GeneralInformation

Hostnames	www.m.shop.philips.com.cn www.shop.philips.com.cn
Domains	philips.com.cn
Country	China
City	Shanghai
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2025(1)

CVE-2025-26465

6.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.

2024(1)

CVE-2024-6387

8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

2023(4)

CVE-2023-51767

7.0OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges.

CVE-2023-51385

6.5In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.

CVE-2023-48795

5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.

CVE-2023-38408

9.8The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.

2021(2)

CVE-2021-41617

7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

CVE-2021-36368

3.7An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed.

2020(2)

CVE-2020-15778

7.8scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."

CVE-2020-14145

5.9The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

2019(4)

CVE-2019-16905

7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.

CVE-2019-6111

5.9An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).

CVE-2019-6110

6.8In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.

CVE-2019-6109

6.8An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.

2018(3)

CVE-2018-20685

5.3In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.

CVE-2018-15919

5.3Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'

CVE-2018-15473

5.3OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

2017(1)

CVE-2017-15906

5.3The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.

2016(9)

CVE-2016-20012

5.3OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVE-2016-10708

7.5sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.

CVE-2016-10012

7.8The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.

CVE-2016-10011

5.5authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.

CVE-2016-10010

7.0sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.

CVE-2016-10009

7.3Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.

CVE-2016-3115

6.4Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.

CVE-2016-1908

9.8The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.

CVE-2016-0777

6.5The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.

2015(4)

CVE-2015-6564

6.9Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.

CVE-2015-6563

1.9The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.

CVE-2015-5600

8.5The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.

CVE-2015-5352

4.3The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.

2014(3)

CVE-2014-2653

5.8The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.

CVE-2014-2532

4.9sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

CVE-2014-1692

7.5The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.

2012(1)

CVE-2012-0814

3.5The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite. NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory.

2011(2)

CVE-2011-5000

3.5The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authentication is enabled, allows remote authenticated users to cause a denial of service (memory consumption) via a large value in a certain length field. NOTE: there may be limited scenarios in which this issue is relevant.

CVE-2011-4327

2.1ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call.

2010(3)

CVE-2010-5107

5.0The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.

CVE-2010-4755

4.0The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in SSH_FXP_STAT requests to an sftp daemon, a different vulnerability than CVE-2010-2632.

CVE-2010-4478

7.5OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a related issue to CVE-2010-4252.

2008(1)

CVE-2008-3844

9.3Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known.

2007(1)

CVE-2007-2768

4.3OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.

OpenPorts

11 13 15 17 19 20 21 22 23 25 26 37 43 49 51 53 66 70 79 80 85 87 91 92 95 98 101 102 104 110 111 113 119 121 135 139 143 154 175 179 195 221 243 264 285 311 314 343 389 400 427 443 444 447 450 451 461 465 491 502 503 513 515 541 548 554 555 587 591 593 636 646 666 685 689 700 771 777 782 789 800 831 873 880 888 992 993 995 1012 1013 1022 1023 1025 1026 1027 1028 1050 1080 1099 1110 1119 1153 1177 1181 1188 1190 1195 1200 1234 1290 1291 1292 1337 1365 1366 1370 1400 1414 1433 1446 1452 1455 1459 1460 1471 1515 1521 1577 1588 1599 1604 1605 1723 1741 1800 1801 1833 1883 1901 1911 1926 1953 1955 1962 1967 1970 1975 1977 1978 1979 1980 1986 1988 2000 2002 2003 2008 2012 2020 2022 2030 2049 2050 2056 2059 2060 2066 2067 2069 2072 2077 2078 2079 2081 2082 2083 2087 2095 2100 2121 2122 2126 2134 2154 2181 2202 2210 2211 2222 2223 2224 2226 2266 2323 2327 2332 2345 2351 2362 2376 2404 2423 2433 2443 2444 2455 2480 2525 2555 2558 2562 2566 2569 2570 2598 2599 2601 2602 2628 2650 2761 2762 3001 3005 3007 3010 3016 3019 3022 3050 3053 3061 3062 3065 3068 3072 3073 3074 3075 3078 3080 3083 3084 3090 3093 3095 3096 3100 3101 3102 3104 3105 3112 3118 3119 3120 3121 3125 3127 3132 3135 3139 3141 3142 3145 3146 3148 3149 3152 3153 3158 3160 3163 3164 3171 3173 3174 3179 3180 3182 3184 3185 3188 3190 3193 3200 3260 3268 3269 3299 3301 3306 3307 3310 3311 3337 3341 3349 3388 3389 3390 3403 3406 3407 3408 3479 3503 3521 3530 3531 3549 3551 3553 3557 3558 3563 3580 3622 3780 3790 3791 3792 3841 3842 3910 3950 4000 4002 4021 4022 4042 4063 4064 4072 4148 4150 4157 4159 4160 4190 4242 4250 4282 4321 4333 4343 4369 4401 4402 4432 4433 4434 4438 4443 4444 4445 4447 4449 4451 4455 4463 4482 4488 4500 4502 4506 4510 4520 4524 4528 4530 4531 4543 4572 4643 4700 4747 4808 4840 4899 4911 4933 4949 4999 5001 5005 5006 5007 5009 5010 5025 5070 5105 5119 5120 5140 5172 5180 5201 5209 5222 5226 5233 5234 5237 5238 5239 5245 5248 5252 5253 5259 5265 5266 5267 5269 5272 5274 5277 5321 5432 5435 5443 5494 5495 5523 5543 5544 5556 5567 5568 5591 5592 5599 5600 5604 5607 5613 5614 5640 5672 5680 5721 5801 5858 5908 5909 5910 5912 5916 5918 5920 5938 5984 5986 5995 5999 6000 6001 6002 6003 6006 6008 6021 6022 6061 6080 6100 6102 6308 6348 6363 6379 6380 6405 6433 6443 6482 6503 6510 6512 6513 6543 6550 6560 6565 6601 6605 6633 6650 6653 6662 6664 6666 6667 6668 6686 6697 6699 6700 6755 6775 7001 7004 7006 7011 7013 7015 7016 7018 7025 7070 7071 7079 7080 7082 7084 7090 7105 7170 7171 7218 7283 7403 7415 7434 7441 7443 7444 7474 7510 7548 7603 7634 7700 7774 7776 7801 7998 7999 8000 8001 8004 8005 8007 8008 8009 8012 8017 8018 8020 8021 8024 8025 8026 8029 8036 8038 8039 8043 8046 8048 8050 8052 8057 8061 8064 8066 8067 8071 8074 8076 8077 8079 8080 8081 8083 8085 8087 8089 8090 8097 8099 8102 8106 8114 8117 8119 8121 8124 8125 8126 8128 8129 8130 8133 8134 8137 8139 8140 8146 8149 8158 8159 8161 8163 8168 8169 8171 8173 8174 8176 8177 8180 8181 8183 8186 8187 8189 8191 8196 8197 8198 8200 8203 8222 8236 8243 8248 8249 8280 8283 8291 8333 8350 8383 8384 8393 8409 8410 8412 8413 8416 8417 8420 8421 8422 8424 8425 8427 8431 8432 8441 8443 8444 8445 8448 8451 8452 8456 8457 8463 8466 8467 8475 8480 8481 8482 8485 8488 8494 8500 8503 8504 8513 8514 8519 8521 8524 8526 8528 8529 8531 8533 8545 8549 8550 8554 8558 8561 8562 8563 8565 8568 8575 8576 8578 8581 8582 8583 8587 8589 8593 8596 8599 8600 8601 8602 8606 8607 8621 8623 8637 8649 8663 8666 8704 8705 8709 8723 8728 8743 8767 8779 8784 8787 8791 8808 8809 8810 8811 8813 8814 8815 8820 8828 8830 8833 8834 8838 8840 8844 8846 8850 8854 8856 8858 8859 8862 8863 8866 8868 8876 8878 8879 8880 8881 8886 8889 8890 8899 8906 8908 8915 8980 8993 9000 9001 9002 9003 9005 9006 9007 9008 9011 9013 9014 9016 9018 9021 9022 9026 9029 9032 9033 9034 9035 9039 9042 9043 9050 9051 9052 9054 9057 9062 9065 9070 9071 9072 9074 9077 9080 9082 9083 9091 9092 9095 9097 9100 9102 9103 9107 9114 9115 9116 9118 9119 9125 9128 9131 9132 9133 9135 9136 9138 9140 9144 9151 9156 9159 9160 9165 9172 9175 9176 9177 9182 9185 9189 9190 9197 9202 9203 9207 9208 9215 9217 9241 9242 9246 9247 9252 9257 9273 9280 9292 9295 9299 9301 9303 9306 9310 9312 9315 9333 9345 9351 9398 9410 9418 9441 9443 9455 9456 9458 9465 9501 9507 9510 9513 9527 9530 9550 9553 9600 9606 9633 9674 9682 9696 9704 9710 9711 9743 9754 9761 9773 9797 9876 9885 9888 9898 9902 9909 9922 9926 9930 9943 9944 9966 9977 9994 9997 9998 9999 10000 10001 10002 10003 10005 10007 10011 10014 10016 10020 10021 10025 10028 10029 10030 10035 10038 10040 10041 10044 10047 10050 10051 10081 10083 10084 10086 10093 10101 10123 10134 10201 10209 10210 10240 10250 10283 10348 10397 10398 10443 10444 10445 10477 10480 10554 10810 10892 10894 10909 10911 10943 11000 11001 11082 11084 11112 11210 11211 11288 11300 11401 11480 11601 11681 11701 11920 12000 12001 12016 12019 12056 12088 12104 12106 12111 12112 12113 12115 12129 12130 12133 12134 12135 12137 12138 12139 12140 12142 12143 12146 12147 12148 12149 12151 12154 12156 12159 12170 12174 12177 12178 12179 12180 12183 12191 12192 12194 12198 12200 12204 12205 12210 12218 12223 12225 12226 12227 12231 12233 12236 12240 12244 12245 12253 12254 12255 12260 12262 12266 12270 12271 12279 12282 12283 12286 12290 12292 12298 12301 12307 12309 12311 12313 12314 12317 12318 12324 12326 12328 12332 12339 12342 12345 12346 12349 12352 12354 12358 12359 12361 12363 12368 12372 12377 12380 12382 12386 12387 12396 12398 12399 12400 12406 12408 12412 12414 12415 12417 12418 12426 12428 12432 12433 12434 12437 12439 12440 12444 12446 12448 12449 12450 12454 12458 12465 12470 12475 12479 12480 12485 12487 12489 12493 12494 12496 12498 12501 12506 12507 12508 12510 12517 12518 12519 12520 12522 12526 12527 12532 12533 12535 12536 12539 12540 12543 12545 12546 12547 12551 12552 12554 12558 12559 12563 12572 12573 12575 12578 12579 12580 12588 12980 13047 13082 13128 13380 13443 14024 14026 14082 14104 14147 14265 14400 14402 14407 14880 14897 14900 14901 15018 15084 15443 15502 15588 15673 15831 16002 16007 16009 16010 16011 16012 16016 16018 16019 16020 16022 16025 16031 16036 16037 16038 16039 16040 16042 16045 16047 16051 16052 16053 16057 16058 16064 16067 16069 16072 16077 16084 16089 16090 16091 16098 16103 16311 16400 16402 16464 16666 16800 16992 16993 17000 17020 17102 17182 17443 17776 17778 17780 18000 18004 18006 18009 18010 18012 18014 18019 18021 18022 18024 18027 18031 18032 18033 18036 18043 18047 18052 18061 18069 18077 18080 18081 18084 18085 18092 18093 18095 18099 18101 18105 18107 18108 18225 18245 18443 18802 18888 19000 19014 19082 19090 19091 19100 19233 19776 19902 19930 19998 20000 20030 20053 20121 20184 20200 20201 20256 20325 20440 20500 20547 20800 20880 20894 21001 21025 21081 21083 21200 21230 21232 21234 21235 21236 21237 21241 21242 21248 21250 21251 21254 21256 21257 21259 21265 21266 21272 21273 21274 21280 21281 21282 21283 21286 21288 21290 21292 21297 21302 21303 21308 21311 21312 21313 21314 21316 21318 21324 21330 21379 21515 22403 22556 22705 23023 23084 23184 24181 24442 25000 25001 25005 25082 25084 25105 25565 25952 26656 27015 27017 27105 27571 28015 28818 30000 30002 30003 30009 30010 30013 30015 30022 30027 30101 30110 30120 30121 30122 30222 30322 30422 30444 30468 30622 30700 30701 30718 30892 30922 31122 31222 31337 31443 31622 31722 31822 32222 32303 32322 32400 32443 32522 32722 32764 32800 32822 32922 33022 33060 33122 33222 33322 33389 33422 33522 33622 33722 33822 34422 34500 34522 34622 34722 35000 35002 35022 35101 35122 35322 35422 35522 35524 35554 35722 35922 36022 36222 36322 36505 36622 36822 36922 37222 37322 37422 37522 37622 37777 37822 37922 38022 38080 38122 38222 38333 38622 38722 38922 39001 39022 39322 39422 39522 39622 39922 40000 40001 40022 40029 40070 40222 40322 40522 40622 41122 41443 41522 41800 41822 41922 42022 42235 42424 42922 43008 43200 43222 43322 43522 43622 43722 43822 43922 44022 44100 44122 44158 44300 44301 44302 44303 44304 44306 44309 44310 44320 44322 44340 44350 44365 44444 44500 44520 44522 44818 44922 45000 45002 45003 45005 45022 45039 45222 45322 45522 45667 45668 45677 45788 45821 45922 46122 46222 46322 46422 46862 46922 47000 47080 47222 47322 47522 47534 47622 47922 47984 47990 48013 48100 48122 48222 48422 48522 48722 48822 48899 49022 49080 49152 49153 49200 49210 49422 49502 49684 49690 49722 49822 49922 50000 50002 50005 50008 50009 50012 50014 50022 50070 50073 50100 50103 50106 50112 50113 50122 50160 50222 50500 50580 50777 50995 50996 50997 51004 51005 51200 51201 51235 51294 51434 52311 52931 52951 53022 53200 53413 54138 54327 54490 54922 55000 55055 55081 55350 55422 55442 55443 55470 55475 55553 55554 55622 55822 57622 57778 57782 57785 57822 58322 58392 58422 58522 58603 59022 59122 59222 59322 59443 60001 60021 60030 60099 60129 60443 61234 61613 61616 61619 62078 62080 63210 63256 63257 63260 63443 63676 64295 64477 64671 64683 64738 65000 65432

11 / tcp

1220320909 | 2025-03-18T16:54:57.875063

[îd

13 / tcp

1725312227 | 2025-03-22T03:04:44.281994

12:06:55 2024/1/22

15 / tcp

-1990350878 | 2025-03-20T15:08:56.982616

 
04 \...

17 / tcp

5698739 | 2025-03-23T16:02:38.332825

"We have no more right to consume happiness without producing it than to
 consume wealth without producing it." George Bernard Shaw (1856-1950)
\x00

19 / tcp

1978059005 | 2025-03-23T08:34:05.365032

Sorry, that nickname format is invalid.

20 / tcp

-1399940268 | 2025-03-19T17:09:15.098315

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21 / tcp

-702037155 | 2025-03-22T18:29:18.435170

220 Ftp firmware update utility

23 / tcp

-1816600103 | 2025-03-23T13:01:11.250466

tc login:

25 / tcp

-1399940268 | 2025-03-21T06:56:40.724371

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

26 / tcp

165188539 | 2025-03-23T21:48:51.781531

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

37 / tcp

726777565 | 2025-03-23T15:34:46.475164

\\xe9X\\x03%

43 / tcp

-1461540015 | 2025-03-23T05:40:58.275667

audio 0 RTP/AVP 18 4 3 8 0 101
a

49 / tcp

-1620040646 | 2025-03-20T23:12:26.965962

\xc3\xbf\xc3\xbb\\x01\r\nWelcome to NetLinx v94 Copyright AMX Corp. 34395-49007\r\n>

51 / tcp

-1399940268 | 2025-03-23T18:46:04.879094

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

53 / tcp

1024248778 | 2025-03-23T09:00:16.623001

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00\xbd\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x00\xa2\x00\x04\xac٣.
\x00\x06\x85\x80\x00\x01\x00\x01\x00\x00\x00

66 / tcp

-1839934832 | 2025-03-23T11:38:42.483259

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

70 / tcp

1583167286 | 2025-03-23T12:23:26.001500

\\x01remshd: Kerberos Authentication not enabled.\n

79 / tcp

-876294238 | 2025-03-23T06:31:55.128400

HTTP/1.1 400 Bad Request
Server: nginx/1.25.3
Content-Type: text/html
Connection: close

80 / tcp

-1228868710 | 2025-03-22T09:33:22.398196

Hashes

hash

-379121179

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 09:33:22 GMT
Transfer-Encoding: chunked
Connection: keep-alive

85 / tcp

-1399940268 | 2025-03-18T18:03:55.631799

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

87 / tcp

-2089734047 | 2025-03-23T18:16:36.588066

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

91 / tcp

-1399940268 | 2025-03-23T00:56:29.896372

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

92 / tcp

-2096652808 | 2025-03-22T07:31:05.709073

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

95 / tcp

-249504111 | 2025-03-22T12:11:26.331510

\x00[xU-\x7f\x00\x00

98 / tcp

2063598737 | 2025-03-22T17:53:38.341857

/0 0 L\r\n/0 0 HUH\r\n

101 / tcp

455076604 | 2025-03-23T16:31:16.952897

!\x07version\x04bind7 t{RPowerDNS Recursor 410

102 / tcp

819727972 | 2025-03-20T20:52:09.944219

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

104 / tcp

1911457608 | 2025-03-22T11:06:13.660071

\x00[\x00\x00\x00\x00\x00\x00

110 / tcp

-1399940268 | 2025-03-21T03:08:35.367599

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

111 / tcp

416263569 | 2025-03-18T17:11:48.718847

BÿnToo many connections

113 / tcp

-669112739 | 2025-03-18T16:06:23.251740

Bÿn\x04Too many connections

119 / tcp

141730637 | 2025-03-21T06:01:46.705579

HTTP/1.0 200 OK
Server: Proxy

121 / tcp

-1399940268 | 2025-03-23T01:05:44.215401

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

135 / tcp

-1589645334 | 2025-03-23T14:55:55.919993

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: C56L_POS01\n IP2: 60.251.195.90\n IP3: C56L_POS01\n\nNTLMSSP:\nTarget_Name: C56L_POS01\nProduct_Version: 5.1.2600 Ntlm 15\nOS: Windows XP/Windows XP, Service Pack 3\nNetBIOS_Domain_Name: C56L_POS01\nNetBIOS_Computer_Name: C56L_POS01\nDNS_Domain_Name: C56L_POS01\nDNS_Computer_Name: C56L_POS01\n\nDCERPC Dump:\n1088a980-eae5-11d0-8d9b-00a02453c337 ([MS-MQQP]: Message Queuing (MSMQ):):\n  - NCACN: 60.251.195.90:

139 / tcp

-119126669 | 2025-03-22T23:37:16.141864

\\x83\\x00\\x00\\x01\\x81

143 / tcp

639175818 | 2025-03-22T08:04:53.403186

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

154 / tcp

1282941221 | 2025-03-12T22:33:15.261102

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

175 / tcp

819727972 | 2025-03-20T16:32:43.133252

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

179 / tcp

-399606100 | 2025-03-23T22:28:37.346712

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

195 / tcp

819727972 | 2025-03-21T08:46:58.372465

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

221 / tcp

819727972 | 2025-03-22T18:19:47.425207

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

243 / tcp

819727972 | 2025-03-18T04:19:32.531057

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

264 / tcp

-1022036431 | 2025-03-21T07:34:04.166312

CheckPoint\nFirewall Host: CN05FWINT01\nSmartCenter Host: fw-go-mgmt-01..x6vcm5\\x00\n

285 / tcp

321971019 | 2025-03-22T07:11:21.495746

-ERR client ip is not in whitelist\r

311 / tcp

-1547976805 | 2025-03-21T04:34:14.758440

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

314 / tcp

1615193817 | 2025-03-05T09:25:15.539224

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

343 / tcp

819727972 | 2025-03-16T21:27:02.225744

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

389 / tcp

-1743283776 | 2025-03-20T21:52:24.703339

0\x0c\\x02\\x01\\x01a\\x07\n\\x01\\x04\\x04

400 / tcp

1911457608 | 2025-03-23T15:49:12.377799

\x00[\x00\x00\x00\x00\x00\x00

427 / tcp

-525136240 | 2025-03-22T20:48:24.461085

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://bogon.xylink\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\nservice:wbem:https\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://bogon.xylink\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (

443 / tcp

-97159822 | 2025-03-23T22:04:04.679424

Hashes

hash

-232645198

http.dom_hash

-1122413323

http.favicon.hash

224131150

http.html_hash

-97159822

飞利浦官方商城

HTTP/1.1 200 OK
Date: Sun, 23 Mar 2025 22:04:03 GMT
Content-Type: text/html
Content-Length: 3986
Connection: keep-alive
Set-Cookie: acw_tc=ac11000117427674437254961e32ad9d5a29ad9e46324b92f639f857183dac;path=/;HttpOnly;Max-Age=1800
Last-Modified: Mon, 16 Dec 2024 09:49:17 GMT
ETag: "675ff79d-f92"
Content-Security-Policy: default-src 'self'; img-src 'self' https://philips.112.2o7.net https://www.static.lab.philips.com.cn https://res.wx.qq.com https://img.alicdn.com https://thirdwx.qlogo.cn https://philips-shop-uat.oss-cn-shanghai.aliyuncs.com data:; script-src 'self' https://tracking.channelsight.com https://www.crsc.philips.com https://res.wx.qq.com 'unsafe-inline' 'unsafe-eval'; object-src 'none'; style-src 'self' 'unsafe-inline'; font-src 'self' https://at.alicdn.com data:; frame-src 'none'; connect-src 'self'; media-src 'self';
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000; includeSubDomains

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a4:9c:81:04:30:53:7c:f3:b9:70:51:e2:c0:5b:0c
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
        Validity
            Not Before: Dec  4 00:00:00 2024 GMT
            Not After : Jan  4 23:59:59 2026 GMT
        Subject: C=NL, ST=Noord-Brabant, L=Eindhoven, O=Philips International B.V., CN=www.shop.philips.com.cn
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ea:c6:f1:16:75:88:e0:2a:b3:7e:26:7c:3b:45:
                    71:c9:12:df:15:d8:09:d7:1d:27:94:b6:2e:a2:a6:
                    ac:67:89:5e:97:26:80:3c:cc:c9:c5:45:ca:ca:c7:
                    97:45:8d:48:94:7d:d7:06:17:bb:e5:ea:5b:ab:7b:
                    a3:71:b2:06:67:f6:b3:7f:f5:41:b9:63:d3:21:86:
                    ae:e0:13:77:c1:ef:3c:ed:02:df:4d:f5:41:ea:66:
                    2f:ae:b7:a9:14:ff:1a:4e:f3:a5:f4:d9:f1:32:24:
                    ad:61:92:a8:0c:e1:21:d3:18:15:d4:a3:94:ea:8a:
                    d1:91:70:45:e1:32:b3:52:22:a8:11:c6:e1:ea:24:
                    8d:a9:92:ff:a5:7d:a7:36:ee:5a:f1:4c:23:e5:78:
                    70:c1:5c:47:b5:ca:15:5a:21:5d:0b:fd:ec:79:c4:
                    c4:af:3c:c0:d6:d9:74:37:45:5b:90:4e:a0:b9:33:
                    29:e0:a6:67:ab:03:f5:54:b6:cc:2f:fe:21:cc:6a:
                    ad:cb:11:78:58:67:8e:88:57:63:0c:78:dd:00:1d:
                    1e:b5:3f:4c:4d:db:6e:39:bd:90:23:28:6d:e9:1d:
                    a2:c3:d9:d6:ba:db:a2:69:68:83:76:4d:18:36:18:
                    57:4f:ad:7a:b7:f7:fe:47:6c:6f:32:81:b4:94:00:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
            X509v3 Subject Key Identifier: 
                0B:5E:A1:4D:A5:87:53:11:9F:64:87:8F:23:C9:B2:A2:3D:F8:8C:D6
            X509v3 Subject Alternative Name: 
                DNS:www.shop.philips.com.cn, DNS:www.m.shop.philips.com.cn
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
                                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
                    Timestamp : Dec  4 07:38:08.244 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:BB:2C:68:99:5E:6D:E2:0F:03:D7:32:
                                BC:43:EC:C7:65:6A:BA:37:57:67:30:3D:85:24:83:3D:
                                7E:AD:CC:04:49:02:21:00:CF:2E:04:E6:85:4A:81:52:
                                90:6D:E6:42:5A:AF:CE:A1:32:1C:72:CE:0B:E4:73:5A:
                                10:B2:4A:E3:F8:80:DB:4E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : ED:3C:4B:D6:E8:06:C2:A4:A2:00:57:DB:CB:24:E2:38:
                                01:DF:51:2F:ED:C4:86:C5:70:0F:20:DD:B7:3E:3F:E0
                    Timestamp : Dec  4 07:38:08.301 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:50:2B:DA:42:88:CE:0B:3E:62:EE:C2:0F:
                                9F:E5:78:09:BD:38:D1:9C:52:7C:92:F3:FF:13:D6:45:
                                8A:26:2A:D2:02:21:00:92:93:C7:75:9B:42:FB:22:85:
                                1E:A0:A9:A8:06:F4:08:A5:DF:B4:0C:20:FA:75:20:2F:
                                93:09:B5:08:66:0B:81
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
                                4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
                    Timestamp : Dec  4 07:38:08.306 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B8:87:99:24:00:29:14:A8:92:5E:B8:
                                50:D7:76:EE:E7:6B:E2:BA:EA:A9:38:5A:73:DA:1A:65:
                                2A:25:98:FE:60:02:20:4A:9E:64:49:60:0D:56:2F:9E:
                                5A:4F:54:44:74:EB:37:11:28:5F:C4:EF:8E:A6:A6:AA:
                                59:1D:6E:CE:FE:1F:60
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        44:e8:2a:98:4b:76:79:b5:17:d9:7d:65:d8:16:d6:e0:3d:26:
        a5:c1:db:c1:91:0c:7b:7b:16:4f:35:42:e8:90:d5:f4:21:b6:
        69:ef:85:a1:08:20:90:88:22:9d:89:fb:51:2e:cb:0e:0e:03:
        12:40:b0:33:42:e8:a5:4f:bf:21:29:94:ae:3b:11:97:8b:75:
        a2:9b:d1:5f:80:74:c8:09:5f:92:fd:26:e6:b3:e5:64:93:18:
        eb:01:02:d7:f3:e9:6e:06:b0:91:db:ac:d4:06:6b:ae:de:f7:
        18:68:c4:69:d4:be:65:00:03:07:e5:f4:4a:1a:7c:f8:79:ba:
        f9:dd:15:6f:6f:5f:ea:b5:72:5e:7b:0b:44:a4:2e:b0:e1:9f:
        ac:ba:9d:59:e4:51:ad:70:9d:ff:f3:4a:c1:1b:c5:c0:46:ba:
        ed:63:49:87:31:04:ee:b5:42:b7:62:80:02:9d:a4:09:c6:b4:
        7b:13:b8:87:69:dd:a9:64:08:85:2c:f2:e5:ac:88:a3:8a:43:
        ab:bd:ee:f3:6a:a9:fd:b1:cc:f9:c1:b9:36:39:fb:3c:15:6e:
        1e:21:ba:48:f5:4b:56:40:68:90:1e:a1:c4:25:42:0b:fc:6b:
        7a:79:15:ab:49:17:13:02:c7:36:e6:2b:bb:a2:40:7e:53:e0:
        4e:b2:f9:31

444 / tcp

1732235625 | 2025-03-23T16:17:23.264061

HTTP/1.1 410 Gone
Server: Tengine
Date: Sun, 23 Mar 2025 16:17:23 GMT
Transfer-Encoding: chunked
Connection: keep-alive

2aad
<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>阿里云 Web应用防火墙</title>
  <style rel="stylesheet">
    body {
      font-size: 14px;
      color: #333;
      font-weight: 400;
      padding: 100px 0px 0px;
    }

    .wrapper {
      width: 850px;
      margin: 0 auto;
    }

    .top-wrapper {
      padding: 35px 30px 12px;
    }

    .top-content-right {
      padding-top: 20px;
    }

    .select-content {
      display: flex;
      justify-content: end;

    }

    #selectLang {
      color: rgb(250 100 0) !important;
      border: 1px solid rgb(250 100 0);
    }

    .bottom-wrapper {
      padding: 0 20px 0 40px;
    }

    .bottom-content-one {
      margin: 30px 0px;
    }

    .bottom-content-two {
      border-top: 1px solid #ededed;
      padding-top: 30px;
    }

    .theme-color {
      color: #ff6a00;
    }

    .grey-color1 {
      color: #999;
    }

    .grey-color2 {
      color: #666;
    }

    .background-color {
      background-color: #fa640008;
    }

    .font-weight {
      font-weight: 500;
    }

    .space-top8 {
      margin-top: 8px
    }

    .space-bottom16 {
      margin-bottom: 16px;
    }

    .no_derciton {
      text-decoration: none;
    }

    .flex-content {
      display: flex;
    }
  </style>
</head>

<body>
  <div class="wrapper">
    <div class="top-wrapper background-color">
      <div class="select-content">
        <select name="" id="selectLang" onchange="langChange(value)"  >
          <option value="en">English</option>
          <option value="ch">简体中文</option>
        </select>
      </div>
      <div class="flex-content">
        <div>
          <img
            src="data:image/png;base64,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

447 / tcp

165188539 | 2025-03-14T22:19:43.416627

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

450 / tcp

1308377066 | 2025-03-19T20:18:04.816455

ncacn_http/1.0

451 / tcp

-1996280214 | 2025-03-22T03:38:01.145767

\x06\x04\x05@

461 / tcp

971933601 | 2025-03-23T03:42:37.602217

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

465 / tcp

897328069 | 2025-03-20T23:43:09.240664

220 mail.scott000.com ESMTP

491 / tcp

1615193817 | 2025-03-22T17:10:56.843060

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

502 / tcp

-1099385124 | 2025-03-23T04:28:18.026388

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

503 / tcp

-407828767 | 2025-03-21T06:01:07.317728

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

513 / tcp

1308377066 | 2025-03-13T09:45:30.478397

ncacn_http/1.0

515 / tcp

1887224352 | 2025-03-20T19:21:04.142896

541 / tcp

-269727450 | 2025-03-23T22:46:18.628285

\\x16\\x03\\x01\\x01K\\x01\\x00\\x01G\\x03\\x03\\xa1\\xb0\\xcf\\xc9\\xc2X\\x037P\\xe0\\x8d\\xd7\\x1d_N\\x87&\\xa7U.^\\x19_K\\x13\\xed\\xe9L|\n\\xec\\x9e -\\xc23\\x1e\\x94\\xb3\\xe6|\x0c\\xaco|\\xe1\xc6\xa5V\\xd0\\x1d\\xf7Uf<\\xabgV=)\\xf2\\x86\\xc4\\x18\x0c\\x00"\\x13\\x02\\x13\\x03\\x13\\x01\\x00k\\x00=\\xc00\\xc0,\\xc

548 / tcp

-773160241 | 2025-03-24T01:50:10.507675

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: Yes\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: Yes\nCopy File: Yes\nServer Name: murphys-airport-time-capsule\nMachine Type: \\x10TimeCapsule8,119\nAFP Versions: AFP3.3, AFP3.2, AFP3.1\nUAMs: DHCAST128\\x04,DHX2\\x03,SRP\\x06,Recon1C\nServer Signature: 4338365332344c58463948350069672d

554 / tcp

448214121 | 2025-03-20T17:39:49.304815

RTSP/1.0 200 OK
Server: TVT RTSP Server/1.0.0
CSeq: 1
Public: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, GET_PARAMETER, SET_PARAMETER

555 / tcp

-1013082686 | 2025-03-24T01:05:25.563170

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

587 / tcp

745343730 | 2025-03-23T06:29:01.584300

220 smtp.qq.com Esmtp QQ Mail Server

591 / tcp

205347087 | 2025-03-23T08:27:04.527501

SSH-25453-Cisco-3524665.35\n

593 / tcp

1308377066 | 2025-03-17T08:58:17.141632

ncacn_http/1.0

636 / tcp

826560219 | 2025-03-21T02:24:15.877493

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 59-8951886-0 0NNN RT(1705909763732 169) q(-1 -1 -1 -1) r(0 -1) b1

646 / tcp

914325460 | 2025-03-22T07:03:46.228726

\\x00\\x01\\x00\\x1c\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x12\\x00\\x04,L\\x03\\x00\\x00\n\\x80\\x00\\x00\\x03\\x00\\x00\\x00\\x00\\x00\\x00

666 / tcp

1300162323 | 2025-03-21T02:59:19.142116

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

685 / tcp

-1730858130 | 2025-03-22T01:35:08.480970

RFB 003.008
VNC:
  Protocol Version: 3.8

689 / tcp

-345718689 | 2025-03-22T19:23:57.262385

Vty password is not set.

