GeneralInformation

Country	China
City	Beijing
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

17 19 21 22 49 90 92 102 111 175 221 264 427 444 548 554 556 636 666 789 805 832 873 993 1026 1207 1235 1414 1443 1515 1801 1833 1911 1960 1980 1982 1988 2000 2008 2060 2078 2087 2108 2121 2154 2181 2222 2404 2455 2562 2572 2598 2628 2650 3001 3018 3053 3065 3066 3068 3078 3079 3088 3090 3108 3124 3143 3171 3174 3197 3269 3299 3306 3310 3388 3412 3552 3561 3780 3790 3910 4010 4072 4150 4157 4444 4457 4463 4500 4506 4786 4840 4899 4949 4999 5007 5010 5119 5180 5209 5222 5232 5237 5239 5249 5250 5257 5435 5440 5543 5672 5909 5911 5984 5986 6000 6001 6002 6003 6379 6543 6633 6668 7010 7015 7087 7090 7171 7172 7218 7331 7349 7415 7434 7445 7480 7777 7780 8003 8009 8035 8047 8062 8084 8087 8094 8113 8128 8139 8140 8160 8167 8179 8197 8200 8222 8318 8333 8384 8406 8417 8503 8519 8545 8554 8556 8570 8605 8607 8728 8803 8804 8823 8826 8857 8880 8901 8905 8911 9001 9025 9028 9036 9042 9051 9078 9100 9113 9151 9157 9174 9181 9193 9206 9215 9248 9257 9273 9306 9307 9333 9351 9418 9447 9527 9600 9606 9633 9682 9734 9761 9944 9993 9999 10003 10018 10039 10051 10081 10134 10180 10397 10480 10894 10911 11112 11211 11288 11300 12106 12125 12150 12160 12183 12193 12198 12213 12242 12249 12276 12278 12280 12285 12291 12297 12305 12308 12326 12345 12384 12400 12413 12414 12423 12425 12435 12440 12467 12475 12480 12487 12501 12526 12539 12545 12548 12563 12565 12575 12601 13047 13084 13333 14265 14403 14909 15000 15084 15831 16017 16018 16022 16048 16081 16095 16102 16464 16831 16992 16993 18015 18018 18028 18030 18035 18043 18051 18059 18060 18063 18066 18069 18076 18081 18087 18109 18245 18553 19000 19014 19930 20000 20018 20020 20060 20110 20256 20443 20512 20547 21025 21027 21248 21313 21322 21328 21379 22000 22001 22067 22222 22556 23023 23424 24245 25001 25105 25565 26656 26657 27015 27016 27017 27036 28015 28017 28080 30002 30006 30106 30123 30222 30301 30322 30468 30522 30718 30722 30922 31022 31122 31322 31522 32080 32400 32443 32444 32722 32764 33060 33122 33338 35000 37215 37777 41443 41794 41800 42194 42420 43009 44158 44303 44334 44500 44818 45000 47808 49153 49682 49686 50000 50012 50050 50070 50100 51200 51235 53413 53481 53805 54138 54984 55000 55553 55554 57778 57788 58378 60021 60129 60443 61613 61616 63256 63257 63260 65000

17 / tcp

1852418385 | 2025-04-08T20:13:10.603157

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

19 / tcp

751496153 | 2025-04-02T17:52:31.409221

* OK TeamXchange IMAP4rev1 server (otyUg) ready.

21 / tcp

-1248408558 | 2025-04-06T06:37:36.554375

220 MikroTik FTP server (MikroTik 6.44.3) ready

22 / tcp

-1949170930 | 2025-04-12T09:17:14.434862

SSH-2.0-OpenSSH_8.0\r\n

49 / tcp

-801484042 | 2025-04-05T20:33:55.547187

ERR 27

90 / tcp

-2089734047 | 2025-03-22T15:41:07.261361

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

92 / tcp

-358801646 | 2025-04-10T19:51:01.410965

SSH-2.0-OpenSSH_6.6.1

102 / tcp

103159425 | 2025-04-12T16:49:34.506790

SSH-1.99-RGOS_SSH

111 / tcp

1408744601 | 2025-04-08T19:23:39.855274

Portmap
Program	Version	Protocol	Port
1846166383	1853121902	1949125733	1852273768
168430145	1667458419	1931494501	1852400996
543258465	2033060419	1869509733	1853107540
544499064	1949262953	1935896430	1852138356

175 / tcp

-441419608 | 2025-04-10T01:42:03.334053

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

221 / tcp

1623746877 | 2025-04-11T23:12:52.147885

500 Permission denied - closing connection.\r\n

264 / tcp

-1932800090 | 2025-03-26T07:17:26.381257

HTTP

427 / tcp

1327409218 | 2025-03-22T05:32:12.556843

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://localhost.localdomain\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://localhost.localdomain\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (0

444 / tcp

-1715152554 | 2025-04-04T08:06:58.306866

Hashes

hash

1953338593

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 04 Apr 2025 08:06:47 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://39.104.15.166:443/

548 / tcp

-1769206458 | 2025-03-23T16:51:04.781759

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: NASDF59D2\nMachine Type: \\x10Netatalk3.1.9.q2\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: DHX2\\x0f,No User Authent\\x10,Cleartxt Passwrd\\x00\nServer Signature: 00000000008002000180030002800280

554 / tcp

399154837 | 2025-04-12T07:33:13.654132

RTSP/1.0 200 OK\r\nServer: H264DVR 1.0\r\nCseq: 1\r\nPublic: OPTIONS, DESCRIBE, SETUP, TEARDOWN, GET_PARAMETER, SET_PARAMETER, PLAY, PAUSE\r\n\r\n

556 / tcp

921225407 | 2025-03-23T15:18:59.886122

\x00\x00\x00\x04\x00\x00\x00\x00\x00

636 / tcp

826560219 | 2025-04-02T07:25:21.709293

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 59-8951886-0 0NNN RT(1705909763732 169) q(-1 -1 -1 -1) r(0 -1) b1

666 / tcp

1300162323 | 2025-04-02T21:16:30.890336

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

789 / tcp

-441419608 | 2025-04-10T23:16:54.727595

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

805 / tcp

-1399940268 | 2025-03-21T08:04:13.426441

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

832 / tcp

-1399940268 | 2025-04-07T11:59:02.019627

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

873 / tcp

-1598265216 | 2025-04-11T19:38:27.671549

@RSYNCD: 31.0

993 / tcp

-274082663 | 2025-04-11T16:22:55.159922

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

1026 / tcp

-1399940268 | 2025-03-22T08:27:47.036440

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1207 / tcp

165188539 | 2025-04-02T11:24:51.977653

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1235 / tcp

1948301213 | 2025-04-12T10:29:16.882621

RFB 003.003
VNC:
  Protocol Version: 3.3

1414 / tcp

-2089734047 | 2025-04-12T19:43:21.575756

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1443 / tcp

-1715152554 | 2025-04-04T15:28:01.754897

Hashes

hash

883034991

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 04 Apr 2025 15:28:01 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://39.104.15.166:443/

1515 / tcp

819727972 | 2025-04-04T05:12:46.136887

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

1801 / tcp

1266492139 | 2025-03-27T22:52:32.054401

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074q\\xc0\\x86\xd9\xb0\\xc1hG\\xbf\\xbd\\x9f\\x89tx%\\x8892d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1833 / tcp

