GeneralInformation

Country	China
City	Shanghai
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 17 19 21 23 25 37 38 43 49 53 70 92 104 110 111 113 119 135 175 177 179 195 221 222 264 285 311 340 389 427 442 444 449 502 503 513 541 548 554 593 636 646 666 782 789 832 873 888 902 947 953 992 993 995 1023 1025 1026 1063 1080 1177 1195 1198 1234 1290 1291 1293 1343 1433 1457 1515 1521 1599 1604 1800 1801 1830 1883 1911 1926 1953 1959 1962 1971 1978 1986 2000 2008 2010 2066 2067 2081 2083 2087 2121 2154 2181 2201 2202 2209 2210 2222 2233 2266 2271 2320 2323 2332 2375 2376 2404 2423 2435 2453 2455 2559 2628 2761 3001 3003 3021 3048 3050 3058 3060 3061 3081 3087 3090 3098 3101 3104 3107 3137 3166 3171 3175 3196 3260 3268 3269 3299 3306 3310 3311 3337 3341 3389 3400 3404 3412 3521 3540 3551 3561 3562 3566 3780 3790 3793 3910 3952 3953 3954 4000 4022 4063 4064 4150 4157 4165 4242 4250 4282 4321 4369 4400 4433 4438 4443 4444 4449 4466 4500 4543 4643 4808 4821 4840 4899 5001 5006 5007 5105 5140 5201 5222 5225 5241 5252 5256 5259 5263 5266 5269 5271 5278 5432 5435 5439 5552 5555 5605 5672 5804 5853 5858 5902 5903 5904 5984 5986 5992 5996 6000 6002 6061 6081 6134 6262 6264 6443 6488 6503 6511 6580 6588 6602 6633 6653 6666 6667 6668 6697 6779 7001 7015 7070 7071 7171 7218 7302 7415 7434 7443 7510 7535 7548 7634 7774 7776 8003 8004 8005 8012 8017 8020 8021 8023 8029 8075 8076 8079 8081 8083 8084 8085 8087 8102 8112 8125 8126 8135 8139 8140 8160 8163 8181 8184 8190 8192 8200 8230 8243 8300 8403 8410 8411 8414 8430 8435 8436 8440 8442 8449 8455 8456 8460 8461 8466 8485 8500 8506 8528 8553 8562 8571 8573 8581 8582 8585 8592 8601 8605 8621 8649 8706 8709 8723 8728 8733 8771 8803 8804 8809 8812 8813 8833 8834 8837 8838 8841 8852 8861 8863 8867 8869 8880 8889 8905 8935 8990 8993 9000 9002 9004 9006 9031 9042 9044 9047 9051 9058 9062 9087 9089 9091 9095 9114 9123 9124 9143 9147 9149 9151 9155 9159 9160 9187 9209 9213 9219 9222 9248 9304 9306 9307 9333 9393 9398 9418 9433 9443 9500 9530 9532 9633 9711 9761 9802 9888 9898 9939 9943 9977 9991 9997 9998 9999 10000 10001 10005 10008 10009 10012 10015 10016 10022 10025 10039 10042 10045 10047 10075 10084 10093 10134 10200 10205 10283 10348 10380 10398 10477 10810 10909 10911 11000 11111 11112 11210 11211 11288 11701 12000 12001 12084 12103 12107 12117 12118 12119 12129 12132 12140 12151 12152 12155 12158 12186 12193 12205 12207 12219 12220 12238 12249 12258 12268 12277 12282 12295 12300 12304 12320 12328 12332 12339 12345 12361 12371 12372 12374 12395 12407 12411 12417 12437 12439 12443 12445 12449 12451 12454 12459 12469 12471 12500 12513 12529 12544 12555 12559 12586 13000 14130 14265 14344 14873 15006 15018 15504 15588 15673 16005 16012 16013 16015 16045 16046 16067 16074 16090 16092 16094 16102 16993 17000 17001 17010 17775 17778 18018 18022 18035 18042 18054 18055 18067 18068 18081 18090 18096 18245 19000 19014 19017 19084 20000 20121 20200 20201 20256 20443 20880 21025 21233 21234 21245 21265 21276 21280 21302 21310 21311 21313 21323 21325 21379 22103 22380 22556 23023 23082 24084 25001 25004 25565 27015 27017 28015 29984 30002 30003 30017 30019 30029 30444 30452 30473 30479 31001 31337 32080 32764 33060 33422 33522 33722 34122 34225 34522 34622 34922 35000 35002 35100 35422 35522 36322 36422 36982 37422 37443 37777 37822 38022 38322 38422 38522 38622 38922 39001 39322 39622 40022 40122 40222 40822 40922 41122 41222 41322 41800 41922 42022 42322 42622 42922 43022 43222 43322 43422 43722 43822 44122 44158 44309 44333 44337 44410 44422 44722 44818 44822 45002 45322 45522 45622 45777 45821 45822 45922 46001 46122 46422 46722 46822 46922 47022 47222 47322 47422 47922 47990 48001 48002 48019 48022 48100 48322 48522 49022 49222 49522 49592 49694 50000 50050 50100 50101 50102 50122 50522 50922 51122 51200 51235 51422 51622 51722 52010 52122 52230 52922 53022 53122 53322 53622 53822 53922 54138 54222 54322 54422 54490 54522 54857 55000 55081 55470 55475 55522 55554 55622 55722 55822 56022 56322 56522 57022 57122 57222 57522 57779 57782 57822 58322 58392 58422 58443 58532 58722 59322 59622 59922 60122 60129 61613 61616 61619 62016 62078 63210 63256 63443 64295

