15:12:50.679562

SSH-2.0-OpenSSH_7.4

8823 / tcp

819727972 | 2025-01-10T22:56:12.833788

SSH-2.0-OpenSSH_7.4

8832 / tcp

1126993057 | 2025-01-25T05:56:54.579179

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

8835 / tcp

-2033111675 | 2025-01-18T04:04:03.687604

~djb

8838 / tcp

1911457608 | 2025-01-27T14:29:27.019637

\x00[\x00\x00\x00\x00\x00\x00

8842 / tcp

819727972 | 2025-01-04T06:10:11.045667

SSH-2.0-OpenSSH_7.4

8846 / tcp

2143387245 | 2025-01-28T02:17:37.551210

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

8855 / tcp

165188539 | 2025-01-20T18:07:48.460285

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8859 / tcp

-407828767 | 2025-01-14T21:30:07.656271

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

8871 / tcp

-1399940268 | 2025-01-19T18:29:58.837493

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8874 / tcp

1620329124 | 2025-01-18T06:23:40.093719

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

8880 / tcp

2087396567 | 2025-01-16T02:07:17.133706

kjnkjabhbanc283ubcsbhdc72

8889 / tcp

671605376 | 2025-01-12T05:52:24.771564

SSH-2.0-OpenSSH_X.X

8989 / tcp

-1045760528 | 2025-01-02T21:48:51.872098

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

8991 / tcp

-1428621233 | 2025-01-18T06:13:25.620034

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8993 / tcp

-2089734047 | 2025-01-19T01:55:25.688855

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8999 / tcp

-2089734047 | 2025-01-11T14:56:40.609678

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9000 / tcp

-2067028711 | 2025-01-24T15:39:15.939562

\x15\x03\x01\x00\x02\x02F

9001 / tcp

-1026951088 | 2025-01-07T17:26:56.134353

erro ip

9002 / tcp

2087396567 | 2025-01-23T12:56:57.090440

kjnkjabhbanc283ubcsbhdc72

9012 / tcp

-1899074860 | 2025-01-17T20:57:38.572084

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

9014 / tcp

-2107996212 | 2025-01-11T17:58:02.406542

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

9025 / tcp

1911457608 | 2025-01-23T04:42:38.375721

\x00[\x00\x00\x00\x00\x00\x00

9029 / tcp

1911457608 | 2025-01-19T15:47:40.679980

\x00[\x00\x00\x00\x00\x00\x00

9030 / tcp

-616720387 | 2025-01-10T03:05:22.486153

SSH-2.0-SSHD_0.7.6

9032 / tcp

-980525298 | 2025-01-04T20:40:30.824232

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9038 / tcp

-1888448627 | 2025-01-15T22:51:57.519891

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9043 / tcp

-1399940268 | 2025-01-16T21:26:29.564358

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9050 / tcp

-1853480042 | 2025-01-07T04:05:53.222088

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae12bb_PS-NKG-01Suj77_14938-64274

9051 / tcp

1690634669 | 2025-01-25T03:10:00.872825

9052 / tcp

1189133115 | 2025-01-15T07:42:27.416701

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

9058 / tcp

-358801646 | 2025-01-12T15:44:44.375978

SSH-2.0-OpenSSH_6.6.1

9068 / tcp

-146605374 | 2025-01-10T18:55:19.984750

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

9082 / tcp

819727972 | 2025-01-20T09:09:37.276034

SSH-2.0-OpenSSH_7.4

9091 / tcp

-314039103 | 2025-01-23T12:26:14.434802

Surnom.
Sorry, that nickname format is invalid.

9092 / tcp

2063598737 | 2025-01-03T22:44:15.921245

/0 0 L\r\n/0 0 HUH\r\n

9099 / tcp

-2091357501 | 2025-01-02T20:53:20.474887

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24ed_PS-000-01laU45_33498-16549