-1399940268 | 2025-03-23T16:28:20.244140

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911 / tcp

1911457608 | 2025-04-11T21:21:15.895829

\x00[\x00\x00\x00\x00\x00\x00

1960 / tcp

119860953 | 2025-04-02T13:29:00.096795

* OK ArGoSoft Mail Server IMAP Module v.YW at

1980 / tcp

117101543 | 2025-03-26T19:52:20.098682

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

1982 / tcp

-980525298 | 2025-03-27T16:46:24.466898

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1988 / tcp

819727972 | 2025-04-10T02:50:40.174880

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

2000 / tcp

-1399940268 | 2025-04-03T03:10:40.593541

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2008 / tcp

740837454 | 2025-04-11T21:20:48.441036

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

2060 / tcp

-2089734047 | 2025-04-04T07:53:49.712647

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2078 / tcp

205347087 | 2025-04-09T07:49:01.473925

SSH-25453-Cisco-3524665.35\n

2087 / tcp

1308377066 | 2025-04-11T18:46:52.573094

ncacn_http/1.0

2108 / tcp

321971019 | 2025-04-10T09:28:03.979754

-ERR client ip is not in whitelist\r

2121 / tcp

141730637 | 2025-03-23T11:07:53.190832

HTTP/1.0 200 OK
Server: Proxy

2154 / tcp

1278527606 | 2025-03-24T22:28:15.007273

SSH-2.0-Teleport

2181 / tcp

546151771 | 2025-04-03T03:08:20.758276

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2222 / tcp

2051656595 | 2025-04-12T20:22:00.427401

SSH-2.0-OpenSSH_7.4\r\n\n

2404 / tcp

709622286 | 2025-04-06T16:44:02.240239

OK Welcome <299685> on DirectUpdate server 7286\r\n

2455 / tcp

-1559123399 | 2025-03-27T18:38:17.607881

500 Permission denied - closing connection.

2562 / tcp

632542934 | 2025-04-02T18:13:14.348110

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2572 / tcp

-1297953727 | 2025-04-03T18:37:11.126126

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

2598 / tcp

-653033013 | 2025-03-25T00:50:37.771721

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

2628 / tcp

1978059005 | 2025-03-27T07:27:59.475140

Sorry, that nickname format is invalid.

2650 / tcp

-801484042 | 2025-04-03T04:21:44.112494

ERR 27

3001 / tcp

2103111368 | 2025-04-08T21:48:43.848483

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

3018 / tcp

-1399940268 | 2025-04-03T05:49:01.230118

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3053 / tcp

1504401647 | 2025-04-06T10:07:25.655958

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

3065 / tcp

165188539 | 2025-03-24T09:10:21.328751

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3066 / tcp

-1399940268 | 2025-04-06T21:44:36.242566

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3068 / tcp

-2089734047 | 2025-04-12T17:36:28.348518

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3078 / tcp

819727972 | 2025-03-21T10:10:41.745803

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3079 / tcp

819727972 | 2025-04-08T04:42:03.259245

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3088 / tcp

-1399940268 | 2025-03-27T16:54:39.440683

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3090 / tcp

-2017887953 | 2025-04-09T06:07:31.536425

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

3108 / tcp

-653033013 | 2025-04-03T23:01:07.582687

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

3124 / tcp

740837454 | 2025-03-23T23:18:14.404397

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

3143 / tcp

-653033013 | 2025-04-09T21:58:38.171913

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

3171 / tcp

1126993057 | 2025-03-27T05:44:20.599722

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

3174 / tcp

-445721795 | 2025-03-26T16:38:03.488519

\x00[\xc3\xaed\x1a\x7f\x00\x00

3197 / tcp

-1032713145 | 2025-04-11T08:45:15.995777

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

3269 / tcp

1919228981 | 2025-04-06T16:06:30.947105

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

3299 / tcp

-1248408558 | 2025-04-12T20:10:45.266766

220 MikroTik FTP server (MikroTik 6.44.3) ready

3306 / tcp

-1036944024 | 2025-04-08T22:10:37.871458

F\\x00\\x00\\x00\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MySQL server

3310 / tcp

-1399940268 | 2025-03-27T18:51:55.258666

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3388 / tcp

165188539 | 2025-03-27T23:38:18.720628

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3412 / tcp

1911457608 | 2025-04-12T20:35:35.762149

\x00[\x00\x00\x00\x00\x00\x00

3552 / tcp

-1399940268 | 2025-03-23T18:41:52.930124

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3561 / tcp

-1114821551 | 2025-03-24T01:16:17.007248

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

3780 / tcp

-971970408 | 2025-04-09T10:22:11.172845

3790 / tcp

-784071826 | 2025-03-26T06:54:10.114393

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

3910 / tcp

1353260875 | 2025-04-07T21:32:24.971481

\x00[g\xc2\x95N\x7f\x00\x00

4010 / tcp

307999478 | 2025-04-09T13:45:47.967793

unknown command \r\nunknown command \r\n

4072 / tcp

1911457608 | 2025-04-10T09:14:24.500995

\x00[\x00\x00\x00\x00\x00\x00

4150 / tcp

-1888448627 | 2025-03-22T01:30:52.787551

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

4157 / tcp

119860953 | 2025-04-08T08:59:57.827701

* OK ArGoSoft Mail Server IMAP Module v.YW at

4444 / tcp

819727972 | 2025-03-23T23:26:42.030256

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4457 / tcp

-1428621233 | 2025-03-26T11:29:24.631741

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

4463 / tcp

-1477838366 | 2025-04-03T18:35:06.569161

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

4500 / tcp

1911457608 | 2025-04-06T03:08:14.544860

\x00[\x00\x00\x00\x00\x00\x00

4506 / tcp

104385780 | 2025-04-06T17:26:06.746492

ceph v2

4786 / tcp

1911457608 | 2025-04-06T21:59:07.695741

\x00[\x00\x00\x00\x00\x00\x00

4840 / tcp

819727972 | 2025-03-22T00:44:21.205586

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4899 / tcp

-784071826 | 2025-04-07T10:49:37.845614

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

4949 / tcp

1632932802 | 2025-04-05T03:00:49.304923

4999 / tcp

321971019 | 2025-04-11T02:25:00.870495

-ERR client ip is not in whitelist\r

5007 / tcp

1911457608 | 2025-04-10T01:59:43.742886

\x00[\x00\x00\x00\x00\x00\x00

5010 / tcp

-1899074860 | 2025-04-11T20:28:14.162537

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

5119 / tcp

-1036370807 | 2025-04-07T06:50:29.712941

JDWP-Handshake

5180 / tcp

1911457608 | 2025-03-26T11:04:44.087208

\x00[\x00\x00\x00\x00\x00\x00

5209 / tcp

819727972 | 2025-03-22T17:47:52.409592

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5222 / tcp

2087396567 | 2025-04-12T20:00:45.576454

kjnkjabhbanc283ubcsbhdc72

5232 / tcp

1541211644 | 2025-03-23T14:16:34.322541

[\xc2\xba\x7fs\x7f

5237 / tcp

1911457608 | 2025-03-23T14:09:50.625961

\x00[\x00\x00\x00\x00\x00\x00

5239 / tcp

1189133115 | 2025-04-05T11:20:46.147390

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

5249 / tcp

-1399940268 | 2025-03-27T18:38:25.644208

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5250 / tcp

1911457608 | 2025-04-08T04:18:26.552665

\x00[\x00\x00\x00\x00\x00\x00

5257 / tcp

1492413928 | 2025-03-24T12:19:26.237934

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

5435 / tcp

-1810987450 | 2025-04-03T21:21:34.543672

\xc3\xbf

5440 / tcp

1767620294 | 2025-04-06T22:43:41.889724

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 14-117579287-0 0NNN RT(1700584486788 175) q(0 -1 -1 -1) r(0 -1)