11 / tcp

842535728 | 2025-01-16T02:10:52.089765

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

13 / tcp

-1036370807 | 2025-02-04T14:28:58.051308

JDWP-Handshake

15 / tcp

2087396567 | 2025-01-26T09:49:23.928335

kjnkjabhbanc283ubcsbhdc72

17 / tcp

5698739 | 2025-02-05T12:52:49.948241

"We have no more right to consume happiness without producing it than to
 consume wealth without producing it." George Bernard Shaw (1856-1950)
\x00

19 / tcp

81614701 | 2025-01-11T10:56:19.451581

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET

21 / tcp

1210838212 | 2025-02-04T12:28:00.932444

220 DiskStation FTP server ready.

23 / tcp

676675086 | 2025-01-16T06:23:02.291985



Password:

25 / tcp

921225407 | 2025-01-29T20:20:27.514542

\x00\x00\x00\x04\x00\x00\x00\x00\x00

37 / tcp

2046098166 | 2025-01-30T11:31:19.039539

HTTP/1.1 302 Found
X-Content-Ty

38 / tcp

-1032713145 | 2025-01-29T02:30:05.215021

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

43 / tcp

2087396567 | 2025-01-24T19:19:43.049066

kjnkjabhbanc283ubcsbhdc72

49 / tcp

-801484042 | 2025-02-03T13:05:38.281744

ERR 27

53 / tcp

-626196604 | 2025-02-06T10:31:58.014468

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00\xca\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x00\x83\x00\x04\xac٠n
\x00\x06\x81\x85\x00\x01\x00\x00\x00\x00\x00

70 / tcp

1412519768 | 2025-02-02T14:43:31.401709

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

92 / tcp

709622286 | 2025-01-25T08:28:32.128822

OK Welcome <299685> on DirectUpdate server 7286\r\n

104 / tcp

-1477838366 | 2025-01-20T09:11:54.877385

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

110 / tcp

819727972 | 2025-01-17T21:20:33.062292

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

111 / tcp

819727972 | 2025-02-01T21:17:04.146183

SSH-2.0-OpenSSH_7.4

113 / tcp

-527005584 | 2025-01-27T14:12:38.723686

/0 0 L
/0 0 HUH

119 / tcp

141730637 | 2025-01-27T00:36:44.434407

HTTP/1.0 200 OK
Server: Proxy

135 / tcp

1302177452 | 2025-01-30T14:56:09.667380

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: Lou\n IP2: 192.168.5.66\n IP3: 240e:381:1b0a:900:40eb:cce6:2dc1:4045\n IP4: 240e:381:1b0a:900:504f:3a1f:a682:9ab5\n IP5: 240e:381:1b0a:900::2e6\n\nNTLMSSP:\nTarget_Name: LOU\nProduct_Version: 10.0.22621 Ntlm 15\nOS: Windows 11, Version 22H2\nNetBIOS_Domain_Name: LOU\nNetBIOS_Computer_Name: LOU\nDNS_Domain_Name: Lou\nDNS_Computer_Name: Lou\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 04:06:53 +0000 UTC\n\nDCE