9100 / tcp

321971019 | 2025-01-26T17:09:07.290178

-ERR client ip is not in whitelist\r

9108 / tcp

119860953 | 2025-01-27T12:54:13.270603

* OK ArGoSoft Mail Server IMAP Module v.YW at

9139 / tcp

-339084706 | 2025-01-10T20:26:20.478785

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

9141 / tcp

-1399940268 | 2025-01-20T19:54:28.991452

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9143 / tcp

455076604 | 2025-01-23T07:47:11.064889

!\x07version\x04bind7 t{RPowerDNS Recursor 410

9146 / tcp

1911457608 | 2025-01-12T20:43:16.811505

\x00[\x00\x00\x00\x00\x00\x00

9151 / tcp

819727972 | 2025-01-15T07:12:07.610916

SSH-2.0-OpenSSH_7.4

9155 / tcp

-375604792 | 2025-01-25T07:52:39.771263

220 Microsoft FTP Service

9160 / tcp

-2107996212 | 2025-01-07T11:54:21.083082

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

9164 / tcp

1911457608 | 2025-01-09T02:01:54.187595

\x00[\x00\x00\x00\x00\x00\x00

9173 / tcp

1911457608 | 2025-01-10T12:31:52.850995

\x00[\x00\x00\x00\x00\x00\x00

9176 / tcp

1278527606 | 2025-01-10T15:28:24.505459

SSH-2.0-Teleport

9179 / tcp

380146262 | 2025-01-12T09:13:32.155112

@RSYNCD: 30.0

9184 / tcp

-441419608 | 2025-01-10T17:57:42.404055

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

9197 / tcp

819727972 | 2025-01-13T22:21:55.378970

SSH-2.0-OpenSSH_7.4

9200 / tcp

-1163346640 | 2025-01-12T22:31:46.507962

Hashes

hash

-997913363

http.dom_hash

-2006505642

http.html_hash

-1163346640

HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
content-length: 215

9203 / tcp

1642597142 | 2025-01-11T16:27:45.508877

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

9217 / tcp

671605376 | 2025-01-24T18:27:36.005479

SSH-2.0-OpenSSH_X.X

9306 / tcp

-1626979812 | 2025-01-20T01:18:50.603412

220 Service ready for new user.

9333 / tcp

117101543 | 2025-01-14T02:35:35.312015

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

9398 / tcp

-2096652808 | 2025-01-19T19:32:20.795363

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

9399 / tcp

-1399940268 | 2025-01-23T21:40:47.323972

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9443 / tcp

426353826 | 2025-01-03T08:12:40.191652

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 03 Jan 2025 08:12:40 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://203.119.146.72:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

9530 / tcp

921225407 | 2025-01-20T19:29:05.828404

\x00\x00\x00\x04\x00\x00\x00\x00\x00

9600 / tcp

819727972 | 2025-01-16T06:42:06.741458

SSH-2.0-OpenSSH_7.4

9633 / tcp

-1839934832 | 2025-01-18T14:29:18.771984

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9754 / tcp

-445721795 | 2025-01-20T18:42:28.773955

\x00[\xc3\xaed\x1a\x7f\x00\x00

9779 / tcp

165188539 | 2025-01-27T10:32:12.143554

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9810 / tcp

1615193817 | 2025-01-19T15:57:55.981065

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

9876 / tcp

2070013657 | 2025-01-13T16:34:51.725164

\\x00\\x00\\x01+\\x00\\x00\\x00_{"code":0,"flag":1,"language":"JAVA","opaque":0,"serializeTypeCurrentRPC":"JSON","version":433}{"brokerAddrTable":{"broker-a":{"brokerAddrs":{0:"127.63.135.245:10911"},"brokerName":"broker-a","cluster":"DefaultCluster","enableActingMaster":false}},"clusterAddrTable":{"DefaultCluster":["broker-a"]}}

9898 / tcp

1320285193 | 2024-12-31T02:57:18.610387

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

9908 / tcp

205347087 | 2025-01-22T04:36:34.459310

SSH-25453-Cisco-3524665.35\n

9943 / tcp

1712606111 | 2025-01-16T21:40:23.325355

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1282_PSzqstdxyw34_8689-21922

9994 / tcp

-1399940268 | 2025-01-26T01:44:38.586813

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9998 / tcp

-1340128872 | 2024-12-30T13:08:55.220187

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25d2_PS-PEK-010xV14_15533-12109

9999 / tcp

1161309183 | 2025-01-17T22:59:46.208189

ProxyServer is ready

10021 / tcp

819727972 | 2025-01-23T00:39:03.509594

SSH-2.0-OpenSSH_7.4

10039 / tcp

-1032713145 | 2025-01-11T07:22:48.131116

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

10048 / tcp

1911457608 | 2025-01-26T00:06:14.516799

\x00[\x00\x00\x00\x00\x00\x00

10052 / tcp

-2046514463 | 2025-01-16T00:18:23.747614

AB\x01\t

10071 / tcp

-1428621233 | 2025-01-25T11:51:42.604843

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

10090 / tcp

165188539 | 2025-01-18T23:18:39.866093

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

10093 / tcp

-1329831334 | 2025-01-26T16:18:10.833023

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

10134 / tcp

-2096652808 | 2025-01-11T09:37:27.271029

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

10250 / tcp

474736340 | 2025-01-28T08:19:55.265477

431 Unable to negotiate secure command connection.

10397 / tcp

119860953 | 2025-01-11T20:35:20.758211

* OK ArGoSoft Mail Server IMAP Module v.YW at

10443 / tcp

378668953 | 2025-01-19T00:01:53.080622

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 19 Jan 2025 00:01:52 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://203.119.146.72:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