700 / tcp

-2021756999 | 2025-03-22T03:54:05.136706

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Connection: close
Server: Nginx
Expires: 0
Pragma: no-cache
Cache-Control: no-cache
Location: https://portal.ikuai8-wifi.com/templates/default/index.html?timestamp=1705576118&router_ver=3.2.0&firmware=IK-RouterOS&template=default&gwid=12d4c28d07674103aaf242ea477f8666&user_ip=*.*.*.*

771 / tcp

-1399940268 | 2025-03-17T13:33:43.300435

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

777 / tcp

-1346601424 | 2025-03-22T16:41:15.043764

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 13-38977912-0 0NNN RT(1705905272179 0) q(0 -1 -1 -1) r(0 -1)

782 / tcp

-358801646 | 2025-03-23T06:33:35.517827

SSH-2.0-OpenSSH_6.6.1

789 / tcp

-1428621233 | 2025-03-23T00:36:37.949624

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

800 / tcp

-1175496255 | 2025-03-23T08:04:20.026745

HTTP/1.1 403 Forbidden
Server: sundray
Content-Type: text/html
Connection: keep-alive

831 / tcp

-1329831334 | 2025-03-21T23:26:24.177749

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

873 / tcp

-1970692834 | 2025-03-23T23:21:52.956420

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

880 / tcp

-1256415508 | 2025-03-22T19:28:21.497357

HTTP/1.1 404 Not Found
Server: TornadoServer/6.1
Content-Type: text/html; charset=UTF-8

888 / tcp

-262532376 | 2025-03-22T13:35:13.207583

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: keep-alive

992 / tcp

-1242315829 | 2025-03-23T03:42:24.710974

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: /app/
Permissions-Policy: autoplay=(), camera=(), microphone=(), usb=()
Referrer-Policy: same-origin
Vary: Origin
X-Content-Type-Options: nosniff
X-Frame-Options: DENY

993 / tcp

-142686627 | 2025-03-20T22:31:30.503259

\x00[\xc2\xba\x7fs\x7f\x00\x00

995 / tcp

-1489591880 | 2025-03-22T15:46:49.743094

+OK MS OK\r\n

1012 / tcp

401555314 | 2025-03-07T11:53:01.375501

NB[GFXjA^R

1013 / tcp

819727972 | 2025-03-23T02:42:38.033026

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

1022 / tcp

819727972 | 2025-03-23T14:39:44.342513

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

1023 / tcp

1887224352 | 2025-03-23T18:04:51.733889

1025 / tcp

-2096652808 | 2025-03-23T06:31:51.818271

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1026 / tcp

15018106 | 2025-03-23T17:46:36.764125

\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00

1027 / tcp

-1399940268 | 2025-03-11T06:45:22.534275

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1028 / tcp

-1105333987 | 2025-03-23T10:18:52.262583

\x00[KpU\x7f\x00\x00

1050 / tcp

819727972 | 2025-03-22T17:03:02.761868

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

1080 / tcp

1362344524 | 2025-03-18T15:55:20.982257

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1099 / tcp

-1036370807 | 2025-03-22T22:40:47.589588

JDWP-Handshake

1110 / tcp

-1231144117 | 2025-03-22T18:34:24.005641

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1702718082.913-s7zzuc

1119 / tcp

-1118386803 | 2025-03-24T00:36:52.369547

HTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
Expires: -1
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Pragma: no-cache
Content-Type: text/html;charset=utf-8
Content-Language: en-US
Vary: User-Agent
X-UA-Compatible: IE=edge
Vary: Accept-Encoding
Transfer-Encoding: chunked

1153 / tcp

-1399940268 | 2025-03-24T02:01:36.325851

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1177 / tcp

1189133115 | 2025-03-18T00:54:54.511917

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

1181 / tcp

1623746877 | 2025-02-28T14:28:30.249918

500 Permission denied - closing connection.\r\n

1188 / tcp

1911457608 | 2025-03-23T01:16:35.116821

\x00[\x00\x00\x00\x00\x00\x00

1190 / tcp

-2096652808 | 2025-03-22T03:21:03.576581

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1195 / tcp

-1399940268 | 2025-03-22T13:01:41.200811

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1200 / tcp

1726594447 | 2025-03-23T13:13:39.377895

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

1234 / tcp

1134517380 | 2025-03-21T06:32:47.816119

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

1290 / tcp

-2140303521 | 2025-03-22T05:56:01.524231

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

1291 / tcp

-2089734047 | 2025-03-22T05:35:38.980253

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1292 / tcp

1492413928 | 2025-03-22T16:57:27.851778

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

1337 / tcp

660175493 | 2025-03-21T02:43:45.841081

1365 / tcp

-441419608 | 2025-03-22T13:26:06.772326

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

1366 / tcp

-274082663 | 2025-03-23T01:23:01.836711

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

1370 / tcp

-1399940268 | 2025-03-22T11:55:57.531103

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1400 / tcp

-2118655245 | 2025-03-04T14:44:30.090390

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

1414 / tcp

-1399940268 | 2025-03-13T11:06:38.871007

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1433 / tcp

419886129 | 2025-03-21T00:07:54.930033

MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XTZJ-20210317RG\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XTZJ-20210317RG\nNetBIOS_Computer_Name: XTZJ-20210317RG\nDNS_Domain_Name: XTZJ-20210317RG\nDNS_Computer_Name: XTZJ-20210317RG\nSystem_Time: 2024-01-22 04:01:04 +0000 UTC\n\n

1446 / tcp

632542934 | 2025-03-19T17:48:24.574759

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1452 / tcp

1911457608 | 2025-03-23T08:58:51.890075

\x00[\x00\x00\x00\x00\x00\x00

1455 / tcp

-42767839 | 2025-03-23T01:32:53.871519

RFB 005.000

VNC:
  Protocol Version: 5.0

1459 / tcp

-1399940268 | 2025-02-23T14:39:42.871495

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1460 / tcp

-1279886438 | 2025-03-19T20:53:46.821100

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

1471 / tcp

0 | 2025-03-15T08:08:32.582899

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

1515 / tcp

2087396567 | 2025-03-05T08:57:16.779738

kjnkjabhbanc283ubcsbhdc72

1521 / tcp

-541815454 | 2025-03-21T09:10:44.392149

Version:11.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=186646784)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

1577 / tcp

-358801646 | 2025-02-24T12:15:21.971519

SSH-2.0-OpenSSH_6.6.1

1588 / tcp

-1888448627 | 2025-03-22T22:41:17.893845

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1599 / tcp

1077013874 | 2025-03-23T22:58:01.979099

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

1604 / tcp

740837454 | 2025-03-21T01:44:12.375151

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

1605 / tcp

165188539 | 2025-02-26T06:47:44.693289

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1723 / tcp

1103582599 | 2025-03-18T08:27:11.985065

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

1741 / tcp

0 | 2025-03-14T19:15:20.848238

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

1800 / tcp

1911457608 | 2025-02-22T09:24:42.609331

\x00[\x00\x00\x00\x00\x00\x00

1801 / tcp

-1139999322 | 2025-03-23T08:25:30.664639

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\xf2\\xdby\\x96\\xbb\\xb1LE\\xa1\\x1f.%\xd2\xbft\\xb692d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1833 / tcp

1632932802 | 2025-03-22T02:25:47.395675

1883 / tcp

1632932802 | 2025-03-20T15:19:38.386926

1901 / tcp

-1399940268 | 2025-03-19T11:49:16.954656

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911 / tcp

1623746877 | 2025-03-18T16:51:38.937248

500 Permission denied - closing connection.\r\n

1926 / tcp

-358801646 | 2025-03-22T10:32:52.814472

SSH-2.0-OpenSSH_6.6.1

1953 / tcp

1134517380 | 2025-03-22T06:56:27.452163

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

1955 / tcp

-2046514463 | 2025-02-23T17:54:44.908635

AB\x01\t

1962 / tcp

722711397 | 2025-03-16T17:36:50.948135

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

1967 / tcp

1282941221 | 2025-03-17T20:42:38.469918

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1970 / tcp

321971019 | 2025-03-22T11:44:36.512794

-ERR client ip is not in whitelist\r

1975 / tcp

819727972 | 2025-03-04T17:37:47.919061

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

1977 / tcp

165188539 | 2025-03-23T06:29:54.936592

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1978 / tcp

-445721795 | 2025-03-22T03:35:26.378863

\x00[\xc3\xaed\x1a\x7f\x00\x00

1979 / tcp

1911457608 | 2025-03-23T11:54:53.708598

\x00[\x00\x00\x00\x00\x00\x00

1980 / tcp

819727972 | 2025-03-23T16:45:43.971057

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

1986 / tcp

1632932802 | 2025-02-24T09:37:18.156871

1988 / tcp

-1996280214 | 2025-03-22T01:47:54.185574

\x06\x04\x05@

2000 / tcp

-1733645023 | 2025-03-23T20:10:22.748303

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

2002 / tcp

1887224352 | 2025-03-20T19:09:31.795099

2003 / tcp

1623746877 | 2025-03-18T17:32:40.974932

500 Permission denied - closing connection.\r\n

2008 / tcp

-320705161 | 2025-03-20T06:36:43.676691

versionbind

2012 / tcp

-2096652808 | 2025-03-05T17:43:47.881204

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

2020 / tcp

-1511780827 | 2025-03-22T09:34:16.451083

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1ccb_PS-TNH-01DBv156_26597-29749

2022 / tcp

819727972 | 2025-03-22T03:55:11.959610

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

2030 / tcp

-1831045466 | 2025-02-24T08:11:29.918745

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1eb4_PS-CGQ-0141h76_36153-20078

2049 / tcp

-1538260461 | 2025-03-05T16:30:37.398475

\x01\x00\x00\x00

2050 / tcp

-1746074029 | 2025-02-28T02:39:36.870701

101 imqbroker =unV\r\n

2056 / tcp

-1399940268 | 2025-03-23T07:48:18.224161

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2059 / tcp

-1538260461 | 2025-03-22T12:26:25.300269

\x01\x00\x00\x00

2060 / tcp

-653033013 | 2025-03-22T10:29:32.952005

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

2066 / tcp

-1839934832 | 2025-03-23T20:04:02.173664

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

2067 / tcp

2087396567 | 2025-03-23T07:12:53.152468

kjnkjabhbanc283ubcsbhdc72

2069 / tcp

1830697416 | 2025-02-25T10:56:55.225089

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

2072 / tcp

2098371729 | 2025-03-22T04:55:21.063894

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

2077 / tcp

1911457608 | 2025-03-08T13:34:38.908603

\x00[\x00\x00\x00\x00\x00\x00

2078 / tcp

945910976 | 2025-03-23T23:14:08.779239

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

2079 / tcp

669849225 | 2025-03-23T03:30:12.328434

SSH-98.60-SysaxSSH_81885..42\r\n

2081 / tcp

819727972 | 2025-03-20T23:05:46.971421

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

2082 / tcp

-2118655245 | 2025-02-28T17:06:03.759237

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

2083 / tcp

-616720387 | 2025-03-20T17:06:10.209632

SSH-2.0-SSHD_0.7.6

2087 / tcp

1690634669 | 2025-03-21T10:04:49.047302

2095 / tcp

819727972 | 2025-03-19T18:12:27.908355

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

2100 / tcp

-1327660293 | 2025-03-22T01:27:30.049297

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

2121 / tcp

141730637 | 2025-03-23T10:08:26.629863

HTTP/1.0 200 OK
Server: Proxy

2122 / tcp

-1626979812 | 2025-03-23T15:55:17.872587

220 Service ready for new user.

2126 / tcp

-2042671887 | 2025-03-21T18:18:39.900433

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 9-111938-0 0NNN RT(1701369144594 8) q(0 -1 -1 -1) r(0 -1)

2134 / tcp

321971019 | 2025-03-23T13:31:01.186023

-ERR client ip is not in whitelist\r

2154 / tcp

-1031019485 | 2025-03-22T20:51:00.555984

[l¶Ð

2181 / tcp

546151771 | 2025-03-23T17:10:18.746805

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2202 / tcp

819727972 | 2025-03-22T11:17:53.950141

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

2210 / tcp

1126993057 | 2025-03-24T00:53:34.451245

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

2211 / tcp

-1327660293 | 2025-03-22T16:51:31.093146

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

2222 / tcp

-1152923582 | 2025-03-22T21:15:43.872133

SSH-2.0-dropbear\r\n\\x00\\x00\\x01\\x84\\x07\\x14\\x82q\\xf3\\x1aG*9\\xe9\\xf7O\xc9\xad#\\xbbpG\\x00\\x00\\x00\\x82curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,kexguess2@matt.ucc.asn.au\\x00\\x00\\x00 ssh-ed25519,rsa-sha2-256,ssh-rsa\\x00\\x00\\x003chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr\\x00\\x00\\x003chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr\\x00\\x00\\x00\\x17hmac-sha1,hmac-sha2-256\\x00\\x00\\x00\\x17hmac-sha1,hmac-sha2-256\\x00\\x00\\x00\\x04none\\x00\\x00\\x00\\x04non

2223 / tcp

-1032713145 | 2025-03-22T19:54:55.563369

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

2224 / tcp

-1810987450 | 2025-03-22T15:57:36.258023

\xc3\xbf

2226 / tcp

321971019 | 2025-03-23T07:52:42.180681

-ERR client ip is not in whitelist\r

2266 / tcp

504717326 | 2025-03-16T20:45:48.113004

SSH-2.0-OpenSSH_8.6

Vulnerabilities

2 3 6 1

2323 / tcp

1662205251 | 2025-03-22T07:29:46.468359

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

2327 / tcp

-457235091 | 2025-03-22T06:14:15.466055

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

2332 / tcp

-1914935523 | 2025-03-22T06:32:30.734122

ceph v2

2345 / tcp

1911457608 | 2025-03-22T21:48:14.207266

\x00[\x00\x00\x00\x00\x00\x00

2351 / tcp

-1428621233 | 2025-03-23T21:28:00.411126

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

2362 / tcp

-1476017887 | 2025-03-23T02:00:34.240745

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

2376 / tcp

1741579575 | 2025-03-18T14:46:31.566736

2404 / tcp

205347087 | 2025-03-23T23:25:41.688344

SSH-25453-Cisco-3524665.35\n

2423 / tcp

-832380282 | 2025-03-22T14:19:27.743444

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

2433 / tcp

-358801646 | 2025-02-23T21:46:11.585454

SSH-2.0-OpenSSH_6.6.1

2443 / tcp

-2017887953 | 2025-03-23T12:17:29.393208

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

2444 / tcp

1948301213 | 2025-03-16T22:04:19.231914

RFB 003.003
VNC:
  Protocol Version: 3.3

2455 / tcp

455076604 | 2025-03-23T17:05:40.320065

!\x07version\x04bind7 t{RPowerDNS Recursor 410

2480 / tcp

0 | 2025-02-26T14:04:14.815952

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

2525 / tcp

-832380282 | 2025-03-22T02:50:20.568687

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

2555 / tcp

-1888448627 | 2025-03-23T22:11:27.443757

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

2558 / tcp

1991883981 | 2025-03-22T21:39:16.160310

B\x00\x00\x00\xc3\xbfn\x04Too many connections

2562 / tcp

745343730 | 2025-03-23T13:14:14.746319

220 smtp.qq.com Esmtp QQ Mail Server

2566 / tcp

-1399940268 | 2025-03-23T21:29:00.809564

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2569 / tcp

-1399940268 | 2025-03-23T16:00:41.733604

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2570 / tcp

819727972 | 2025-03-22T09:30:21.921766

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

2598 / tcp

819727972 | 2025-03-13T21:22:17.127357

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

2599 / tcp

-2089734047 | 2025-03-24T00:06:05.596528

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2601 / tcp

-269326851 | 2025-03-17T21:55:29.949008

\n\nWelcome to visit GOCLOUD SX1200 series router!\n\n\r\nUser Access Verification\r\n\r\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe"\\xff\\xfd\\x1fPassword:

2602 / tcp

493955023 | 2025-03-22T17:29:36.542768

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

2650 / tcp

-1399940268 | 2025-03-08T20:32:27.322233

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2761 / tcp

-1399940268 | 2025-03-18T16:01:16.151932

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2762 / tcp

-2096652808 | 2025-03-21T03:20:34.256958

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

3001 / tcp

808560482 | 2025-03-22T03:38:40.349788

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP
 : USERID : UNIX : Cr8

3005 / tcp

624004002 | 2025-03-23T10:26:00.271400

\t

3007 / tcp

-1399940268 | 2025-03-09T23:28:08.725615

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3010 / tcp

819727972 | 2025-03-22T17:27:22.808551

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3016 / tcp

-1399940268 | 2025-02-23T21:36:56.299076

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3019 / tcp

1761482307 | 2025-03-22T03:11:34.894529

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

3022 / tcp

1278527606 | 2025-02-28T11:06:19.816334

SSH-2.0-Teleport

3050 / tcp

2143387245 | 2025-03-20T22:40:53.934428

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

3053 / tcp

-438503381 | 2025-02-24T05:51:40.772678

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

3061 / tcp

-1329831334 | 2025-03-22T16:22:02.378908

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

3062 / tcp

-1888448627 | 2025-02-26T08:33:18.804097

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3065 / tcp

-375604792 | 2025-03-22T13:04:24.017563

220 Microsoft FTP Service

3068 / tcp

-1399940268 | 2025-03-23T15:50:50.320555

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3072 / tcp

165188539 | 2025-03-23T01:44:43.153785

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3073 / tcp

1911457608 | 2025-03-22T02:53:34.714985

\x00[\x00\x00\x00\x00\x00\x00

3074 / tcp

-1888448627 | 2025-02-24T11:21:11.477399

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3075 / tcp

-1399940268 | 2025-03-23T01:40:14.851948

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3078 / tcp

-1399940268 | 2025-03-23T18:19:26.696216

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3080 / tcp

819727972 | 2025-03-22T09:28:46.953746

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3083 / tcp

-1399940268 | 2025-03-24T01:22:31.041739

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3084 / tcp

1911457608 | 2025-03-24T01:09:37.337968

\x00[\x00\x00\x00\x00\x00\x00

3090 / tcp

504717326 | 2025-03-23T11:33:11.657222

SSH-2.0-OpenSSH_8.6

Vulnerabilities

2 3 6 1

3093 / tcp

-1839934832 | 2025-03-22T10:27:08.229847

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3095 / tcp

2143387245 | 2025-03-22T06:18:28.163372

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

3096 / tcp

-616720387 | 2025-03-22T20:53:50.826982

SSH-2.0-SSHD_0.7.6

3100 / tcp

-2031152423 | 2025-03-22T09:14:22.372136

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

3101 / tcp

-1888448627 | 2025-03-03T20:51:49.675430

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3102 / tcp

2103111368 | 2025-03-22T07:14:32.265960

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

3104 / tcp

819727972 | 2025-02-27T08:36:44.170488

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

3105 / tcp

1541211644 | 2025-03-19T03:46:36.031200

[\xc2\xba\x7fs\x7f

3112 / tcp

709622286 | 2025-03-23T17:19:07.355440

OK Welcome <299685> on DirectUpdate server 7286\r\n

3118 / tcp

-297128567 | 2025-03-23T04:12:42.975862

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

3119 / tcp

-2089734047 | 2025-03-23T04:52:39.374482

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3120 / tcp

2103111368 | 2025-03-22T05:40:20.521574

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

3121 / tcp

-1746074029 | 2025-03-23T16:24:16.809893

101 imqbroker =unV\r\n

3125 / tcp

-1839934832 | 2025-03-23T11:15:16.570850

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

3127 / tcp

1541211644 | 2025-03-18T03:18:44.123782

[\xc2\xba\x7fs\x7f

3132 / tcp

410249975 | 2025-03-22T16:23:35.760237

LNS READY<>

3135 / tcp

-1036370807 | 2025-02-27T16:15:11.043365

JDWP-Handshake

3139 / tcp

-1399940268 | 2025-03-08T19:15:37.994860

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3141 / tcp

819727972 | 2025-03-23T19:52:05.881053

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3142 / tcp

165188539 | 2025-03-23T11:47:13.190953

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3145 / tcp

-784071826 | 2025-03-22T08:24:35.057125

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

3146 / tcp

-1399940268 | 2025-03-23T23:28:54.216065

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3148 / tcp

819727972 | 2025-03-06T21:27:38.196338

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

3149 / tcp

1996932384 | 2025-02-28T17:57:26.672978

"raop" nonce

3152 / tcp

819727972 | 2025-03-18T01:34:49.720519

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3153 / tcp

-2096652808 | 2025-03-22T08:49:58.566090

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

3158 / tcp

-1399940268 | 2025-03-23T23:45:35.566535

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3160 / tcp

-904840257 | 2025-03-23T03:24:37.481015

572 Relay not authorized\r\n

3163 / tcp

-2096652808 | 2025-03-22T15:32:34.265961

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

3164 / tcp

1761482307 | 2025-03-23T09:27:54.944580

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

3171 / tcp

1504401647 | 2025-03-23T05:50:04.773526

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

3173 / tcp

1642597142 | 2025-03-22T19:43:07.890159

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

3174 / tcp

1632932802 | 2025-03-23T09:04:07.142497

3179 / tcp

-2046514463 | 2025-03-23T20:10:00.672979

AB\x01\t

3180 / tcp

1620329124 | 2025-03-06T23:18:42.566822

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

3182 / tcp

-1099385124 | 2025-03-23T03:54:54.404482

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

3184 / tcp

-345718689 | 2025-02-23T13:46:07.978166

Vty password is not set.

3185 / tcp

819727972 | 2025-02-24T13:06:05.597474

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

3188 / tcp

-1140468363 | 2025-03-22T04:28:20.199393

\x02\t\x01

3190 / tcp

-1399940268 | 2025-03-22T10:22:03.962089

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3193 / tcp

-1399940268 | 2025-03-22T03:51:16.997976

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3200 / tcp

819727972 | 2025-03-23T17:52:27.518894

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3260 / tcp

175679309 | 2025-03-17T10:55:46.009737

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=QNAP Target\nTargetPortalGroupTag=1\n

3268 / tcp

-2031078612 | 2025-03-23T02:52:31.063227

HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
Location: http://proxy.ces.org.tw:3000/login?url=http%3A%2F%2Floginbyurl.wanfangdata.com.cn%2F

3269 / tcp

-805362002 | 2025-03-21T05:04:27.196364

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

3299 / tcp

-1375131644 | 2025-03-21T19:02:34.073470

\x00[v\xc3\xbdC\x7f\x00\x00

3301 / tcp

-274082663 | 2025-03-20T19:19:37.968684

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

3306 / tcp

-1230509234 | 2025-03-21T03:27:12.408446

J\\x00\\x00\\x00\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MariaDB server

3307 / tcp

-653033013 | 2025-03-23T11:03:45.399227

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

3310 / tcp

-1399940268 | 2025-03-22T03:12:18.387142

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3311 / tcp

-1399940268 | 2025-03-21T06:31:52.442985

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3337 / tcp

1989907056 | 2025-03-22T04:32:58.006683

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

3341 / tcp

-1399940268 | 2025-03-23T21:09:40.249073

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3349 / tcp

819727972 | 2025-03-22T10:13:17.417435

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3388 / tcp

1011407350 | 2025-03-21T05:58:59.293316

* OK GroupWise IMAP4rev1 Server Ready\r\n

3389 / tcp

521595461 | 2025-03-23T23:19:58.620600

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x03\\x00\\x08\\x00\\x02\\x00\\x00\\x00\n\nGuess_OS:Windows Server 2003 or 2008\nFlag: PROTOCOL_HYBRID\n

3390 / tcp

-303199180 | 2025-02-27T10:13:05.120367

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

3403 / tcp

-585940771 | 2025-03-22T13:53:43.434694

Unknown command\r\n

3406 / tcp

1911457608 | 2025-03-23T07:29:08.695941

\x00[\x00\x00\x00\x00\x00\x00

3407 / tcp

1911457608 | 2025-02-22T23:53:47.086659

\x00[\x00\x00\x00\x00\x00\x00

3408 / tcp

-2089734047 | 2025-03-23T00:45:30.353316

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3479 / tcp

1189133115 | 2025-03-23T18:32:37.939119

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

3503 / tcp

165188539 | 2025-03-22T22:40:56.977761

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3521 / tcp

1282941221 | 2025-03-20T05:43:00.980057

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

3530 / tcp

819727972 | 2025-02-26T07:19:50.579549

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

3531 / tcp

1975288991 | 2025-03-22T09:49:02.427934

OPTI

3549 / tcp

921225407 | 2025-03-11T11:19:53.912592

\x00\x00\x00\x04\x00\x00\x00\x00\x00

3551 / tcp

198844676 | 2025-03-21T06:52:52.813198

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3553 / tcp

165188539 | 2025-03-23T18:31:07.227243

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3557 / tcp

-653033013 | 2025-03-22T12:36:32.522929

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

3558 / tcp

-1399940268 | 2025-03-22T11:04:20.424671

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3563 / tcp

165188539 | 2025-03-14T21:57:41.489279

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3580 / tcp

-1227409554 | 2025-03-23T00:09:32.609083

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3622 / tcp

1911457608 | 2025-03-15T11:47:34.240937

\x00[\x00\x00\x00\x00\x00\x00

3780 / tcp

-971970408 | 2025-03-22T05:06:09.472314

3790 / tcp

2087396567 | 2025-03-22T06:26:50.626383

kjnkjabhbanc283ubcsbhdc72

3791 / tcp

165188539 | 2025-03-23T21:39:52.881476

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3792 / tcp

165188539 | 2025-03-11T20:20:04.540764

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3841 / tcp

1911457608 | 2025-03-23T21:18:18.588426

\x00[\x00\x00\x00\x00\x00\x00

3842 / tcp

-1730858130 | 2025-03-05T10:08:26.682328

RFB 003.008
VNC:
  Protocol Version: 3.8

3910 / tcp

-1399940268 | 2025-03-22T14:16:03.609688

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3950 / tcp

1911457608 | 2025-03-22T01:33:57.239907

\x00[\x00\x00\x00\x00\x00\x00

4000 / tcp

-801484042 | 2025-03-16T18:18:07.264416

ERR 27

4002 / tcp

-1297953727 | 2025-03-23T03:19:59.259347

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

4021 / tcp

-1399940268 | 2025-03-01T00:06:54.922620

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4022 / tcp

-1327660293 | 2025-03-21T05:50:05.974035

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

4042 / tcp

-1327660293 | 2025-03-23T11:59:40.236850

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

4063 / tcp

171352214 | 2025-03-21T01:22:04.896935

-ERR client ip is not in whitelist

4064 / tcp

-1399940268 | 2025-03-24T02:16:26.496109

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4072 / tcp

-1399940268 | 2025-03-24T01:56:42.602613

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4148 / tcp

-1230049476 | 2025-03-12T15:36:27.991857

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

4150 / tcp

740837454 | 2025-03-17T07:46:48.154056

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

4157 / tcp

2087396567 | 2025-03-18T01:39:15.533661

kjnkjabhbanc283ubcsbhdc72

4159 / tcp

-2089734047 | 2025-02-26T00:56:20.115028

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4160 / tcp

1975288991 | 2025-03-23T06:10:03.102131

OPTI

4190 / tcp

1911457608 | 2025-02-23T18:13:47.971006

\x00[\x00\x00\x00\x00\x00\x00

4242 / tcp

-1341662640 | 2025-03-18T15:31:23.486355

HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

4250 / tcp

-2046514463 | 2025-03-22T13:27:47.683187

AB\x01\t

4282 / tcp

2087396567 | 2025-03-15T18:57:04.659824

kjnkjabhbanc283ubcsbhdc72

4321 / tcp

-1250504565 | 2025-03-24T00:00:32.680408

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

4333 / tcp

-441419608 | 2025-03-23T19:21:27.337770

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

4343 / tcp

2066555821 | 2025-03-23T17:30:53.420863

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2337_yd76_3397-57545

4369 / tcp

819727972 | 2025-03-22T07:23:24.298148

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4401 / tcp

-1013082686 | 2025-03-23T11:17:07.690288

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

4402 / tcp

819727972 | 2025-03-22T09:58:39.980726

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4432 / tcp

-358801646 | 2025-03-23T05:19:54.697672

SSH-2.0-OpenSSH_6.6.1

4433 / tcp

-1136600457 | 2025-03-21T01:20:52.724468

HELO:10.3.6.0.false
AS:2048
HL:19

4434 / tcp

2087396567 | 2025-03-20T02:29:17.556033

kjnkjabhbanc283ubcsbhdc72

4438 / tcp

-2096652808 | 2025-03-23T12:51:28.653400

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

4443 / tcp

-1228868710 | 2025-03-23T19:26:36.794935

Hashes

hash

1517304557

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sun, 23 Mar 2025 19:26:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            c6:f7:01:03:eb:c3:eb:64
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=gaofang
        Validity
            Not Before: Dec  1 06:47:51 2015 GMT
            Not After : Aug  9 06:47:51 2029 GMT
        Subject: CN=www.notexist.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:2d:3d:dc:36:9e:93:af:18:e2:1a:14:e3:
                    7e:94:57:4c:a3:2e:b4:cc:ac:3c:49:ab:85:82:16:
                    9d:28:e2:98:39:0b:7b:c9:97:3f:de:a3:93:82:01:
                    de:d3:8c:bf:62:6d:aa:7f:98:6c:c2:a6:d8:08:0c:
                    e2:81:ec:e6:ef:58:07:fe:cc:64:2a:54:3e:2b:72:
                    39:b3:7c:1b:ee:f7:3c:75:4e:e6:7a:56:d0:45:10:
                    71:96:9f:76:a1:c1:d7:9d:f2:90:a4:6e:ae:95:cb:
                    a5:34:46:fa:cd:8d:77:35:a9:37:ca:43:27:51:f6:
                    24:d6:c7:71:de:70:ab:ab:73:cf:fb:c3:e6:66:91:
                    80:09:31:91:78:69:45:9a:6d:1b:43:b1:81:80:aa:
                    bf:e3:45:5c:2f:ae:30:83:41:15:23:ef:3a:49:2a:
                    c4:97:24:2e:08:19:73:f3:2e:7a:1f:45:ec:f6:96:
                    03:bd:a5:2a:85:db:57:88:3c:9c:18:dc:60:e9:4f:
                    5c:32:4a:8a:be:a4:0f:4e:74:3a:95:4c:2c:17:9a:
                    a9:06:4d:1e:c6:ec:a1:8f:62:7a:db:9f:ed:34:f9:
                    f2:ca:d1:36:91:28:80:f4:88:6c:af:58:d0:f5:ef:
                    b9:d7:ae:8a:ea:4d:13:31:ff:7c:57:f9:c2:e7:0e:
                    39:a5
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        1a:38:83:bf:e0:df:2c:73:a5:eb:4e:90:14:74:d6:eb:45:d0:
        7a:4e:71:70:24:43:a5:e1:a7:c0:64:ba:ca:d4:e7:00:d8:8a:
        ed:9d:7d:96:49:37:f2:16:4f:54:7c:44:02:b7:74:eb:61:1c:
        60:f5:9d:d8:ec:b5:be:ce:8c:4d:77:09:49:f3:7d:67:ba:d9:
        f5:f9:b1:5a:bd:81:14:dd:97:6d:a8:60:9e:c4:97:33:8f:22:
        c5:92:78:92:b7:3e:d4:cf:a3:da:47:2e:6d:5a:6c:13:67:20:
        1d:d8:f8:bf:c1:fa:8d:4c:fd:26:2e:26:af:bb:cc:35:2e:9d:
        5e:ff:0f:52:49:7f:aa:80:de:34:60:8d:77:24:d2:e4:d2:0b:
        e6:2a:fe:83:dd:9c:2f:c2:06:3a:48:e0:be:19:6a:b7:db:dc:
        eb:90:a0:6f:89:8b:fa:7e:7e:0d:5f:6e:3b:24:d9:4d:6f:cc:
        a2:39:a5:81:f5:1e:90:2d:b1:89:76:b9:e2:7c:49:7f:5e:d8:
        d5:30:03:19:26:f2:25:bb:02:d1:0f:67:22:b1:ec:3e:5f:18:
        2a:4b:d1:5a:f2:00:a9:8c:57:67:bc:11:c1:65:a6:bf:84:cc:
        c4:58:56:46:23:58:ef:26:48:a3:66:54:86:5d:36:48:80:cd:
        82:02:04:7a