175 / tcp

1077013874 | 2025-01-23T20:34:34.416010

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

177 / tcp

-1189269828 | 2025-02-06T16:00:30.591859

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

179 / tcp

-399606100 | 2025-01-22T15:30:46.194915

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

195 / tcp

819727972 | 2025-01-15T04:52:05.810800

SSH-2.0-OpenSSH_7.4

221 / tcp

-2089734047 | 2025-01-18T04:37:45.433720

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

222 / tcp

-1174972798 | 2025-01-17T20:09:01.083273

SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6\r\n\n

264 / tcp

-654288545 | 2025-01-14T02:29:34.666608

CheckPoint\nFirewall Host: lcm4cp\nSmartCenter Host: cpmanager.cminl.oa.guof3x\\x00\n

285 / tcp

1911457608 | 2025-01-28T00:32:56.923813

\x00[\x00\x00\x00\x00\x00\x00

311 / tcp

-1547976805 | 2025-01-30T13:28:01.968037

HTTP/1.1 403 Forbidden
Server: nginx
Content-Type: text/html
Connection: close

340 / tcp

-444830029 | 2025-01-15T17:06:24.383923

HTTP/1.1 401 Unauthorized
Server: xhmmhttpsv130-20200310
Cache-Control: no-cache,no-store
Content-Type: text/html; charset=%s
Connection: close

389 / tcp

-1713467553 | 2025-01-29T20:50:18.250879

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Connection: close

427 / tcp

1998636604 | 2025-02-04T21:15:22.520697

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://192.168.2.254\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://192.168.2.254\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (0)\nAttrList: (pro

442 / tcp

-303199180 | 2025-02-02T04:56:09.784160

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

444 / tcp

-750658243 | 2025-02-01T08:54:13.526324

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Sat, 01 Feb 2025 08:54:13 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

449 / tcp

819727972 | 2025-01-29T15:31:48.887250

SSH-2.0-OpenSSH_7.4

502 / tcp

945910976 | 2025-02-04T22:47:36.067157

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

503 / tcp

-1114821551 | 2025-02-01T10:27:54.270879

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

513 / tcp

1574088840 | 2025-01-21T20:26:47.046054

">Application and Content Networking Software 3.9</a>)\n</BODY><

541 / tcp

836108941 | 2025-02-06T20:49:35.481391

\\x16\\x03\\x01\\x00\\xb4\\x01\\x00\\x00\\xb0\\x03\\x01|\\x9f\\x88_1\\x82\\xb8\\xfb\\xa1\\xb9\\xe6\\xdc\\x03\\xf1\\xf0t\\xb8\xc4\x90\\\\xf8\\xebi\\x14\\x02\\x17K8\\xb9?\\x83\\xfc\\x00\\x00V\\xc0\\x14\\xc0\n\\x009\\x008\\x007\\x006\\x00\\x88\\x00\\x87\\x00\\x86\\x00\\x85\\xc0\\x0f\\xc0\\x05\\x005\\x00\\x84\\xc0\\x13\\xc0

548 / tcp

155249582 | 2025-01-26T00:24:33.352936

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: NGU\nMachine Type: \rNetatalk3.1.8\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: Cleartxt Passwrd\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

554 / tcp

-1142488525 | 2025-01-24T20:12:45.575595

RTSP/1.0 401 Unauthorized
CSeq: 0

593 / tcp

1308377066 | 2025-02-04T01:44:20.861477

ncacn_http/1.0

636 / tcp

1732481781 | 2025-01-27T06:45:38.950891

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 8-38284903-0 0NNN RT(1705909933705 166) q(-1 -1 -1 -1) r(0 -1) b1

646 / tcp

-1206199995 | 2025-01-24T05:45:27.282388

\\x00\\x01\\x00\\x1c\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x12\\x00\\xa8\\xbf5\\x03\\x00\\x00\n\\x80\\x00\\x00\\x03\\x00\\x00\\x00\\x00\\x00\\x00

666 / tcp

2098053533 | 2025-02-02T12:27:25.886426

HTTP/1.1 401 Unauthorized
Server: nginx/1.17.7
Content-Type: text/html
Connection: keep-alive