5543 / tcp

-832380282 | 2025-04-06T00:06:40.229529

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

5672 / tcp

575925250 | 2025-04-01T20:36:36.499989

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5909 / tcp

1665283070 | 2025-04-06T14:15:29.578537

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x00\x00\n0\x03\x00\x00\x00\x01\x00\x05\x00\x00@\x00\x00\x06\x00\x00\x1f@

5911 / tcp

1665283070 | 2025-03-23T10:56:25.269316

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x00\x00\n0\x03\x00\x00\x00\x01\x00\x05\x00\x00@\x00\x00\x06\x00\x00\x1f@

5984 / tcp

1999272906 | 2025-04-04T06:59:14.474870

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

2087396567 | 2025-03-21T14:46:27.866270

kjnkjabhbanc283ubcsbhdc72

6000 / tcp

-2140303521 | 2025-04-11T23:02:02.120364

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

6001 / tcp

669849225 | 2025-04-03T12:02:17.608722

SSH-98.60-SysaxSSH_81885..42\r\n

6002 / tcp

1632932802 | 2025-03-21T04:54:54.435963

6003 / tcp

-1399940268 | 2025-04-05T22:30:40.057310

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6379 / tcp

321971019 | 2025-04-04T13:49:53.279817

-ERR client ip is not in whitelist\r

6543 / tcp

585385810 | 2025-04-03T17:41:34.596275

\\xba\\xdc\xcd\xab\\x01#%0C\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xbbX\\x00\\x00\\x00\\x00\\x00\\x00[105][14:16:24.010]\\xc1\\xac\\xbd\xd3\xb3\xc9\xb9\\xa6\\xa3\\xac\\xb1\\xbe\xc4\xa3\\xbf\\xe9 PID \xce\xaa 0x23=35\\x00\\xba\\xdc\xcd\xab\\x01#%0_\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xbbX\\x00\\x00\\x00\\x00\\x00\\x00[106][14:16:24.010]\\xc7\\xeb\xca

6633 / tcp

1911457608 | 2025-04-13T00:24:11.191043

\x00[\x00\x00\x00\x00\x00\x00

6668 / tcp

1919228981 | 2025-04-02T07:14:30.208278

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

7010 / tcp

1370263973 | 2025-04-06T11:31:06.944814

dubbo>

7015 / tcp

-1730858130 | 2025-03-22T12:24:22.336006

RFB 003.008
VNC:
  Protocol Version: 3.8

7087 / tcp

-1626979812 | 2025-04-12T19:07:20.326025

220 Service ready for new user.

7090 / tcp

819727972 | 2025-04-06T03:09:09.145667

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

7171 / tcp

307999478 | 2025-04-02T10:02:48.502796

unknown command \r\nunknown command \r\n

7172 / tcp

1282941221 | 2025-04-08T07:13:27.479237

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

7218 / tcp

819727972 | 2025-04-12T13:29:15.538506

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

7331 / tcp

-136006866 | 2025-03-22T03:16:59.091448

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

7349 / tcp

-1399940268 | 2025-04-11T11:54:38.216180

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7415 / tcp

-1399940268 | 2025-04-01T18:14:39.066338

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7434 / tcp

1282941221 | 2025-03-21T15:59:46.096255

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

7445 / tcp

-653033013 | 2025-04-04T09:30:51.710380

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

7480 / tcp

1911457608 | 2025-04-09T04:00:03.085013

\x00[\x00\x00\x00\x00\x00\x00

7777 / tcp

1391945995 | 2025-04-07T08:44:35.550590

HTTP/1.1 403 Forbidden 
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm=""

7780 / tcp

-1032713145 | 2025-04-08T21:57:32.258715

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8003 / tcp

165188539 | 2025-04-02T05:36:25.124371

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8009 / tcp

1690634669 | 2025-04-12T13:07:09.408763

8035 / tcp

-653033013 | 2025-04-03T10:37:53.990561

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

8047 / tcp

-2089734047 | 2025-03-23T03:47:03.439559

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8062 / tcp

580340387 | 2025-04-10T02:33:16.881134

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

8084 / tcp

-1399940268 | 2025-04-12T00:11:16.379173

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8087 / tcp

1911457608 | 2025-04-12T22:48:55.714459

\x00[\x00\x00\x00\x00\x00\x00

8094 / tcp

-1327660293 | 2025-04-05T13:22:52.383763

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

8113 / tcp

-1888448627 | 2025-04-03T18:27:37.453385

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8128 / tcp

-2031152423 | 2025-03-28T00:52:10.604503

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8139 / tcp

2087396567 | 2025-03-24T20:17:13.264373

kjnkjabhbanc283ubcsbhdc72

8140 / tcp

-314039103 | 2025-03-26T19:01:16.260451

Surnom.
Sorry, that nickname format is invalid.

8160 / tcp

1642597142 | 2025-04-05T19:57:17.294959

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

8167 / tcp

15018106 | 2025-03-26T23:35:26.979386

\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00

8179 / tcp

819727972 | 2025-04-05T18:02:17.667801

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8197 / tcp

-653033013 | 2025-04-06T09:28:36.203533

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

8200 / tcp

-877598700 | 2025-04-07T20:08:27.918272

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\\x01\xc3\xbf\xc3\xbb\\x03\xc3\xbf\xc3\xbd\\x01\xc3\xbf\xc3\xbe\\x01Username:

8222 / tcp

248869423 | 2025-04-10T14:59:42.776878

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae219d_PS-HFE-01xMN69_18009-60063