4444 / tcp

707919486 | 2025-03-21T06:25:32.405416

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

4445 / tcp

819727972 | 2025-03-16T20:46:30.810256

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4447 / tcp

1911457608 | 2025-03-22T16:48:46.310130

\x00[\x00\x00\x00\x00\x00\x00

4449 / tcp

-1695841648 | 2025-02-27T03:21:03.237449

HTTP/1.1 404 Not Found
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

4451 / tcp

1574088840 | 2025-03-22T02:18:54.090933

">Application and Content Networking Software 3.9</a>)\n</BODY><

4455 / tcp

-1399940268 | 2025-02-28T15:51:27.008424

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4463 / tcp

-1730858130 | 2025-03-22T08:00:36.707216

RFB 003.008
VNC:
  Protocol Version: 3.8

4482 / tcp

1911457608 | 2025-03-23T14:49:50.238875

\x00[\x00\x00\x00\x00\x00\x00

4488 / tcp

15018106 | 2025-03-23T10:28:50.266105

\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00

4500 / tcp

165188539 | 2025-03-21T05:03:05.900681

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

4502 / tcp

-1399940268 | 2025-03-23T22:25:33.195607

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4506 / tcp

1286504516 | 2025-03-24T01:26:56.440170

CP2E Control Console
Connected to Host: gZI

4510 / tcp

819727972 | 2025-03-22T10:08:27.537686

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4520 / tcp

-1399940268 | 2025-02-28T21:26:00.617262

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4524 / tcp

-1399940268 | 2025-03-22T17:26:46.417072

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4528 / tcp

-1399940268 | 2025-03-23T12:05:53.748025

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4530 / tcp

-585940771 | 2025-03-22T16:52:50.234115

Unknown command\r\n

4531 / tcp

1919228981 | 2025-03-05T09:31:41.782505

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

4543 / tcp

366084633 | 2025-03-14T14:21:28.579924

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

4572 / tcp

819727972 | 2025-03-23T12:50:12.341589

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4643 / tcp

51259122 | 2025-03-23T02:12:34.880543

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

4700 / tcp

-1375131644 | 2025-03-15T08:38:53.352461

\x00[v\xc3\xbdC\x7f\x00\x00

4747 / tcp

1911457608 | 2025-03-13T22:00:08.909443

\x00[\x00\x00\x00\x00\x00\x00

4808 / tcp

819727972 | 2025-03-11T17:54:10.978628

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

4840 / tcp

1282941221 | 2025-03-15T03:09:58.896969

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

4899 / tcp

1161309183 | 2025-03-23T16:26:54.258238

ProxyServer is ready

4911 / tcp

103159425 | 2025-03-23T00:52:01.596429

SSH-1.99-RGOS_SSH

4933 / tcp

-1327660293 | 2025-03-22T16:56:14.437620

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

4949 / tcp

740837454 | 2025-03-23T23:53:40.709994

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

4999 / tcp

-2089734047 | 2025-03-23T21:42:56.821742

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5001 / tcp

539065883 | 2025-03-21T06:22:10.536540

5005 / tcp

0 | 2025-03-22T20:43:23.590712

Hashes

hash

1865391109

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
content-length: 0

5006 / tcp

-1032713145 | 2025-03-21T06:06:34.608194

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

5007 / tcp

-1036370807 | 2025-03-21T17:05:13.660939

JDWP-Handshake

5009 / tcp

-2015162143 | 2025-03-23T01:41:24.050050

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1c5f_PStjdxtk16_38859-13702

5010 / tcp

1830187220 | 2025-03-23T13:27:32.821309

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

5025 / tcp

2087396567 | 2025-03-20T17:01:46.239767

kjnkjabhbanc283ubcsbhdc72

5070 / tcp

-1013082686 | 2025-02-23T14:08:14.201248

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

5105 / tcp

-445721795 | 2025-03-23T03:52:07.585377

\x00[\xc3\xaed\x1a\x7f\x00\x00

5119 / tcp

-2089734047 | 2025-03-22T09:48:09.392345

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5120 / tcp

840828839 | 2025-03-22T17:45:45.972216

HTTP/1.1 200 OK
Server: Microsoft-WinCE/7.00
Content-Type: text/html

HTTP NTLM Info:
Target_Name: WP5231
NetBIOS_Computer_Name: WP5231\x00
NetBIOS_Domain_Name: WP5231\x00
System_Time: 2023-11-28 19:00:57 +0000 UTC

5140 / tcp

819727972 | 2025-03-22T02:00:10.935075

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5172 / tcp

550048729 | 2025-03-21T16:30:20.238125

ÿÿÿ
0 ...

5180 / tcp

-1399940268 | 2025-03-13T05:32:10.039922

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5201 / tcp

-1626979812 | 2025-03-23T04:06:41.452455

220 Service ready for new user.

5209 / tcp

103159425 | 2025-03-23T19:15:30.386466

SSH-1.99-RGOS_SSH

5222 / tcp

-857537731 | 2025-03-21T04:37:46.080613

HTTP/1.1 400 Bad Request
Server: Tengine
Date: Fri, 21 Mar 2025 04:37:45 GMT
Content-Type: text/html
Connection: close

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr/>Powered by Tengine<hr><center>nginx</center>
</body>
</html>

5226 / tcp

-1399940268 | 2025-02-28T13:09:30.913188

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5233 / tcp

-2089734047 | 2025-03-23T17:37:57.924595

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5234 / tcp

1353260875 | 2025-03-23T10:36:28.694882

\x00[g\xc2\x95N\x7f\x00\x00

5237 / tcp

-1399940268 | 2025-03-22T11:08:05.144697

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5238 / tcp

-407828767 | 2025-03-05T05:12:59.328224

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

5239 / tcp

819727972 | 2025-03-23T13:32:17.236172

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5245 / tcp

1911457608 | 2025-03-22T13:00:04.404102

\x00[\x00\x00\x00\x00\x00\x00

5248 / tcp

-1399940268 | 2025-03-22T19:35:37.932259

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5252 / tcp

-1399940268 | 2025-03-22T19:03:16.443880

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5253 / tcp

-1888448627 | 2025-03-23T07:49:10.735077

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

5259 / tcp

-1248408558 | 2025-03-03T22:08:13.456597

220 MikroTik FTP server (MikroTik 6.44.3) ready

5265 / tcp

-1399940268 | 2025-03-19T09:55:42.158421

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5266 / tcp

1911457608 | 2025-03-23T01:33:20.874850

\x00[\x00\x00\x00\x00\x00\x00

5267 / tcp

-2089734047 | 2025-03-22T07:17:43.224794

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5269 / tcp

-1165098486 | 2025-03-23T19:34:37.743517

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938487.609-w-waf02tjgt

5272 / tcp

-1327660293 | 2025-03-22T09:10:51.626223

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

5274 / tcp

-1399940268 | 2025-03-20T03:41:38.280045

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5277 / tcp

-1230049476 | 2025-03-23T10:11:21.385071

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

5321 / tcp

1353260875 | 2025-03-23T13:23:26.920224

\x00[g\xc2\x95N\x7f\x00\x00

5432 / tcp

1989907056 | 2025-03-21T00:39:32.330582

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

5435 / tcp

-1476017887 | 2025-03-23T22:44:48.945821

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

5443 / tcp

-338560721 | 2025-03-22T16:05:11.869134

Hashes

hash

616062308

http.dom_hash

196608935

http.html_hash

-338560721

http.server_hash

1673621694

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: Tengine
Date: Sat, 22 Mar 2025 16:05:11 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close

5494 / tcp

-375604792 | 2025-03-21T09:32:10.206607

220 Microsoft FTP Service

5495 / tcp

-1399940268 | 2025-03-24T00:47:22.181271

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5523 / tcp

1363464823 | 2025-03-14T09:14:38.055239

\x00[|ox\x7f\x00\x00

5543 / tcp

2103111368 | 2025-03-08T21:57:45.464294

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

5544 / tcp

408230060 | 2025-03-13T12:34:03.760068

\r\nSorry, that nickname format is invalid.\r\n

5556 / tcp

1911457608 | 2025-03-08T12:04:51.878890

\x00[\x00\x00\x00\x00\x00\x00

5567 / tcp

-1059554316 | 2025-03-23T21:22:02.196664

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

5568 / tcp

819727972 | 2025-03-23T12:30:39.368532

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5591 / tcp

-1105333987 | 2025-02-28T16:14:48.641607

\x00[KpU\x7f\x00\x00

5592 / tcp

-1036370807 | 2025-03-23T09:29:37.082736

JDWP-Handshake

5599 / tcp

-2096652808 | 2025-02-27T16:04:35.277932

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5600 / tcp

321971019 | 2025-03-23T21:20:21.160014

-ERR client ip is not in whitelist\r

5604 / tcp

1353260875 | 2025-03-13T14:58:01.150416

\x00[g\xc2\x95N\x7f\x00\x00

5607 / tcp

1282941221 | 2025-03-22T13:45:30.096170

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

5613 / tcp

-1399940268 | 2025-03-22T04:58:19.509862

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5614 / tcp

-1297953727 | 2025-03-22T06:41:33.253296

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

5640 / tcp

-1399940268 | 2025-03-04T19:00:29.919197

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5672 / tcp

575925250 | 2025-03-17T10:29:56.757385

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5680 / tcp

-1399940268 | 2025-03-22T10:43:32.164873

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5721 / tcp

1911457608 | 2025-03-23T18:34:32.160338

\x00[\x00\x00\x00\x00\x00\x00

5801 / tcp

0 | 2025-03-14T22:26:41.003998

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

5858 / tcp

2087396567 | 2025-03-22T13:31:22.238690

kjnkjabhbanc283ubcsbhdc72

5908 / tcp

-1839934832 | 2025-03-10T06:32:02.906988

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

5909 / tcp

-585940771 | 2025-03-22T23:12:40.872033

Unknown command\r\n

5910 / tcp

778114890 | 2025-03-24T00:26:55.547380

HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html
Connection: keep-alive
Location: https://60.16.60.210:5910/webclient

5912 / tcp

1623746877 | 2025-03-23T05:31:12.932037

500 Permission denied - closing connection.\r\n

5916 / tcp

1504401647 | 2025-03-23T21:38:19.212402

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

5918 / tcp

1504401647 | 2025-03-13T06:52:25.887873

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

5920 / tcp

632542934 | 2025-03-23T20:02:28.764142

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

5938 / tcp

-1399940268 | 2025-03-22T18:23:42.107324

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5984 / tcp

1999272906 | 2025-03-22T03:50:35.629691

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

819727972 | 2025-03-20T17:33:10.572957

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5995 / tcp

-2089734047 | 2025-03-20T05:48:49.541546

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5999 / tcp

-1399940268 | 2025-03-22T22:33:33.426705

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6000 / tcp

740837454 | 2025-03-23T07:05:43.835644

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

6001 / tcp

-358801646 | 2025-03-23T10:30:54.002103

SSH-2.0-OpenSSH_6.6.1

6002 / tcp

819727972 | 2025-03-23T12:08:27.515861

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

6003 / tcp

-1399940268 | 2025-03-10T12:11:05.210355

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6006 / tcp

-1327660293 | 2025-03-05T19:04:10.268381

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

6008 / tcp

-122096153 | 2025-03-22T14:04:14.948495

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

6021 / tcp

1504401647 | 2025-03-22T09:48:15.160067

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

6022 / tcp

819727972 | 2025-03-23T04:38:52.055248

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

6061 / tcp

103159425 | 2025-03-23T22:12:44.172143

SSH-1.99-RGOS_SSH

6080 / tcp

-2118655245 | 2025-02-26T12:36:30.114651

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

6100 / tcp

662263152 | 2025-03-22T08:06:42.015175

HTTP/1.1 404 Not Found
Connection: keep-alive
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Transfer-Encoding: chunked
Content-Type: application/json

6102 / tcp

165188539 | 2025-03-22T17:47:05.870583

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

6308 / tcp

819727972 | 2025-03-10T17:17:27.293490

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

6348 / tcp

-1399940268 | 2025-02-25T20:14:24.114485

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6363 / tcp

-1399940268 | 2025-03-23T03:14:27.249196

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6379 / tcp

-1228868710 | 2025-03-22T05:41:42.509982

Hashes

hash

-822785546

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 05:41:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive

6380 / tcp

321971019 | 2025-03-22T17:54:56.134181

-ERR client ip is not in whitelist\r

6405 / tcp

819727972 | 2025-03-23T21:54:46.479060

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

6433 / tcp

-1730858130 | 2025-03-22T15:37:20.353562

RFB 003.008
VNC:
  Protocol Version: 3.8

6443 / tcp

-1228868710 | 2025-03-22T10:42:46.790122

Hashes

hash

1803351071

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 10:42:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            c6:f7:01:03:eb:c3:eb:64
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=gaofang
        Validity
            Not Before: Dec  1 06:47:51 2015 GMT
            Not After : Aug  9 06:47:51 2029 GMT
        Subject: CN=www.notexist.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:2d:3d:dc:36:9e:93:af:18:e2:1a:14:e3:
                    7e:94:57:4c:a3:2e:b4:cc:ac:3c:49:ab:85:82:16:
                    9d:28:e2:98:39:0b:7b:c9:97:3f:de:a3:93:82:01:
                    de:d3:8c:bf:62:6d:aa:7f:98:6c:c2:a6:d8:08:0c:
                    e2:81:ec:e6:ef:58:07:fe:cc:64:2a:54:3e:2b:72:
                    39:b3:7c:1b:ee:f7:3c:75:4e:e6:7a:56:d0:45:10:
                    71:96:9f:76:a1:c1:d7:9d:f2:90:a4:6e:ae:95:cb:
                    a5:34:46:fa:cd:8d:77:35:a9:37:ca:43:27:51:f6:
                    24:d6:c7:71:de:70:ab:ab:73:cf:fb:c3:e6:66:91:
                    80:09:31:91:78:69:45:9a:6d:1b:43:b1:81:80:aa:
                    bf:e3:45:5c:2f:ae:30:83:41:15:23:ef:3a:49:2a:
                    c4:97:24:2e:08:19:73:f3:2e:7a:1f:45:ec:f6:96:
                    03:bd:a5:2a:85:db:57:88:3c:9c:18:dc:60:e9:4f:
                    5c:32:4a:8a:be:a4:0f:4e:74:3a:95:4c:2c:17:9a:
                    a9:06:4d:1e:c6:ec:a1:8f:62:7a:db:9f:ed:34:f9:
                    f2:ca:d1:36:91:28:80:f4:88:6c:af:58:d0:f5:ef:
                    b9:d7:ae:8a:ea:4d:13:31:ff:7c:57:f9:c2:e7:0e:
                    39:a5
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        1a:38:83:bf:e0:df:2c:73:a5:eb:4e:90:14:74:d6:eb:45:d0:
        7a:4e:71:70:24:43:a5:e1:a7:c0:64:ba:ca:d4:e7:00:d8:8a:
        ed:9d:7d:96:49:37:f2:16:4f:54:7c:44:02:b7:74:eb:61:1c:
        60:f5:9d:d8:ec:b5:be:ce:8c:4d:77:09:49:f3:7d:67:ba:d9:
        f5:f9:b1:5a:bd:81:14:dd:97:6d:a8:60:9e:c4:97:33:8f:22:
        c5:92:78:92:b7:3e:d4:cf:a3:da:47:2e:6d:5a:6c:13:67:20:
        1d:d8:f8:bf:c1:fa:8d:4c:fd:26:2e:26:af:bb:cc:35:2e:9d:
        5e:ff:0f:52:49:7f:aa:80:de:34:60:8d:77:24:d2:e4:d2:0b:
        e6:2a:fe:83:dd:9c:2f:c2:06:3a:48:e0:be:19:6a:b7:db:dc:
        eb:90:a0:6f:89:8b:fa:7e:7e:0d:5f:6e:3b:24:d9:4d:6f:cc:
        a2:39:a5:81:f5:1e:90:2d:b1:89:76:b9:e2:7c:49:7f:5e:d8:
        d5:30:03:19:26:f2:25:bb:02:d1:0f:67:22:b1:ec:3e:5f:18:
        2a:4b:d1:5a:f2:00:a9:8c:57:67:bc:11:c1:65:a6:bf:84:cc:
        c4:58:56:46:23:58:ef:26:48:a3:66:54:86:5d:36:48:80:cd:
        82:02:04:7a

6482 / tcp

1911457608 | 2025-03-22T15:29:38.104876

\x00[\x00\x00\x00\x00\x00\x00

6503 / tcp

1911457608 | 2025-03-22T03:28:09.652387

\x00[\x00\x00\x00\x00\x00\x00

6510 / tcp

-297057753 | 2025-03-16T06:14:58.282450

HTTP/1.1 401 Unauthorized
X-Plex-Protocol: 1.0
Content-Type: text/html
Connection: close
Cache-Control: no-cache

6512 / tcp

1911457608 | 2025-03-13T05:38:22.457113

\x00[\x00\x00\x00\x00\x00\x00

6513 / tcp

-1261090339 | 2025-03-08T21:09:12.437737

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

6543 / tcp

-1040587808 | 2025-03-22T15:00:56.027228

\\xba\\xdc\xcd\xab\\x01#%0C\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xbbX\\x00\\x00\\x00\\x00\\x00\\x00[079][16:08:54.040]\\xc1\\xac\\xbd\xd3\xb3\xc9\xb9\\xa6\\xa3\\xac\\xb1\\xbe\xc4\xa3\\xbf\\xe9 PID \xce\xaa 0x23=35\\x00\\xba\\xdc\xcd\xab\\x01#%0_\\x00U\xd0\x94\\xbb\\x82\\x00\\x94z\\xbbX\\x00\\x00\\x00\\x00\\x00\\x00[080][16:08:54.040]\\xc7\\xeb\xca

6550 / tcp

819727972 | 2025-03-22T03:01:40.227931

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

6560 / tcp

819727972 | 2025-03-22T18:22:19.391063

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

6565 / tcp

-367607324 | 2025-03-23T10:37:01.327606

\\x12\\x04\\x03\\x7f\xc3\xbf\xc3\xbf\xc3\xbf\n0\\x04\\x10\\x06 \\x04\\x08...\n

6601 / tcp

-1248408558 | 2025-03-23T00:43:53.526511

220 MikroTik FTP server (MikroTik 6.44.3) ready

6605 / tcp

-1399940268 | 2025-03-23T15:37:13.962270

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6633 / tcp

-1399940268 | 2025-03-23T15:39:20.868659

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6650 / tcp

1830697416 | 2025-03-22T04:45:12.470986

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

6653 / tcp

819727972 | 2025-03-16T18:18:15.971645

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

6662 / tcp

-2017887953 | 2025-03-24T01:33:37.268505

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

6664 / tcp

-2118655245 | 2025-03-04T04:02:47.744008

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

6666 / tcp

-365662216 | 2025-03-22T08:40:43.574745

\x05\xff

6667 / tcp

-971970408 | 2025-03-16T15:06:06.539961

6668 / tcp

1911457608 | 2025-03-22T08:30:34.757303

\x00[\x00\x00\x00\x00\x00\x00

6686 / tcp

-1947777893 | 2025-03-22T05:57:37.306417

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

6697 / tcp

-1899074860 | 2025-03-21T04:19:22.890866

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

6699 / tcp

-1039137921 | 2025-03-12T08:00:21.966954

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705940526.987-w-waf01tjgt

6700 / tcp

1911457608 | 2025-03-22T16:42:33.763302

\x00[\x00\x00\x00\x00\x00\x00

6755 / tcp

1911457608 | 2025-03-23T14:47:24.304410

\x00[\x00\x00\x00\x00\x00\x00

6775 / tcp

-375604792 | 2025-03-23T14:56:31.648708

220 Microsoft FTP Service

7001 / tcp

1265582946 | 2025-03-21T15:41:22.052342

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2838_PS-JJN-01GM465_27752-26327

7004 / tcp

-2084228232 | 2025-03-23T17:57:05.612925

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2894_PS-KHN-01iLV44_22702-21683

7006 / tcp

-358801646 | 2025-03-23T01:36:21.381976

SSH-2.0-OpenSSH_6.6.1

7011 / tcp

-1399940268 | 2025-03-10T18:21:14.832765

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7013 / tcp

819727972 | 2025-03-23T01:46:06.293888

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

7015 / tcp

580340387 | 2025-03-23T04:58:28.287712

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

7016 / tcp

-457235091 | 2025-03-22T16:37:09.705612

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

7018 / tcp

-1888448627 | 2025-03-22T12:30:43.896547

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

7025 / tcp

1911457608 | 2025-03-23T22:37:44.745391

\x00[\x00\x00\x00\x00\x00\x00

7070 / tcp

-338560721 | 2025-03-23T13:20:31.899297

Hashes

hash

-913034957

http.dom_hash

196608935

http.html_hash

-338560721

http.server_hash

1673621694

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: Tengine
Date: Sun, 23 Mar 2025 13:20:31 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: close

7071 / tcp

-971970408 | 2025-03-09T23:25:44.233080

7079 / tcp

1911457608 | 2025-03-23T12:13:21.782409

\x00[\x00\x00\x00\x00\x00\x00

7080 / tcp

-2089734047 | 2025-03-23T17:02:54.797060

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

7082 / tcp

-1230049476 | 2025-03-24T01:38:13.595654

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

7084 / tcp

-1435414831 | 2025-03-24T00:21:08.351989

roku: ready\r\n

7090 / tcp

-1428621233 | 2025-03-23T00:28:45.952114

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

7105 / tcp

1911457608 | 2025-03-19T18:25:56.117271

\x00[\x00\x00\x00\x00\x00\x00

7170 / tcp

-1730858130 | 2025-03-22T12:45:26.483049

RFB 003.008
VNC:
  Protocol Version: 3.8

7171 / tcp

-1399940268 | 2025-03-20T21:28:32.518920

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7218 / tcp

1282941221 | 2025-03-22T23:31:56.698269

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

7283 / tcp

-1399940268 | 2025-03-21T04:46:11.923908

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7403 / tcp

-904840257 | 2025-03-22T23:03:34.395474

572 Relay not authorized\r\n

7415 / tcp

-1888448627 | 2025-03-17T18:57:33.867599

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

7434 / tcp

-2096652808 | 2025-03-08T15:57:35.294546

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

7441 / tcp

-1399940268 | 2025-03-23T16:13:33.568995

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7443 / tcp

-1228868710 | 2025-03-21T07:55:04.975955

Hashes

hash

1679751467

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Fri, 21 Mar 2025 07:55:04 GMT
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            c6:f7:01:03:eb:c3:eb:64
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=gaofang
        Validity
            Not Before: Dec  1 06:47:51 2015 GMT
            Not After : Aug  9 06:47:51 2029 GMT
        Subject: CN=www.notexist.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:2d:3d:dc:36:9e:93:af:18:e2:1a:14:e3:
                    7e:94:57:4c:a3:2e:b4:cc:ac:3c:49:ab:85:82:16:
                    9d:28:e2:98:39:0b:7b:c9:97:3f:de:a3:93:82:01:
                    de:d3:8c:bf:62:6d:aa:7f:98:6c:c2:a6:d8:08:0c:
                    e2:81:ec:e6:ef:58:07:fe:cc:64:2a:54:3e:2b:72:
                    39:b3:7c:1b:ee:f7:3c:75:4e:e6:7a:56:d0:45:10:
                    71:96:9f:76:a1:c1:d7:9d:f2:90:a4:6e:ae:95:cb:
                    a5:34:46:fa:cd:8d:77:35:a9:37:ca:43:27:51:f6:
                    24:d6:c7:71:de:70:ab:ab:73:cf:fb:c3:e6:66:91:
                    80:09:31:91:78:69:45:9a:6d:1b:43:b1:81:80:aa:
                    bf:e3:45:5c:2f:ae:30:83:41:15:23:ef:3a:49:2a:
                    c4:97:24:2e:08:19:73:f3:2e:7a:1f:45:ec:f6:96:
                    03:bd:a5:2a:85:db:57:88:3c:9c:18:dc:60:e9:4f:
                    5c:32:4a:8a:be:a4:0f:4e:74:3a:95:4c:2c:17:9a:
                    a9:06:4d:1e:c6:ec:a1:8f:62:7a:db:9f:ed:34:f9:
                    f2:ca:d1:36:91:28:80:f4:88:6c:af:58:d0:f5:ef:
                    b9:d7:ae:8a:ea:4d:13:31:ff:7c:57:f9:c2:e7:0e:
                    39:a5
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        1a:38:83:bf:e0:df:2c:73:a5:eb:4e:90:14:74:d6:eb:45:d0:
        7a:4e:71:70:24:43:a5:e1:a7:c0:64:ba:ca:d4:e7:00:d8:8a:
        ed:9d:7d:96:49:37:f2:16:4f:54:7c:44:02:b7:74:eb:61:1c:
        60:f5:9d:d8:ec:b5:be:ce:8c:4d:77:09:49:f3:7d:67:ba:d9:
        f5:f9:b1:5a:bd:81:14:dd:97:6d:a8:60:9e:c4:97:33:8f:22:
        c5:92:78:92:b7:3e:d4:cf:a3:da:47:2e:6d:5a:6c:13:67:20:
        1d:d8:f8:bf:c1:fa:8d:4c:fd:26:2e:26:af:bb:cc:35:2e:9d:
        5e:ff:0f:52:49:7f:aa:80:de:34:60:8d:77:24:d2:e4:d2:0b:
        e6:2a:fe:83:dd:9c:2f:c2:06:3a:48:e0:be:19:6a:b7:db:dc:
        eb:90:a0:6f:89:8b:fa:7e:7e:0d:5f:6e:3b:24:d9:4d:6f:cc:
        a2:39:a5:81:f5:1e:90:2d:b1:89:76:b9:e2:7c:49:7f:5e:d8:
        d5:30:03:19:26:f2:25:bb:02:d1:0f:67:22:b1:ec:3e:5f:18:
        2a:4b:d1:5a:f2:00:a9:8c:57:67:bc:11:c1:65:a6:bf:84:cc:
        c4:58:56:46:23:58:ef:26:48:a3:66:54:86:5d:36:48:80:cd:
        82:02:04:7a