782 / tcp

-2089734047 | 2025-01-19T23:18:35.239420

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

789 / tcp

819727972 | 2025-01-17T00:56:42.669527

SSH-2.0-OpenSSH_7.4

832 / tcp

117101543 | 2025-01-29T05:27:32.561309

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

873 / tcp

-1598265216 | 2025-01-30T06:15:14.372953

@RSYNCD: 31.0

888 / tcp

-972447056 | 2025-02-01T17:49:55.131455

HTTP/1.1 404 Not Found
Server: nginx
Content-Type: text/html
Connection: keep-alive

902 / tcp

1956828827 | 2025-01-31T20:50:37.772163

220 VMware Authentication Daemon Version 1.10: SSL Required, Se
rverDaemonProtocol:SOAP, MKSDisplayProtocol:VNC , , NFCSSL supported/t

947 / tcp

-122096153 | 2025-01-15T19:27:11.660903

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

953 / tcp

-1399940268 | 2025-01-20T16:49:30.486811

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

992 / tcp

-936692830 | 2025-01-17T05:26:55.596525

HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19

993 / tcp

320677201 | 2025-02-02T22:31:24.230063

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

995 / tcp

-2113068813 | 2025-01-24T00:35:10.266515

+OK POP3 server ready\n

1023 / tcp

1544300041 | 2025-01-21T13:50:51.461756

SSH-25453-Cisco-3524665.35

1025 / tcp

819727972 | 2025-02-01T23:40:07.240219

SSH-2.0-OpenSSH_7.4

1026 / tcp

1911457608 | 2025-01-14T21:35:51.772407

\x00[\x00\x00\x00\x00\x00\x00

1063 / tcp

-1810987450 | 2025-01-14T19:05:17.519446

\xc3\xbf

1080 / tcp

1362344524 | 2025-01-26T08:37:21.925837

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1177 / tcp

-971970408 | 2025-01-27T22:13:57.878418

1195 / tcp

-747911285 | 2025-01-15T05:34:16.152681

\xc2\xaa

1198 / tcp

-2050145619 | 2025-01-09T09:34:19.871388

HTTP/1.1 404 Not Found

1234 / tcp

819727972 | 2025-01-31T19:55:30.605071

SSH-2.0-OpenSSH_7.4

1290 / tcp

1911457608 | 2025-01-19T15:04:17.936494

\x00[\x00\x00\x00\x00\x00\x00

1291 / tcp

1624217396 | 2025-01-13T20:19:06.932609

HELO:10.3.6.0.false\nAS:2048\nHL:19

1293 / tcp

1615193817 | 2025-01-20T21:11:07.208543

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

1343 / tcp

-1399940268 | 2025-01-16T02:56:46.505455

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1433 / tcp

419886129 | 2025-02-05T13:30:27.994477

MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XTZJ-20210317RG\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XTZJ-20210317RG\nNetBIOS_Computer_Name: XTZJ-20210317RG\nDNS_Domain_Name: XTZJ-20210317RG\nDNS_Computer_Name: XTZJ-20210317RG\nSystem_Time: 2024-01-22 04:01:04 +0000 UTC\n\n

1457 / tcp

1761482307 | 2025-01-24T21:40:42.843445

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

1515 / tcp

819727972 | 2025-01-23T10:57:17.960052

SSH-2.0-OpenSSH_7.4

1521 / tcp

-1337747449 | 2025-01-16T10:35:10.250679

Version:12.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=203424000)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

1599 / tcp

2087396567 | 2025-02-05T11:43:20.058811

kjnkjabhbanc283ubcsbhdc72

1604 / tcp

1911457608 | 2025-01-29T22:23:23.300186

\x00[\x00\x00\x00\x00\x00\x00

1800 / tcp

820958131 | 2025-02-05T12:08:30.973904

kjnkjabhbanc283ubcsbhdc72\x02

1801 / tcp

-1299899661 | 2025-02-02T22:00:44.660757

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x97W\\xcd[\\x98\\xc4\\x1aJ\\xa5\xd1\xbf\\xf9\\xbd\\xc7\\xce\\xfd92d3\\x10\\x01\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1830 / tcp