8318 / tcp

819727972 | 2025-04-01T03:27:40.689494

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8333 / tcp

-1261053701 | 2025-04-01T03:19:49.489023

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

8384 / tcp

2087396567 | 2025-04-04T05:54:33.035534

kjnkjabhbanc283ubcsbhdc72

8406 / tcp

1911457608 | 2025-03-24T08:25:21.461593

\x00[\x00\x00\x00\x00\x00\x00

8417 / tcp

-2096652808 | 2025-04-03T19:41:15.407870

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8503 / tcp

1996932384 | 2025-04-06T10:45:25.232810

"raop" nonce

8519 / tcp

-1399940268 | 2025-04-12T18:10:43.284831

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8545 / tcp

-358801646 | 2025-04-10T21:06:50.490995

SSH-2.0-OpenSSH_6.6.1

8554 / tcp

819727972 | 2025-04-10T14:16:05.556149

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8556 / tcp

-1399940268 | 2025-03-27T18:00:16.385357

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8570 / tcp

-2096652808 | 2025-04-12T21:11:28.540135

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8605 / tcp

-1888448627 | 2025-03-23T15:03:15.384380

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8607 / tcp

1911457608 | 2025-03-27T23:46:23.836620

\x00[\x00\x00\x00\x00\x00\x00

8728 / tcp

-2089734047 | 2025-04-07T15:15:37.436576

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8803 / tcp

819727972 | 2025-03-27T18:39:31.683727

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8804 / tcp

819727972 | 2025-04-02T12:39:31.552084

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8823 / tcp

-2046514463 | 2025-04-11T16:59:46.500439

AB\x01\t

8826 / tcp

103159425 | 2025-03-22T20:08:36.083276

SSH-1.99-RGOS_SSH

8857 / tcp

740837454 | 2025-04-08T10:48:18.804716

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

8880 / tcp

-1032713145 | 2025-04-05T00:09:50.855787

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8901 / tcp

-2096652808 | 2025-04-03T21:20:42.072322

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8905 / tcp

1911457608 | 2025-04-12T06:06:34.785606

\x00[\x00\x00\x00\x00\x00\x00

8911 / tcp

165188539 | 2025-04-12T18:49:07.482463

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9001 / tcp

-1026951088 | 2025-03-22T22:29:10.440614

erro ip

9025 / tcp

677934968 | 2025-03-27T03:50:41.785727

lm^)Q

9028 / tcp

1492413928 | 2025-04-11T23:31:19.154460

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

9036 / tcp

165188539 | 2025-04-01T06:08:01.339886

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9042 / tcp

-1626979812 | 2025-04-02T18:14:52.394380

220 Service ready for new user.

9051 / tcp

599074451 | 2025-04-08T05:37:56.837723

msg

9078 / tcp

-1888448627 | 2025-04-07T18:17:03.882323

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9100 / tcp

1189133115 | 2025-04-09T15:18:36.442882

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

9113 / tcp

-1399940268 | 2025-03-27T18:04:00.512437

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9151 / tcp

863754335 | 2025-04-11T23:26:56.940700

0a

9157 / tcp

-1888448627 | 2025-03-21T04:46:55.227270

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9174 / tcp

-1026951088 | 2025-03-24T04:38:29.136243

erro ip

9181 / tcp

-1329831334 | 2025-04-10T19:27:47.868777

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

9193 / tcp

-1399940268 | 2025-03-23T07:53:11.398480

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9206 / tcp

-1399940268 | 2025-03-27T23:46:10.983206

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9215 / tcp

1363464823 | 2025-04-01T16:46:19.012738

\x00[|ox\x7f\x00\x00

9248 / tcp

-1888448627 | 2025-04-12T16:46:45.326613

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9257 / tcp

1543809371 | 2025-03-27T21:06:16.040295

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

9273 / tcp

1911457608 | 2025-04-08T17:14:35.296834

\x00[\x00\x00\x00\x00\x00\x00

9306 / tcp

-441419608 | 2025-04-07T18:28:53.218213

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

9307 / tcp

1632932802 | 2025-04-01T21:44:13.618476

9333 / tcp

819727972 | 2025-04-08T05:18:16.230042

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9351 / tcp

1363464823 | 2025-04-07T16:33:37.503127

\x00[|ox\x7f\x00\x00

9418 / tcp

1909672637 | 2025-03-26T07:09:16.930729

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff

9447 / tcp

1989907056 | 2025-03-27T18:14:53.878640

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

9527 / tcp

-375604792 | 2025-04-09T07:18:24.440752

220 Microsoft FTP Service

9600 / tcp

819727972 | 2025-04-12T23:25:46.776736

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9606 / tcp

165188539 | 2025-04-05T15:20:33.997757

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9633 / tcp

-441419608 | 2025-04-12T21:55:37.927865

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

9682 / tcp

117101543 | 2025-04-08T14:27:43.075300

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

9734 / tcp

1762042191 | 2025-04-04T22:42:06.826246

\x7f\x7fICA\x00

9761 / tcp

2121220663 | 2025-04-11T22:01:19.557093

SSH-58-Ingrian_SSH\r\n

9944 / tcp

-1529979118 | 2025-03-28T00:26:37.743162

inv2W

9993 / tcp

-1996280214 | 2025-03-24T18:12:30.529475

\x06\x04\x05@

9999 / tcp

1161309183 | 2025-04-03T15:44:17.516163

ProxyServer is ready

10003 / tcp

677934968 | 2025-04-12T12:32:44.659552

lm^)Q

10018 / tcp

632542934 | 2025-03-24T07:02:49.874570

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

10039 / tcp

-1399940268 | 2025-04-08T19:43:52.146554

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10051 / tcp

-801484042 | 2025-04-06T10:37:15.976028

ERR 27

10081 / tcp

-2107996212 | 2025-04-06T11:19:31.932159

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

10134 / tcp

-1399940268 | 2025-04-01T20:34:33.178420

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10180 / tcp

698877129 | 2025-04-03T07:08:55.816842

\\x00[\'\\xc4\\xc0\\xa8X\\xfd

10397 / tcp

1665283070 | 2025-04-04T02:01:59.465267

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x00\x00\n0\x03\x00\x00\x00\x01\x00\x05\x00\x00@\x00\x00\x06\x00\x00\x1f@

10480 / tcp

-1105333987 | 2025-04-04T18:00:34.152454

\x00[KpU\x7f\x00\x00

10894 / tcp

921225407 | 2025-03-21T02:47:23.648961

\x00\x00\x00\x04\x00\x00\x00\x00\x00

10911 / tcp

-1947777893 | 2025-03-22T18:47:35.302966

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

11112 / tcp

-2089734047 | 2025-04-10T23:57:13.061925

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

11211 / tcp

-136006866 | 2025-04-11T18:12:35.948873

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11288 / tcp

422524323 | 2025-04-07T10:53:59.313182

{
"Version": "3.4.18",
"VersionArray": [
3,
4,
18,
0
],
"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",
"OpenSSLVersion": "",
"SysInfo": "",
"Bits": 64,
"Debug": false,
"MaxObjectSize": 16777216
}

11300 / tcp

-1888448627 | 2025-03-23T02:57:10.575804

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12106 / tcp

117101543 | 2025-03-21T21:27:31.320457

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

12125 / tcp

-1779118422 | 2025-04-07T16:56:53.342647

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

12150 / tcp

-1730858130 | 2025-04-08T09:35:24.820250

RFB 003.008
VNC:
  Protocol Version: 3.8

12160 / tcp

-1399940268 | 2025-04-03T10:55:33.098637

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12183 / tcp

819727972 | 2025-03-24T23:50:34.458142

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12193 / tcp

-1013082686 | 2025-04-09T10:04:18.191977

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

12198 / tcp

-1327660293 | 2025-04-06T05:11:39.846888

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12213 / tcp

2063598737 | 2025-03-22T14:08:35.317255

/0 0 L\r\n/0 0 HUH\r\n

12242 / tcp

1504401647 | 2025-03-22T08:01:24.958499

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

12249 / tcp

819727972 | 2025-04-01T23:09:36.765887

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12276 / tcp

-1399940268 | 2025-04-05T04:46:44.952201

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12278 / tcp

1911457608 | 2025-03-22T08:17:47.432939

\x00[\x00\x00\x00\x00\x00\x00

12280 / tcp

-2089734047 | 2025-03-21T19:57:20.319669

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12285 / tcp

1077013874 | 2025-03-22T20:32:54.038726

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

12291 / tcp

-1327660293 | 2025-04-07T15:41:23.610750

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12297 / tcp

89142341 | 2025-03-27T11:09:57.777106

\x05\x00\x00\x00\x0b\x08\x05\x1a\x00

12305 / tcp

632542934 | 2025-04-09T20:20:19.165788

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12308 / tcp

1911457608 | 2025-03-22T01:40:46.120618

\x00[\x00\x00\x00\x00\x00\x00

12326 / tcp

408230060 | 2025-03-22T12:26:29.401516

\r\nSorry, that nickname format is invalid.\r\n

12345 / tcp

142594048 | 2025-03-21T21:25:41.791378

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae29bb_CS-000-01pYi173_32176-13938