10554 / tcp

-971970408 | 2025-01-12T10:46:05.040932

10911 / tcp

819727972 | 2025-01-16T10:43:56.190333

SSH-2.0-OpenSSH_7.4

11000 / tcp

-1399940268 | 2025-01-23T07:48:29.070587

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11110 / tcp

-147424911 | 2025-01-18T15:05:19.478742

HTTP/1.1 404 Not Found
Content Length: 0

11112 / tcp

1492413928 | 2025-01-07T09:21:17.824433

SSH-2.0-OpenSSH_7.5

11210 / tcp

-2089734047 | 2025-01-14T22:37:35.634139

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

11211 / tcp

-136006866 | 2025-01-24T08:15:39.717602

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11288 / tcp

921225407 | 2025-01-23T18:37:15.393213

\x00\x00\x00\x04\x00\x00\x00\x00\x00

11300 / tcp

-1399940268 | 2025-01-28T20:59:14.124866

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12000 / tcp

1734465113 | 2025-01-28T03:05:48.886113

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705938548.385-w-waf05cqt

12084 / tcp

-1996280214 | 2025-01-24T15:24:58.291854

\x06\x04\x05@

12110 / tcp

1911457608 | 2025-01-21T20:41:53.744305

\x00[\x00\x00\x00\x00\x00\x00

12122 / tcp

1911457608 | 2025-01-20T00:49:47.435450

\x00[\x00\x00\x00\x00\x00\x00

12138 / tcp

-2089734047 | 2025-01-10T18:49:06.554585

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12139 / tcp

639175818 | 2025-01-10T02:25:35.302119

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

12146 / tcp

819727972 | 2025-01-15T18:50:36.884547

SSH-2.0-OpenSSH_7.4

12152 / tcp

321971019 | 2025-01-18T04:06:32.639995

-ERR client ip is not in whitelist\r

12158 / tcp

1948301213 | 2025-01-20T20:13:03.152084

RFB 003.003
VNC:
  Protocol Version: 3.3

12166 / tcp

722711397 | 2025-01-21T10:51:33.165629

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

12176 / tcp

632542934 | 2025-01-25T00:39:22.869773

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12187 / tcp

-2089734047 | 2025-01-12T08:38:02.152813

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12188 / tcp

-1810987450 | 2025-01-22T20:06:08.597446

\xc3\xbf

12189 / tcp

1911457608 | 2025-01-24T02:54:54.457087

\x00[\x00\x00\x00\x00\x00\x00

12196 / tcp

-1399940268 | 2025-01-22T12:16:05.036693

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12206 / tcp

921225407 | 2025-01-23T06:15:50.931835

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12211 / tcp

-1327660293 | 2025-01-26T19:37:09.239708

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12221 / tcp

-1399940268 | 2025-01-22T06:59:21.438690

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12252 / tcp

-1329831334 | 2025-01-09T11:44:17.185072

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

12299 / tcp

50497985 | 2025-01-10T17:21:19.747369

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

12345 / tcp

488204803 | 2025-01-28T04:41:47.019304

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae263c_CS-000-01Avv40_829-3172