7444 / tcp

819727972 | 2025-03-22T13:40:32.093405

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

7474 / tcp

-2118655245 | 2025-03-14T08:12:13.142879

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

7510 / tcp

819727972 | 2025-03-13T13:39:39.048173

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

7548 / tcp

1761482307 | 2025-03-21T05:05:48.118811

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

7603 / tcp

-585940771 | 2025-03-15T18:16:53.998640

Unknown command\r\n

7634 / tcp

2087396567 | 2025-03-21T09:54:22.416289

kjnkjabhbanc283ubcsbhdc72

7700 / tcp

-445721795 | 2025-03-22T20:28:45.354434

\x00[\xc3\xaed\x1a\x7f\x00\x00

7774 / tcp

-1327660293 | 2025-03-23T18:49:01.925533

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

7776 / tcp

-1399940268 | 2025-03-23T19:03:44.358479

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7801 / tcp

1332894250 | 2025-03-22T07:34:58.445139

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

7998 / tcp

-1036370807 | 2025-03-19T18:56:35.698269

JDWP-Handshake

7999 / tcp

-1259524839 | 2025-03-24T02:25:44.627093

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

8000 / tcp

-1036370807 | 2025-03-16T03:33:11.105331

JDWP-Handshake

8001 / tcp

-1228868710 | 2025-03-22T23:00:26.875460

Hashes

hash

1442207547

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 23:00:26 GMT
Transfer-Encoding: chunked
Connection: keep-alive

8004 / tcp

-1228868710 | 2025-03-23T10:14:18.921995

Hashes

hash

58795318

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sun, 23 Mar 2025 10:14:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive

8005 / tcp

-1228868710 | 2025-03-22T11:45:37.694246

Hashes

hash

-1226931503

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 11:45:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive

8007 / tcp

-1228868710 | 2025-02-26T15:41:18.778079

Hashes

hash

1220865043

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Wed, 26 Feb 2025 15:41:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive

8008 / tcp

-1228868710 | 2025-03-22T02:15:11.962560

Hashes

hash

1829685489

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 02:15:09 GMT
Transfer-Encoding: chunked
Connection: keep-alive

8009 / tcp

-2089734047 | 2025-03-20T20:10:56.956313

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8012 / tcp

-1399940268 | 2025-03-23T06:52:40.599544

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8017 / tcp

-1839934832 | 2025-03-22T18:25:36.235721

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8018 / tcp

1726594447 | 2025-03-23T18:10:34.687438

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

8020 / tcp

1911457608 | 2025-03-22T08:51:17.195530

\x00[\x00\x00\x00\x00\x00\x00

8021 / tcp

-1842649824 | 2025-03-23T23:46:20.943958

HTTP/1.1 403 Forbidden
Server: Cdn Cache Server V2.0
Content-Type: text/html
Expires: Mon, 22 Jan 2024 08:31:26 GMT
Via: 1.1 catmaomen21.244:8107
Connection: close

8024 / tcp

-2031152423 | 2025-03-23T22:02:23.988263

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

8025 / tcp

632542934 | 2025-03-19T04:57:58.862551

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8026 / tcp

-1996280214 | 2025-03-23T15:56:24.313630

\x06\x04\x05@

8029 / tcp

-1399940268 | 2025-03-15T11:55:49.290159

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8036 / tcp

669849225 | 2025-03-23T12:21:53.629020

SSH-98.60-SysaxSSH_81885..42\r\n

8038 / tcp

-1399940268 | 2025-03-21T20:44:37.106409

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8039 / tcp

1615193817 | 2025-03-21T04:28:20.775800

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

8043 / tcp

580340387 | 2025-03-23T04:11:27.844413

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

8046 / tcp

1615193817 | 2025-03-09T23:50:05.701030

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

8048 / tcp

709622286 | 2025-03-12T02:26:36.835569

OK Welcome <299685> on DirectUpdate server 7286\r\n

8050 / tcp

921225407 | 2025-03-22T01:48:14.494091

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8052 / tcp

165188539 | 2025-03-23T05:13:59.503557

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8057 / tcp

-1297953727 | 2025-03-22T06:44:15.292659

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

8061 / tcp

-2140303521 | 2025-03-22T19:07:55.001953

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

8064 / tcp

-2089734047 | 2025-03-17T08:07:52.707162

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8066 / tcp

-1399940268 | 2025-03-23T01:39:42.593572

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8067 / tcp

-1453516345 | 2025-03-23T11:44:16.217536

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

8071 / tcp

-1795027372 | 2025-03-24T02:21:37.520571

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

8074 / tcp

-1487943323 | 2025-03-23T18:38:38.783046

431 Unable to negotiate secure command connection.\r\n

8076 / tcp

-1487943323 | 2025-02-23T02:55:57.732132

431 Unable to negotiate secure command connection.\r\n

8077 / tcp

-1487943323 | 2025-03-23T12:42:04.233117

431 Unable to negotiate secure command connection.\r\n

8079 / tcp

819727972 | 2025-03-22T08:28:58.759250

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8080 / tcp

-1228868710 | 2025-03-22T17:17:47.838817

Hashes

hash

-1854899528

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 17:17:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive

8081 / tcp

-2001837552 | 2025-03-21T03:56:35.126415

HTTP/1.1 410 Gone
Server: Tengine
Date: Fri, 21 Mar 2025 03:56:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive

2aad
<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>阿里云 Web应用防火墙</title>
  <style rel="stylesheet">
    body {
      font-size: 14px;
      color: #333;
      font-weight: 400;
      padding: 100px 0px 0px;
    }

    .wrapper {
      width: 850px;
      margin: 0 auto;
    }

    .top-wrapper {
      padding: 35px 30px 12px;
    }

    .top-content-right {
      padding-top: 20px;
    }

    .select-content {
      display: flex;
      justify-content: end;

    }

    #selectLang {
      color: rgb(250 100 0) !important;
      border: 1px solid rgb(250 100 0);
    }

    .bottom-wrapper {
      padding: 0 20px 0 40px;
    }

    .bottom-content-one {
      margin: 30px 0px;
    }

    .bottom-content-two {
      border-top: 1px solid #ededed;
      padding-top: 30px;
    }

    .theme-color {
      color: #ff6a00;
    }

    .grey-color1 {
      color: #999;
    }

    .grey-color2 {
      color: #666;
    }

    .background-color {
      background-color: #fa640008;
    }

    .font-weight {
      font-weight: 500;
    }

    .space-top8 {
      margin-top: 8px
    }

    .space-bottom16 {
      margin-bottom: 16px;
    }

    .no_derciton {
      text-decoration: none;
    }

    .flex-content {
      display: flex;
    }
  </style>
</head>

<body>
  <div class="wrapper">
    <div class="top-wrapper background-color">
      <div class="select-content">
        <select name="" id="selectLang" onchange="langChange(value)"  >
          <option value="en">English</option>
          <option value="ch">简体中文</option>
        </select>
      </div>
      <div class="flex-content">
        <div>
          <img
            src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAXIAAAD+BAMAAADVD5MtAAAABGdBTUEAALGPC/xhBQAAAAFzUkdCAK7OHOkAAAAwUExURfedAPZsAPhmAv/59P/8+v/dxfj39//////Mo/+dZf+obfXy7/+ydf6JQv6bTv55NYGJZCYAAAAGdFJOUwEGDanFVaP1GdYAABGMSURBVHja7FxLc9vWGTX3XZCYya4b4B80M/0D/QdZdOdlRmKN1KsMmYynnWk8duRE1tI1mUrLJKQRdwcrheOl6tCKu/NEiSHuPLEmYrd+sez9HhcP4gK4JAAR9OgLJdGSQh8en3u+8108Llw4r/M6r/M6r/M6r3KrscpaGnUTapW0Lfn301uGt95aRTHqxZmH/6/ZpBdZjVQYvwC/GOHwbiXmlXAu/+7mQpoV/0KEm19jJf9J/K3FpN6E99paeTUJu7bYAXST2a5BCTT6Km81aoFZktfUZF28x0ar1Wy16gO+0dSzlUYzittomSt5xMFr+EuDOWfYhrEy6FByoWpJvRmDjS+wIuzwt8+11OyEFbNDw1pdxQWj04bg9965eJhSzmioVf1BT7v+sZVRvzfR1fNIZ8LfUUGmGjkjejocKfEO+1C9waAPzwdY/SLIt66aqPVcyhH6xQTRhw5+GQHsofgyFMBHIyeOe4AfAF7iZ8z9Isi3rmkonXv+bxSUA2TAD7AB9yjJeV/gHiB0phq5h+r10rTzvPd8Lw/51nsaSidjSVAOjxGAH2GhVgRwR4Wd6B4M9ISiwzmSrsX5OwrCCTjofIRqEaBRK6M4cNA2yj3gnFWfzvpuPvIttBmYGNKhI+W/VYplRLxjCbYdVPpQwXo/JB1AZ7L9vHfU6x3lIn+PSM+jvHlRBRwEw/bikNbnYePaRKUPQDI9VgtJpl9ELVufkNCbOTI3kshJ6KQZwAwaZ9oT4PFB4Ps94nyQw3wu8ms0ZWR2UPgVdQsaoaWHS5QUMycVIHzIYgFPJ86z1+eRJvJWMw27+D7+gqnsnIfoiujnznBE3qKoAblLaC19aedK/Hug83zkV40coXMHlXC/P3boycPtQ/LFrW2mHGQC8CNy6ZPIATYrnboRfKTi1lTLNofdHGuRnI9msykB73YFdEH39e6VQ+J85CS1wnZOnA85AhDkLL3s6nKeAbyBrd+UyP85m81+hSefdrsfgcy/7na794nyIRijohORzgeDmJ/nrdAjDc7NVqZeaIEajPy/AvkbeCIAd4HzR+LrR2EPVUEHzsOkxT20nxFdjrTUctWU+0aZwCXyGSN/CMi3heQPADmlRMpaoyTj1EiloTPnmW5+pKNz08iCTn3IaFmMfCyQvwo5dxxCTmuU8uLQSfo5yoXspc+rs58TFvM5twh4qtJxADUSatnsdjvw9Q6qJZDKMCWiy6SITTTbzvdoieZzbpkcXTJM0TAk5/+ZW6GOI97CZ5jPZUZPdn+M5hFL7BHnqfayq6lzI4tzbkQB50LoL8kV713ZhsR1+KjbpnyOzqLmfDCItaJBbmzR0jkPpZnzkGlZQef81Qn6/iH10MNA5E5yjaLAh8x5xFvyQvquBueoljRXlM3fUk/ODrV+ho6GPhomAyO20QjdpPOUfL6n20MtMpfMBWqqkTuInQOX7P/JqNhn8LF4nhm5jnQS11XLyEqLjQvxFToHnLIiBy7o/U4yKiLdQ5qfewwdcPcL5vNti6CnTUUNsnNLnXEF30IvUi0cW0ZJ7LIRDeXwnzcX9bQ5T+tElM6VanFkPj+k3s/Qnfm+j2RzFwUrH/ZYMf1UQ9/V83OLl6jSzXkiUnI+oplIxnPq/446oaOby/WZa+ilcH6BtkEt1RBKC9QJ4tZIMUP32RcR9bAXGnpmC11E5ym22ORGZKknf9ziYlskpavyOS5RKXWp8EHRTnTV4iaalRVN9Qo9xI05eAvoK7TXopgtiHPuRHIDIEMpR71FdK4eLmiUM4xUP49z7qR5yyDW/Htl7HHl6ZyHOcvaqqy2tx6KR7KKcU46Ny3D6i5XHfwQeXJTfBFPxGMz8mRT1JKv3P0wyxRZ59CJurWrDzU4b1lmLZET8PRj5jXm3DLydG5Y9eU8W+eGsbY6t9ZU52ZdOc/VOXT/ddX5uvp5XdWi4eeGda7zcz/X1rm1tjpfWz8Pe2hnY/W1qa/ziCvWCrlGbjFrzLmun9eLc418bqypzmvL+Vutc2NtdW6trc7X1s+tddW5ubY6r7W3vKV+Xuse+pbmlqp0fuPk+nr6edv3f6xc55Vw/iffP1rL3GJ/5/t+1TqvpofeLIp8ZXPoD77/03rm8x+KrtCV+flNiXzfXbM59IHvfwlf7/s/uZX5eVmc23Dw+HPG6X3zFJ7Z3/j+Qc11vv/Z6anwE//4a8Ru03cvie/8XG8/356cnhJ0338Y/jPcXBr5Gc2h9g4AP/YZ+u1A2vCNZzXOLR4Cl5T7/vRHCR3+dL0qnZfQQ3cmx8fAOZM+FdD5J7uL2vqZzqH2vyaTOOfjsf9FEF+uV+Xnxb2lDbgF6z5TLnBPp1MC7H3/qL5zqP14ApxPjoMF6k/H4/FT+eP6zqGglWMsYeYMXJA+u1P3OdS7O8GiFUoLVFA+nr50CyGvXuffTuT6PA5MUdRsPPui3nOofRdFPjkNO5HgHNQye1XvOfQ+SyW2QIFyAf2gap0X4Vy0/VDmflQvs+nsBf3OZ6f+nUp0XqiHtieBzGUjGmMJ4LOpy/sXvu9WoPNirviAKafm/+PWD+ESFfUEfgV2AfQz+pnl88cMHBzdP7rXvYK4gXO4IOxFgPzLuvl5O2Rc1M/iNW5KvYBcZi7vvCzDebVz6AcTWRBbvhKv8WewRNGHkPPZlzwWVaLzQpxHnEXUv8VrfEypZYzAZ695FL1duzlUyhzl4gPyv7AnzhD7K5qsvdr5eTsUC0B/Jl7jO8hbAeczVElnGeTVzqHtSYRz338qXmI36ENYi++hn01ukW4uW9Gdzg1O5xL6s6W7f7Vz6I7EHdmyGFPeYs5fV5hbirji49ATIXCdMnTZQmUvWkot1ebzvckekT6JxnNcn2PC/rLSfL40ck+qnCf/Uw4tfsj5zK1O5wXUEpiiTOe/YOIKen8SuZ1boVqMCnNLO3RzVDomrnFM51F

8083 / tcp

-971970408 | 2025-03-22T16:58:46.355167

8085 / tcp

-1189269828 | 2025-03-19T16:35:57.018071

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8087 / tcp

819727972 | 2025-03-20T21:01:29.758554

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8089 / tcp

1286504516 | 2025-03-21T07:59:15.136871

CP2E Control Console
Connected to Host: gZI

8090 / tcp

-1228868710 | 2025-03-21T02:55:14.258001

Hashes

hash

-1627457433

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Fri, 21 Mar 2025 02:55:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive

8097 / tcp

-1105333987 | 2025-03-20T22:03:10.209772

\x00[KpU\x7f\x00\x00

8099 / tcp

-749939074 | 2025-03-14T18:55:16.281822

HTTP/1.1 200 
Cache-Control: private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Access-Control-Allow-Origin: http://localhost:8009
Access-Control-Allow-Methods: *
Access-Control-Max-Age: 0
Access-Control-Allow-Credentials: true
XDomainRequestAllowed: 1
Access-Control-Allow-Headers: Authorization,Origin, X-Requested-With, Content-Type, Accept,Access-Token
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Transfer-Encoding: chunked

8102 / tcp

-1598265216 | 2025-03-19T22:00:35.901210

@RSYNCD: 31.0

8106 / tcp

-441419608 | 2025-03-19T20:36:46.679517

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

8114 / tcp

1911457608 | 2025-03-22T03:36:30.600275

\x00[\x00\x00\x00\x00\x00\x00

8117 / tcp

-1399940268 | 2025-02-22T23:21:37.064319

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8119 / tcp

1726594447 | 2025-03-08T20:01:59.662278

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

8121 / tcp

-1435414831 | 2025-03-23T19:46:19.590244

roku: ready\r\n

8124 / tcp

-1888448627 | 2025-03-24T01:07:03.721492

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8125 / tcp

-1399940268 | 2025-03-22T09:25:51.151009

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8126 / tcp

-1888448627 | 2025-03-23T21:20:04.250842

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8128 / tcp

632542934 | 2025-02-27T07:44:41.295117

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8129 / tcp

-303199180 | 2025-03-14T22:52:28.322915

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

8130 / tcp

1208318993 | 2025-03-23T08:53:12.863014

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

8133 / tcp

921225407 | 2025-03-23T03:34:33.174483

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8134 / tcp

-180163620 | 2025-02-28T15:17:33.095513

NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n

8137 / tcp

-1230049476 | 2025-03-22T07:28:04.732864

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

8139 / tcp

1842524259 | 2025-03-21T03:40:31.434311

8140 / tcp

-1032713145 | 2025-03-20T14:38:45.666787

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8146 / tcp

819727972 | 2025-03-22T11:14:15.812474

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8149 / tcp

-1327660293 | 2025-03-23T14:01:06.283254

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

8158 / tcp

1642597142 | 2025-03-22T13:59:50.407430

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

8159 / tcp

-2089734047 | 2025-03-24T01:16:34.118026

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8161 / tcp

-1228868710 | 2025-03-19T16:35:50.163445

Hashes

hash

968702286

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Wed, 19 Mar 2025 16:36:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive

8163 / tcp

-358801646 | 2025-03-23T14:26:27.930786

SSH-2.0-OpenSSH_6.6.1

8168 / tcp

-1399940268 | 2025-03-21T03:40:17.166056

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8169 / tcp

1615193817 | 2025-03-21T20:59:59.807888

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

8171 / tcp

-1839934832 | 2025-03-23T06:08:57.194693

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8173 / tcp

1948301213 | 2025-03-24T01:31:29.615026

RFB 003.003
VNC:
  Protocol Version: 3.3

8174 / tcp

740837454 | 2025-03-23T01:19:50.163326

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

8176 / tcp

0 | 2025-03-24T02:28:28.348748

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

8177 / tcp

-832380282 | 2025-03-23T08:32:44.498621

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

8180 / tcp

1208460303 | 2025-03-23T11:48:44.508143

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28b4_PSsdzbwt4ji92_29936-5429

8181 / tcp

-1529979118 | 2025-03-21T04:50:44.236529

inv2W

8183 / tcp

-1626979812 | 2025-03-23T14:41:34.421446

220 Service ready for new user.

8186 / tcp

-1375131644 | 2025-03-23T11:40:27.925029

\x00[v\xc3\xbdC\x7f\x00\x00

8187 / tcp

321971019 | 2025-03-22T07:59:26.447603

-ERR client ip is not in whitelist\r

8189 / tcp

-1399940268 | 2025-03-22T12:03:25.709573

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8191 / tcp

1208318993 | 2025-03-04T20:56:04.371301

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

8196 / tcp

205347087 | 2025-03-24T01:40:58.282759

SSH-25453-Cisco-3524665.35\n

8197 / tcp

-2089734047 | 2025-03-23T11:20:09.008272

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8198 / tcp

819727972 | 2025-03-22T13:36:31.102053

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8200 / tcp

618338916 | 2025-03-21T04:13:38.982427

HTTP/1.1 302 Found
Connection: Keep-Alive
Transfer-Encoding: chunked
Keep-Alive: timeout=20
Location: /cgi-bin/luci/

8203 / tcp

-1279886438 | 2025-03-23T12:04:18.456454

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

8222 / tcp

1011863029 | 2025-03-22T02:51:58.406874

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae11ef_PS-CGQ-01Eql176_3608-47523

8236 / tcp

-2089734047 | 2025-03-22T13:39:09.787775

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8243 / tcp

-1538260461 | 2025-03-22T03:41:48.108039

\x01\x00\x00\x00

8248 / tcp

819727972 | 2025-03-23T20:40:12.910039

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8249 / tcp

-1648456501 | 2025-02-28T02:32:08.312952

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

8280 / tcp

1504401647 | 2025-03-22T03:05:19.722326

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

8283 / tcp

-1399940268 | 2025-03-22T11:36:47.344891

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8291 / tcp

1767345577 | 2025-03-20T15:10:09.924221

Hello, this is Quagga (version 0T).
Copyright 1996-200

8333 / tcp

-1713467553 | 2025-03-19T17:05:10.556586

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Connection: close

8350 / tcp

320677201 | 2025-03-23T13:04:31.528219

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

8383 / tcp

1685849871 | 2025-03-24T02:15:31.339952

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1ccb_yangwangtong44_13049-3487

8384 / tcp

-1189269828 | 2025-03-24T01:39:31.828266

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8393 / tcp

-1399940268 | 2025-02-23T23:57:12.496057

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8409 / tcp

89142341 | 2025-03-24T00:35:26.586230

\x05\x00\x00\x00\x0b\x08\x05\x1a\x00

8410 / tcp

-1453516345 | 2025-02-27T20:36:55.835831

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

8412 / tcp

1492413928 | 2025-03-23T06:46:54.751301

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

8413 / tcp

-1399940268 | 2025-03-22T13:50:56.380527

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8416 / tcp

1519486042 | 2025-03-23T09:58:25.613040

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

8417 / tcp

-1399940268 | 2025-03-22T21:45:31.133858

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8420 / tcp

-1733106930 | 2025-03-23T01:14:22.978631

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

8421 / tcp

819727972 | 2025-03-23T11:05:12.928355

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8422 / tcp

819727972 | 2025-03-22T09:46:56.502674

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8424 / tcp

-1097188123 | 2025-03-23T09:32:14.854210

[g\xc2\x95N\x7f

8425 / tcp

-1899074860 | 2025-03-22T07:41:29.470433

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

8427 / tcp

-1888448627 | 2025-03-22T02:53:08.075134

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8431 / tcp

1332894250 | 2025-03-04T08:59:51.929934

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

8432 / tcp

-1611764932 | 2025-03-22T18:40:27.432605

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

8441 / tcp

-1699556818 | 2025-03-22T05:09:51.815782

\x01remshd: Kerberos Authentication not enabled.\n

8443 / tcp

-1228868710 | 2025-03-22T15:08:56.701706

Hashes

hash

1636986911

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 15:08:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            c6:f7:01:03:eb:c3:eb:64
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=gaofang
        Validity
            Not Before: Dec  1 06:47:51 2015 GMT
            Not After : Aug  9 06:47:51 2029 GMT
        Subject: CN=www.notexist.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:2d:3d:dc:36:9e:93:af:18:e2:1a:14:e3:
                    7e:94:57:4c:a3:2e:b4:cc:ac:3c:49:ab:85:82:16:
                    9d:28:e2:98:39:0b:7b:c9:97:3f:de:a3:93:82:01:
                    de:d3:8c:bf:62:6d:aa:7f:98:6c:c2:a6:d8:08:0c:
                    e2:81:ec:e6:ef:58:07:fe:cc:64:2a:54:3e:2b:72:
                    39:b3:7c:1b:ee:f7:3c:75:4e:e6:7a:56:d0:45:10:
                    71:96:9f:76:a1:c1:d7:9d:f2:90:a4:6e:ae:95:cb:
                    a5:34:46:fa:cd:8d:77:35:a9:37:ca:43:27:51:f6:
                    24:d6:c7:71:de:70:ab:ab:73:cf:fb:c3:e6:66:91:
                    80:09:31:91:78:69:45:9a:6d:1b:43:b1:81:80:aa:
                    bf:e3:45:5c:2f:ae:30:83:41:15:23:ef:3a:49:2a:
                    c4:97:24:2e:08:19:73:f3:2e:7a:1f:45:ec:f6:96:
                    03:bd:a5:2a:85:db:57:88:3c:9c:18:dc:60:e9:4f:
                    5c:32:4a:8a:be:a4:0f:4e:74:3a:95:4c:2c:17:9a:
                    a9:06:4d:1e:c6:ec:a1:8f:62:7a:db:9f:ed:34:f9:
                    f2:ca:d1:36:91:28:80:f4:88:6c:af:58:d0:f5:ef:
                    b9:d7:ae:8a:ea:4d:13:31:ff:7c:57:f9:c2:e7:0e:
                    39:a5
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        1a:38:83:bf:e0:df:2c:73:a5:eb:4e:90:14:74:d6:eb:45:d0:
        7a:4e:71:70:24:43:a5:e1:a7:c0:64:ba:ca:d4:e7:00:d8:8a:
        ed:9d:7d:96:49:37:f2:16:4f:54:7c:44:02:b7:74:eb:61:1c:
        60:f5:9d:d8:ec:b5:be:ce:8c:4d:77:09:49:f3:7d:67:ba:d9:
        f5:f9:b1:5a:bd:81:14:dd:97:6d:a8:60:9e:c4:97:33:8f:22:
        c5:92:78:92:b7:3e:d4:cf:a3:da:47:2e:6d:5a:6c:13:67:20:
        1d:d8:f8:bf:c1:fa:8d:4c:fd:26:2e:26:af:bb:cc:35:2e:9d:
        5e:ff:0f:52:49:7f:aa:80:de:34:60:8d:77:24:d2:e4:d2:0b:
        e6:2a:fe:83:dd:9c:2f:c2:06:3a:48:e0:be:19:6a:b7:db:dc:
        eb:90:a0:6f:89:8b:fa:7e:7e:0d:5f:6e:3b:24:d9:4d:6f:cc:
        a2:39:a5:81:f5:1e:90:2d:b1:89:76:b9:e2:7c:49:7f:5e:d8:
        d5:30:03:19:26:f2:25:bb:02:d1:0f:67:22:b1:ec:3e:5f:18:
        2a:4b:d1:5a:f2:00:a9:8c:57:67:bc:11:c1:65:a6:bf:84:cc:
        c4:58:56:46:23:58:ef:26:48:a3:66:54:86:5d:36:48:80:cd:
        82:02:04:7a

8444 / tcp

1911457608 | 2025-03-11T04:48:56.520184

\x00[\x00\x00\x00\x00\x00\x00

8445 / tcp

1504401647 | 2025-03-22T15:49:27.661735

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

8448 / tcp

504717326 | 2025-03-22T14:28:45.215686

SSH-2.0-OpenSSH_8.6

Vulnerabilities

2 3 6 1

8451 / tcp

1911457608 | 2025-03-23T08:12:52.183400

\x00[\x00\x00\x00\x00\x00\x00

8452 / tcp

1911457608 | 2025-03-23T15:15:38.998099

\x00[\x00\x00\x00\x00\x00\x00

8456 / tcp

-2107996212 | 2025-03-23T10:27:51.348313

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

8457 / tcp

819727972 | 2025-03-23T18:44:44.733178

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8463 / tcp

165188539 | 2025-03-22T21:49:51.215703

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8466 / tcp

-1105333987 | 2025-02-26T22:58:44.153981

\x00[KpU\x7f\x00\x00

8467 / tcp

-2089734047 | 2025-03-23T04:08:18.857753

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8475 / tcp

-1810987450 | 2025-03-11T23:17:11.803159

\xc3\xbf

8480 / tcp

-1746074029 | 2025-03-24T01:55:29.189547

101 imqbroker =unV\r\n

8481 / tcp

165188539 | 2025-03-22T09:15:28.841494

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8482 / tcp

-1399940268 | 2025-03-23T18:43:05.461478

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8485 / tcp

-1399940268 | 2025-03-13T00:06:44.436182

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8488 / tcp

321971019 | 2025-03-23T09:15:20.206371

-ERR client ip is not in whitelist\r

8494 / tcp

-1261090339 | 2025-03-20T08:27:33.780248

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

8500 / tcp

-1784271535 | 2025-03-23T13:17:24.192947

inv2W\x04\x0f\x01

8503 / tcp

-1476017887 | 2025-03-14T05:52:40.755529

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

8504 / tcp

-1140468363 | 2025-03-22T07:48:52.814951

\x02\t\x01

8513 / tcp

-1839934832 | 2025-03-23T07:02:26.513296

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8514 / tcp

-1399940268 | 2025-03-23T18:59:12.490565

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8519 / tcp

-1888448627 | 2025-03-23T08:19:55.614730

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8521 / tcp

707919486 | 2025-03-22T06:52:18.141353

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

8524 / tcp

-1399940268 | 2025-03-22T07:56:24.179495

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8526 / tcp

-2096652808 | 2025-03-22T15:08:11.972967

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8528 / tcp

321971019 | 2025-03-23T06:53:47.925560

-ERR client ip is not in whitelist\r

8529 / tcp

-1477838366 | 2025-03-04T09:50:48.258267

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

8531 / tcp

632542934 | 2025-03-22T16:29:43.688657

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8533 / tcp

632542934 | 2025-03-23T19:30:22.822285

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8545 / tcp

-1839934832 | 2025-03-20T14:41:17.952448

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8549 / tcp

1519486042 | 2025-03-24T00:01:45.451755

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

8550 / tcp

165188539 | 2025-03-23T10:07:08.668526

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8554 / tcp

819727972 | 2025-03-21T05:40:56.859354

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8558 / tcp

1492413928 | 2025-03-23T14:35:28.127878

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

8561 / tcp

321971019 | 2025-03-19T14:00:23.075344

-ERR client ip is not in whitelist\r

8562 / tcp

165188539 | 2025-03-23T21:23:02.888215

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8563 / tcp

165188539 | 2025-03-22T18:17:56.944733

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8565 / tcp

-1810987450 | 2025-03-22T02:11:18.350871

\xc3\xbf

8568 / tcp

945910976 | 2025-03-05T23:10:32.472718

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

8575 / tcp

1519486042 | 2025-03-22T09:56:12.238783

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

8576 / tcp

-1399940268 | 2025-03-23T14:07:09.329306

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8578 / tcp

632542934 | 2025-02-25T18:54:13.738428

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8581 / tcp

1911457608 | 2025-03-23T14:54:50.997849

\x00[\x00\x00\x00\x00\x00\x00

8582 / tcp

-1399940268 | 2025-03-24T00:50:24.204228

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8583 / tcp

-2046514463 | 2025-03-22T15:53:01.177204

AB\x01\t

8587 / tcp

1623746877 | 2025-03-23T03:13:17.974341

500 Permission denied - closing connection.\r\n

8589 / tcp

-1399940268 | 2025-03-23T07:34:50.513681

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8593 / tcp

1911457608 | 2025-03-22T22:26:29.670803

\x00[\x00\x00\x00\x00\x00\x00

8596 / tcp

-1453516345 | 2025-03-23T01:02:26.578649

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

8599 / tcp

1948301213 | 2025-02-27T19:41:01.098494

RFB 003.003
VNC:
  Protocol Version: 3.3

8600 / tcp

589239353 | 2025-03-22T17:27:58.600613

HTTP/1.1 404 Not Found
Content-Type: text/html
Expires: 0
Cache-control: private

8601 / tcp

-1399940268 | 2025-03-18T03:56:24.175465

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8602 / tcp

1911457608 | 2025-02-25T14:33:37.233132

\x00[\x00\x00\x00\x00\x00\x00

8606 / tcp

-1399940268 | 2025-03-23T00:32:09.037828

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8607 / tcp

1189133115 | 2025-03-23T11:34:25.570218

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

8621 / tcp

1911457608 | 2025-03-20T17:34:04.470506

\x00[\x00\x00\x00\x00\x00\x00

8623 / tcp

-1888448627 | 2025-02-26T12:26:57.477604

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8637 / tcp

-1888448627 | 2025-03-22T12:34:56.669996

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8649 / tcp

1489954473 | 2025-03-16T20:32:39.327588

HTTP/1.1 410 Gone
Server: openresty
Transfer-Encoding: chunked
Connection: keep-alive
Via: 1.1 google

8663 / tcp

-2089734047 | 2025-03-24T02:11:40.858652

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8666 / tcp

971933601 | 2025-03-22T11:11:39.438590

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

8704 / tcp

-2096652808 | 2025-03-23T21:00:18.939629

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8705 / tcp

-297128567 | 2025-02-23T10:23:14.876788

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

8709 / tcp

819727972 | 2025-03-21T19:08:12.687244

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8723 / tcp

-802143704 | 2025-03-22T10:53:03.382218

HTTP/1.0 500 Internal Server Error
D
Connection: close

Command server error

8728 / tcp

-1839934832 | 2025-03-22T16:07:57.916498

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8743 / tcp

575925250 | 2025-03-23T01:57:57.905688

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

8767 / tcp

165188539 | 2025-03-22T06:03:24.656718

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8779 / tcp

-1487943323 | 2025-03-23T16:52:52.835285

431 Unable to negotiate secure command connection.\r\n

8784 / tcp

-2017887953 | 2025-02-22T07:47:09.046236

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 9 1

8787 / tcp

1543809371 | 2025-03-22T12:55:50.538241

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

8791 / tcp

1911457608 | 2025-03-22T10:35:57.758181

\x00[\x00\x00\x00\x00\x00\x00

8808 / tcp

597764502 | 2025-03-22T03:11:39.960544

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

8809 / tcp

639175818 | 2025-03-23T03:50:48.986452

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

8810 / tcp

-1399940268 | 2025-03-23T11:37:27.410127

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8811 / tcp

-1839934832 | 2025-03-14T23:49:36.673988

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8813 / tcp

455076604 | 2025-03-22T20:06:58.129723

!\x07version\x04bind7 t{RPowerDNS Recursor 410

8814 / tcp

408230060 | 2025-03-22T05:25:10.307747

\r\nSorry, that nickname format is invalid.\r\n

8815 / tcp

-2089734047 | 2025-03-24T00:27:53.256212

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8820 / tcp

-1399940268 | 2025-02-24T21:09:47.968733

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8828 / tcp

-303199180 | 2025-03-23T13:56:43.330934

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

8830 / tcp

-1598265216 | 2025-02-25T22:38:05.014274

@RSYNCD: 31.0

8833 / tcp

-1399940268 | 2025-03-22T15:06:49.024936

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8834 / tcp

819727972 | 2025-03-21T02:45:29.670808

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8838 / tcp

-2096652808 | 2025-02-26T14:30:16.427142

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8840 / tcp

-2089734047 | 2025-03-23T12:34:41.730025

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8844 / tcp

-1899074860 | 2025-03-22T22:45:31.786087

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

8846 / tcp

-1399940268 | 2025-03-23T18:56:12.701919

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8850 / tcp

-1538260461 | 2025-03-23T14:38:11.420433

\x01\x00\x00\x00

8854 / tcp

-1399940268 | 2025-03-18T23:26:19.682821

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8856 / tcp

1077013874 | 2025-03-22T02:47:19.173435

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

8858 / tcp

-1399940268 | 2025-03-22T17:57:47.513032

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8859 / tcp

677934968 | 2025-03-22T05:22:07.437095

lm^)Q

8862 / tcp

-891714208 | 2025-03-23T12:55:28.764469

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

8863 / tcp

-345718689 | 2025-03-23T10:33:33.042931

Vty password is not set.