12384 / tcp

1911457608 | 2025-03-27T22:55:43.764620

\x00[\x00\x00\x00\x00\x00\x00

12400 / tcp

-1888448627 | 2025-03-22T19:31:34.274796

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12413 / tcp

1911457608 | 2025-04-02T07:11:36.789015

\x00[\x00\x00\x00\x00\x00\x00

12414 / tcp

1911457608 | 2025-03-22T06:12:59.430064

\x00[\x00\x00\x00\x00\x00\x00

12423 / tcp

597764502 | 2025-03-21T22:36:34.090671

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

12425 / tcp

819727972 | 2025-04-01T21:13:56.865693

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12435 / tcp

921225407 | 2025-03-23T19:40:15.757773

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12440 / tcp

321971019 | 2025-04-07T05:36:44.053303

-ERR client ip is not in whitelist\r

12467 / tcp

1911457608 | 2025-03-22T19:09:31.985660

\x00[\x00\x00\x00\x00\x00\x00

12475 / tcp

-832380282 | 2025-04-06T01:32:51.041553

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

12480 / tcp

-2017887953 | 2025-04-09T22:31:16.076703

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

12487 / tcp

1208318993 | 2025-04-12T00:53:31.916174

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

12501 / tcp

-1947777893 | 2025-04-02T11:03:50.470981

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

12526 / tcp

-1839934832 | 2025-03-21T22:01:14.348690

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12539 / tcp

-1114821551 | 2025-04-07T07:39:11.068921

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

12545 / tcp

-1399940268 | 2025-04-12T18:15:17.729267

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12548 / tcp

1911457608 | 2025-04-01T09:34:00.195167

\x00[\x00\x00\x00\x00\x00\x00

12563 / tcp

-1399940268 | 2025-04-10T17:36:43.163421

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12565 / tcp

1911457608 | 2025-04-01T13:12:58.379453

\x00[\x00\x00\x00\x00\x00\x00

12575 / tcp

1948301213 | 2025-04-10T05:11:20.756749

RFB 003.003
VNC:
  Protocol Version: 3.3

12601 / tcp

597764502 | 2025-04-01T12:23:44.569053

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

13047 / tcp

-1375131644 | 2025-04-06T17:55:24.136435

\x00[v\xc3\xbdC\x7f\x00\x00

13084 / tcp

205347087 | 2025-04-06T21:21:50.823226

SSH-25453-Cisco-3524665.35\n

13333 / tcp

504717326 | 2025-03-23T07:32:19.899580

SSH-2.0-OpenSSH_8.6

Vulnerabilities

2 3 6 1

14265 / tcp

-653033013 | 2025-04-04T22:04:15.998351

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

14403 / tcp

-1399940268 | 2025-04-02T19:29:49.685676

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14909 / tcp

819727972 | 2025-04-08T18:51:06.895383

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

15000 / tcp

1259135152 | 2025-04-07T08:12:42.945917

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae27fe_CS-000-01MnD38_7018-12810