12393 / tcp

-1399940268 | 2025-01-11T00:07:14.262833

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12434 / tcp

321971019 | 2025-01-27T21:33:55.898369

-ERR client ip is not in whitelist\r

12450 / tcp

-2089734047 | 2025-01-12T22:16:51.799426

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12460 / tcp

819727972 | 2025-01-16T10:31:54.519251

SSH-2.0-OpenSSH_7.4

12503 / tcp

819727972 | 2025-01-20T10:07:47.324464

SSH-2.0-OpenSSH_7.4

12526 / tcp

819727972 | 2025-01-13T00:18:56.741334

SSH-2.0-OpenSSH_7.4

12530 / tcp

722711397 | 2025-01-19T20:03:05.458882

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

12566 / tcp

-375604792 | 2025-01-25T00:49:14.730237

220 Microsoft FTP Service

12569 / tcp

1911457608 | 2025-01-11T12:34:16.458410

\x00[\x00\x00\x00\x00\x00\x00

12570 / tcp

-1435414831 | 2025-01-13T05:26:53.576393

roku: ready\r\n

12572 / tcp

819727972 | 2025-01-21T23:43:05.620579

SSH-2.0-OpenSSH_7.4

12574 / tcp

2063598737 | 2025-01-25T20:50:11.509917

/0 0 L\r\n/0 0 HUH\r\n

13228 / tcp

-1839934832 | 2025-01-14T21:04:18.271575

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

14147 / tcp

-2089734047 | 2025-01-09T19:32:10.940268

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

14265 / tcp

-1996280214 | 2025-01-09T03:51:56.753928

\x06\x04\x05@

14344 / tcp

-1399940268 | 2025-01-23T23:46:28.439749

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14400 / tcp

-1399940268 | 2025-01-09T11:35:36.138177

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14443 / tcp

2121220663 | 2025-01-10T19:20:49.147365

SSH-58-Ingrian_SSH\r\n

14895 / tcp

-136006866 | 2025-01-21T08:30:33.354618

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

14896 / tcp

2063598737 | 2025-01-18T09:21:53.718600

/0 0 L\r\n/0 0 HUH\r\n

16001 / tcp

-585940771 | 2025-01-23T01:01:53.867745

Unknown command\r\n

16025 / tcp

2143387245 | 2025-01-23T19:56:54.661368

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

16032 / tcp

1574088840 | 2025-01-14T00:40:14.876501

">Application and Content Networking Software 3.9</a>)\n</BODY><

16070 / tcp

-1839934832 | 2025-01-09T10:03:31.045890

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

16078 / tcp

-1435414831 | 2025-01-23T10:40:44.915338

roku: ready\r\n

16097 / tcp

-1399940268 | 2025-01-09T08:48:29.768476

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16667 / tcp

819727972 | 2025-01-27T17:36:16.993682

SSH-2.0-OpenSSH_7.4

17000 / tcp

-1810987450 | 2024-12-31T13:33:07.074062

\xc3\xbf

17184 / tcp

-2089734047 | 2025-01-21T10:42:10.835544

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

17776 / tcp

-1399940268 | 2025-01-18T14:16:31.467297

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

17779 / tcp

-1261090339 | 2025-01-25T01:05:18.236990

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

18041 / tcp

1282941221 | 2025-01-11T19:58:53.169207

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

18045 / tcp

-1265999252 | 2025-01-13T22:33:08.443972

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

18058 / tcp

-1839934832 | 2025-01-24T08:00:41.172271

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

18069 / tcp

1911457608 | 2025-01-20T09:52:49.569156

\x00[\x00\x00\x00\x00\x00\x00

18081 / tcp

1761482307 | 2025-01-22T09:24:10.072526

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

18182 / tcp

-616720387 | 2025-01-18T16:25:15.673494

SSH-2.0-SSHD_0.7.6

18245 / tcp

15018106 | 2025-01-25T22:16:51.101524

\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00

18368 / tcp

-2096652808 | 2025-01-11T16:36:10.540284

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

18556 / tcp

-457235091 | 2025-01-23T20:21:00.631124

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

19000 / tcp

-1399940268 | 2025-01-02T04:05:13.699770

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

19013 / tcp

819727972 | 2025-01-13T20:48:48.254102

SSH-2.0-OpenSSH_7.4

20000 / tcp

1900503736 | 2025-01-12T18:20:00.092380

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20001 / tcp

-1888448627 | 2025-01-28T19:10:41.425181

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

20010 / tcp

-454087041 | 2025-01-15T13:30:08.718086

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

20018 / tcp

819727972 | 2025-01-16T13:31:37.238718

SSH-2.0-OpenSSH_7.4

20110 / tcp

-288825733 | 2025-01-19T02:39:12.453421

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

20151 / tcp

-784071826 | 2025-01-26T22:13:05.185253

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

20202 / tcp

-1839934832 | 2025-01-28T08:42:44.994156

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

20256 / tcp

-1681927087 | 2025-01-26T23:38:17.563635

kjnkjabhbanc283ubcsbhdc72

20512 / tcp

-407828767 | 2025-01-18T09:23:16.847503

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

20547 / tcp

-1399940268 | 2025-01-19T02:17:08.013186

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20880 / tcp

1370263973 | 2025-01-25T00:44:57.862504

dubbo>

21025 / tcp

819727972 | 2025-01-27T03:57:42.669050

SSH-2.0-OpenSSH_7.4

21081 / tcp

1161309183 | 2025-01-28T12:30:45.948432

ProxyServer is ready

21238 / tcp

-2096652808 | 2025-01-23T18:43:56.050968

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

21251 / tcp

1911457608 | 2025-01-10T03:25:17.544857

\x00[\x00\x00\x00\x00\x00\x00

21252 / tcp

1615193817 | 2025-01-20T20:53:00.323228

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

21267 / tcp

632542934 | 2025-01-11T18:35:55.799928

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

21273 / tcp

117101543 | 2025-01-23T13:02:09.111331

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

21274 / tcp

1282941221 | 2025-01-17T22:06:29.027858

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

21294 / tcp

1059192566 | 2025-01-24T00:09:48.526461