8866 / tcp

-1399940268 | 2025-03-13T00:54:36.692276

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8868 / tcp

937756010 | 2025-03-08T11:35:18.451500

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8876 / tcp

-1399940268 | 2025-03-24T02:02:33.279979

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8878 / tcp

639175818 | 2025-03-23T07:27:45.033597

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

8879 / tcp

-832380282 | 2025-03-05T19:43:39.274579

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

8880 / tcp

819727972 | 2025-03-21T04:46:36.955962

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8881 / tcp

1134517380 | 2025-03-23T21:15:18.407524

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

8886 / tcp

-792826324 | 2025-03-22T10:29:49.391003

220 FTP server ready - login please

8889 / tcp

819727972 | 2025-03-23T13:35:01.151855

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8890 / tcp

165188539 | 2025-03-16T03:15:14.356778

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8899 / tcp

372433470 | 2025-03-20T11:51:53.326564

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

8906 / tcp

165188539 | 2025-03-23T18:54:37.793838

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8908 / tcp

1989907056 | 2025-03-23T16:55:27.906073

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

8915 / tcp

1332894250 | 2025-03-22T17:02:02.388967

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

8980 / tcp

2098371729 | 2025-02-26T17:55:00.866903

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

8993 / tcp

-1399940268 | 2025-03-21T11:52:46.959991

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9000 / tcp

-2067028711 | 2025-03-21T01:03:25.024120

\x15\x03\x01\x00\x02\x02F

9001 / tcp

-1392714930 | 2025-03-22T14:29:32.226429

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 14:29:32 GMT
Transfer-Encoding: chunked
Connection: keep-alive

2aad
<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>阿里云 Web应用防火墙</title>
  <style rel="stylesheet">
    body {
      font-size: 14px;
      color: #333;
      font-weight: 400;
      padding: 100px 0px 0px;
    }

    .wrapper {
      width: 850px;
      margin: 0 auto;
    }

    .top-wrapper {
      padding: 35px 30px 12px;
    }

    .top-content-right {
      padding-top: 20px;
    }

    .select-content {
      display: flex;
      justify-content: end;

    }

    #selectLang {
      color: rgb(250 100 0) !important;
      border: 1px solid rgb(250 100 0);
    }

    .bottom-wrapper {
      padding: 0 20px 0 40px;
    }

    .bottom-content-one {
      margin: 30px 0px;
    }

    .bottom-content-two {
      border-top: 1px solid #ededed;
      padding-top: 30px;
    }

    .theme-color {
      color: #ff6a00;
    }

    .grey-color1 {
      color: #999;
    }

    .grey-color2 {
      color: #666;
    }

    .background-color {
      background-color: #fa640008;
    }

    .font-weight {
      font-weight: 500;
    }

    .space-top8 {
      margin-top: 8px
    }

    .space-bottom16 {
      margin-bottom: 16px;
    }

    .no_derciton {
      text-decoration: none;
    }

    .flex-content {
      display: flex;
    }
  </style>
</head>

<body>
  <div class="wrapper">
    <div class="top-wrapper background-color">
      <div class="select-content">
        <select name="" id="selectLang" onchange="langChange(value)"  >
          <option value="en">English</option>
          <option value="ch">简体中文</option>
        </select>
      </div>
      <div class="flex-content">
        <div>
          <img
            src="data:image/png;base64,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

9002 / tcp

1110005946 | 2025-03-23T00:41:50.293033

HTTP/1.1 410 Gone
Server: Tengine
Date: Sun, 23 Mar 2025 00:41:50 GMT
Transfer-Encoding: chunked
Connection: keep-alive

2aad
<!DOCTYPE html>
<html lang="en">

<head>
  <meta charset="UTF-8">
  <meta http-equiv="X-UA-Compatible" content="IE=edge">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>阿里云 Web应用防火墙</title>
  <style rel="stylesheet">
    body {
      font-size: 14px;
      color: #333;
      font-weight: 400;
      padding: 100px 0px 0px;
    }

    .wrapper {
      width: 850px;
      margin: 0 auto;
    }

    .top-wrapper {
      padding: 35px 30px 12px;
    }

    .top-content-right {
      padding-top: 20px;
    }

    .select-content {
      display: flex;
      justify-content: end;

    }

    #selectLang {
      color: rgb(250 100 0) !important;
      border: 1px solid rgb(250 100 0);
    }

    .bottom-wrapper {
      padding: 0 20px 0 40px;
    }

    .bottom-content-one {
      margin: 30px 0px;
    }

    .bottom-content-two {
      border-top: 1px solid #ededed;
      padding-top: 30px;
    }

    .theme-color {
      color: #ff6a00;
    }

    .grey-color1 {
      color: #999;
    }

    .grey-color2 {
      color: #666;
    }

    .background-color {
      background-color: #fa640008;
    }

    .font-weight {
      font-weight: 500;
    }

    .space-top8 {
      margin-top: 8px
    }

    .space-bottom16 {
      margin-bottom: 16px;
    }

    .no_derciton {
      text-decoration: none;
    }

    .flex-content {
      display: flex;
    }
  </style>
</head>

<body>
  <div class="wrapper">
    <div class="top-wrapper background-color">
      <div class="select-content">
        <select name="" id="selectLang" onchange="langChange(value)"  >
          <option value="en">English</option>
          <option value="ch">简体中文</option>
        </select>
      </div>
      <div class="flex-content">
        <div>
          <img
            src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAXIAAAD+BAMAAADVD5MtAAAABGdBTUEAALGPC/xhBQAAAAFzUkdCAK7OHOkAAAAwUExURfedAPZsAPhmAv/59P/8+v/dxfj39//////Mo/+dZf+obfXy7/+ydf6JQv6bTv55NYGJZCYAAAAGdFJOUwEGDanFVaP1GdYAABGMSURBVHja7FxLc9vWGTX3XZCYya4b4B80M/0D/QdZdOdlRmKN1KsMmYynnWk8duRE1tI1mUrLJKQRdwcrheOl6tCKu/NEiSHuPLEmYrd+sez9HhcP4gK4JAAR9OgLJdGSQh8en3u+8108Llw4r/M6r/M6r/M6r3KrscpaGnUTapW0Lfn301uGt95aRTHqxZmH/6/ZpBdZjVQYvwC/GOHwbiXmlXAu/+7mQpoV/0KEm19jJf9J/K3FpN6E99paeTUJu7bYAXST2a5BCTT6Km81aoFZktfUZF28x0ar1Wy16gO+0dSzlUYzittomSt5xMFr+EuDOWfYhrEy6FByoWpJvRmDjS+wIuzwt8+11OyEFbNDw1pdxQWj04bg9965eJhSzmioVf1BT7v+sZVRvzfR1fNIZ8LfUUGmGjkjejocKfEO+1C9waAPzwdY/SLIt66aqPVcyhH6xQTRhw5+GQHsofgyFMBHIyeOe4AfAF7iZ8z9Isi3rmkonXv+bxSUA2TAD7AB9yjJeV/gHiB0phq5h+r10rTzvPd8Lw/51nsaSidjSVAOjxGAH2GhVgRwR4Wd6B4M9ISiwzmSrsX5OwrCCTjofIRqEaBRK6M4cNA2yj3gnFWfzvpuPvIttBmYGNKhI+W/VYplRLxjCbYdVPpQwXo/JB1AZ7L9vHfU6x3lIn+PSM+jvHlRBRwEw/bikNbnYePaRKUPQDI9VgtJpl9ELVufkNCbOTI3kshJ6KQZwAwaZ9oT4PFB4Ps94nyQw3wu8ms0ZWR2UPgVdQsaoaWHS5QUMycVIHzIYgFPJ86z1+eRJvJWMw27+D7+gqnsnIfoiujnznBE3qKoAblLaC19aedK/Hug83zkV40coXMHlXC/P3boycPtQ/LFrW2mHGQC8CNy6ZPIATYrnboRfKTi1lTLNofdHGuRnI9msykB73YFdEH39e6VQ+J85CS1wnZOnA85AhDkLL3s6nKeAbyBrd+UyP85m81+hSefdrsfgcy/7na794nyIRijohORzgeDmJ/nrdAjDc7NVqZeaIEajPy/AvkbeCIAd4HzR+LrR2EPVUEHzsOkxT20nxFdjrTUctWU+0aZwCXyGSN/CMi3heQPADmlRMpaoyTj1EiloTPnmW5+pKNz08iCTn3IaFmMfCyQvwo5dxxCTmuU8uLQSfo5yoXspc+rs58TFvM5twh4qtJxADUSatnsdjvw9Q6qJZDKMCWiy6SITTTbzvdoieZzbpkcXTJM0TAk5/+ZW6GOI97CZ5jPZUZPdn+M5hFL7BHnqfayq6lzI4tzbkQB50LoL8kV713ZhsR1+KjbpnyOzqLmfDCItaJBbmzR0jkPpZnzkGlZQef81Qn6/iH10MNA5E5yjaLAh8x5xFvyQvquBueoljRXlM3fUk/ODrV+ho6GPhomAyO20QjdpPOUfL6n20MtMpfMBWqqkTuInQOX7P/JqNhn8LF4nhm5jnQS11XLyEqLjQvxFToHnLIiBy7o/U4yKiLdQ5qfewwdcPcL5vNti6CnTUUNsnNLnXEF30IvUi0cW0ZJ7LIRDeXwnzcX9bQ5T+tElM6VanFkPj+k3s/Qnfm+j2RzFwUrH/ZYMf1UQ9/V83OLl6jSzXkiUnI+oplIxnPq/446oaOby/WZa+ilcH6BtkEt1RBKC9QJ4tZIMUP32RcR9bAXGnpmC11E5ym22ORGZKknf9ziYlskpavyOS5RKXWp8EHRTnTV4iaalRVN9Qo9xI05eAvoK7TXopgtiHPuRHIDIEMpR71FdK4eLmiUM4xUP49z7qR5yyDW/Htl7HHl6ZyHOcvaqqy2tx6KR7KKcU46Ny3D6i5XHfwQeXJTfBFPxGMz8mRT1JKv3P0wyxRZ59CJurWrDzU4b1lmLZET8PRj5jXm3DLydG5Y9eU8W+eGsbY6t9ZU52ZdOc/VOXT/ddX5uvp5XdWi4eeGda7zcz/X1rm1tjpfWz8Pe2hnY/W1qa/ziCvWCrlGbjFrzLmun9eLc418bqypzmvL+Vutc2NtdW6trc7X1s+tddW5ubY6r7W3vKV+Xuse+pbmlqp0fuPk+nr6edv3f6xc55Vw/iffP1rL3GJ/5/t+1TqvpofeLIp8ZXPoD77/03rm8x+KrtCV+flNiXzfXbM59IHvfwlf7/s/uZX5eVmc23Dw+HPG6X3zFJ7Z3/j+Qc11vv/Z6anwE//4a8Ru03cvie/8XG8/356cnhJ0338Y/jPcXBr5Gc2h9g4AP/YZ+u1A2vCNZzXOLR4Cl5T7/vRHCR3+dL0qnZfQQ3cmx8fAOZM+FdD5J7uL2vqZzqH2vyaTOOfjsf9FEF+uV+Xnxb2lDbgF6z5TLnBPp1MC7H3/qL5zqP14ApxPjoMF6k/H4/FT+eP6zqGglWMsYeYMXJA+u1P3OdS7O8GiFUoLVFA+nr50CyGvXuffTuT6PA5MUdRsPPui3nOofRdFPjkNO5HgHNQye1XvOfQ+SyW2QIFyAf2gap0X4Vy0/VDmflQvs+nsBf3OZ6f+nUp0XqiHtieBzGUjGmMJ4LOpy/sXvu9WoPNirviAKafm/+PWD+ESFfUEfgV2AfQz+pnl88cMHBzdP7rXvYK4gXO4IOxFgPzLuvl5O2Rc1M/iNW5KvYBcZi7vvCzDebVz6AcTWRBbvhKv8WewRNGHkPPZlzwWVaLzQpxHnEXUv8VrfEypZYzAZ695FL1duzlUyhzl4gPyv7AnzhD7K5qsvdr5eTsUC0B/Jl7jO8hbAeczVElnGeTVzqHtSYRz338qXmI36ENYi++hn01ukW4uW9Gdzg1O5xL6s6W7f7Vz6I7EHdmyGFPeYs5fV5hbirji49ATIXCdMnTZQmUvWkot1ebzvckekT6JxnNcn2PC/rLSfL40ck+qnCf/Uw4tfsj5zK1O5wXUEpiiTOe/YOIKen8SuZ1boVqMCnNLO3RzVDomrnFM51F

9003 / tcp

-1228868710 | 2025-03-22T06:20:14.519256

Hashes

hash

2050574427

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 06:20:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive

9005 / tcp

897328069 | 2025-03-05T00:05:13.612147

220 mail.scott000.com ESMTP

9006 / tcp

-1228868710 | 2025-03-22T11:50:17.640173

Hashes

hash

-148512587

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 11:50:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive

9007 / tcp

-1228868710 | 2025-03-22T18:13:45.343987

Hashes

hash

139506636

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 18:13:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive

9008 / tcp

819727972 | 2025-02-26T20:48:28.859195

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

9011 / tcp

632542934 | 2025-03-22T20:41:52.388451

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

9013 / tcp

-1888448627 | 2025-03-23T17:09:00.408669

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9014 / tcp

1210754493 | 2025-03-23T18:53:22.318834

0\x0c\x02\x01\x01a\x07\n\x01\x00\x04\x00\x04\x00

9016 / tcp

-1947777893 | 2025-03-22T14:30:03.902454

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

9018 / tcp

-2089734047 | 2025-03-23T22:59:38.585783

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9021 / tcp

-1373613804 | 2025-03-23T14:08:32.821246

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

9022 / tcp

-1470145161 | 2025-03-23T00:52:41.491877

SSH-2.0-ROSSSH\r\n

9026 / tcp

819727972 | 2025-03-23T06:42:12.779004

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9029 / tcp

1011407350 | 2025-02-22T10:27:29.317350

* OK GroupWise IMAP4rev1 Server Ready\r\n

9032 / tcp

-1399940268 | 2025-03-22T11:19:56.347720

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9033 / tcp

-1428621233 | 2025-03-23T22:50:35.731312

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

9034 / tcp

1975288991 | 2025-03-22T18:39:00.882051

OPTI

9035 / tcp

-1399940268 | 2025-02-23T20:18:30.471895

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9039 / tcp

1011407350 | 2025-03-13T12:32:21.291009

* OK GroupWise IMAP4rev1 Server Ready\r\n

9042 / tcp

-1230049476 | 2025-03-17T06:18:37.342100

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

9043 / tcp

-1399940268 | 2025-03-23T11:00:14.299947

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9050 / tcp

-1853480042 | 2025-03-22T15:41:57.370628

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae12bb_PS-NKG-01Suj77_14938-64274

9051 / tcp

1911457608 | 2025-03-23T21:21:49.572697

\x00[\x00\x00\x00\x00\x00\x00

9052 / tcp

-1611764932 | 2025-03-13T22:57:13.622160

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

9054 / tcp

-2107996212 | 2025-03-22T08:55:59.138645

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

9057 / tcp

-1032713145 | 2025-03-23T12:20:12.503081

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

9062 / tcp

-2089734047 | 2025-03-22T18:41:56.109541

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9065 / tcp

921225407 | 2025-03-23T20:18:41.507495

\x00\x00\x00\x04\x00\x00\x00\x00\x00

9070 / tcp

1011407350 | 2025-03-23T04:35:37.993014

* OK GroupWise IMAP4rev1 Server Ready\r\n

9071 / tcp

-1056270173 | 2025-03-08T15:24:39.358628

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

9072 / tcp

-1730858130 | 2025-03-23T11:24:04.577566

RFB 003.008
VNC:
  Protocol Version: 3.8

9074 / tcp

-891714208 | 2025-03-23T23:39:37.930943

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

9077 / tcp

-445721795 | 2025-03-23T22:03:47.763292

\x00[\xc3\xaed\x1a\x7f\x00\x00

9080 / tcp

-1228868710 | 2025-03-20T23:44:47.046253

Hashes

hash

1785493769

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Thu, 20 Mar 2025 23:44:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive

9082 / tcp

-1835475271 | 2025-03-24T00:43:38.019441

200 NOD32SS 99 (3318497116)\r\n

9083 / tcp

819727972 | 2025-03-23T19:35:55.723465

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9091 / tcp

1767345577 | 2025-03-18T15:43:22.553892

Hello, this is Quagga (version 0T).
Copyright 1996-200

9092 / tcp

2121220663 | 2025-03-23T16:16:43.262487

SSH-58-Ingrian_SSH\r\n

9095 / tcp

1741579575 | 2025-03-07T12:06:10.846066

9097 / tcp

-1327660293 | 2025-02-28T08:33:37.137553

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

9100 / tcp

-616720387 | 2025-03-18T13:20:06.576140

SSH-2.0-SSHD_0.7.6

9102 / tcp

-1059554316 | 2025-03-23T22:26:59.054696

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

9103 / tcp

165188539 | 2025-03-22T12:49:56.317324

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9107 / tcp

-1399940268 | 2025-02-28T18:37:37.978293

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9114 / tcp

-2089734047 | 2025-03-22T18:44:00.218345

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9115 / tcp

-1839934832 | 2025-03-23T22:43:21.307160

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9116 / tcp

1574088840 | 2025-03-23T13:26:34.792444

">Application and Content Networking Software 3.9</a>)\n</BODY><

9118 / tcp

1011407350 | 2025-03-23T16:22:49.640753

* OK GroupWise IMAP4rev1 Server Ready\r\n

9119 / tcp

-1327660293 | 2025-03-23T16:03:20.578509

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

9125 / tcp

-1036370807 | 2025-03-22T01:24:02.515507

JDWP-Handshake

9128 / tcp

307999478 | 2025-03-23T02:47:48.267613

unknown command \r\nunknown command \r\n

9131 / tcp

165188539 | 2025-03-23T10:10:59.050204

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9132 / tcp

165188539 | 2025-03-20T07:58:53.512718

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9133 / tcp

1363464823 | 2025-02-25T17:15:12.374914

\x00[|ox\x7f\x00\x00

9135 / tcp

-1888448627 | 2025-03-24T01:03:50.719256

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9136 / tcp

-1730858130 | 2025-03-23T19:16:57.099381

RFB 003.008
VNC:
  Protocol Version: 3.8

9138 / tcp

321971019 | 2025-03-14T08:26:24.143170

-ERR client ip is not in whitelist\r

9140 / tcp

165188539 | 2025-03-22T08:07:15.435503

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9144 / tcp

-1986594217 | 2025-03-09T14:14:12.081064

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

9151 / tcp

-1428621233 | 2025-03-20T17:27:45.936159

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

9156 / tcp

1282941221 | 2025-03-23T14:48:41.416050

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

9159 / tcp

1911457608 | 2025-03-20T15:09:57.913947

\x00[\x00\x00\x00\x00\x00\x00

9160 / tcp

-1399940268 | 2025-03-21T07:55:47.372324

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9165 / tcp

-1996280214 | 2025-03-23T06:49:42.004661

\x06\x04\x05@

9172 / tcp

1911457608 | 2025-03-22T12:58:45.770635

\x00[\x00\x00\x00\x00\x00\x00

9175 / tcp

-454087041 | 2025-03-22T08:46:42.309259

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

9176 / tcp

-1399940268 | 2025-02-23T06:14:00.865343

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9177 / tcp

-358801646 | 2025-03-23T21:33:56.832711

SSH-2.0-OpenSSH_6.6.1

9182 / tcp

-1399940268 | 2025-03-21T13:34:22.307595

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9185 / tcp

-1105333987 | 2025-03-23T22:36:18.273093

\x00[KpU\x7f\x00\x00

9189 / tcp

1543809371 | 2025-03-23T14:51:43.887330

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

9190 / tcp

1212285915 | 2025-03-22T23:46:55.584826

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

9197 / tcp

119860953 | 2025-03-23T01:29:20.350663

* OK ArGoSoft Mail Server IMAP Module v.YW at

9202 / tcp

819727972 | 2025-03-23T00:42:39.153315

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9203 / tcp

-904840257 | 2025-03-22T03:40:24.047950

572 Relay not authorized\r\n

9207 / tcp

1161309183 | 2025-03-23T10:42:19.215035

ProxyServer is ready

9208 / tcp

165188539 | 2025-03-23T13:59:32.161975

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9215 / tcp

669849225 | 2025-03-22T03:06:37.562047

SSH-98.60-SysaxSSH_81885..42\r\n

9217 / tcp

-1399940268 | 2025-03-08T17:44:00.855851

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9241 / tcp

-1327660293 | 2025-03-22T22:22:17.794815

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

9242 / tcp

1911457608 | 2025-03-22T08:11:35.820393

\x00[\x00\x00\x00\x00\x00\x00

9246 / tcp

-441419608 | 2025-03-22T02:51:13.708035

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

9247 / tcp

819727972 | 2025-03-23T03:56:46.031233

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9252 / tcp

-1888448627 | 2025-03-23T18:50:07.098340

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9257 / tcp

1543809371 | 2025-03-22T15:27:51.294672

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

9273 / tcp

671605376 | 2025-03-23T02:02:22.131213

SSH-2.0-OpenSSH_X.X

9280 / tcp

-358801646 | 2025-02-24T23:19:53.980370

SSH-2.0-OpenSSH_6.6.1

9292 / tcp

-1399940268 | 2025-03-16T03:39:27.392384

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9295 / tcp

-2118655245 | 2025-03-10T06:33:17.360583

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

9299 / tcp

51259122 | 2025-03-24T02:26:59.658478

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

9301 / tcp

-1399940268 | 2025-03-23T05:27:15.114700

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9303 / tcp

1991883981 | 2025-03-22T14:13:15.340187

B\x00\x00\x00\xc3\xbfn\x04Too many connections

9306 / tcp

-1399940268 | 2025-03-20T20:40:37.081476

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9310 / tcp

921225407 | 2025-02-22T08:31:02.379011

\x00\x00\x00\x04\x00\x00\x00\x00\x00

9312 / tcp

165188539 | 2025-03-23T16:29:38.913418

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9315 / tcp

819727972 | 2025-03-23T04:05:14.145431

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9333 / tcp

-1626979812 | 2025-03-23T07:26:54.202696

220 Service ready for new user.

9345 / tcp

669849225 | 2025-03-22T19:18:14.807490

SSH-98.60-SysaxSSH_81885..42\r\n

9351 / tcp

580340387 | 2025-03-23T03:23:33.750030

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

9398 / tcp

819727972 | 2025-03-20T04:34:06.453323

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9410 / tcp

2103111368 | 2025-03-13T23:15:38.707884

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

9418 / tcp

233634112 | 2025-03-23T19:18:45.790915

SSH-98.60-SysaxSSH_81885..42

9441 / tcp

-1888448627 | 2025-03-23T20:12:40.507408

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9443 / tcp

-1228868710 | 2025-03-24T00:34:17.799202

Hashes

hash

-187159449

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Mon, 24 Mar 2025 00:34:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            c6:f7:01:03:eb:c3:eb:64
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=gaofang
        Validity
            Not Before: Dec  1 06:47:51 2015 GMT
            Not After : Aug  9 06:47:51 2029 GMT
        Subject: CN=www.notexist.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:2d:3d:dc:36:9e:93:af:18:e2:1a:14:e3:
                    7e:94:57:4c:a3:2e:b4:cc:ac:3c:49:ab:85:82:16:
                    9d:28:e2:98:39:0b:7b:c9:97:3f:de:a3:93:82:01:
                    de:d3:8c:bf:62:6d:aa:7f:98:6c:c2:a6:d8:08:0c:
                    e2:81:ec:e6:ef:58:07:fe:cc:64:2a:54:3e:2b:72:
                    39:b3:7c:1b:ee:f7:3c:75:4e:e6:7a:56:d0:45:10:
                    71:96:9f:76:a1:c1:d7:9d:f2:90:a4:6e:ae:95:cb:
                    a5:34:46:fa:cd:8d:77:35:a9:37:ca:43:27:51:f6:
                    24:d6:c7:71:de:70:ab:ab:73:cf:fb:c3:e6:66:91:
                    80:09:31:91:78:69:45:9a:6d:1b:43:b1:81:80:aa:
                    bf:e3:45:5c:2f:ae:30:83:41:15:23:ef:3a:49:2a:
                    c4:97:24:2e:08:19:73:f3:2e:7a:1f:45:ec:f6:96:
                    03:bd:a5:2a:85:db:57:88:3c:9c:18:dc:60:e9:4f:
                    5c:32:4a:8a:be:a4:0f:4e:74:3a:95:4c:2c:17:9a:
                    a9:06:4d:1e:c6:ec:a1:8f:62:7a:db:9f:ed:34:f9:
                    f2:ca:d1:36:91:28:80:f4:88:6c:af:58:d0:f5:ef:
                    b9:d7:ae:8a:ea:4d:13:31:ff:7c:57:f9:c2:e7:0e:
                    39:a5
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        1a:38:83:bf:e0:df:2c:73:a5:eb:4e:90:14:74:d6:eb:45:d0:
        7a:4e:71:70:24:43:a5:e1:a7:c0:64:ba:ca:d4:e7:00:d8:8a:
        ed:9d:7d:96:49:37:f2:16:4f:54:7c:44:02:b7:74:eb:61:1c:
        60:f5:9d:d8:ec:b5:be:ce:8c:4d:77:09:49:f3:7d:67:ba:d9:
        f5:f9:b1:5a:bd:81:14:dd:97:6d:a8:60:9e:c4:97:33:8f:22:
        c5:92:78:92:b7:3e:d4:cf:a3:da:47:2e:6d:5a:6c:13:67:20:
        1d:d8:f8:bf:c1:fa:8d:4c:fd:26:2e:26:af:bb:cc:35:2e:9d:
        5e:ff:0f:52:49:7f:aa:80:de:34:60:8d:77:24:d2:e4:d2:0b:
        e6:2a:fe:83:dd:9c:2f:c2:06:3a:48:e0:be:19:6a:b7:db:dc:
        eb:90:a0:6f:89:8b:fa:7e:7e:0d:5f:6e:3b:24:d9:4d:6f:cc:
        a2:39:a5:81:f5:1e:90:2d:b1:89:76:b9:e2:7c:49:7f:5e:d8:
        d5:30:03:19:26:f2:25:bb:02:d1:0f:67:22:b1:ec:3e:5f:18:
        2a:4b:d1:5a:f2:00:a9:8c:57:67:bc:11:c1:65:a6:bf:84:cc:
        c4:58:56:46:23:58:ef:26:48:a3:66:54:86:5d:36:48:80:cd:
        82:02:04:7a