-2089734047 | 2025-01-08T14:56:48.298974

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1883 / tcp

819727972 | 2025-01-29T13:31:00.499818

SSH-2.0-OpenSSH_7.4

1911 / tcp

-407828767 | 2025-02-06T22:38:12.881070

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

1926 / tcp

2087396567 | 2025-02-02T09:33:17.199921

kjnkjabhbanc283ubcsbhdc72

1953 / tcp

1911457608 | 2025-01-19T08:18:07.337455

\x00[\x00\x00\x00\x00\x00\x00

1959 / tcp

-1399940268 | 2025-01-30T15:26:33.658396

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1962 / tcp

-2089734047 | 2025-02-06T13:49:54.896645

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1971 / tcp

-42767839 | 2025-01-13T09:34:50.086109

RFB 005.000

VNC:
  Protocol Version: 5.0

1978 / tcp

-2096652808 | 2025-02-06T18:31:27.939008

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1986 / tcp

632542934 | 2025-01-28T12:05:49.053666

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2000 / tcp

205347087 | 2025-01-28T05:47:51.134309

SSH-25453-Cisco-3524665.35\n

2008 / tcp

677934968 | 2025-01-29T23:39:54.112738

lm^)Q

2010 / tcp

493955023 | 2025-02-06T13:55:24.216000

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

2066 / tcp

921225407 | 2025-01-08T18:18:03.773088

\x00\x00\x00\x04\x00\x00\x00\x00\x00

2067 / tcp

819727972 | 2025-02-03T02:43:36.131918

SSH-2.0-OpenSSH_7.4

2081 / tcp

1332894250 | 2025-01-16T19:57:41.191254

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

2083 / tcp

-971970408 | 2025-02-02T02:16:00.762341

2087 / tcp

1690634669 | 2025-02-02T22:49:35.231174

2121 / tcp

141730637 | 2025-02-06T06:31:41.581983

HTTP/1.0 200 OK
Server: Proxy

2154 / tcp

-1999117212 | 2025-01-28T03:38:02.161174

2181 / tcp

546151771 | 2025-01-23T15:50:48.514105

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2201 / tcp

-358801646 | 2025-02-02T02:16:08.004749

SSH-2.0-OpenSSH_6.6.1

2202 / tcp

819727972 | 2025-01-14T10:42:14.737302

SSH-2.0-OpenSSH_7.4

2209 / tcp

1615193817 | 2025-02-05T22:54:52.543064

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

2210 / tcp

921225407 | 2025-02-06T21:53:25.471085

\x00\x00\x00\x04\x00\x00\x00\x00\x00

2222 / tcp

58083962 | 2025-01-11T22:28:55.020821

HTTP/1.1 400 Bad Request
Server: nginx/1.18.0
Content-Type: text/html
Connection: close