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div

21304 / tcp

1975288991 | 2025-01-09T10:02:25.387654

OPTI

21323 / tcp

1208318993 | 2025-01-25T18:43:24.121142

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

21327 / tcp

-1399940268 | 2025-01-17T00:45:47.493884

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21400 / tcp

165188539 | 2025-01-27T22:22:08.023932

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

22345 / tcp

-1399940268 | 2025-01-24T22:22:09.287395

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

22380 / tcp

1077013874 | 2025-01-28T18:02:03.003628

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

22556 / tcp

1975288991 | 2025-01-02T16:47:47.675534

OPTI

22703 / tcp

-122096153 | 2025-01-26T22:36:34.939898

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

23023 / tcp

474736340 | 2025-01-19T13:25:00.000850

431 Unable to negotiate secure command connection.

23424 / tcp

-2118655245 | 2024-12-31T12:13:45.085419

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

24472 / tcp

-1428621233 | 2025-01-18T09:44:04.648253

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

25001 / tcp

1911457608 | 2025-01-22T20:14:05.671815

\x00[\x00\x00\x00\x00\x00\x00

25002 / tcp

-1399940268 | 2025-01-11T09:33:01.136906

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

25565 / tcp

-1399940268 | 2025-01-28T14:15:20.286273

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

25782 / tcp

-1888448627 | 2025-01-11T12:16:28.582095

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

27015 / tcp

-232716176 | 2025-01-14T00:31:58.624280

Command: None
Size: 759714643
ID: 758132274
Type: 1852141647

27017 / tcp

1763259671 | 2025-01-25T18:19:40.929202

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

28001 / tcp

722711397 | 2025-01-26T02:15:19.926845

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

30000 / tcp

-1426182427 | 2025-01-14T16:51:19.836589

\\x00[\\x00\\x00\\x00\\x00\\x00\\x00

30002 / tcp

-1681927087 | 2025-01-04T08:15:46.450035

kjnkjabhbanc283ubcsbhdc72

30003 / tcp

1632932802 | 2025-01-24T23:09:30.538946

30501 / tcp

-1399940268 | 2025-01-17T20:01:00.052954

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

31337 / tcp

-147424911 | 2025-01-14T00:25:37.077939

HTTP/1.1 404 Not Found
Content Length: 0

32001 / tcp

-1839934832 | 2025-01-22T22:45:34.250844

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

32764 / tcp

1741579575 | 2025-01-27T04:12:34.236999

33060 / tcp

1887224352 | 2025-01-22T00:59:46.374822

33333 / tcp

1911457608 | 2025-01-05T18:28:41.911811

\x00[\x00\x00\x00\x00\x00\x00

35000 / tcp

-1329831334 | 2025-01-25T03:30:32.936805

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

35554 / tcp

-1399940268 | 2025-01-12T14:47:35.523326

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

41800 / tcp

1911457608 | 2025-01-21T21:48:07.606680

\x00[\x00\x00\x00\x00\x00\x00

42420 / tcp

819727972 | 2025-01-28T18:09:05.578202

SSH-2.0-OpenSSH_7.4

43009 / tcp

-1476017887 | 2025-01-12T19:07:19.023144

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

44309 / tcp

-2096652808 | 2025-01-10T14:46:10.419085

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

44420 / tcp

1911457608 | 2025-01-13T17:08:48.031763

\x00[\x00\x00\x00\x00\x00\x00

44818 / tcp

-1019343788 | 2025-01-28T20:01:44.108973

W!\x00\x00\x00\x00

45555 / tcp

-2107996212 | 2025-01-25T18:38:16.054792

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

45622 / tcp

-641479109 | 2025-01-28T17:56:52.144089

[xU-

46222 / tcp

1741579575 | 2025-01-28T08:57:03.965572

46422 / tcp

1282941221 | 2025-01-28T07:09:41.786057

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

46522 / tcp

1690634669 | 2025-01-28T06:58:48.165708

46622 / tcp

-971970408 | 2025-01-27T23:50:27.654195

46722 / tcp

546151771 | 2025-01-28T03:30:45.539317

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

46822 / tcp

2087396567 | 2025-01-27T19:28:29.904712

kjnkjabhbanc283ubcsbhdc72

47122 / tcp

660175493 | 2025-01-27T20:51:05.763798

47222 / tcp

1741579575 | 2025-01-27T02:12:34.529708

47622 / tcp

-971970408 | 2025-01-27T07:30:58.393222

47722 / tcp

-319440554 | 2025-01-27T00:18:45.806432

47990 / tcp

-358801646 | 2025-01-10T13:25:59.518764

SSH-2.0-OpenSSH_6.6.1

48022 / tcp

957278843 | 2025-01-26T17:03:58.934340

[|ox

48122 / tcp

-1730858130 | 2025-01-26T23:09:38.053144

RFB 003.008
VNC:
  Protocol Version: 3.8

49122 / tcp

2087396567 | 2025-01-25T23:03:20.341497

kjnkjabhbanc283ubcsbhdc72

49522 / tcp

-1013082686 | 2025-01-26T01:20:41.884155

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

49622 / tcp

-971970408 | 2025-01-25T22:40:11.727023

49822 / tcp

-653033013 | 2025-01-25T12:31:17.832264

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

49922 / tcp

119860953 | 2025-01-25T19:28:22.401410

* OK ArGoSoft Mail Server IMAP Module v.YW at

50000 / tcp

2087396567 | 2025-01-19T19:36:38.698913

kjnkjabhbanc283ubcsbhdc72

50001 / tcp

-1045760528 | 2025-01-12T12:44:48.691076

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

50005 / tcp

-904840257 | 2025-01-11T22:49:14.812021

572 Relay not authorized\r\n

50100 / tcp

-1914935523 | 2025-01-22T17:51:34.140148

ceph v2

50102 / tcp

366084633 | 2025-01-15T05:37:47.142355

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

50107 / tcp

-1399940268 | 2025-01-20T08:06:57.276650

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

50122 / tcp

233634112 | 2025-01-25T10:47:56.783303

SSH-98.60-SysaxSSH_81885..42

50422 / tcp

339872247 | 2025-01-25T02:44:06.026827


0 ...

50522 / tcp

1741579575 | 2025-01-25T06:39:57.233921

50722 / tcp

2087396567 | 2025-01-25T00:57:14.843508

kjnkjabhbanc283ubcsbhdc72

50922 / tcp

1741579575 | 2025-01-24T17:33:49.708371

51122 / tcp

339872247 | 2025-01-24T21:36:38.674938


0 ...