15084 / tcp

1308377066 | 2025-04-03T00:21:54.672958

ncacn_http/1.0

15831 / tcp

1911457608 | 2025-04-07T17:25:30.057510

\x00[\x00\x00\x00\x00\x00\x00

16017 / tcp

1911457608 | 2025-03-26T19:25:40.761918

\x00[\x00\x00\x00\x00\x00\x00

16018 / tcp

-147424911 | 2025-04-04T04:30:41.254514

HTTP/1.1 404 Not Found
Content Length: 0

16022 / tcp

921225407 | 2025-03-22T19:38:27.227799

\x00\x00\x00\x04\x00\x00\x00\x00\x00

16048 / tcp

-1453516345 | 2025-03-23T16:12:35.569433

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

16081 / tcp

819727972 | 2025-04-10T09:48:29.216425

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

16095 / tcp

-1435414831 | 2025-04-11T17:39:49.717496

roku: ready\r\n

16102 / tcp

1911457608 | 2025-04-05T14:05:50.839772

\x00[\x00\x00\x00\x00\x00\x00

16464 / tcp

2087396567 | 2025-04-02T09:39:11.868395

kjnkjabhbanc283ubcsbhdc72

16831 / tcp

320677201 | 2025-04-02T17:24:41.973991

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

16992 / tcp

-1840324437 | 2025-03-22T16:26:21.674559

16993 / tcp

2087396567 | 2025-03-22T16:16:54.253127

kjnkjabhbanc283ubcsbhdc72

18015 / tcp

-142686627 | 2025-04-12T11:07:55.159449

\x00[\xc2\xba\x7fs\x7f\x00\x00

18018 / tcp

-1399940268 | 2025-04-05T03:26:47.216962

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18028 / tcp

-1399940268 | 2025-04-06T06:07:32.806530

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18030 / tcp

-457235091 | 2025-04-10T18:23:01.651567

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

18035 / tcp

819727972 | 2025-04-13T00:12:25.814282

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

18043 / tcp

2063598737 | 2025-04-06T22:15:29.036535

/0 0 L\r\n/0 0 HUH\r\n

18051 / tcp

-1399940268 | 2025-04-11T22:29:44.365884

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18059 / tcp

1911457608 | 2025-03-27T14:55:48.658325

\x00[\x00\x00\x00\x00\x00\x00

18060 / tcp

-653033013 | 2025-04-06T20:54:20.337441

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

18063 / tcp

632542934 | 2025-03-22T13:34:42.207629

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

18066 / tcp

320677201 | 2025-04-02T17:23:21.144942

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

18069 / tcp

-1428621233 | 2025-04-04T09:37:49.796813

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

18076 / tcp

1282941221 | 2025-04-10T11:53:39.057047

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

18081 / tcp

-1810987450 | 2025-04-09T07:44:12.464631

\xc3\xbf

18087 / tcp

1126993057 | 2025-03-21T21:47:39.733609

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

18109 / tcp

-1036370807 | 2025-04-07T15:29:40.452277

JDWP-Handshake

18245 / tcp

2087396567 | 2025-04-04T00:29:03.561716

kjnkjabhbanc283ubcsbhdc72

18553 / tcp

842535728 | 2025-04-06T19:53:40.934475

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

19000 / tcp

-1399940268 | 2025-03-23T23:50:42.661929

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

19014 / tcp

-1105333987 | 2025-04-04T21:09:36.270046

\x00[KpU\x7f\x00\x00

19930 / tcp

1842524259 | 2025-03-26T17:17:30.896781

20000 / tcp

1900503736 | 2025-04-08T23:44:48.960251

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20018 / tcp

1574088840 | 2025-03-24T00:03:56.245628

">Application and Content Networking Software 3.9</a>)\n</BODY><

20020 / tcp

-1399940268 | 2025-04-02T03:55:34.139239

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20060 / tcp

1011407350 | 2025-03-23T12:14:53.435147

* OK GroupWise IMAP4rev1 Server Ready\r\n

20110 / tcp

-1013082686 | 2025-04-02T23:34:55.191162

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

20256 / tcp

1636811864 | 2025-04-07T21:32:57.085504

20443 / tcp

-1099385124 | 2025-04-10T00:50:27.245572

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

20512 / tcp

-1399940268 | 2025-04-05T07:35:07.485111

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20547 / tcp

-905685638 | 2025-04-12T22:19:34.869693

bxz437

21025 / tcp

819727972 | 2025-04-12T22:32:00.070067

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

21027 / tcp

1308377066 | 2025-04-04T07:44:37.878207

ncacn_http/1.0

21248 / tcp

-1026951088 | 2025-03-26T16:07:46.742167

erro ip

21313 / tcp

-2089734047 | 2025-03-21T05:58:49.000560

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

21322 / tcp

-1399940268 | 2025-03-26T07:18:02.498711

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21328 / tcp

921225407 | 2025-04-10T17:56:06.444707

\x00\x00\x00\x04\x00\x00\x00\x00\x00

21379 / tcp

-321444299 | 2025-03-24T16:37:57.677826

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

22000 / tcp

-2096652808 | 2025-04-01T17:45:31.547959

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

22001 / tcp

819727972 | 2025-04-04T04:56:21.764940

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

22067 / tcp

1842524259 | 2025-04-02T03:29:07.977733

22222 / tcp

-358801646 | 2025-04-12T16:59:32.148706

SSH-2.0-OpenSSH_6.6.1

22556 / tcp

408230060 | 2025-04-11T04:09:41.873096

\r\nSorry, that nickname format is invalid.\r\n

23023 / tcp

-1730858130 | 2025-04-12T11:36:29.659254

RFB 003.008
VNC:
  Protocol Version: 3.8

23424 / tcp

2087396567 | 2025-04-12T08:53:59.512696

kjnkjabhbanc283ubcsbhdc72

24245 / tcp

819727972 | 2025-04-06T06:46:43.676577

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

25001 / tcp

-1114821551 | 2025-04-04T19:57:32.223852

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

25105 / tcp

-2118655245 | 2025-04-12T15:22:16.006325

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

25565 / tcp

-1399940268 | 2025-03-23T01:11:56.520064

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

26656 / tcp

-1375131644 | 2025-04-07T17:57:21.003869

\x00[v\xc3\xbdC\x7f\x00\x00

26657 / tcp

2087396567 | 2025-04-07T15:00:01.598866

kjnkjabhbanc283ubcsbhdc72

27015 / tcp

1286504516 | 2025-04-12T13:22:39.650362

CP2E Control Console
Connected to Host: gZI

27016 / tcp

1370263973 | 2025-04-11T21:37:08.497181

dubbo>

27017 / tcp

1763259671 | 2025-04-02T19:03:11.828262

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

27036 / tcp

546151771 | 2025-04-03T01:30:39.608733

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

28015 / tcp

104385780 | 2025-04-02T19:06:02.589025

ceph v2

28017 / tcp

-971970408 | 2025-04-02T10:44:07.945146

28080 / tcp

1911457608 | 2025-04-11T04:56:55.335893

\x00[\x00\x00\x00\x00\x00\x00

30002 / tcp

-1681927087 | 2025-04-08T00:17:23.914220

kjnkjabhbanc283ubcsbhdc72

30006 / tcp

-1399940268 | 2025-04-02T12:53:33.437499

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

30106 / tcp

-1810987450 | 2025-03-26T17:04:43.026222

\xc3\xbf

30123 / tcp

-339084706 | 2025-03-22T14:29:13.326104

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

30222 / tcp

-1248408558 | 2025-04-05T18:31:20.510750

220 MikroTik FTP server (MikroTik 6.44.3) ready

30301 / tcp

819727972 | 2025-04-09T05:49:00.785883

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

30322 / tcp

-1428621233 | 2025-03-24T13:11:25.423074

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

30468 / tcp

-136006866 | 2025-04-06T20:04:31.579255

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

30522 / tcp

819727972 | 2025-04-06T05:16:45.348719

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

30718 / tcp

428036883 | 2025-04-11T19:20:01.007929

LH\xdb\xc6\xdd\xf6g\x10\x19\x00\x00\x00\x18\x00\x01\x02\x00\x10\x00\x04\x00\x00\x00\x01b\xa8\xacO\xd0\x10D!\xce\x19Aa\xaf\x04\x8c\xfe