2233 / tcp

671605376 | 2025-01-08T03:05:21.241687

SSH-2.0-OpenSSH_X.X

2266 / tcp

165188539 | 2025-01-21T08:42:09.429732

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2271 / tcp

-1476017887 | 2025-01-24T03:06:14.722890

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

2320 / tcp

819727972 | 2025-01-25T04:00:05.323065

SSH-2.0-OpenSSH_7.4

2323 / tcp

1662205251 | 2025-01-20T08:48:27.237839

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

2332 / tcp

1231376952 | 2025-01-30T10:49:32.089016

2375 / tcp

0 | 2025-01-17T18:03:31.143211

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

2376 / tcp

-971970408 | 2025-01-23T05:58:18.774186

2404 / tcp

-1327660293 | 2025-02-05T01:57:30.494304

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

2423 / tcp

-1399940268 | 2025-01-18T12:09:50.076992

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2435 / tcp

-1888448627 | 2025-02-04T09:19:14.140761

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

2453 / tcp

-2089734047 | 2025-01-12T19:10:05.060865

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2455 / tcp

-1900404274 | 2025-01-30T20:19:39.075135

Unknown command

2559 / tcp

819727972 | 2025-01-31T21:47:31.601926

SSH-2.0-OpenSSH_7.4

2628 / tcp

639175818 | 2025-01-26T17:31:17.146251

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

2761 / tcp

-1888448627 | 2025-02-05T03:09:17.001205

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3001 / tcp

-1013082686 | 2025-02-02T12:13:38.079591

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

3003 / tcp

-1227409554 | 2025-02-06T21:50:09.803407

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3021 / tcp

-1032713145 | 2025-01-26T07:27:08.169577

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

3048 / tcp

-1399940268 | 2025-02-05T17:18:04.160319

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3050 / tcp

-747911285 | 2025-01-27T04:14:27.320511

\xc2\xaa

3058 / tcp

-1399940268 | 2025-01-26T22:22:48.722426

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3060 / tcp

-1648456501 | 2025-01-13T14:19:16.838643

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

3061 / tcp

1911457608 | 2025-01-22T19:26:14.785946

\x00[\x00\x00\x00\x00\x00\x00

3081 / tcp

-1139539254 | 2025-02-03T04:21:16.673914

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

3087 / tcp

-1013082686 | 2025-01-22T11:43:26.489958

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

3090 / tcp

597764502 | 2025-01-14T00:39:25.087294

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

3098 / tcp

-1327660293 | 2025-01-20T04:35:06.419297

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3101 / tcp

1948301213 | 2025-02-01T05:04:39.131440

RFB 003.003
VNC:
  Protocol Version: 3.3

3104 / tcp

-1641514916 | 2025-01-08T21:27:26.247871

* OK Merak 1dFUa2 IMAP4rev1

3107 / tcp

-1399940268 | 2025-01-15T17:03:42.682215

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3137 / tcp

819727972 | 2025-01-24T06:51:15.075715

SSH-2.0-OpenSSH_7.4

3166 / tcp

-2096652808 | 2025-01-23T16:52:56.371440

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

3171 / tcp

921225407 | 2025-01-23T03:05:04.815669

\x00\x00\x00\x04\x00\x00\x00\x00\x00

3175 / tcp

819727972 | 2025-02-01T23:20:53.672766

SSH-2.0-OpenSSH_7.4

3196 / tcp

-1730858130 | 2025-01-30T10:31:03.587466

RFB 003.008
VNC:
  Protocol Version: 3.8

3260 / tcp

-862070606 | 2025-02-06T19:35:03.812833

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n

3268 / tcp

1727372229 | 2025-01-26T12:14:48.490865

HTTP/1.1 302 
Location: http://116.6.76.114:3268/index.html

3269 / tcp

-1327660293 | 2025-01-26T09:27:47.870049

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3299 / tcp

819727972 | 2025-02-06T03:48:18.699372

SSH-2.0-OpenSSH_7.4

3306 / tcp

-1036944024 | 2025-01-10T10:38:39.579083

F\\x00\\x00\\x00\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MySQL server

3310 / tcp

1763259671 | 2025-01-11T23:43:45.025413

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

3311 / tcp

334289483 | 2025-01-11T01:12:10.171406

Invalid request string: Request string is: "\r"

3337 / tcp

-345718689 | 2025-01-12T07:53:18.651024

Vty password is not set.

3341 / tcp

921225407 | 2025-01-29T12:24:42.579622

\x00\x00\x00\x04\x00\x00\x00\x00\x00

3389 / tcp

1908555143 | 2025-02-03T12:18:06.527725

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x1f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: 7BKOHJ0F5NJTKEI\nProduct_Version: 10.0.14393 Ntlm 15\nOS: Windows 10, Version 1607/Windows Server 2016, Version 1607\nNetBIOS_Domain_Name: 7BKOHJ0F5NJTKEI\nNetBIOS_Computer_Name: 7BKOHJ0F5NJTKEI\nDNS_Domain_Name: 7bkohj0f5njtkeim\nDNS_Computer_Name: 7bkohj0f5njtkeim\nSystem_Time: 2024-01-22 08:43:54 +0000 UTC\n\n