51235 / tcp

1126993057 | 2025-01-12T19:10:17.183552

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

51294 / tcp

1208318993 | 2025-01-21T12:52:36.798690

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

51434 / tcp

-1699556818 | 2025-01-08T22:45:22.850006

\x01remshd: Kerberos Authentication not enabled.\n

51522 / tcp

-952165951 | 2025-01-24T14:02:20.683095

AB

51822 / tcp

539065883 | 2025-01-23T23:43:18.660887

51922 / tcp

-2080784861 | 2025-01-24T04:52:35.982457

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

52322 / tcp

819727972 | 2025-01-23T18:41:16.280892

SSH-2.0-OpenSSH_7.4

52422 / tcp

-971970408 | 2025-01-23T11:44:31.508545

52522 / tcp

171352214 | 2025-01-23T10:01:47.197641

-ERR client ip is not in whitelist

52722 / tcp

-1839934832 | 2025-01-23T04:24:34.532243

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

53122 / tcp

-971970408 | 2025-01-22T23:13:33.363184

53222 / tcp

-441419608 | 2025-01-22T21:00:43.964032

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

53322 / tcp

819727972 | 2025-01-22T19:36:05.815772

SSH-2.0-OpenSSH_7.4

53522 / tcp

-1839934832 | 2025-01-22T15:41:03.548474

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

54138 / tcp

-1399940268 | 2025-01-12T20:26:02.263124

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

54322 / tcp

740837454 | 2025-01-22T00:48:27.176791

SSH-2.0-OpenSSH_5.3

54422 / tcp

-1230049476 | 2025-01-21T19:13:13.822661

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

54522 / tcp

2087396567 | 2025-01-21T21:08:14.665675

kjnkjabhbanc283ubcsbhdc72

54622 / tcp

1231376952 | 2025-01-21T17:36:11.539775

55000 / tcp

632542934 | 2025-01-16T18:02:54.384660

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

55022 / tcp

819727972 | 2025-01-21T22:55:44.516558

SSH-2.0-OpenSSH_7.4

55222 / tcp

841014058 | 2025-01-21T11:30:02.461157

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

55322 / tcp

-971970408 | 2025-01-21T07:58:15.009217

55443 / tcp

819727972 | 2025-01-24T23:17:27.306844

SSH-2.0-OpenSSH_7.4

55522 / tcp

2087396567 | 2025-01-20T17:13:53.290746

kjnkjabhbanc283ubcsbhdc72

55553 / tcp

1332894250 | 2025-01-01T18:48:55.564385

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

55554 / tcp

-441419608 | 2024-12-31T23:37:47.024073

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

55622 / tcp

660175493 | 2025-01-21T03:49:32.394808

56122 / tcp

539065883 | 2025-01-20T12:09:36.997056

56322 / tcp

2087396567 | 2025-01-20T15:20:41.697388

kjnkjabhbanc283ubcsbhdc72

56622 / tcp

-1990350878 | 2025-01-19T20:49:32.353961

 
04 \...

56722 / tcp

89282912 | 2025-01-20T04:09:08.915292

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto
col:SOAP, MKSDisplayProtocol:VNC , ,

56922 / tcp

2087396567 | 2025-01-19T18:45:45.003845

kjnkjabhbanc283ubcsbhdc72

57122 / tcp

2103111368 | 2025-01-20T01:34:41.715468

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

57222 / tcp

2087396567 | 2025-01-19T22:44:32.261677

kjnkjabhbanc283ubcsbhdc72

57322 / tcp

-321444299 | 2025-01-19T11:21:29.394502

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

57787 / tcp

921225407 | 2025-01-11T13:06:20.174066

\x00\x00\x00\x04\x00\x00\x00\x00\x00

57922 / tcp

1542849631 | 2025-01-19T01:03:25.536763

* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at

58622 / tcp

50497985 | 2025-01-16T18:09:52.679133

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

58722 / tcp

819727972 | 2025-01-18T14:52:50.129151

SSH-2.0-OpenSSH_7.4

59022 / tcp

841014058 | 2025-01-18T09:16:29.118583

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

59922 / tcp

539065883 | 2025-01-17T19:09:17.546495

60022 / tcp

-616720387 | 2025-01-17T11:19:49.379096

SSH-2.0-SSHD_0.7.6

60129 / tcp

-971970408 | 2025-01-22T10:41:15.624356

61616 / tcp

2087396567 | 2025-01-04T20:54:14.806182

kjnkjabhbanc283ubcsbhdc72

62078 / tcp

-860824904 | 2025-01-19T12:06:09.306470

\x00\x01)

63045 / tcp

-1399940268 | 2025-01-26T19:30:45.839759

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

63210 / tcp

1632932802 | 2025-01-13T02:08:27.396496

63256 / tcp

1887224352 | 2025-01-20T09:51:51.847951

63260 / tcp

1989907056 | 2025-01-28T19:23:13.205166

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

64295 / tcp

-339084706 | 2025-01-02T05:03:27.787466

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

65004 / tcp

-1230049476 | 2025-01-16T12:45:09.588021

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

203.119.146.72

Last Seen: 2025-01-28

Tags:

GeneralInformation

OpenPorts

11 / tcp -1730858130 | 2025-01-14T00:19:59.698508

13 / tcp -1296032851 | 2024-12-30T02:29:23.970844

15 / tcp -952165951 | 2025-01-13T20:44:14.129218

17 / tcp 1662811133 | 2025-01-19T16:21:01.356130

21 / tcp 2116898107 | 2025-01-26T11:17:10.401131

37 / tcp 1472866667 | 2025-01-20T10:12:34.975052

43 / tcp -358801646 | 2025-01-24T20:13:50.811800

53 / tcp 698891913 | 2025-01-08T05:04:43.294443

70 / tcp 857710896 | 2025-01-25T13:57:21.326014

79 / tcp -972699072 | 2025-01-24T00:09:02.375653

89 / tcp 2063598737 | 2025-01-11T03:57:55.514083

94 / tcp -1399940268 | 2025-01-12T14:18:44.726306

99 / tcp 1713556628 | 2025-01-11T19:37:30.169643

102 / tcp 1989907056 | 2025-01-17T22:20:45.361288

104 / tcp 165188539 | 2025-01-24T12:33:09.077725

111 / tcp 1187188851 | 2025-01-24T22:21:15.010064

119 / tcp 141730637 | 2025-01-04T19:59:01.659264

122 / tcp 1543809371 | 2025-01-19T09:33:29.963568

135 / tcp 1302177452 | 2025-01-21T20:23:07.549337

175 / tcp 1396488228 | 2025-01-18T19:52:13.994138

179 / tcp -399606100 | 2024-12-31T11:44:35.283604

195 / tcp 2087396567 | 2025-01-26T11:34:46.490400

199 / tcp 1726594447 | 2025-01-21T10:54:45.367594

221 / tcp -1810987450 | 2025-01-03T03:22:45.316643

234 / tcp 1011407350 | 2025-01-15T15:47:22.993120

243 / tcp 722711397 | 2025-01-22T02:12:50.755858

263 / tcp 819727972 | 2025-01-01T15:59:24.171051

264 / tcp -1547821026 | 2025-01-10T10:06:02.482785

285 / tcp -1399940268 | 2025-01-14T10:40:17.218013

311 / tcp -1547976805 | 2024-12-31T19:59:01.990152

340 / tcp -444830029 | 2025-01-20T21:50:41.084310

389 / tcp -1743283776 | 2025-01-20T15:46:04.784851

427 / tcp -349937125 | 2025-01-23T12:38:42.216718

444 / tcp 337692160 | 2025-01-25T23:52:26.965226

503 / tcp -2140303521 | 2025-01-27T15:07:06.131130

513 / tcp -1399940268 | 2025-01-24T03:32:59.613687

515 / tcp 819727972 | 2025-01-28T16:56:47.062579

548 / tcp 1801869778 | 2025-01-16T06:13:34.656232

554 / tcp 285770450 | 2025-01-19T21:12:00.488176

556 / tcp 921225407 | 2025-01-27T09:01:22.749996

587 / tcp -1890071674 | 2025-01-05T11:02:12.431780

593 / tcp -1261053701 | 2025-01-25T16:23:35.452083

636 / tcp -779815868 | 2025-01-11T03:01:18.148607

771 / tcp -1399940268 | 2025-01-01T13:50:07.450755

789 / tcp 1975288991 | 2025-01-21T13:45:44.545301

831 / tcp -1399940268 | 2025-01-20T20:13:55.202470

873 / tcp -1970692834 | 2025-01-10T12:44:49.164484

992 / tcp -1835475271 | 2025-01-25T07:39:24.471867

993 / tcp 1911457608 | 2025-01-06T17:28:06.560575

995 / tcp -1199842642 | 2025-01-18T07:39:56.056498

1012 / tcp -1399940268 | 2025-01-25T00:14:51.829207

1023 / tcp -756825518 | 2025-01-28T00:24:11.918575

1025 / tcp -1399940268 | 2025-01-19T10:46:41.937879

1080 / tcp 1362344524 | 2025-01-26T16:44:59.197274

1153 / tcp -142686627 | 2025-01-15T21:29:35.342946

1177 / tcp 599074451 | 2025-01-10T02:52:59.366736

1198 / tcp 913379549 | 2025-01-11T20:33:09.103048

1234 / tcp 1911457608 | 2025-01-15T17:50:10.978958

1250 / tcp 1615193817 | 2025-01-26T11:57:10.767098

1355 / tcp 1632932802 | 2025-01-07T01:06:43.481445

1364 / tcp -2046514463 | 2025-01-14T05:53:50.469523

1414 / tcp 632542934 | 2025-01-27T01:29:57.638809

1443 / tcp -1715152554 | 2025-01-23T08:01:31.485658

Hashes

1452 / tcp -1399940268 | 2025-01-24T11:48:33.556061

1494 / tcp -1049213899 | 2025-01-23T01:44:10.305232

1515 / tcp -786044033 | 2025-01-15T15:24:43.832513

1588 / tcp -1261090339 | 2025-01-18T19:01:55.523998

1599 / tcp 2087396567 | 2025-01-15T01:09:51.266034

1604 / tcp -222277909 | 2025-01-21T18:35:04.936523

1723 / tcp -1608241410 | 2025-01-24T12:30:01.981940

1801 / tcp 1692069329 | 2025-01-13T05:52:36.095352

1830 / tcp 165188539 | 2025-01-12T08:34:19.168777

1883 / tcp 1911457608 | 2025-01-21T07:52:23.357528

1926 / tcp 2087396567 | 2025-01-25T17:18:50.644370

11 / tcp

-1730858130 | 2025-01-14T00:19:59.698508

13 / tcp

-1296032851 | 2024-12-30T02:29:23.970844

15 / tcp

-952165951 | 2025-01-13T20:44:14.129218

17 / tcp