9455 / tcp

-1399940268 | 2025-03-22T02:14:23.739565

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9456 / tcp

1278527606 | 2025-03-22T15:40:06.773767

SSH-2.0-Teleport

9458 / tcp

-339084706 | 2025-03-15T01:24:08.293688

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

9465 / tcp

819727972 | 2025-03-23T15:47:35.050078

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9501 / tcp

-1399940268 | 2025-03-22T13:36:35.392299

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9507 / tcp

-1899074860 | 2025-03-12T14:39:39.688688

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

9510 / tcp

1911457608 | 2025-03-06T05:16:08.000512

\x00[\x00\x00\x00\x00\x00\x00

9513 / tcp

1911457608 | 2025-03-07T17:37:40.345512

\x00[\x00\x00\x00\x00\x00\x00

9527 / tcp

1011407350 | 2025-02-27T03:46:32.703628

* OK GroupWise IMAP4rev1 Server Ready\r\n

9530 / tcp

-1059554316 | 2025-03-21T04:59:30.307427

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

9550 / tcp

2103111368 | 2025-03-01T01:13:15.364807

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

9553 / tcp

-457235091 | 2025-02-24T16:34:07.325231

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

9600 / tcp

819727972 | 2025-03-23T04:47:31.274220

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9606 / tcp

819727972 | 2025-03-22T08:44:09.812070

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9633 / tcp

-1999117212 | 2025-03-05T01:07:00.417029

9674 / tcp

1989907056 | 2025-03-23T09:44:23.678188

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

9682 / tcp

1911457608 | 2025-03-23T19:44:54.082217

\x00[\x00\x00\x00\x00\x00\x00

9696 / tcp

819727972 | 2025-03-23T23:09:26.233444

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9704 / tcp

-2017887953 | 2025-02-22T15:33:05.764872

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 9 1

9710 / tcp

-2089734047 | 2025-02-25T15:28:46.928850

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9711 / tcp

-2089734047 | 2025-03-23T23:25:32.910508

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9743 / tcp

-1888448627 | 2025-03-22T04:36:18.420766

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9754 / tcp

-1045760528 | 2025-03-22T20:20:16.185257

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

9761 / tcp

-2096652808 | 2025-03-18T15:14:44.272855

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

9773 / tcp

1189133115 | 2025-03-22T17:50:25.792645

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

9797 / tcp

1911457608 | 2025-03-22T11:25:24.911403

\x00[\x00\x00\x00\x00\x00\x00

9876 / tcp

-255236012 | 2025-03-23T20:19:19.100356

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN

9885 / tcp

819727972 | 2025-03-22T06:59:14.996179

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9888 / tcp

2103111368 | 2025-03-04T12:05:52.749344

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

9898 / tcp

1320285193 | 2025-03-20T07:18:29.209848

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

9902 / tcp

-1641514916 | 2025-03-23T18:15:09.875078

* OK Merak 1dFUa2 IMAP4rev1

9909 / tcp

165188539 | 2025-03-18T16:18:29.699790

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9922 / tcp

819727972 | 2025-03-23T10:48:23.250070

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9926 / tcp

103159425 | 2025-03-23T23:57:47.642537

SSH-1.99-RGOS_SSH

9930 / tcp

-297128567 | 2025-03-14T04:25:19.165993

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

9943 / tcp

-659335736 | 2025-03-23T04:32:00.652846

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2864_xyd119_11675-57009

9944 / tcp

-1626979812 | 2025-03-18T05:38:59.171291

220 Service ready for new user.

9966 / tcp

-1230049476 | 2025-03-15T07:37:12.414173

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

9977 / tcp

1308377066 | 2025-03-22T14:07:19.960013

ncacn_http/1.0

9994 / tcp

-1888448627 | 2025-03-18T19:52:13.197525

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9997 / tcp

-2096652808 | 2025-03-22T10:00:00.215572

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

9998 / tcp

-1917695220 | 2025-03-23T17:55:37.084207

HTTP/1.1 200 OK
Server: Jetty(9.4.8.v20171121)

9999 / tcp

1161309183 | 2025-03-22T20:33:17.459994

ProxyServer is ready

10000 / tcp

1308377066 | 2025-03-21T05:27:58.401034

ncacn_http/1.0

10001 / tcp

1492413928 | 2025-03-21T01:20:31.019129

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

10002 / tcp

-358801646 | 2025-03-08T20:54:26.588508

SSH-2.0-OpenSSH_6.6.1

10003 / tcp

819727972 | 2025-03-22T13:57:08.572620

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

10005 / tcp

-2089734047 | 2025-02-22T22:43:38.191886

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10007 / tcp

-2089734047 | 2025-03-23T03:21:48.975046

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10011 / tcp

-1399940268 | 2025-03-23T03:37:23.736698

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10014 / tcp

-1399940268 | 2025-03-22T22:10:28.757631

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10016 / tcp

-1329831334 | 2025-03-23T04:24:14.618459

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

10020 / tcp

1208318993 | 2025-03-04T06:22:40.381920

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

10021 / tcp

1911457608 | 2025-03-23T03:07:04.924931

\x00[\x00\x00\x00\x00\x00\x00

10025 / tcp

321971019 | 2025-03-07T01:37:13.249876

-ERR client ip is not in whitelist\r

10028 / tcp

-1399940268 | 2025-03-22T19:14:44.793737

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10029 / tcp

1642597142 | 2025-03-23T11:56:47.687722

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

10030 / tcp

-1626979812 | 2025-03-22T22:39:15.279453

220 Service ready for new user.

10035 / tcp

-136006866 | 2025-03-23T22:56:34.590134

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

10038 / tcp

-1399940268 | 2025-03-24T01:02:32.814853

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10040 / tcp

-1428621233 | 2025-02-28T00:08:48.912597

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

10041 / tcp

-1399940268 | 2025-03-23T05:15:20.312449

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10044 / tcp

307999478 | 2025-03-10T01:49:26.835989

unknown command \r\nunknown command \r\n

10047 / tcp

-1839934832 | 2025-03-22T05:33:57.505786

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

10050 / tcp

1911457608 | 2025-03-23T06:22:14.038300

\x00[\x00\x00\x00\x00\x00\x00

10051 / tcp

-454087041 | 2025-03-18T20:10:47.932490

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

10081 / tcp

819727972 | 2025-03-22T10:04:54.354863

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

10083 / tcp

-1399940268 | 2025-03-22T10:36:55.454767

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10084 / tcp

-1327660293 | 2025-03-23T11:11:13.449826

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

10086 / tcp

-1399940268 | 2025-03-09T13:00:36.332265

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10093 / tcp

819727972 | 2025-03-22T20:38:57.694457

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

10101 / tcp

632542934 | 2025-03-13T00:09:40.379004

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

10123 / tcp

1665283070 | 2025-03-22T21:46:49.125917

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x01\x00\x00\x10\x00\x00\n0\x03\x00\x00\x00\x01\x00\x05\x00\x00@\x00\x00\x06\x00\x00\x1f@

10134 / tcp

103159425 | 2025-03-21T23:43:50.739824

SSH-1.99-RGOS_SSH

10201 / tcp

-1399940268 | 2025-03-22T21:27:07.367913

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10209 / tcp

321971019 | 2025-03-22T17:45:33.058327

-ERR client ip is not in whitelist\r

10210 / tcp

-1399940268 | 2025-03-22T10:49:04.610838

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10240 / tcp

-1888448627 | 2025-03-23T08:16:58.919983

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

10250 / tcp

2087396567 | 2025-03-21T03:55:37.768796

kjnkjabhbanc283ubcsbhdc72

10283 / tcp

921225407 | 2025-03-23T17:29:06.940271

\x00\x00\x00\x04\x00\x00\x00\x00\x00

10348 / tcp

-1105333987 | 2025-03-23T18:11:59.031935

\x00[KpU\x7f\x00\x00

10397 / tcp

408230060 | 2025-03-23T23:29:52.832316

\r\nSorry, that nickname format is invalid.\r\n

10398 / tcp

117101543 | 2025-03-22T19:53:07.561749

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

10443 / tcp

-1228868710 | 2025-03-23T20:29:55.158731

Hashes

hash

1506978109

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sun, 23 Mar 2025 20:29:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            c6:f7:01:03:eb:c3:eb:64
        Signature Algorithm: sha1WithRSAEncryption
        Issuer: CN=gaofang
        Validity
            Not Before: Dec  1 06:47:51 2015 GMT
            Not After : Aug  9 06:47:51 2029 GMT
        Subject: CN=www.notexist.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:2d:3d:dc:36:9e:93:af:18:e2:1a:14:e3:
                    7e:94:57:4c:a3:2e:b4:cc:ac:3c:49:ab:85:82:16:
                    9d:28:e2:98:39:0b:7b:c9:97:3f:de:a3:93:82:01:
                    de:d3:8c:bf:62:6d:aa:7f:98:6c:c2:a6:d8:08:0c:
                    e2:81:ec:e6:ef:58:07:fe:cc:64:2a:54:3e:2b:72:
                    39:b3:7c:1b:ee:f7:3c:75:4e:e6:7a:56:d0:45:10:
                    71:96:9f:76:a1:c1:d7:9d:f2:90:a4:6e:ae:95:cb:
                    a5:34:46:fa:cd:8d:77:35:a9:37:ca:43:27:51:f6:
                    24:d6:c7:71:de:70:ab:ab:73:cf:fb:c3:e6:66:91:
                    80:09:31:91:78:69:45:9a:6d:1b:43:b1:81:80:aa:
                    bf:e3:45:5c:2f:ae:30:83:41:15:23:ef:3a:49:2a:
                    c4:97:24:2e:08:19:73:f3:2e:7a:1f:45:ec:f6:96:
                    03:bd:a5:2a:85:db:57:88:3c:9c:18:dc:60:e9:4f:
                    5c:32:4a:8a:be:a4:0f:4e:74:3a:95:4c:2c:17:9a:
                    a9:06:4d:1e:c6:ec:a1:8f:62:7a:db:9f:ed:34:f9:
                    f2:ca:d1:36:91:28:80:f4:88:6c:af:58:d0:f5:ef:
                    b9:d7:ae:8a:ea:4d:13:31:ff:7c:57:f9:c2:e7:0e:
                    39:a5
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha1WithRSAEncryption
    Signature Value:
        1a:38:83:bf:e0:df:2c:73:a5:eb:4e:90:14:74:d6:eb:45:d0:
        7a:4e:71:70:24:43:a5:e1:a7:c0:64:ba:ca:d4:e7:00:d8:8a:
        ed:9d:7d:96:49:37:f2:16:4f:54:7c:44:02:b7:74:eb:61:1c:
        60:f5:9d:d8:ec:b5:be:ce:8c:4d:77:09:49:f3:7d:67:ba:d9:
        f5:f9:b1:5a:bd:81:14:dd:97:6d:a8:60:9e:c4:97:33:8f:22:
        c5:92:78:92:b7:3e:d4:cf:a3:da:47:2e:6d:5a:6c:13:67:20:
        1d:d8:f8:bf:c1:fa:8d:4c:fd:26:2e:26:af:bb:cc:35:2e:9d:
        5e:ff:0f:52:49:7f:aa:80:de:34:60:8d:77:24:d2:e4:d2:0b:
        e6:2a:fe:83:dd:9c:2f:c2:06:3a:48:e0:be:19:6a:b7:db:dc:
        eb:90:a0:6f:89:8b:fa:7e:7e:0d:5f:6e:3b:24:d9:4d:6f:cc:
        a2:39:a5:81:f5:1e:90:2d:b1:89:76:b9:e2:7c:49:7f:5e:d8:
        d5:30:03:19:26:f2:25:bb:02:d1:0f:67:22:b1:ec:3e:5f:18:
        2a:4b:d1:5a:f2:00:a9:8c:57:67:bc:11:c1:65:a6:bf:84:cc:
        c4:58:56:46:23:58:ef:26:48:a3:66:54:86:5d:36:48:80:cd:
        82:02:04:7a

10444 / tcp

1948301213 | 2025-03-23T21:11:13.552178

RFB 003.003
VNC:
  Protocol Version: 3.3

10445 / tcp

-2096652808 | 2025-03-03T19:08:11.197677

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

10477 / tcp

599074451 | 2025-03-24T00:39:05.638654

msg

10480 / tcp

1011407350 | 2025-03-23T05:52:57.197426

* OK GroupWise IMAP4rev1 Server Ready\r\n

10554 / tcp

416263569 | 2025-03-20T21:10:03.333072

BÿnToo many connections

10810 / tcp

-1476017887 | 2025-03-23T01:25:47.309391

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

10892 / tcp

921225407 | 2025-03-23T08:54:37.166619

\x00\x00\x00\x04\x00\x00\x00\x00\x00

10894 / tcp

1077013874 | 2025-03-22T20:59:46.967213

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

10909 / tcp

-1399940268 | 2025-03-11T06:55:49.380885

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10911 / tcp

1948301213 | 2025-02-26T11:59:02.964539

RFB 003.003
VNC:
  Protocol Version: 3.3

10943 / tcp

-2096652808 | 2025-03-19T22:50:33.702557

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

11000 / tcp

1911457608 | 2025-03-21T00:17:31.233075

\x00[\x00\x00\x00\x00\x00\x00

11001 / tcp

632542934 | 2025-03-24T02:03:57.882916

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

11082 / tcp

-2096652808 | 2025-03-22T23:11:24.685609

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

11084 / tcp

-375604792 | 2025-03-22T10:43:32.104358

220 Microsoft FTP Service

11112 / tcp

1911457608 | 2025-03-23T08:28:20.111388

\x00[\x00\x00\x00\x00\x00\x00

11210 / tcp

1911457608 | 2025-03-18T15:24:55.109214

\x00[\x00\x00\x00\x00\x00\x00

11211 / tcp

-136006866 | 2025-03-22T06:23:36.882669

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11288 / tcp

-971970408 | 2025-03-14T06:11:48.022265

11300 / tcp

-1399940268 | 2025-03-21T02:36:27.618097

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11401 / tcp

639175818 | 2025-03-22T12:51:25.197978

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

11480 / tcp

639175818 | 2025-03-23T07:16:14.605911

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

11601 / tcp

709622286 | 2025-03-23T12:00:51.623927

OK Welcome <299685> on DirectUpdate server 7286\r\n

11681 / tcp

-1399940268 | 2025-03-19T09:49:08.137261

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11701 / tcp

-1327660293 | 2025-03-17T13:54:00.938072

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

11920 / tcp

820958131 | 2025-03-23T01:32:05.527334

kjnkjabhbanc283ubcsbhdc72\x02

12000 / tcp

368820174 | 2025-03-22T11:51:50.645420

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1d94_PS-TNA-01jC465_21028-55111

12001 / tcp

-801484042 | 2025-03-23T10:53:12.993475

ERR 27

12016 / tcp

-1598265216 | 2025-03-22T14:51:56.076153

@RSYNCD: 31.0

12019 / tcp

-1399940268 | 2025-03-22T03:12:17.661667

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12056 / tcp

-1099385124 | 2025-02-28T14:34:29.524418

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

12088 / tcp

-1435414831 | 2025-03-05T22:32:28.594941

roku: ready\r\n

12104 / tcp

-1399940268 | 2025-03-24T01:23:43.383181

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12106 / tcp

-1399940268 | 2025-03-13T13:47:45.032015

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12111 / tcp

1282941221 | 2025-03-23T12:37:41.910908

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

12112 / tcp

1077013874 | 2025-03-23T15:32:48.177601

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

12113 / tcp

669849225 | 2025-03-23T03:08:45.814422

SSH-98.60-SysaxSSH_81885..42\r\n

12115 / tcp

493955023 | 2025-03-22T18:13:20.364527

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

12129 / tcp

819727972 | 2025-03-23T22:49:40.842711

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12130 / tcp

320677201 | 2025-03-24T01:53:54.524170

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

12133 / tcp

1011407350 | 2025-03-20T13:13:16.405100

* OK GroupWise IMAP4rev1 Server Ready\r\n

12134 / tcp

-1265999252 | 2025-03-24T00:19:44.397638

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

12135 / tcp

-832380282 | 2025-03-23T12:43:34.938976

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

12137 / tcp

740837454 | 2025-03-23T02:23:01.197841

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

12138 / tcp

-1399940268 | 2025-03-23T17:04:10.607010

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12139 / tcp

-1733106930 | 2025-03-22T03:29:54.382689

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

12140 / tcp

-1399940268 | 2025-03-09T13:11:09.268762

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12142 / tcp

-1399940268 | 2025-03-23T07:17:14.641835

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12143 / tcp

-1399940268 | 2025-03-22T04:49:25.542224

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12146 / tcp

-1399940268 | 2025-03-24T02:22:40.208253

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12147 / tcp

1426971893 | 2025-03-22T04:26:57.123401

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

12148 / tcp

2103111368 | 2025-03-16T12:35:26.367802

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

12149 / tcp

1492413928 | 2025-02-28T19:16:58.081968

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 12 1

12151 / tcp

632542934 | 2025-03-23T07:24:53.677401

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12154 / tcp

-1888448627 | 2025-03-23T18:37:01.721399

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12156 / tcp

119860953 | 2025-03-22T13:48:11.341217

* OK ArGoSoft Mail Server IMAP Module v.YW at

12159 / tcp

-122096153 | 2025-03-22T20:02:15.774408

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

12170 / tcp

-1839934832 | 2025-03-24T01:18:06.024322

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12174 / tcp

-147424911 | 2025-03-22T18:49:47.416868

HTTP/1.1 404 Not Found
Content Length: 0

12177 / tcp

-2089734047 | 2025-03-23T14:57:37.723732

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12178 / tcp

632542934 | 2025-03-18T19:29:20.305491

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12179 / tcp

597764502 | 2025-03-22T16:17:08.017767

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

12180 / tcp

-2017887953 | 2025-03-22T05:23:35.780809

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

12183 / tcp

-2118655245 | 2025-03-09T15:09:10.301593

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

12191 / tcp

-1265999252 | 2025-03-24T02:05:55.047702

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

12192 / tcp

921225407 | 2025-03-20T08:39:51.404563

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12194 / tcp

-980525298 | 2025-03-23T03:49:30.196383

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12198 / tcp

-2107996212 | 2025-03-17T17:06:35.350018

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

12200 / tcp

921225407 | 2025-03-18T16:22:10.929540

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12204 / tcp

1911457608 | 2025-03-23T21:06:38.769366

\x00[\x00\x00\x00\x00\x00\x00

12205 / tcp

945910976 | 2025-03-22T11:28:12.662476

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

12210 / tcp

1761482307 | 2025-03-23T22:34:40.462293

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

12218 / tcp

-2031152423 | 2025-02-26T16:40:29.141262

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

12223 / tcp

597764502 | 2025-03-24T00:15:07.433290

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

12225 / tcp

-1737707071 | 2025-03-23T21:53:30.156517

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

12226 / tcp

-1626979812 | 2025-03-23T19:12:36.588287

220 Service ready for new user.

12227 / tcp

-1428621233 | 2025-03-23T20:43:20.632992

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

12231 / tcp

493955023 | 2025-03-12T05:46:51.872073

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

12233 / tcp

-122096153 | 2025-03-23T00:30:14.038355

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

12236 / tcp

1208318993 | 2025-03-23T02:37:30.675773

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

12240 / tcp

165188539 | 2025-03-23T01:25:13.265436

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12244 / tcp

1911457608 | 2025-03-20T10:57:16.629560

\x00[\x00\x00\x00\x00\x00\x00

12245 / tcp

-1399940268 | 2025-03-17T07:26:37.050079

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12253 / tcp

-1399940268 | 2025-03-24T01:29:39.149933

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12254 / tcp

-1399940268 | 2025-03-23T10:38:14.444095

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12255 / tcp

819727972 | 2025-03-23T05:45:44.578296

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12260 / tcp

-1114821551 | 2025-03-04T05:56:20.193815

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

12262 / tcp

-653033013 | 2025-03-14T17:04:09.134080

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

12266 / tcp

-1399940268 | 2025-03-23T23:05:01.604964

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12270 / tcp

-2031152423 | 2025-03-23T01:53:38.152272

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

12271 / tcp

-2089734047 | 2025-03-19T18:14:32.886482

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12279 / tcp

-1399940268 | 2025-03-22T02:22:11.368152

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12282 / tcp

321971019 | 2025-02-23T05:08:21.105955

-ERR client ip is not in whitelist\r

12283 / tcp

819727972 | 2025-03-23T08:05:36.738720

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12286 / tcp

669849225 | 2025-03-23T20:08:38.281307

SSH-98.60-SysaxSSH_81885..42\r\n

12290 / tcp

1282941221 | 2025-03-23T16:47:16.610906

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

12292 / tcp

-2031152423 | 2025-03-22T20:24:26.755625

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

12298 / tcp

-801484042 | 2025-03-24T00:46:15.803315

ERR 27

12301 / tcp

-1140468363 | 2025-03-23T19:56:14.623083

\x02\t\x01

12307 / tcp

921225407 | 2025-03-22T17:38:40.521519

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12309 / tcp

-2089734047 | 2025-03-17T23:52:51.525376

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12311 / tcp

-1795027372 | 2025-03-23T10:20:23.564140

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

12313 / tcp

-1399940268 | 2025-03-22T19:56:04.545775

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12314 / tcp

-1399940268 | 2025-03-17T22:49:41.330101

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12317 / tcp

819727972 | 2025-03-23T05:24:19.352797

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12318 / tcp

117101543 | 2025-03-23T15:03:53.286748

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

12324 / tcp

401555314 | 2025-03-23T20:12:47.217593

NB[GFXjA^R

12326 / tcp

-1248408558 | 2025-03-23T09:55:22.676596

220 MikroTik FTP server (MikroTik 6.44.3) ready

12328 / tcp

2103111368 | 2025-03-17T19:17:18.197485

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

12332 / tcp

205347087 | 2025-02-24T08:49:45.540774

SSH-25453-Cisco-3524665.35\n

12339 / tcp

-1399940268 | 2025-03-17T05:35:33.477334

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12342 / tcp

165188539 | 2025-02-25T18:58:12.472063

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12345 / tcp

296364507 | 2025-03-15T22:09:54.363107

HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

12346 / tcp

1332894250 | 2025-03-22T22:57:00.201519

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

12349 / tcp

1911457608 | 2025-03-23T20:37:18.416559

\x00[\x00\x00\x00\x00\x00\x00

12352 / tcp

819727972 | 2025-03-04T13:27:40.003423

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

12354 / tcp

-457235091 | 2025-03-22T15:58:53.388034

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

12358 / tcp

-1810987450 | 2025-03-23T23:06:41.063198

\xc3\xbf

12359 / tcp

165188539 | 2025-03-21T01:08:36.049337

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12361 / tcp

-136006866 | 2025-03-23T21:03:29.906295

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

12363 / tcp

-1279886438 | 2025-03-24T01:28:16.983788

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

12368 / tcp

1911457608 | 2025-03-12T13:57:09.654120

\x00[\x00\x00\x00\x00\x00\x00

12372 / tcp

819727972 | 2025-03-23T22:15:37.776201

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12377 / tcp

1911457608 | 2025-03-22T09:48:00.425109

\x00[\x00\x00\x00\x00\x00\x00

12380 / tcp

-1399940268 | 2025-03-23T03:25:54.914215

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12382 / tcp

1370263973 | 2025-03-22T05:17:42.097918

dubbo>

12386 / tcp

-1399940268 | 2025-03-22T07:07:08.393071

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12387 / tcp

1911457608 | 2025-03-13T17:22:07.852927

\x00[\x00\x00\x00\x00\x00\x00

12396 / tcp

-2089734047 | 2025-02-23T09:27:12.475582

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12398 / tcp

-2046514463 | 2025-02-23T19:17:37.358873

AB\x01\t

12399 / tcp

-2089734047 | 2025-03-13T20:57:59.945874

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12400 / tcp

-1327660293 | 2025-03-23T05:47:38.700008

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12406 / tcp

-1888448627 | 2025-03-22T10:48:17.122038

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12408 / tcp

-1399940268 | 2025-03-23T03:04:16.812953

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12412 / tcp

575925250 | 2025-03-22T04:34:17.996823

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

12414 / tcp

493955023 | 2025-03-14T20:31:23.997668

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

12415 / tcp

1911457608 | 2025-03-07T17:42:47.031606

\x00[\x00\x00\x00\x00\x00\x00

12417 / tcp

1975288991 | 2025-03-22T21:33:11.081370

OPTI

12418 / tcp

-1399940268 | 2025-03-13T17:27:23.179505

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12426 / tcp

-445721795 | 2025-03-23T01:56:05.207006

\x00[\xc3\xaed\x1a\x7f\x00\x00

12428 / tcp

165188539 | 2025-03-22T16:03:34.154211

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12432 / tcp

-1399940268 | 2025-03-23T16:12:12.090703

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12433 / tcp

632542934 | 2025-03-23T10:51:20.182815

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12434 / tcp

819727972 | 2025-03-23T11:07:46.860483

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12437 / tcp

1911457608 | 2025-03-22T06:40:05.038921

\x00[\x00\x00\x00\x00\x00\x00

12439 / tcp

-1036370807 | 2025-03-23T11:57:59.557862

JDWP-Handshake

12440 / tcp

2143387245 | 2025-03-23T03:17:05.627657

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

12444 / tcp

1767345577 | 2025-03-22T01:37:15.652034

Hello, this is Quagga (version 0T).
Copyright 1996-200

12446 / tcp

119860953 | 2025-03-18T19:43:28.879424

* OK ArGoSoft Mail Server IMAP Module v.YW at

12448 / tcp

165188539 | 2025-03-22T06:00:32.116015

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12449 / tcp

-122096153 | 2025-03-21T00:12:07.526324

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

12450 / tcp

-1032713145 | 2025-03-09T19:05:40.199074

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

12454 / tcp

-1888448627 | 2025-03-22T02:31:47.622136

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12458 / tcp

-2089734047 | 2025-03-22T09:12:46.570088

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12465 / tcp

1948301213 | 2025-03-23T20:49:31.347656

RFB 003.003
VNC:
  Protocol Version: 3.3

12470 / tcp

-288825733 | 2025-03-22T10:07:04.927977

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

12475 / tcp

-407828767 | 2025-02-26T04:54:45.496286

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

12479 / tcp

-2089734047 | 2025-03-23T12:18:42.980164

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12480 / tcp

-2031152423 | 2025-03-22T19:41:40.474957

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

12485 / tcp

819727972 | 2025-03-18T03:37:02.884770

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12487 / tcp

-345718689 | 2025-03-22T02:35:29.926682

Vty password is not set.

12489 / tcp

-1261090339 | 2025-03-23T19:41:55.392523

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

12493 / tcp

-358801646 | 2025-03-23T00:06:18.480954

SSH-2.0-OpenSSH_6.6.1

12494 / tcp

-2096652808 | 2025-03-23T05:38:22.040717

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12496 / tcp

-1730858130 | 2025-03-13T05:53:10.302229

RFB 003.008
VNC:
  Protocol Version: 3.8

12498 / tcp

819727972 | 2025-03-23T11:29:49.829352

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12501 / tcp

-2089734047 | 2025-03-22T10:20:23.998132

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12506 / tcp

819727972 | 2025-03-22T09:41:36.384859

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12507 / tcp

408230060 | 2025-03-22T18:46:40.749084

\r\nSorry, that nickname format is invalid.\r\n

12508 / tcp

-345718689 | 2025-02-22T05:07:02.842107

Vty password is not set.