30722 / tcp

-971970408 | 2025-04-05T04:54:48.580470

30922 / tcp

1741579575 | 2025-04-06T00:55:18.721517

31022 / tcp

-1529979118 | 2025-04-05T17:02:00.786509

inv2W

31122 / tcp

1286504516 | 2025-04-05T13:21:11.774347

CP2E Control Console
Connected to Host: gZI

31322 / tcp

819727972 | 2025-04-05T09:54:35.218855

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

31522 / tcp

-1839934832 | 2025-03-23T11:13:33.546583

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

32080 / tcp

1911457608 | 2025-04-02T03:14:56.190215

\x00[\x00\x00\x00\x00\x00\x00

32400 / tcp

539065883 | 2025-04-12T02:26:44.691675

32443 / tcp

1911457608 | 2025-04-10T07:27:15.929570

\x00[\x00\x00\x00\x00\x00\x00

32444 / tcp

1655023012 | 2025-04-10T19:35:33.140079

athinfod: invalid query.\n

32722 / tcp

-407828767 | 2025-03-23T05:28:16.912466

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

32764 / tcp

1208318993 | 2025-04-02T20:15:00.355361

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

33060 / tcp

380146262 | 2025-04-10T18:07:32.387599

@RSYNCD: 30.0

33122 / tcp

-1316491703 | 2025-03-22T21:57:59.520717

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

33338 / tcp

819727972 | 2025-04-02T16:48:43.732991

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

35000 / tcp

1911457608 | 2025-03-22T11:19:56.820564

\x00[\x00\x00\x00\x00\x00\x00

37215 / tcp

1842524259 | 2025-04-02T15:06:22.255139

37777 / tcp

2087396567 | 2025-04-11T08:26:04.327275

kjnkjabhbanc283ubcsbhdc72

41443 / tcp

-971970408 | 2025-04-07T19:43:55.633475

41794 / tcp

-971970408 | 2025-04-11T11:41:57.585054

41800 / tcp

-1399940268 | 2025-04-04T10:42:00.700756

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

42194 / tcp

-2107996212 | 2025-04-08T16:52:05.437785

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

42420 / tcp

-1746074029 | 2025-04-11T16:55:18.294089

101 imqbroker =unV\r\n

43009 / tcp

-1399940268 | 2025-04-01T12:20:31.725515

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44158 / tcp

-433302150 | 2025-04-11T19:30:00.000562

/multistream/1.0.0

44303 / tcp

-1399940268 | 2025-04-04T05:06:09.734260

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44334 / tcp

1911457608 | 2025-03-26T07:38:54.502941

\x00[\x00\x00\x00\x00\x00\x00

44500 / tcp

-1399940268 | 2025-03-23T03:00:34.245890

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44818 / tcp

-1399940268 | 2025-04-01T18:00:22.643106

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

45000 / tcp

-1399940268 | 2025-04-12T12:06:07.683341

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

47808 / tcp

819727972 | 2025-04-10T17:42:07.304534

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

49153 / tcp

-1810987450 | 2025-04-02T07:00:11.036056

\xc3\xbf

49682 / tcp

819727972 | 2025-04-04T23:55:29.846821

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

49686 / tcp

1308377066 | 2025-04-02T08:11:06.851381

ncacn_http/1.0

50000 / tcp

1842524259 | 2025-04-11T00:39:04.666633

50012 / tcp

51259122 | 2025-03-22T00:38:22.168642

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

50050 / tcp

-1681927087 | 2025-04-10T23:06:47.578876

kjnkjabhbanc283ubcsbhdc72

50070 / tcp

1282941221 | 2025-03-22T00:22:48.216768

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

50100 / tcp

-1681927087 | 2025-04-02T05:40:53.106709

kjnkjabhbanc283ubcsbhdc72

51200 / tcp

-407828767 | 2025-03-22T20:48:47.651631

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

51235 / tcp

1852418385 | 2025-04-10T14:16:14.747819

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

53413 / tcp

-358801646 | 2025-03-22T01:38:25.071705

SSH-2.0-OpenSSH_6.6.1

53481 / tcp

-2089734047 | 2025-03-27T17:02:58.224070

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

53805 / tcp

-1399940268 | 2025-04-08T19:59:25.078865

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

54138 / tcp

455076604 | 2025-03-24T19:09:38.871245

!\x07version\x04bind7 t{RPowerDNS Recursor 410

54984 / tcp

472902042 | 2025-04-10T06:39:03.606975

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

55000 / tcp

-1059554316 | 2025-04-01T21:31:23.794328

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

55553 / tcp

2087396567 | 2025-04-05T07:35:49.277169

kjnkjabhbanc283ubcsbhdc72

55554 / tcp

2087396567 | 2025-04-11T16:44:29.856825

kjnkjabhbanc283ubcsbhdc72

57778 / tcp

-2089734047 | 2025-04-10T17:55:36.122091

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

57788 / tcp

1189133115 | 2025-04-01T17:57:33.720008

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

58378 / tcp

1911457608 | 2025-03-22T20:49:51.837317

\x00[\x00\x00\x00\x00\x00\x00

60021 / tcp

-792826324 | 2025-04-11T13:11:10.449540

220 FTP server ready - login please

60129 / tcp

1842524259 | 2025-04-08T07:16:34.727761

60443 / tcp

1122602129 | 2025-03-27T17:32:33.750283

HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=15552000
Connection: keep-alive
Transfer-Encoding: chunked

61613 / tcp

-358801646 | 2025-04-03T07:16:06.954039

SSH-2.0-OpenSSH_6.6.1

61616 / tcp

539065883 | 2025-04-06T19:33:34.078694

63256 / tcp

1632932802 | 2025-04-12T21:40:57.722163

63257 / tcp

474736340 | 2025-04-06T21:29:28.537013

431 Unable to negotiate secure command connection.

63260 / tcp

2087396567 | 2025-04-07T04:49:17.757180

kjnkjabhbanc283ubcsbhdc72

65000 / tcp

1906191280 | 2025-04-02T09:25:26.295523

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 657d0443_jdx210_8928-57530

39.104.15.166

Last Seen: 2025-04-13

Tags:

GeneralInformation

OpenPorts

17 / tcp 1852418385 | 2025-04-08T20:13:10.603157

19 / tcp 751496153 | 2025-04-02T17:52:31.409221

21 / tcp -1248408558 | 2025-04-06T06:37:36.554375

22 / tcp -1949170930 | 2025-04-12T09:17:14.434862

49 / tcp -801484042 | 2025-04-05T20:33:55.547187

90 / tcp -2089734047 | 2025-03-22T15:41:07.261361

92 / tcp -358801646 | 2025-04-10T19:51:01.410965

102 / tcp 103159425 | 2025-04-12T16:49:34.506790

111 / tcp 1408744601 | 2025-04-08T19:23:39.855274

175 / tcp -441419608 | 2025-04-10T01:42:03.334053

221 / tcp 1623746877 | 2025-04-11T23:12:52.147885

264 / tcp -1932800090 | 2025-03-26T07:17:26.381257

427 / tcp 1327409218 | 2025-03-22T05:32:12.556843

444 / tcp -1715152554 | 2025-04-04T08:06:58.306866

Hashes

548 / tcp -1769206458 | 2025-03-23T16:51:04.781759

554 / tcp 399154837 | 2025-04-12T07:33:13.654132

556 / tcp 921225407 | 2025-03-23T15:18:59.886122

636 / tcp 826560219 | 2025-04-02T07:25:21.709293

666 / tcp 1300162323 | 2025-04-02T21:16:30.890336

789 / tcp -441419608 | 2025-04-10T23:16:54.727595

805 / tcp -1399940268 | 2025-03-21T08:04:13.426441

832 / tcp -1399940268 | 2025-04-07T11:59:02.019627

873 / tcp -1598265216 | 2025-04-11T19:38:27.671549

993 / tcp -274082663 | 2025-04-11T16:22:55.159922

1026 / tcp -1399940268 | 2025-03-22T08:27:47.036440

1207 / tcp 165188539 | 2025-04-02T11:24:51.977653

1235 / tcp 1948301213 | 2025-04-12T10:29:16.882621

1414 / tcp -2089734047 | 2025-04-12T19:43:21.575756

1443 / tcp -1715152554 | 2025-04-04T15:28:01.754897

Hashes

1515 / tcp 819727972 | 2025-04-04T05:12:46.136887

1801 / tcp 1266492139 | 2025-03-27T22:52:32.054401

1833 / tcp -1399940268 | 2025-03-23T16:28:20.244140

1911 / tcp 1911457608 | 2025-04-11T21:21:15.895829

1960 / tcp 119860953 | 2025-04-02T13:29:00.096795

1980 / tcp 117101543 | 2025-03-26T19:52:20.098682

1982 / tcp -980525298 | 2025-03-27T16:46:24.466898

1988 / tcp 819727972 | 2025-04-10T02:50:40.174880

2000 / tcp -1399940268 | 2025-04-03T03:10:40.593541

2008 / tcp 740837454 | 2025-04-11T21:20:48.441036

2060 / tcp -2089734047 | 2025-04-04T07:53:49.712647

2078 / tcp 205347087 | 2025-04-09T07:49:01.473925

2087 / tcp 1308377066 | 2025-04-11T18:46:52.573094

2108 / tcp 321971019 | 2025-04-10T09:28:03.979754

2121 / tcp 141730637 | 2025-03-23T11:07:53.190832

2154 / tcp 1278527606 | 2025-03-24T22:28:15.007273

2181 / tcp 546151771 | 2025-04-03T03:08:20.758276

2222 / tcp 2051656595 | 2025-04-12T20:22:00.427401

2404 / tcp 709622286 | 2025-04-06T16:44:02.240239

2455 / tcp -1559123399 | 2025-03-27T18:38:17.607881

2562 / tcp 632542934 | 2025-04-02T18:13:14.348110

2572 / tcp -1297953727 | 2025-04-03T18:37:11.126126

2598 / tcp -653033013 | 2025-03-25T00:50:37.771721

2628 / tcp 1978059005 | 2025-03-27T07:27:59.475140

2650 / tcp -801484042 | 2025-04-03T04:21:44.112494

3001 / tcp 2103111368 | 2025-04-08T21:48:43.848483

3018 / tcp -1399940268 | 2025-04-03T05:49:01.230118

3053 / tcp 1504401647 | 2025-04-06T10:07:25.655958

3065 / tcp 165188539 | 2025-03-24T09:10:21.328751

3066 / tcp -1399940268 | 2025-04-06T21:44:36.242566

3068 / tcp -2089734047 | 2025-04-12T17:36:28.348518

3078 / tcp 819727972 | 2025-03-21T10:10:41.745803

3079 / tcp 819727972 | 2025-04-08T04:42:03.259245

3088 / tcp -1399940268 | 2025-03-27T16:54:39.440683

3090 / tcp -2017887953 | 2025-04-09T06:07:31.536425

3108 / tcp -653033013 | 2025-04-03T23:01:07.582687

3124 / tcp 740837454 | 2025-03-23T23:18:14.404397

3143 / tcp -653033013 | 2025-04-09T21:58:38.171913

3171 / tcp 1126993057 | 2025-03-27T05:44:20.599722

3174 / tcp -445721795 | 2025-03-26T16:38:03.488519

3197 / tcp -1032713145 | 2025-04-11T08:45:15.995777

3269 / tcp 1919228981 | 2025-04-06T16:06:30.947105

3299 / tcp -1248408558 | 2025-04-12T20:10:45.266766

3306 / tcp -1036944024 | 2025-04-08T22:10:37.871458

17 / tcp

1852418385 | 2025-04-08T20:13:10.603157

19 / tcp

751496153 | 2025-04-02T17:52:31.409221

21 / tcp

-1248408558 | 2025-04-06T06:37:36.554375

22 / tcp

-1949170930 | 2025-04-12T09:17:14.434862

49 / tcp

-801484042 | 2025-04-05T20:33:55.547187

90 / tcp

-2089734047 | 2025-03-22T15:41:07.261361

92 / tcp

-358801646 | 2025-04-10T19:51:01.410965

102 / tcp

103159425 | 2025-04-12T16:49:34.506790

111 / tcp

1408744601 | 2025-04-08T19:23:39.855274

175 / tcp

-441419608 | 2025-04-10T01:42:03.334053

221 / tcp

1623746877 | 2025-04-11T23:12:52.147885

264 / tcp

-1932800090 | 2025-03-26T07:17:26.381257

427 / tcp

1327409218 | 2025-03-22T05:32:12.556843

444 / tcp

-1715152554 | 2025-04-04T08:06:58.306866

548 / tcp

-1769206458 | 2025-03-23T16:51:04.781759

554 / tcp

399154837 | 2025-04-12T07:33:13.654132

556 / tcp

921225407 | 2025-03-23T15:18:59.886122

636 / tcp

826560219 | 2025-04-02T07:25:21.709293

666 / tcp

1300162323 | 2025-04-02T21:16:30.890336

789 / tcp

-441419608 | 2025-04-10T23:16:54.727595

805 / tcp

-1399940268 | 2025-03-21T08:04:13.426441

832 / tcp

-1399940268 | 2025-04-07T11:59:02.019627

873 / tcp

-1598265216 | 2025-04-11T19:38:27.671549

993 / tcp

-274082663 | 2025-04-11T16:22:55.159922

1026 / tcp

-1399940268 | 2025-03-22T08:27:47.036440

1207 / tcp

165188539 | 2025-04-02T11:24:51.977653

1235 / tcp

1948301213 | 2025-04-12T10:29:16.882621

1414 / tcp

-2089734047 | 2025-04-12T19:43:21.575756

1443 / tcp

-1715152554 | 2025-04-04T15:28:01.754897

1515 / tcp

819727972 | 2025-04-04T05:12:46.136887

1801 / tcp

1266492139 | 2025-03-27T22:52:32.054401

1833 / tcp

-1399940268 | 2025-03-23T16:28:20.244140

1911 / tcp

1911457608 | 2025-04-11T21:21:15.895829

1960 / tcp

119860953 | 2025-04-02T13:29:00.096795

1980 / tcp

117101543 | 2025-03-26T19:52:20.098682

1982 / tcp

-980525298 | 2025-03-27T16:46:24.466898

1988 / tcp

819727972 | 2025-04-10T02:50:40.174880

2000 / tcp

-1399940268 | 2025-04-03T03:10:40.593541

2008 / tcp

740837454 | 2025-04-11T21:20:48.441036

2060 / tcp

-2089734047 | 2025-04-04T07:53:49.712647

2078 / tcp

205347087 | 2025-04-09T07:49:01.473925

2087 / tcp

1308377066 | 2025-04-11T18:46:52.573094

2108 / tcp

321971019 | 2025-04-10T09:28:03.979754

2121 / tcp

141730637 | 2025-03-23T11:07:53.190832

2154 / tcp

1278527606 | 2025-03-24T22:28:15.007273

2181 / tcp

546151771 | 2025-04-03T03:08:20.758276

2222 / tcp

2051656595 | 2025-04-12T20:22:00.427401

2404 / tcp

709622286 | 2025-04-06T16:44:02.240239

2455 / tcp

-1559123399 | 2025-03-27T18:38:17.607881

2562 / tcp

632542934 | 2025-04-02T18:13:14.348110

2572 / tcp

-1297953727 | 2025-04-03T18:37:11.126126

2598 / tcp

-653033013 | 2025-03-25T00:50:37.771721

2628 / tcp

1978059005 | 2025-03-27T07:27:59.475140

2650 / tcp

-801484042 | 2025-04-03T04:21:44.112494

3001 / tcp

2103111368 | 2025-04-08T21:48:43.848483

3018 / tcp

-1399940268 | 2025-04-03T05:49:01.230118

3053 / tcp

1504401647 | 2025-04-06T10:07:25.655958

3065 / tcp

165188539 | 2025-03-24T09:10:21.328751

3066 / tcp

-1399940268 | 2025-04-06T21:44:36.242566

3068 / tcp

-2089734047 | 2025-04-12T17:36:28.348518

3078 / tcp

819727972 | 2025-03-21T10:10:41.745803

3079 / tcp

819727972 | 2025-04-08T04:42:03.259245

3088 / tcp

-1399940268 | 2025-03-27T16:54:39.440683

3090 / tcp

-2017887953 | 2025-04-09T06:07:31.536425

3108 / tcp

-653033013 | 2025-04-03T23:01:07.582687

3124 / tcp

740837454 | 2025-03-23T23:18:14.404397

3143 / tcp

-653033013 | 2025-04-09T21:58:38.171913

3171 / tcp

1126993057 | 2025-03-27T05:44:20.599722

3174 / tcp

-445721795 | 2025-03-26T16:38:03.488519

3197 / tcp

-1032713145 | 2025-04-11T08:45:15.995777

3269 / tcp

1919228981 | 2025-04-06T16:06:30.947105

3299 / tcp

-1248408558 | 2025-04-12T20:10:45.266766

3306 / tcp

-1036944024 | 2025-04-08T22:10:37.871458

3310 / tcp

-1399940268 | 2025-03-27T18:51:55.258666

3388 / tcp

165188539 | 2025-03-27T23:38:18.720628

3412 / tcp

1911457608 | 2025-04-12T20:35:35.762149

3552 / tcp

-1399940268 | 2025-03-23T18:41:52.930124

3561 / tcp

-1114821551 | 2025-03-24T01:16:17.007248

3780 / tcp

-971970408 | 2025-04-09T10:22:11.172845

3790 / tcp

-784071826 | 2025-03-26T06:54:10.114393