1662811133 | 2025-01-19T16:21:01.356130

21 / tcp

2116898107 | 2025-01-26T11:17:10.401131

37 / tcp

1472866667 | 2025-01-20T10:12:34.975052

43 / tcp

-358801646 | 2025-01-24T20:13:50.811800

53 / tcp

698891913 | 2025-01-08T05:04:43.294443

70 / tcp

857710896 | 2025-01-25T13:57:21.326014

79 / tcp

-972699072 | 2025-01-24T00:09:02.375653

89 / tcp

2063598737 | 2025-01-11T03:57:55.514083

94 / tcp

-1399940268 | 2025-01-12T14:18:44.726306

99 / tcp

1713556628 | 2025-01-11T19:37:30.169643

102 / tcp

1989907056 | 2025-01-17T22:20:45.361288

104 / tcp

165188539 | 2025-01-24T12:33:09.077725

111 / tcp

1187188851 | 2025-01-24T22:21:15.010064

119 / tcp

141730637 | 2025-01-04T19:59:01.659264

122 / tcp

1543809371 | 2025-01-19T09:33:29.963568

135 / tcp

1302177452 | 2025-01-21T20:23:07.549337

175 / tcp

1396488228 | 2025-01-18T19:52:13.994138

179 / tcp

-399606100 | 2024-12-31T11:44:35.283604

195 / tcp

2087396567 | 2025-01-26T11:34:46.490400

199 / tcp

1726594447 | 2025-01-21T10:54:45.367594

221 / tcp

-1810987450 | 2025-01-03T03:22:45.316643

234 / tcp

1011407350 | 2025-01-15T15:47:22.993120

243 / tcp

722711397 | 2025-01-22T02:12:50.755858

263 / tcp

819727972 | 2025-01-01T15:59:24.171051

264 / tcp

-1547821026 | 2025-01-10T10:06:02.482785

285 / tcp

-1399940268 | 2025-01-14T10:40:17.218013

311 / tcp

-1547976805 | 2024-12-31T19:59:01.990152

340 / tcp

-444830029 | 2025-01-20T21:50:41.084310

389 / tcp

-1743283776 | 2025-01-20T15:46:04.784851

427 / tcp

-349937125 | 2025-01-23T12:38:42.216718

444 / tcp

337692160 | 2025-01-25T23:52:26.965226

503 / tcp

-2140303521 | 2025-01-27T15:07:06.131130

513 / tcp

-1399940268 | 2025-01-24T03:32:59.613687

515 / tcp

819727972 | 2025-01-28T16:56:47.062579

548 / tcp

1801869778 | 2025-01-16T06:13:34.656232

554 / tcp

285770450 | 2025-01-19T21:12:00.488176

556 / tcp

921225407 | 2025-01-27T09:01:22.749996

587 / tcp

-1890071674 | 2025-01-05T11:02:12.431780

593 / tcp

-1261053701 | 2025-01-25T16:23:35.452083

636 / tcp

-779815868 | 2025-01-11T03:01:18.148607

771 / tcp

-1399940268 | 2025-01-01T13:50:07.450755

789 / tcp

1975288991 | 2025-01-21T13:45:44.545301

831 / tcp

-1399940268 | 2025-01-20T20:13:55.202470

873 / tcp

-1970692834 | 2025-01-10T12:44:49.164484

992 / tcp

-1835475271 | 2025-01-25T07:39:24.471867

993 / tcp

1911457608 | 2025-01-06T17:28:06.560575

995 / tcp

-1199842642 | 2025-01-18T07:39:56.056498

1012 / tcp

-1399940268 | 2025-01-25T00:14:51.829207

1023 / tcp

-756825518 | 2025-01-28T00:24:11.918575

1025 / tcp

-1399940268 | 2025-01-19T10:46:41.937879

1080 / tcp

1362344524 | 2025-01-26T16:44:59.197274

1153 / tcp

-142686627 | 2025-01-15T21:29:35.342946

1177 / tcp

599074451 | 2025-01-10T02:52:59.366736

1198 / tcp

913379549 | 2025-01-11T20:33:09.103048

1234 / tcp

1911457608 | 2025-01-15T17:50:10.978958

1250 / tcp

1615193817 | 2025-01-26T11:57:10.767098

1355 / tcp

1632932802 | 2025-01-07T01:06:43.481445

1364 / tcp

-2046514463 | 2025-01-14T05:53:50.469523

1414 / tcp

632542934 | 2025-01-27T01:29:57.638809

1443 / tcp

-1715152554 | 2025-01-23T08:01:31.485658

1452 / tcp

-1399940268 | 2025-01-24T11:48:33.556061

1494 / tcp

-1049213899 | 2025-01-23T01:44:10.305232

1515 / tcp

-786044033 | 2025-01-15T15:24:43.832513

1588 / tcp

-1261090339 | 2025-01-18T19:01:55.523998

1599 / tcp

2087396567 | 2025-01-15T01:09:51.266034

1604 / tcp

-222277909 | 2025-01-21T18:35:04.936523

1723 / tcp

-1608241410 | 2025-01-24T12:30:01.981940

1801 / tcp

1692069329 | 2025-01-13T05:52:36.095352

1830 / tcp

165188539 | 2025-01-12T08:34:19.168777

1883 / tcp

1911457608 | 2025-01-21T07:52:23.357528

1926 / tcp

2087396567 | 2025-01-25T17:18:50.644370

1947 / tcp

-130294253 | 2025-01-07T05:33:51.716546

1958 / tcp

1911457608 | 2025-01-26T05:50:57.161656

1962 / tcp

1161309183 | 2025-01-27T15:25:19.103799

2000 / tcp

-1036370807 | 2025-01-13T05:28:58.891669

2002 / tcp

-1681927087 | 2025-01-12T18:57:14.632712

2003 / tcp

380146262 | 2025-01-26T02:56:05.005166