12510 / tcp

-1399940268 | 2025-03-22T03:00:28.167558

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12517 / tcp

410249975 | 2025-02-27T18:47:42.466159

LNS READY<>

12518 / tcp

-1045760528 | 2025-03-23T05:25:26.655082

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

12519 / tcp

165188539 | 2025-03-23T13:15:57.150645

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12520 / tcp

1623746877 | 2025-03-22T06:31:04.661559

500 Permission denied - closing connection.\r\n

12522 / tcp

-1399940268 | 2025-02-28T12:20:24.774641

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12526 / tcp

819727972 | 2025-03-22T11:57:01.650151

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12527 / tcp

819727972 | 2025-03-22T23:23:10.333931

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12532 / tcp

165188539 | 2025-03-23T21:50:21.205349

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12533 / tcp

1189133115 | 2025-02-26T22:44:02.679779

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

12535 / tcp

-1648456501 | 2025-03-22T20:18:52.537178

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

12536 / tcp

820958131 | 2025-03-21T22:07:03.168339

kjnkjabhbanc283ubcsbhdc72\x02

12539 / tcp

-1888448627 | 2025-03-23T18:26:57.097041

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12540 / tcp

819727972 | 2025-03-23T02:42:23.999894

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12543 / tcp

820958131 | 2025-03-08T12:13:33.772422

kjnkjabhbanc283ubcsbhdc72\x02

12545 / tcp

-1375131644 | 2025-03-23T21:51:39.896058

\x00[v\xc3\xbdC\x7f\x00\x00

12546 / tcp

-1059554316 | 2025-02-25T23:24:40.545000

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

12547 / tcp

1426971893 | 2025-03-23T20:50:45.278406

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

12551 / tcp

410249975 | 2025-03-23T15:20:28.252569

LNS READY<>

12552 / tcp

1126993057 | 2025-03-08T16:43:30.611182

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

12554 / tcp

-1139539254 | 2025-03-22T18:12:31.564853

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

12558 / tcp

1911457608 | 2025-03-05T21:23:55.336319

\x00[\x00\x00\x00\x00\x00\x00

12559 / tcp

103159425 | 2025-03-22T18:32:06.068286

SSH-1.99-RGOS_SSH

12563 / tcp

-2096652808 | 2025-03-23T19:53:17.199876

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12572 / tcp

819727972 | 2025-03-22T03:08:02.486757

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12573 / tcp

-1399940268 | 2025-03-22T06:04:51.336486

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12575 / tcp

410249975 | 2025-03-15T16:09:56.179077

LNS READY<>

12578 / tcp

408230060 | 2025-03-22T22:49:58.602531

\r\nSorry, that nickname format is invalid.\r\n

12579 / tcp

-1399940268 | 2025-03-23T04:18:22.283781

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12580 / tcp

-1399940268 | 2025-03-23T04:28:21.355807

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12588 / tcp

1911457608 | 2025-03-17T13:05:26.048475

\x00[\x00\x00\x00\x00\x00\x00

12980 / tcp

-1487943323 | 2025-03-23T21:12:43.758364

431 Unable to negotiate secure command connection.\r\n

13047 / tcp

-1730858130 | 2025-03-11T22:05:52.052551

RFB 003.008
VNC:
  Protocol Version: 3.8

13082 / tcp

-1114821551 | 2025-03-23T05:09:28.978609

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

13128 / tcp

-2031152423 | 2025-03-22T17:19:46.543625

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

13380 / tcp

745343730 | 2025-03-23T19:13:48.615225

220 smtp.qq.com Esmtp QQ Mail Server

13443 / tcp

-1730858130 | 2025-03-23T18:13:08.363674

RFB 003.008
VNC:
  Protocol Version: 3.8

14024 / tcp

580340387 | 2025-03-23T19:26:41.138397

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

14026 / tcp

165188539 | 2025-03-22T02:55:27.560076

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

14082 / tcp

-1399940268 | 2025-02-24T06:34:35.356541

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14104 / tcp

89142341 | 2025-03-24T00:34:09.613954

\x05\x00\x00\x00\x0b\x08\x05\x1a\x00

14147 / tcp

-358801646 | 2025-03-21T00:14:47.205432

SSH-2.0-OpenSSH_6.6.1

14265 / tcp

321971019 | 2025-03-19T16:58:28.625412

-ERR client ip is not in whitelist\r

14400 / tcp

205347087 | 2025-03-23T20:14:40.246984

SSH-25453-Cisco-3524665.35\n

14402 / tcp

-1399940268 | 2025-03-22T23:01:33.114487

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14407 / tcp

-358801646 | 2025-03-11T19:55:22.960901

SSH-2.0-OpenSSH_6.6.1

14880 / tcp

-1399940268 | 2025-03-23T17:11:54.491993

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14897 / tcp

-1730858130 | 2025-03-23T10:15:38.544588

RFB 003.008
VNC:
  Protocol Version: 3.8

14900 / tcp

-1399940268 | 2025-03-23T02:34:18.841556

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14901 / tcp

819727972 | 2025-03-03T18:46:17.496565

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

15018 / tcp

165188539 | 2025-03-22T02:49:05.484068

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

15084 / tcp

1763259671 | 2025-03-22T09:08:08.035527

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

15443 / tcp

-1036370807 | 2025-03-22T08:36:41.745227

JDWP-Handshake

15502 / tcp

2098371729 | 2025-03-24T01:34:21.819533

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

15588 / tcp

-1399940268 | 2025-03-23T15:58:08.085847

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

15673 / tcp

1911457608 | 2025-03-23T17:39:40.533621

\x00[\x00\x00\x00\x00\x00\x00

15831 / tcp

-1399940268 | 2025-03-22T05:07:21.520841

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16002 / tcp

-445721795 | 2025-03-22T11:47:23.904179

\x00[\xc3\xaed\x1a\x7f\x00\x00

16007 / tcp

-2096652808 | 2025-03-22T07:51:50.530586

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

16009 / tcp

1504401647 | 2025-03-20T11:17:13.732341

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

16010 / tcp

819727972 | 2025-03-21T01:37:03.839672

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

16011 / tcp

-891714208 | 2025-03-23T13:55:22.784328

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

16012 / tcp

-147424911 | 2025-03-23T23:55:54.862880

HTTP/1.1 404 Not Found
Content Length: 0

16016 / tcp

-147424911 | 2025-03-22T21:26:11.875884

HTTP/1.1 404 Not Found
Content Length: 0

16018 / tcp

-147424911 | 2025-03-22T10:08:28.793713

HTTP/1.1 404 Not Found
Content Length: 0

16019 / tcp

165188539 | 2025-03-22T05:30:43.359154

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

16020 / tcp

-1327660293 | 2025-03-23T18:13:46.163772

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

16022 / tcp

-653033013 | 2025-03-23T06:49:52.841351

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

16025 / tcp

165188539 | 2025-03-23T02:10:59.698015

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

16031 / tcp

-1399940268 | 2025-03-03T20:59:47.977196

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16036 / tcp

1278527606 | 2025-03-16T16:49:07.636683

SSH-2.0-Teleport

16037 / tcp

-1059554316 | 2025-03-23T05:22:50.601125

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

16038 / tcp

-1114821551 | 2025-03-23T13:28:58.853071

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

16039 / tcp

1282941221 | 2025-03-22T07:09:55.336453

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

16040 / tcp

-1888448627 | 2025-03-22T05:12:05.434789

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

16042 / tcp

-1399940268 | 2025-03-23T16:54:25.338521

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16045 / tcp

-653033013 | 2025-03-23T03:43:13.625127

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

16047 / tcp

819727972 | 2025-03-23T00:52:12.599802

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

16051 / tcp

2103111368 | 2025-03-22T10:58:38.587256

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

16052 / tcp

-1888448627 | 2025-03-23T17:43:45.578036

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

16053 / tcp

-2089734047 | 2025-03-17T06:58:57.521072

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

16057 / tcp

51259122 | 2025-03-22T22:56:40.372055

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

16058 / tcp

-1399940268 | 2025-03-22T08:52:45.683801

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16064 / tcp

-1399940268 | 2025-03-11T06:05:15.062006

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16067 / tcp

401555314 | 2025-03-22T09:06:49.953944

NB[GFXjA^R

16069 / tcp

-1399940268 | 2025-03-22T13:05:43.585063

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16072 / tcp

1189133115 | 2025-03-22T20:56:40.284958

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

16077 / tcp

-1327660293 | 2025-03-23T01:50:54.840771

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

16084 / tcp

-303199180 | 2025-03-22T08:16:01.250842

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

16089 / tcp

580340387 | 2025-03-22T07:15:42.694316

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

16090 / tcp

819727972 | 2025-03-17T02:23:00.265651

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

16091 / tcp

819727972 | 2025-03-14T18:20:36.388136

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

16098 / tcp

1011407350 | 2025-03-22T13:00:19.822711

* OK GroupWise IMAP4rev1 Server Ready\r\n

16103 / tcp

321971019 | 2025-03-23T01:32:54.416116

-ERR client ip is not in whitelist\r

16311 / tcp

1011407350 | 2025-03-22T17:00:12.777826

* OK GroupWise IMAP4rev1 Server Ready\r\n

16400 / tcp

-1019343788 | 2025-03-24T00:16:45.968177

W!\x00\x00\x00\x00

16402 / tcp

-1399940268 | 2025-03-24T00:09:05.087942

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16464 / tcp

1741579575 | 2025-03-21T01:41:12.718857

16666 / tcp

-1399940268 | 2025-03-22T11:42:45.516162

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16800 / tcp

-1899074860 | 2025-03-23T08:21:33.935513

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

16992 / tcp

-1261053701 | 2025-03-22T18:55:37.227840

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

16993 / tcp

2087396567 | 2025-03-22T07:06:23.404512

kjnkjabhbanc283ubcsbhdc72

17000 / tcp

-1810987450 | 2025-03-24T02:20:14.826221

\xc3\xbf

17020 / tcp

-1888448627 | 2025-03-22T21:17:05.091885

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

17102 / tcp

1370263973 | 2025-03-13T00:44:43.268395

dubbo>

17182 / tcp

-1453516345 | 2025-03-22T17:31:25.541630

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

17443 / tcp

1726594447 | 2025-03-23T17:51:01.405063

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

17776 / tcp

819727972 | 2025-03-22T10:52:09.681019

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

17778 / tcp

-1888448627 | 2025-03-14T03:11:33.728008

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

17780 / tcp

-1888448627 | 2025-03-23T02:21:09.430979

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

18000 / tcp

-1399940268 | 2025-03-23T06:07:24.732046

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18004 / tcp

-2089734047 | 2025-03-23T18:28:11.948391

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

18006 / tcp

2103111368 | 2025-03-23T01:59:16.744173

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

18009 / tcp

-1899074860 | 2025-03-11T13:59:09.130946

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

18010 / tcp

1213931722 | 2025-02-27T04:47:03.631816

ICAP/1.0 501 Other\r\nServer: Traffic Spicer 7788179225\r\n

18012 / tcp

819727972 | 2025-03-22T21:35:06.332545

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

18014 / tcp

-1189269828 | 2025-03-23T19:27:19.327495

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

18019 / tcp

-345718689 | 2025-03-22T04:42:20.102064

Vty password is not set.

18021 / tcp

-1399940268 | 2025-03-22T20:36:14.488985

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18022 / tcp

2121220663 | 2025-03-22T17:37:13.521701

SSH-58-Ingrian_SSH\r\n

18024 / tcp

-358801646 | 2025-03-23T00:40:19.727676

SSH-2.0-OpenSSH_6.6.1

18027 / tcp

-1399940268 | 2025-03-23T10:49:50.029982

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18031 / tcp

921225407 | 2025-03-23T02:32:59.843234

\x00\x00\x00\x04\x00\x00\x00\x00\x00

18032 / tcp

819727972 | 2025-02-28T08:14:14.232398

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

18033 / tcp

401555314 | 2025-03-23T15:45:12.516825

NB[GFXjA^R

18036 / tcp

-303199180 | 2025-03-04T18:38:41.432367

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

18043 / tcp

819727972 | 2025-03-14T08:31:25.910837

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

18047 / tcp

-1327660293 | 2025-03-20T22:24:33.296809

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

18052 / tcp

-1888448627 | 2025-03-22T10:44:46.507878

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

18061 / tcp

921225407 | 2025-03-22T19:09:18.397619

\x00\x00\x00\x04\x00\x00\x00\x00\x00

18069 / tcp

1504401647 | 2025-03-22T20:05:29.715730

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

18077 / tcp

1519486042 | 2025-03-23T21:26:30.140889

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

18080 / tcp

2087396567 | 2025-03-17T15:10:43.392458

kjnkjabhbanc283ubcsbhdc72

18081 / tcp

1911457608 | 2025-03-21T06:34:05.155429

\x00[\x00\x00\x00\x00\x00\x00

18084 / tcp

-1230049476 | 2025-03-23T12:59:44.171397

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

18085 / tcp

1911457608 | 2025-03-09T07:46:51.428459

\x00[\x00\x00\x00\x00\x00\x00

18092 / tcp

-1105333987 | 2025-03-23T16:09:55.085610

\x00[KpU\x7f\x00\x00

18093 / tcp

-1059554316 | 2025-03-22T18:31:53.194947

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

18095 / tcp

1208318993 | 2025-03-22T16:20:32.486812

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

18099 / tcp

-445721795 | 2025-03-16T12:53:27.144422

\x00[\xc3\xaed\x1a\x7f\x00\x00

18101 / tcp

1473380279 | 2025-03-22T22:34:13.582662

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65a113d3_PSfjfzdx2zb89_8264-50748

18105 / tcp

-2089734047 | 2025-03-23T11:01:49.412043

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

18107 / tcp

-1888448627 | 2025-02-26T19:07:40.969018

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

18108 / tcp

-454087041 | 2025-03-23T01:15:19.260135

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

18225 / tcp

-1399940268 | 2025-02-23T01:24:13.336894

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18245 / tcp

-358801646 | 2025-03-21T18:14:41.524076

SSH-2.0-OpenSSH_6.6.1

18443 / tcp

1504401647 | 2025-03-22T04:25:34.077676

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

18802 / tcp

-1399940268 | 2025-03-23T11:09:20.601934

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18888 / tcp

-1641514916 | 2025-03-24T00:03:08.742254

* OK Merak 1dFUa2 IMAP4rev1

19000 / tcp

-1996280214 | 2025-03-23T23:51:58.207918

\x06\x04\x05@

19014 / tcp

366084633 | 2025-03-22T21:11:14.171346

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

19082 / tcp

-1399940268 | 2025-03-22T21:58:42.426093

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

19090 / tcp

819727972 | 2025-03-22T06:57:45.884763

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

19091 / tcp

-1327660293 | 2025-03-23T02:44:48.511127

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

19100 / tcp

-136006866 | 2025-03-23T13:33:52.810166

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

19233 / tcp

709622286 | 2025-03-22T22:56:46.397657

OK Welcome <299685> on DirectUpdate server 7286\r\n

19776 / tcp

1911457608 | 2025-03-22T19:50:05.138040

\x00[\x00\x00\x00\x00\x00\x00

19902 / tcp

-1996280214 | 2025-03-23T09:13:57.226990

\x06\x04\x05@

19930 / tcp

472902042 | 2025-03-14T09:39:23.250299

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

19998 / tcp

819727972 | 2025-03-22T08:39:20.735106

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

20000 / tcp

1900503736 | 2025-03-24T01:18:37.255755

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20030 / tcp

165188539 | 2025-03-23T19:28:47.255219

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

20053 / tcp

-1399940268 | 2025-03-22T13:43:57.832060

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20121 / tcp

-2017887953 | 2025-03-17T07:06:57.813021

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

20184 / tcp

580340387 | 2025-03-22T07:24:37.794519

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

20200 / tcp

-1888448627 | 2025-03-23T13:09:57.510217

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

20201 / tcp

-303199180 | 2025-03-23T01:22:25.277138

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

20256 / tcp

-2107996212 | 2025-03-23T12:10:27.579038

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

20325 / tcp

-1399940268 | 2025-03-23T07:55:21.566416

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20440 / tcp

921225407 | 2025-03-23T21:04:36.586523

\x00\x00\x00\x04\x00\x00\x00\x00\x00

20500 / tcp

-653033013 | 2025-03-16T18:39:24.831943

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

20547 / tcp

-1641514916 | 2025-03-20T22:54:31.822673

* OK Merak 1dFUa2 IMAP4rev1

20800 / tcp

-1248408558 | 2025-02-27T17:51:01.780506

220 MikroTik FTP server (MikroTik 6.44.3) ready

20880 / tcp

1370263973 | 2025-03-23T21:50:40.432335

dubbo>

20894 / tcp

-1375131644 | 2025-03-23T02:42:23.857722

\x00[v\xc3\xbdC\x7f\x00\x00

21001 / tcp

321971019 | 2025-03-22T14:01:07.989974

-ERR client ip is not in whitelist\r

21025 / tcp

1741579575 | 2025-03-21T18:49:15.981510

21081 / tcp

-1399940268 | 2025-03-23T05:28:18.176023

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21083 / tcp

-1399940268 | 2025-03-22T02:17:26.863714

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21200 / tcp

-1611764932 | 2025-03-22T23:09:16.140199

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

21230 / tcp

504717326 | 2025-03-22T06:34:04.058981

SSH-2.0-OpenSSH_8.6

Vulnerabilities

2 3 6 1

21232 / tcp

597764502 | 2025-03-13T13:51:20.442649

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

21234 / tcp

-1248408558 | 2025-03-23T19:33:23.807631

220 MikroTik FTP server (MikroTik 6.44.3) ready

21235 / tcp

819727972 | 2025-03-14T17:44:42.845790

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

21236 / tcp

165188539 | 2025-03-24T01:25:32.632213

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21237 / tcp

-1399940268 | 2025-03-23T23:08:07.734919

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21241 / tcp

1543809371 | 2025-03-15T20:27:01.824236

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

21242 / tcp

-1399940268 | 2025-03-22T20:03:59.935328

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21248 / tcp

-1888448627 | 2025-03-23T19:49:12.974153

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

21250 / tcp

-2089734047 | 2025-03-23T12:46:55.178879

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

21251 / tcp

-1428621233 | 2025-03-22T08:17:36.801391

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

21254 / tcp

1911457608 | 2025-03-19T20:17:15.130143

\x00[\x00\x00\x00\x00\x00\x00

21256 / tcp

165188539 | 2025-03-23T01:02:54.424221

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21257 / tcp

-1059554316 | 2025-03-22T12:29:27.036405

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

21259 / tcp

677934968 | 2025-02-22T23:18:27.185578

lm^)Q

21265 / tcp

51259122 | 2025-03-23T02:15:14.043207

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

21266 / tcp

-1648456501 | 2025-03-22T12:27:53.751747

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

21272 / tcp

-1399940268 | 2025-02-24T12:07:46.356015

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21273 / tcp

-992671574 | 2025-03-23T16:48:41.748674

@RSYNCD: 26

21274 / tcp

-1189269828 | 2025-03-23T07:30:25.916243

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

21280 / tcp

-1399940268 | 2025-03-23T13:43:43.521757

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21281 / tcp

-653033013 | 2025-03-23T15:18:48.274791

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

21282 / tcp

-339084706 | 2025-03-23T14:16:14.685729

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

21283 / tcp

-2089734047 | 2025-03-22T23:00:39.107664

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

21286 / tcp

-1888448627 | 2025-03-23T06:01:10.121010

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

21288 / tcp

1911457608 | 2025-03-22T23:05:55.959327

\x00[\x00\x00\x00\x00\x00\x00

21290 / tcp

-2096652808 | 2025-03-19T02:04:45.900395

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

21292 / tcp

455076604 | 2025-03-22T10:23:29.080285

!\x07version\x04bind7 t{RPowerDNS Recursor 410

21297 / tcp

2121220663 | 2025-03-22T11:24:13.617899

SSH-58-Ingrian_SSH\r\n

21302 / tcp

819727972 | 2025-03-23T03:59:28.786709

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

21303 / tcp

-1399940268 | 2025-03-23T23:23:01.339794

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21308 / tcp

119860953 | 2025-02-27T20:11:24.737013

* OK ArGoSoft Mail Server IMAP Module v.YW at

21311 / tcp

-136006866 | 2025-03-12T15:15:14.847066

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

21312 / tcp

-1810987450 | 2025-03-22T08:25:50.228988

\xc3\xbf

21313 / tcp

819727972 | 2025-03-23T00:44:38.631352

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

21314 / tcp

921225407 | 2025-03-23T23:37:00.655574

\x00\x00\x00\x04\x00\x00\x00\x00\x00

21316 / tcp

1911457608 | 2025-02-27T00:13:25.184436

\x00[\x00\x00\x00\x00\x00\x00

21318 / tcp

1911457608 | 2025-02-26T16:48:20.515559

\x00[\x00\x00\x00\x00\x00\x00

21324 / tcp

-303199180 | 2025-03-23T14:22:48.123947

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

21330 / tcp

1911457608 | 2025-03-23T17:33:21.223762

\x00[\x00\x00\x00\x00\x00\x00

21379 / tcp

-1013082686 | 2025-03-21T08:00:10.239688

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

21515 / tcp

-2089734047 | 2025-03-22T20:27:54.370647

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

22403 / tcp

-1399940268 | 2025-03-22T22:52:09.296997

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

22556 / tcp

-1779118422 | 2025-02-24T20:45:22.482292

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

22705 / tcp

1212285915 | 2025-02-24T21:08:12.744396

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

23023 / tcp

2087396567 | 2025-03-23T21:53:00.039897

kjnkjabhbanc283ubcsbhdc72

23084 / tcp

-2089734047 | 2025-03-13T09:14:51.289458

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

23184 / tcp

1492413928 | 2025-03-12T16:29:13.792409

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 12 1

24181 / tcp

-1297953727 | 2025-03-22T18:57:11.670135

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

24442 / tcp

-1996280214 | 2025-03-22T23:45:51.849070

\x06\x04\x05@

25000 / tcp

-1399940268 | 2025-03-22T09:24:14.282599

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

25001 / tcp

-1399940268 | 2025-03-21T01:39:33.751821

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

25005 / tcp

-1399940268 | 2025-03-22T03:48:57.883908

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

25082 / tcp

-441419608 | 2025-03-23T20:24:17.894847

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

25084 / tcp

-1538260461 | 2025-03-23T08:45:49.793814

\x01\x00\x00\x00

25105 / tcp

-2118655245 | 2025-03-12T12:45:57.360026

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

25565 / tcp

-358801646 | 2025-03-22T17:04:45.942964

SSH-2.0-OpenSSH_6.6.1

25952 / tcp

-441419608 | 2025-03-17T00:53:46.873654

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

26656 / tcp

1975288991 | 2025-03-13T05:28:04.306765

OPTI

27015 / tcp

1363464823 | 2025-03-22T10:38:33.561690

\x00[|ox\x7f\x00\x00

27017 / tcp

1763259671 | 2025-03-17T07:15:12.157142

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

27105 / tcp

-1399940268 | 2025-03-23T20:30:02.359839

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

27571 / tcp

-358801646 | 2025-03-23T07:42:14.094425

SSH-2.0-OpenSSH_6.6.1

28015 / tcp

366084633 | 2025-03-21T11:27:45.190104

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

28818 / tcp

-1139539254 | 2025-03-14T17:16:36.822704

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

30000 / tcp

-1426182427 | 2025-02-28T23:18:40.485792

\\x00[\\x00\\x00\\x00\\x00\\x00\\x00

30002 / tcp

-1681927087 | 2025-03-22T17:15:38.001114

kjnkjabhbanc283ubcsbhdc72

30003 / tcp

165188539 | 2025-03-21T03:48:34.927159

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

30009 / tcp

819727972 | 2025-03-23T01:46:04.399471

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

30010 / tcp

-1730858130 | 2025-03-23T07:53:49.874792

RFB 003.008
VNC:
  Protocol Version: 3.8

30013 / tcp

-1399940268 | 2025-03-23T12:58:11.460719

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

30015 / tcp

-2140303521 | 2025-03-22T21:30:06.388618

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

30022 / tcp

1632932802 | 2025-03-18T20:44:34.030087

30027 / tcp

-1746074029 | 2025-03-22T12:57:07.688900

101 imqbroker =unV\r\n

30101 / tcp

709622286 | 2025-03-22T03:47:59.620265

OK Welcome <299685> on DirectUpdate server 7286\r\n

30110 / tcp

321971019 | 2025-03-10T02:05:15.407956

-ERR client ip is not in whitelist\r

30120 / tcp

819727972 | 2025-03-08T11:28:16.074654

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

30121 / tcp

-2096652808 | 2025-03-23T15:40:28.854498

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

30122 / tcp

-358801646 | 2025-03-19T19:26:41.109360

SSH-2.0-OpenSSH_6.6.1

30222 / tcp

-905685638 | 2025-03-09T05:31:28.537826

bxz437

30322 / tcp

-1428621233 | 2025-03-09T05:24:56.295516

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

30422 / tcp

-2096652808 | 2025-03-13T10:54:51.690761

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

30444 / tcp

1911457608 | 2025-03-17T19:07:57.463081

\x00[\x00\x00\x00\x00\x00\x00

30468 / tcp

1911457608 | 2025-03-23T20:57:02.856429

\x00[\x00\x00\x00\x00\x00\x00

30622 / tcp

-1428621233 | 2025-03-12T10:09:29.997020

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

30700 / tcp

1911457608 | 2025-02-22T14:32:58.615248

\x00[\x00\x00\x00\x00\x00\x00

30701 / tcp

-1032713145 | 2025-02-27T04:51:33.618917

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

30718 / tcp

-305970756 | 2025-03-22T10:53:40.267198

MAC Addr:00:80:a3:fd:5f:0d

30892 / tcp

-1114821551 | 2025-03-23T00:36:23.777018

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

30922 / tcp

-971970408 | 2025-03-20T21:42:41.845370

31122 / tcp

819727972 | 2025-03-09T11:44:39.263032

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

31222 / tcp

819727972 | 2025-03-24T01:29:04.852980

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

31337 / tcp

-2133761335 | 2025-03-23T04:02:58.551054

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Vary: Accept-Encoding
X-Powered-By: PHP/7.4.21

31443 / tcp

-1795027372 | 2025-03-12T17:04:06.580855

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

31622 / tcp

2087396567 | 2025-03-23T09:04:11.293740

kjnkjabhbanc283ubcsbhdc72

31722 / tcp

2087396567 | 2025-03-21T14:54:38.725202

kjnkjabhbanc283ubcsbhdc72

31822 / tcp

1690634669 | 2025-03-20T18:12:18.001189

32222 / tcp

1332894250 | 2025-03-23T16:36:31.195269

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

32303 / tcp

671605376 | 2025-03-22T13:19:07.839849

SSH-2.0-OpenSSH_X.X

32322 / tcp

957278843 | 2025-03-16T14:48:54.254860

[|ox

32400 / tcp

339872247 | 2025-03-23T14:27:44.588678


0 ...

32443 / tcp

1632932802 | 2025-03-23T16:21:31.614788

32522 / tcp

-1760806421 | 2025-03-22T03:35:40.388449

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

32722 / tcp

-616720387 | 2025-03-11T15:32:31.710765

SSH-2.0-SSHD_0.7.6

32764 / tcp

819727972 | 2025-03-22T16:45:49.538556

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

32800 / tcp

819727972 | 2025-03-04T14:26:12.359656

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

32822 / tcp

-2031152423 | 2025-03-23T02:47:50.971325

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

32922 / tcp

1975288991 | 2025-03-23T01:17:19.819812

OPTI

33022 / tcp

-1648456501 | 2025-03-23T03:05:07.214419

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

33060 / tcp

2087396567 | 2025-03-22T19:00:55.899258

kjnkjabhbanc283ubcsbhdc72

33122 / tcp

-971970408 | 2025-03-04T13:25:03.728084

33222 / tcp

819727972 | 2025-03-19T23:14:27.289947

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

33322 / tcp

-1477838366 | 2025-03-22T06:52:27.360904

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

33389 / tcp

1911457608 | 2025-03-22T16:11:00.502427

\x00[\x00\x00\x00\x00\x00\x00

33422 / tcp

-616720387 | 2025-03-19T16:14:02.194785

SSH-2.0-SSHD_0.7.6

33522 / tcp

1642597142 | 2025-03-20T13:20:32.243706

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

33622 / tcp

-1598265216 | 2025-03-08T19:50:28.179182

@RSYNCD: 31.0

33722 / tcp

-1045760528 | 2025-03-18T04:51:43.994199

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

33822 / tcp

660175493 | 2025-03-18T10:24:44.401300

34422 / tcp

539065883 | 2025-03-15T00:59:13.415249

34500 / tcp

1911457608 | 2025-03-23T12:16:01.649961

\x00[\x00\x00\x00\x00\x00\x00

34522 / tcp

-146605374 | 2025-03-19T10:38:42.655716

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

34622 / tcp

-358801646 | 2025-03-19T09:40:29.578482

SSH-2.0-OpenSSH_6.6.1

34722 / tcp

171352214 | 2025-03-03T23:06:56.480913

-ERR client ip is not in whitelist

35000 / tcp

-1399940268 | 2025-03-23T07:21:51.306048

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

35002 / tcp

-1105333987 | 2025-03-23T07:58:22.922833

\x00[KpU\x7f\x00\x00

35022 / tcp

1741579575 | 2025-03-19T01:59:18.717079

35101 / tcp

-1399940268 | 2025-03-22T09:53:58.120076

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

35122 / tcp

1984588611 | 2025-03-04T08:09:03.051242

35322 / tcp

2087396567 | 2025-03-17T07:50:29.367994

kjnkjabhbanc283ubcsbhdc72

35422 / tcp

-786044033 | 2025-02-28T07:25:56.202045

OK Welcome <299685> on DirectUpdate server 7286

35522 / tcp

1412519768 | 2025-03-17T00:09:10.828611

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

35524 / tcp

819727972 | 2025-03-10T10:50:18.462927

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

35554 / tcp

-1730858130 | 2025-03-19T21:03:33.068839

RFB 003.008
VNC:
  Protocol Version: 3.8

35722 / tcp

2087396567 | 2025-02-28T05:41:25.322396

kjnkjabhbanc283ubcsbhdc72

35922 / tcp

-1872120160 | 2025-03-16T20:38:06.640006

">Application and Content Networking Software 3.9</a>)
</BODY><

36022 / tcp

-971970408 | 2025-03-17T20:24:21.317196

36222 / tcp

-1375131644 | 2025-03-17T18:41:34.453910

\x00[v\xc3\xbdC\x7f\x00\x00

36322 / tcp

-1648456501 | 2025-03-17T11:18:20.259462

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

36505 / tcp

1991883981 | 2025-03-22T02:53:29.570146

B\x00\x00\x00\xc3\xbfn\x04Too many connections

36622 / tcp

1830187220 | 2025-03-16T07:41:05.415380

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

36822 / tcp

-1148066627 | 2025-03-18T13:51:20.402169

\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00

36922 / tcp

745343730 | 2025-03-01T01:13:53.100120

220 smtp.qq.com Esmtp QQ Mail Server

37222 / tcp

-653033013 | 2025-03-14T18:45:05.011395

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

37322 / tcp

1850902677 | 2025-03-16T10:28:37.571866

W!

37422 / tcp

103159425 | 2025-02-28T18:04:08.150531

SSH-1.99-RGOS_SSH

37522 / tcp

2087396567 | 2025-03-16T08:57:33.669335

kjnkjabhbanc283ubcsbhdc72

37622 / tcp

819727972 | 2025-03-16T01:14:53.657162

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

37777 / tcp

2087396567 | 2025-03-23T06:25:39.273698

kjnkjabhbanc283ubcsbhdc72

37822 / tcp

-616720387 | 2025-03-14T01:54:00.913916

SSH-2.0-SSHD_0.7.6

37922 / tcp

1741579575 | 2025-03-17T23:51:59.968894

38022 / tcp

-1013082686 | 2025-03-17T22:05:21.948745

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

38080 / tcp

1620329124 | 2025-03-23T20:52:22.783382

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

38122 / tcp

-1730858130 | 2025-03-15T16:40:25.528723

RFB 003.008
VNC:
  Protocol Version: 3.8

38222 / tcp

819727972 | 2025-03-11T17:34:12.426744

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

38333 / tcp

-1036370807 | 2025-03-15T20:29:54.521305

JDWP-Handshake

38622 / tcp

2087396567 | 2025-03-14T08:27:10.924986

kjnkjabhbanc283ubcsbhdc72

38722 / tcp

2087396567 | 2025-03-13T21:20:08.087582

kjnkjabhbanc283ubcsbhdc72

38922 / tcp

-454087041 | 2025-03-13T14:22:45.177706

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

39001 / tcp

-2089734047 | 2025-03-22T19:01:42.904283

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

39022 / tcp

178736976 | 2025-03-13T19:35:30.322734

SSH-58-Ingrian_SSH

39322 / tcp

-971970408 | 2025-03-11T10:15:14.835753

39422 / tcp

-971970408 | 2025-03-11T12:01:03.234850

39522 / tcp

114471724 | 2025-03-11T08:30:02.368249

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

39622 / tcp

171352214 | 2025-03-11T06:48:30.648305

-ERR client ip is not in whitelist

39922 / tcp

1830697416 | 2025-02-26T17:15:50.676590

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

40000 / tcp

1911457608 | 2025-03-23T05:07:08.260357

\x00[\x00\x00\x00\x00\x00\x00

40001 / tcp

-1399940268 | 2025-02-24T21:43:51.935762

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

40022 / tcp

2087396567 | 2025-03-09T10:29:44.995153

kjnkjabhbanc283ubcsbhdc72

40029 / tcp

-375604792 | 2025-02-25T20:32:29.744210

220 Microsoft FTP Service

40070 / tcp

307999478 | 2025-03-22T19:16:40.828576

unknown command \r\nunknown command \r\n

40222 / tcp

1948301213 | 2025-03-04T10:07:46.561958

RFB 003.003
VNC:
  Protocol Version: 3.3

40322 / tcp

-1730858130 | 2025-03-08T20:38:26.439509

RFB 003.008
VNC:
  Protocol Version: 3.8

40522 / tcp

2087396567 | 2025-03-04T06:22:05.265020

kjnkjabhbanc283ubcsbhdc72

40622 / tcp

-1559123399 | 2025-02-26T12:18:59.685144

500 Permission denied - closing connection.

41122 / tcp

119860953 | 2025-02-27T14:05:03.040950

* OK ArGoSoft Mail Server IMAP Module v.YW at

41443 / tcp

677934968 | 2025-03-14T02:33:55.359949

lm^)Q

41522 / tcp

-358801646 | 2025-03-04T20:30:59.411135

SSH-2.0-OpenSSH_6.6.1

41800 / tcp

1189133115 | 2025-03-18T15:24:29.383095

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

41822 / tcp

957278843 | 2025-03-07T17:00:55.273643

[|ox

41922 / tcp

1690634669 | 2025-03-07T15:17:11.396008

42022 / tcp

-1032713145 | 2025-03-04T15:15:31.399998

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

42235 / tcp

401555314 | 2025-03-16T15:07:37.717582

NB[GFXjA^R

42424 / tcp

1911457608 | 2025-02-28T19:17:53.503211

\x00[\x00\x00\x00\x00\x00\x00

42922 / tcp

-1559123399 | 2025-02-28T15:44:43.376439

500 Permission denied - closing connection.

43008 / tcp

-1888448627 | 2025-03-23T08:11:15.170564

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

43200 / tcp

-792826324 | 2025-03-23T10:35:16.043259

220 FTP server ready - login please

43222 / tcp

819727972 | 2025-02-28T23:19:26.684996

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

43322 / tcp

104385780 | 2025-02-27T21:00:18.830003

ceph v2

43522 / tcp

1741579575 | 2025-02-27T17:31:59.989445

43622 / tcp

819727972 | 2025-02-26T23:34:13.808111

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

43722 / tcp

-1598265216 | 2025-02-27T02:49:34.702660

@RSYNCD: 31.0

43822 / tcp

660175493 | 2025-02-23T04:32:00.281174

43922 / tcp

-1779118422 | 2025-02-27T09:16:39.543907

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

44022 / tcp

-1013082686 | 2025-02-27T07:17:29.035100

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

44100 / tcp

-1327660293 | 2025-03-23T20:30:17.529335

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

44122 / tcp

-1392039491 | 2025-02-26T21:40:05.131467

"Broadband Router"

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

44158 / tcp

-433302150 | 2025-03-23T22:01:22.129179

/multistream/1.0.0

44300 / tcp

-1399940268 | 2025-03-23T02:09:15.165481

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44301 / tcp

-2089734047 | 2025-03-23T06:47:57.616941

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

44302 / tcp

921225407 | 2025-03-17T21:54:27.000879

\x00\x00\x00\x04\x00\x00\x00\x00\x00

44303 / tcp

-2089734047 | 2025-03-22T14:02:53.405643

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

44304 / tcp

-1399940268 | 2025-03-23T20:38:31.568210

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44306 / tcp

-457235091 | 2025-03-22T08:02:19.221304

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

44309 / tcp

1830697416 | 2025-03-21T21:08:16.960803

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

44310 / tcp

1911457608 | 2025-02-28T20:54:57.979607

\x00[\x00\x00\x00\x00\x00\x00

44320 / tcp

-1399940268 | 2025-03-22T17:32:23.804651

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44322 / tcp

-1392039491 | 2025-02-26T09:37:01.997205

"Broadband Router"

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

44340 / tcp

819727972 | 2025-03-23T23:10:52.673165

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

44350 / tcp

819727972 | 2025-03-22T05:16:10.820694

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

44365 / tcp

-1399940268 | 2025-02-27T12:51:56.805803

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

44444 / tcp

740837454 | 2025-03-22T20:25:56.003684

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

44500 / tcp

819727972 | 2025-03-11T10:52:06.199059

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

44520 / tcp

-1013082686 | 2025-03-23T13:54:06.492878

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

44522 / tcp

2033888749 | 2025-02-26T06:51:11.705042

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

44818 / tcp

-2031152423 | 2025-03-17T01:45:38.631944

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

44922 / tcp

119860953 | 2025-02-26T02:52:23.400592

* OK ArGoSoft Mail Server IMAP Module v.YW at

45000 / tcp

1623746877 | 2025-03-23T17:42:04.978388

500 Permission denied - closing connection.\r\n

45002 / tcp

-1399940268 | 2025-03-22T13:55:22.808589

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

45003 / tcp

-1888448627 | 2025-03-22T07:52:48.406916

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

45005 / tcp

1763259671 | 2025-03-23T07:44:59.425162

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

45022 / tcp

-905685638 | 2025-03-10T15:12:47.742157

bxz437

45039 / tcp

-904840257 | 2025-03-22T02:27:37.822513

572 Relay not authorized\r\n

45222 / tcp

-971970408 | 2025-02-25T19:31:57.407277

45322 / tcp

171352214 | 2025-02-25T10:15:32.368632

-ERR client ip is not in whitelist

45522 / tcp

1741579575 | 2025-02-25T15:26:04.178275

45667 / tcp

1911457608 | 2025-03-22T12:08:03.502056

\x00[\x00\x00\x00\x00\x00\x00

45668 / tcp

-1810987450 | 2025-03-22T14:38:31.703218

\xc3\xbf

45677 / tcp

-992671574 | 2025-03-23T01:26:41.965295

@RSYNCD: 26

45788 / tcp

632542934 | 2025-03-23T23:12:47.048548

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

45821 / tcp

-1453516345 | 2025-03-23T15:42:13.581628

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

45922 / tcp

233634112 | 2025-03-10T13:29:11.675153

SSH-98.60-SysaxSSH_81885..42

46122 / tcp

-2096652808 | 2025-02-24T11:44:35.957946

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

46222 / tcp

-2031152423 | 2025-02-24T10:02:28.557240

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

46322 / tcp

-441419608 | 2025-02-24T20:21:39.880201

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

46422 / tcp

-1611764932 | 2025-02-24T08:20:56.159623

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

46862 / tcp

-358801646 | 2025-03-21T19:15:55.949426

SSH-2.0-OpenSSH_6.6.1

46922 / tcp

474736340 | 2025-02-23T23:36:20.083662

431 Unable to negotiate secure command connection.

47000 / tcp

1189133115 | 2025-03-14T08:20:38.070294

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

47080 / tcp

-1839934832 | 2025-03-23T04:56:55.250489

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

47222 / tcp

2087396567 | 2025-02-23T20:09:35.390830

kjnkjabhbanc283ubcsbhdc72

47322 / tcp

-358801646 | 2025-02-23T18:25:00.221161

SSH-2.0-OpenSSH_6.6.1

47522 / tcp

-801484042 | 2025-02-23T15:12:12.175962

ERR 27

47534 / tcp

-274082663 | 2025-03-22T16:39:49.031521

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

47622 / tcp

2087396567 | 2025-02-23T13:37:14.545769

kjnkjabhbanc283ubcsbhdc72

47922 / tcp

171352214 | 2025-03-10T06:34:41.197154

-ERR client ip is not in whitelist

47984 / tcp

-1399940268 | 2025-03-12T02:49:09.826251

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

47990 / tcp

1308377066 | 2025-03-11T23:11:38.106091

ncacn_http/1.0

48013 / tcp

1911457608 | 2025-03-18T03:52:13.940203

\x00[\x00\x00\x00\x00\x00\x00

48100 / tcp

410249975 | 2025-03-22T05:51:12.933721

LNS READY<>

48122 / tcp

597764502 | 2025-03-10T04:49:49.725674

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

48222 / tcp

-358801646 | 2025-03-10T03:06:08.502471

SSH-2.0-OpenSSH_6.6.1

48422 / tcp

1741579575 | 2025-03-09T23:38:40.888404

48522 / tcp

1767345577 | 2025-03-09T21:56:35.053907

Hello, this is Quagga (version 0T).
Copyright 1996-200

48722 / tcp

2087396567 | 2025-02-24T15:09:02.091848

kjnkjabhbanc283ubcsbhdc72

48822 / tcp

-971970408 | 2025-02-24T16:52:50.095580

48899 / tcp

539065883 | 2025-03-22T07:01:43.005740

49022 / tcp

-616720387 | 2025-03-07T13:34:52.636378

SSH-2.0-SSHD_0.7.6

49080 / tcp

1911457608 | 2025-03-23T20:58:52.617155

\x00[\x00\x00\x00\x00\x00\x00

49152 / tcp

-999794581 | 2025-03-20T05:53:25.944832

HTTP/1.1 404 Error
Connection: close

<?xml version="1.0"?>
<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<s:Body>
<s:Fault>
<faultcode>s:Client</faultcode>
<faultstring>UPnPError</faultstring>
<detail>
<UPnPError xmlns="urn:schemas-upnp-org:control-1-0">
<errorCode>404</errorCode>
<errorDescription>Error</errorDescription>
</UPnPError>
</detail>
</s:Fault>
</s:Body>
</s:Envelope>

49153 / tcp

291723434 | 2025-03-22T12:40:55.240823

Lantronix MSS100 Version V118/523(045538937)

Type HELP at the 'Local_61349> ' prompt for assistance.



Username>

49200 / tcp

1911457608 | 2025-03-22T04:57:17.104289

\x00[\x00\x00\x00\x00\x00\x00

49210 / tcp

820958131 | 2025-03-11T11:46:01.448549

kjnkjabhbanc283ubcsbhdc72\x02

49422 / tcp

-1760806421 | 2025-02-23T02:10:02.403882

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

49502 / tcp

-2096652808 | 2025-03-23T19:43:20.763253

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

49684 / tcp

-1399940268 | 2025-03-23T15:27:09.232775

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

49690 / tcp

819727972 | 2025-03-23T02:36:18.045568

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

49722 / tcp

-1779118422 | 2025-02-22T21:30:30.669425

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

49822 / tcp

-971970408 | 2025-02-22T19:44:33.607755

49922 / tcp

660175493 | 2025-02-22T18:02:28.256095

50000 / tcp

819727972 | 2025-03-23T11:50:58.651836

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

50002 / tcp

-303199180 | 2025-03-22T18:06:24.351869

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

50005 / tcp

-1265999252 | 2025-03-22T14:10:16.425248

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

50008 / tcp

819727972 | 2025-03-23T12:07:31.359724

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

50009 / tcp

-1230049476 | 2025-03-23T05:57:00.014781

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

50012 / tcp

-2017887953 | 2025-03-23T20:54:18.679571

SSH-2.0-OpenSSH_7.9

Vulnerabilities

2 4 10 1

50014 / tcp

103159425 | 2025-03-23T03:53:33.965184

SSH-1.99-RGOS_SSH

50022 / tcp

819727972 | 2025-03-18T02:45:26.447858

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

50070 / tcp

1741579575 | 2025-03-21T23:45:41.026881

50073 / tcp

-1399940268 | 2025-03-22T06:16:00.978532

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

50100 / tcp

-358801646 | 2025-03-21T21:49:30.548597

SSH-2.0-OpenSSH_6.6.1

50103 / tcp

1911457608 | 2025-03-23T09:09:20.450247

\x00[\x00\x00\x00\x00\x00\x00

50106 / tcp

-1297953727 | 2025-03-22T06:45:53.465567

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

50112 / tcp

165188539 | 2025-03-22T10:33:15.923352

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

50113 / tcp

-136006866 | 2025-03-22T02:54:58.389912

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

50122 / tcp

2098371729 | 2025-03-23T19:05:24.953680

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

50160 / tcp

-1399940268 | 2025-03-23T17:48:01.225975

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

50222 / tcp

751496153 | 2025-02-22T06:36:14.462564

* OK TeamXchange IMAP4rev1 server (otyUg) ready.

50500 / tcp

-1261314728 | 2025-03-23T17:00:07.545499

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 12-42587391-0 0NNN RT(1701246017593 16) q(0 -1 -1 -1) r(0 -1)

50580 / tcp

-345718689 | 2025-03-22T01:39:23.700056

Vty password is not set.

50777 / tcp

819727972 | 2025-03-22T03:52:55.105212

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

50995 / tcp

-784071826 | 2025-03-22T20:17:20.448868

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

50996 / tcp

-1611764932 | 2025-03-23T15:59:17.370127

\x03\x00\x00\x10\x08\x02\xc2\x80\x00}\x08\x02\xc2\x80\xc3\xa2\x14\x01\x00

50997 / tcp

-1399940268 | 2025-03-05T10:38:10.756269

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

51004 / tcp

-1399940268 | 2025-03-23T18:51:34.248568

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

51005 / tcp

-358801646 | 2025-03-23T11:41:43.785410

SSH-2.0-OpenSSH_6.6.1

51200 / tcp

1767345577 | 2025-03-23T06:05:49.097406

Hello, this is Quagga (version 0T).
Copyright 1996-200

51201 / tcp

-1428621233 | 2025-03-11T23:31:39.444966

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

51235 / tcp

-1399940268 | 2025-03-23T13:51:24.570968

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

51294 / tcp

819727972 | 2025-03-12T10:23:44.999710

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

51434 / tcp

-1538260461 | 2025-03-23T07:09:27.846998

\x01\x00\x00\x00

52311 / tcp

-1230049476 | 2025-03-23T14:45:34.377505

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

52931 / tcp

-2080784861 | 2025-03-22T22:51:56.860245

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

52951 / tcp

-1399940268 | 2025-03-24T00:38:15.011120

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

53022 / tcp

-1810987450 | 2025-03-07T07:25:12.665787

\xc3\xbf

53200 / tcp

-1399940268 | 2025-03-22T04:38:55.724745

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

53413 / tcp

707919486 | 2025-03-22T01:22:09.475459

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

54138 / tcp

-441419608 | 2025-03-22T20:11:50.306645

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

54327 / tcp

-904840257 | 2025-03-24T02:12:56.303037

572 Relay not authorized\r\n

54490 / tcp

1504401647 | 2025-03-23T09:11:07.185696

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

54922 / tcp

-971970408 | 2025-03-07T08:45:56.676319

55000 / tcp

321971019 | 2025-03-23T12:31:51.970797

-ERR client ip is not in whitelist\r

55055 / tcp

-106419342 | 2025-03-18T10:15:13.985320

J\\x00\\x00\\x00\n5.6.50\\x00\\x98\\x01\\x00\\x00NiDZvewF\\x00\\xff\\xf7\\x08\\x02\\x00\\x7f\\x80\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x005x|)P;v_[-iK\\x00mysql_native_password\\x00

55081 / tcp

1492413928 | 2025-02-26T15:11:08.903865

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 12 1

55350 / tcp

1492413928 | 2025-03-23T14:19:02.728286

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

55422 / tcp

1850902677 | 2025-03-06T17:03:04.304591

W!

55442 / tcp

-1990350878 | 2025-03-20T19:51:32.755555

 
04 \...

55443 / tcp

599074451 | 2025-03-22T12:48:20.967240

msg

55470 / tcp

-1399940268 | 2025-03-23T03:33:26.546945

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

55475 / tcp

-1327660293 | 2025-03-22T22:24:25.228121

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

55553 / tcp

-971970408 | 2025-03-23T01:31:38.434117

55554 / tcp

-1023516719 | 2025-03-21T02:17:30.242228

ã

KvInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

55622 / tcp

873425297 | 2025-03-06T16:07:21.967809

200 NOD32SS 99 (3318497116)

55822 / tcp

539065883 | 2025-03-06T20:27:42.579637

57622 / tcp

1919228981 | 2025-03-06T08:53:38.845369

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

57778 / tcp

819727972 | 2025-03-23T18:47:24.293394

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

57782 / tcp

117101543 | 2025-03-22T18:03:21.345945

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

57785 / tcp

-1399940268 | 2025-02-24T06:12:47.264639

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

57822 / tcp

2087396567 | 2025-03-06T05:29:03.627097

kjnkjabhbanc283ubcsbhdc72

58322 / tcp

1690634669 | 2025-03-05T22:32:08.475824

58392 / tcp

-1297953727 | 2025-03-23T05:39:51.877579

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

58422 / tcp

1208318993 | 2025-03-05T20:48:37.375667

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

58522 / tcp

-1559123399 | 2025-03-05T20:16:41.758013

500 Permission denied - closing connection.

58603 / tcp

-1099385124 | 2025-03-18T05:41:21.686379

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

59022 / tcp

-1900404274 | 2025-03-05T12:11:48.956858

Unknown command

59122 / tcp

-971970408 | 2025-03-05T10:29:48.854398

59222 / tcp

1426971893 | 2025-03-05T09:00:16.854023

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

59322 / tcp

841014058 | 2025-03-05T07:19:06.724660

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

59443 / tcp

1134517380 | 2025-03-22T09:51:48.397948

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

60001 / tcp

-971970408 | 2025-03-15T02:21:53.280973

60021 / tcp

-792826324 | 2025-03-23T08:08:41.445887

220 FTP server ready - login please

60030 / tcp

-1228868710 | 2025-03-14T18:38:37.538744

Hashes

hash

-1240349528

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Fri, 14 Mar 2025 18:38:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive

60099 / tcp

1624217396 | 2025-03-22T06:12:20.677588

HELO:10.3.6.0.false\nAS:2048\nHL:19

60129 / tcp

1231376952 | 2025-03-20T04:35:51.032039

60443 / tcp

-262532376 | 2025-03-22T15:34:01.725698

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: keep-alive

61234 / tcp

307999478 | 2025-03-23T21:36:44.723761

unknown command \r\nunknown command \r\n

61613 / tcp

-1399940268 | 2025-03-21T01:30:23.159021

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

61616 / tcp

-1228868710 | 2025-03-22T14:43:33.350925

Hashes

hash

1476426321

http.dom_hash

-431224993

http.html_hash

-1228868710

http.server_hash

1673621694

阿里云 Web应用防火墙

HTTP/1.1 410 Gone
Server: Tengine
Date: Sat, 22 Mar 2025 14:43:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive

61619 / tcp

-1045760528 | 2025-03-22T22:17:07.303727

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

62078 / tcp

980478633 | 2025-03-22T16:54:51.410695

rry, that nickname format is invalid.

62080 / tcp

1543809371 | 2025-03-23T11:13:40.532544

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

63210 / tcp

819727972 | 2025-03-15T01:18:04.182990

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

63256 / tcp

1887224352 | 2025-03-23T08:18:51.385340

63257 / tcp

819727972 | 2025-03-11T13:55:05.134267

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 12 1

63260 / tcp

45131230 | 2025-03-09T05:11:12.790367

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

63443 / tcp

-1713437100 | 2025-03-22T04:57:12.552753

\xc3\xbf\xc3\xbb\x01\r\nWelcome to NetLinx v94 Copyright AMX Corp. 34395-49007\r\n>

63676 / tcp

921225407 | 2025-03-13T12:17:01.974948

\x00\x00\x00\x04\x00\x00\x00\x00\x00

64295 / tcp

-1013082686 | 2025-03-20T08:13:25.502428

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

64477 / tcp

-303199180 | 2025-03-22T09:59:27.926741

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

64671 / tcp

-1399940268 | 2025-03-23T22:14:11.914548

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

64683 / tcp

819727972 | 2025-03-23T13:36:41.712510

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

64738 / tcp

1741579575 | 2025-03-15T04:04:49.459960

65000 / tcp

1121806355 | 2025-03-23T23:49:08.345622

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 657d0752_gwt27_33224-20260

65432 / tcp

119860953 | 2025-03-22T19:06:02.667488

* OK ArGoSoft Mail Server IMAP Module v.YW at

47.102.14.209

Last Seen: 2025-03-24

Tags:

GeneralInformation

OpenPorts

11 / tcp 1220320909 | 2025-03-18T16:54:57.875063

13 / tcp 1725312227 | 2025-03-22T03:04:44.281994

15 / tcp -1990350878 | 2025-03-20T15:08:56.982616

17 / tcp 5698739 | 2025-03-23T16:02:38.332825

19 / tcp 1978059005 | 2025-03-23T08:34:05.365032

20 / tcp -1399940268 | 2025-03-19T17:09:15.098315

21 / tcp -702037155 | 2025-03-22T18:29:18.435170

23 / tcp -1816600103 | 2025-03-23T13:01:11.250466

25 / tcp -1399940268 | 2025-03-21T06:56:40.724371

26 / tcp 165188539 | 2025-03-23T21:48:51.781531

37 / tcp 726777565 | 2025-03-23T15:34:46.475164

43 / tcp -1461540015 | 2025-03-23T05:40:58.275667

49 / tcp -1620040646 | 2025-03-20T23:12:26.965962

51 / tcp -1399940268 | 2025-03-23T18:46:04.879094

53 / tcp 1024248778 | 2025-03-23T09:00:16.623001

66 / tcp -1839934832 | 2025-03-23T11:38:42.483259

70 / tcp 1583167286 | 2025-03-23T12:23:26.001500

79 / tcp -876294238 | 2025-03-23T06:31:55.128400

80 / tcp -1228868710 | 2025-03-22T09:33:22.398196

Hashes

85 / tcp -1399940268 | 2025-03-18T18:03:55.631799

87 / tcp -2089734047 | 2025-03-23T18:16:36.588066

91 / tcp -1399940268 | 2025-03-23T00:56:29.896372

92 / tcp -2096652808 | 2025-03-22T07:31:05.709073

95 / tcp -249504111 | 2025-03-22T12:11:26.331510

98 / tcp 2063598737 | 2025-03-22T17:53:38.341857

101 / tcp 455076604 | 2025-03-23T16:31:16.952897

102 / tcp 819727972 | 2025-03-20T20:52:09.944219

104 / tcp 1911457608 | 2025-03-22T11:06:13.660071

110 / tcp -1399940268 | 2025-03-21T03:08:35.367599

111 / tcp 416263569 | 2025-03-18T17:11:48.718847

113 / tcp -669112739 | 2025-03-18T16:06:23.251740

119 / tcp 141730637 | 2025-03-21T06:01:46.705579

121 / tcp -1399940268 | 2025-03-23T01:05:44.215401

135 / tcp -1589645334 | 2025-03-23T14:55:55.919993

139 / tcp -119126669 | 2025-03-22T23:37:16.141864

143 / tcp 639175818 | 2025-03-22T08:04:53.403186

154 / tcp 1282941221 | 2025-03-12T22:33:15.261102

175 / tcp 819727972 | 2025-03-20T16:32:43.133252

179 / tcp -399606100 | 2025-03-23T22:28:37.346712

195 / tcp 819727972 | 2025-03-21T08:46:58.372465

221 / tcp 819727972 | 2025-03-22T18:19:47.425207

243 / tcp 819727972 | 2025-03-18T04:19:32.531057

264 / tcp -1022036431 | 2025-03-21T07:34:04.166312

285 / tcp 321971019 | 2025-03-22T07:11:21.495746

311 / tcp -1547976805 | 2025-03-21T04:34:14.758440

314 / tcp 1615193817 | 2025-03-05T09:25:15.539224

343 / tcp 819727972 | 2025-03-16T21:27:02.225744

389 / tcp -1743283776 | 2025-03-20T21:52:24.703339

400 / tcp 1911457608 | 2025-03-23T15:49:12.377799

427 / tcp -525136240 | 2025-03-22T20:48:24.461085

443 / tcp -97159822 | 2025-03-23T22:04:04.679424

Hashes

444 / tcp 1732235625 | 2025-03-23T16:17:23.264061

447 / tcp 165188539 | 2025-03-14T22:19:43.416627

450 / tcp 1308377066 | 2025-03-19T20:18:04.816455

451 / tcp -1996280214 | 2025-03-22T03:38:01.145767

461 / tcp 971933601 | 2025-03-23T03:42:37.602217

465 / tcp 897328069 | 2025-03-20T23:43:09.240664

491 / tcp 1615193817 | 2025-03-22T17:10:56.843060

502 / tcp -1099385124 | 2025-03-23T04:28:18.026388

503 / tcp -407828767 | 2025-03-21T06:01:07.317728

513 / tcp 1308377066 | 2025-03-13T09:45:30.478397

515 / tcp 1887224352 | 2025-03-20T19:21:04.142896

541 / tcp -269727450 | 2025-03-23T22:46:18.628285

548 / tcp -773160241 | 2025-03-24T01:50:10.507675

554 / tcp 448214121 | 2025-03-20T17:39:49.304815

555 / tcp -1013082686 | 2025-03-24T01:05:25.563170

587 / tcp 745343730 | 2025-03-23T06:29:01.584300

591 / tcp 205347087 | 2025-03-23T08:27:04.527501

593 / tcp 1308377066 | 2025-03-17T08:58:17.141632

636 / tcp 826560219 | 2025-03-21T02:24:15.877493

646 / tcp 914325460 | 2025-03-22T07:03:46.228726

666 / tcp 1300162323 | 2025-03-21T02:59:19.142116

685 / tcp -1730858130 | 2025-03-22T01:35:08.480970

11 / tcp

1220320909 | 2025-03-18T16:54:57.875063

13 / tcp

1725312227 | 2025-03-22T03:04:44.281994

15 / tcp

-1990350878 | 2025-03-20T15:08:56.982616

17 / tcp

5698739 | 2025-03-23T16:02:38.332825

19 / tcp

1978059005 | 2025-03-23T08:34:05.365032

20 / tcp

-1399940268 | 2025-03-19T17:09:15.098315

21 / tcp

-702037155 | 2025-03-22T18:29:18.435170

23 / tcp

-1816600103 | 2025-03-23T13:01:11.250466

25 / tcp

-1399940268 | 2025-03-21T06:56:40.724371

26 / tcp

165188539 | 2025-03-23T21:48:51.781531

37 / tcp

726777565 | 2025-03-23T15:34:46.475164

43 / tcp

-1461540015 | 2025-03-23T05:40:58.275667

49 / tcp

-1620040646 | 2025-03-20T23:12:26.965962

51 / tcp

-1399940268 | 2025-03-23T18:46:04.879094

53 / tcp

1024248778 | 2025-03-23T09:00:16.623001

66 / tcp

-1839934832 | 2025-03-23T11:38:42.483259

70 / tcp

1583167286 | 2025-03-23T12:23:26.001500

79 / tcp

-876294238 | 2025-03-23T06:31:55.128400

80 / tcp

-1228868710 | 2025-03-22T09:33:22.398196

85 / tcp

-1399940268 | 2025-03-18T18:03:55.631799

87 / tcp

-2089734047 | 2025-03-23T18:16:36.588066

91 / tcp

-1399940268 | 2025-03-23T00:56:29.896372

92 / tcp

-2096652808 | 2025-03-22T07:31:05.709073

95 / tcp

-249504111 | 2025-03-22T12:11:26.331510

98 / tcp

2063598737 | 2025-03-22T17:53:38.341857

101 / tcp

455076604 | 2025-03-23T16:31:16.952897

102 / tcp

819727972 | 2025-03-20T20:52:09.944219

104 / tcp

1911457608 | 2025-03-22T11:06:13.660071

110 / tcp

-1399940268 | 2025-03-21T03:08:35.367599

111 / tcp

416263569 | 2025-03-18T17:11:48.718847

113 / tcp

-669112739 | 2025-03-18T16:06:23.251740

119 / tcp

141730637 | 2025-03-21T06:01:46.705579

121 / tcp

-1399940268 | 2025-03-23T01:05:44.215401

135 / tcp

-1589645334 | 2025-03-23T14:55:55.919993

139 / tcp

-119126669 | 2025-03-22T23:37:16.141864

143 / tcp

639175818 | 2025-03-22T08:04:53.403186

154 / tcp

1282941221 | 2025-03-12T22:33:15.261102

175 / tcp

819727972 | 2025-03-20T16:32:43.133252

179 / tcp

-399606100 | 2025-03-23T22:28:37.346712

195 / tcp

819727972 | 2025-03-21T08:46:58.372465

221 / tcp

819727972 | 2025-03-22T18:19:47.425207

243 / tcp

819727972 | 2025-03-18T04:19:32.531057

264 / tcp

-1022036431 | 2025-03-21T07:34:04.166312

285 / tcp

321971019 | 2025-03-22T07:11:21.495746

311 / tcp

-1547976805 | 2025-03-21T04:34:14.758440

314 / tcp

1615193817 | 2025-03-05T09:25:15.539224

343 / tcp

819727972 | 2025-03-16T21:27:02.225744

389 / tcp

-1743283776 | 2025-03-20T21:52:24.703339

400 / tcp

1911457608 | 2025-03-23T15:49:12.377799

427 / tcp

-525136240 | 2025-03-22T20:48:24.461085

443 / tcp

-97159822 | 2025-03-23T22:04:04.679424

444 / tcp

1732235625 | 2025-03-23T16:17:23.264061

447 / tcp

165188539 | 2025-03-14T22:19:43.416627

450 / tcp

1308377066 | 2025-03-19T20:18:04.816455

451 / tcp

-1996280214 | 2025-03-22T03:38:01.145767

461 / tcp

971933601 | 2025-03-23T03:42:37.602217

465 / tcp

897328069 | 2025-03-20T23:43:09.240664

491 / tcp

1615193817 | 2025-03-22T17:10:56.843060

502 / tcp

-1099385124 | 2025-03-23T04:28:18.026388

503 / tcp

-407828767 | 2025-03-21T06:01:07.317728

513 / tcp

1308377066 | 2025-03-13T09:45:30.478397

515 / tcp

1887224352 | 2025-03-20T19:21:04.142896

541 / tcp

-269727450 | 2025-03-23T22:46:18.628285

548 / tcp

-773160241 | 2025-03-24T01:50:10.507675

554 / tcp

448214121 | 2025-03-20T17:39:49.304815

555 / tcp

-1013082686 | 2025-03-24T01:05:25.563170

587 / tcp

745343730 | 2025-03-23T06:29:01.584300

591 / tcp

205347087 | 2025-03-23T08:27:04.527501

593 / tcp

1308377066 | 2025-03-17T08:58:17.141632

636 / tcp

826560219 | 2025-03-21T02:24:15.877493

646 / tcp

914325460 | 2025-03-22T07:03:46.228726

666 / tcp

1300162323 | 2025-03-21T02:59:19.142116

685 / tcp

-1730858130 | 2025-03-22T01:35:08.480970

689 / tcp

-345718689 | 2025-03-22T19:23:57.262385

700 / tcp

-2021756999 | 2025-03-22T03:54:05.136706

771 / tcp

-1399940268 | 2025-03-17T13:33:43.300435

777 / tcp

-1346601424 | 2025-03-22T16:41:15.043764

782 / tcp

-358801646 | 2025-03-23T06:33:35.517827

789 / tcp

-1428621233 | 2025-03-23T00:36:37.949624

800 / tcp

-1175496255 | 2025-03-23T08:04:20.026745