3400 / tcp

-1399940268 | 2025-01-11T13:24:32.383838

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3404 / tcp

-1227409554 | 2025-02-05T23:08:03.538868

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3412 / tcp

-375604792 | 2025-01-22T21:06:22.572975

220 Microsoft FTP Service

3521 / tcp

-2107996212 | 2025-02-02T08:29:59.027191

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

3540 / tcp

-2107996212 | 2025-02-01T14:44:08.754704

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

3551 / tcp

198844676 | 2025-02-04T10:11:01.351359

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

3561 / tcp

1726594447 | 2025-01-16T12:44:05.277915

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

3562 / tcp

-1327660293 | 2025-01-10T07:25:32.664238

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3566 / tcp

1208318993 | 2025-01-30T00:47:51.382679

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

3780 / tcp

897328069 | 2025-01-29T21:15:03.036841

220 mail.scott000.com ESMTP

3790 / tcp

-1045760528 | 2025-01-08T11:36:44.306475

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

3793 / tcp

819727972 | 2025-01-12T23:43:22.482457

SSH-2.0-OpenSSH_7.4

3910 / tcp

-1888448627 | 2025-01-10T01:25:40.304487

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3952 / tcp

1615193817 | 2025-01-22T11:09:18.492958

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

3953 / tcp

-1888448627 | 2025-01-15T10:57:26.706957

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3954 / tcp

408230060 | 2025-01-29T13:58:53.485952

\r\nSorry, that nickname format is invalid.\r\n

4000 / tcp

-1101712668 | 2025-02-02T13:12:46.820887

\\x1e\xc3\x80\\x010\\x02\xc2\xa8\xc3\xa3

4022 / tcp

819727972 | 2025-02-02T09:20:53.072042

SSH-2.0-OpenSSH_7.4

4063 / tcp

-1316398834 | 2025-02-03T11:47:19.586139

ÿ

4064 / tcp

-1888448627 | 2025-01-31T03:40:46.206091

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

4150 / tcp

-1730858130 | 2025-02-04T04:00:11.723964

RFB 003.008
VNC:
  Protocol Version: 3.8

4157 / tcp

1741579575 | 2025-02-05T22:57:25.254047

4165 / tcp

-2140303521 | 2025-01-09T05:21:22.088115

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

4242 / tcp

-1879056922 | 2025-02-04T19:21:01.711994

HTTP/1.1 403 Forbidden
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close

4250 / tcp

-1399940268 | 2025-01-23T02:50:50.827159

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4282 / tcp

-1990350878 | 2025-02-04T08:04:48.740117

 
04 \...

4321 / tcp

-1250504565 | 2025-01-29T00:39:23.283820

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

4369 / tcp

-1327660293 | 2025-02-03T23:23:18.822081

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

4400 / tcp

-1399940268 | 2025-01-11T00:54:39.945223

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4433 / tcp

-653033013 | 2025-02-06T00:02:37.106928

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

4438 / tcp

-1730858130 | 2025-01-21T23:45:29.167603

RFB 003.008
VNC:
  Protocol Version: 3.8

4443 / tcp

1089570394 | 2025-01-23T23:38:58.871163

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae29d9288d03df989018e5e7290002

4444 / tcp

-407828767 | 2025-01-31T02:48:10.845222

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

4449 / tcp

1336161559 | 2025-01-10T23:27:46.538743

HTTP/1.1 404 Not Found
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close

4466 / tcp

1189133115 | 2025-01-25T09:01:55.472282

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

4500 / tcp

-1099385124 | 2025-01-27T13:50:56.031705

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

4543 / tcp

1426971893 | 2025-01-28T16:56:58.461972

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

4643 / tcp

-904840257 | 2025-01-28T16:44:33.576855

572 Relay not authorized\r\n

4808 / tcp

-805362002 | 2025-01-11T05:00:38.914804

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

4821 / tcp

-1399940268 | 2025-01-25T00:49:06.998851

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4840 / tcp

819727972 | 2025-01-25T17:08:01.044565

SSH-2.0-OpenSSH_7.4

4899 / tcp

1492413928 | 2025-02-06T09:02:00.073673

SSH-2.0-OpenSSH_7.5

5001 / tcp

1723769361 | 2025-01-15T14:01:49.879887

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

5006 / tcp

1690634669 | 2025-01-22T08:26:41.687664

5007 / tcp

1504401647 | 2025-01-28T15:18:57.729757

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

5105 / tcp

-1019343788 | 2025-01-25T04:24:15.220068

W!\x00\x00\x00\x00

5140 / tcp

580340387 | 2025-01-13T14:23:30.446181

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

5201 / tcp

639175818 | 2025-01-23T08:46:44.988158

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

5222 / tcp

2087396567 | 2025-02-03T20:05:13.462303

kjnkjabhbanc283ubcsbhdc72

5225 / tcp

-1249500036 | 2025-01-18T23:22:01.753822

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

5241 / tcp

-1733645023 | 2025-01-25T20:20:09.488434

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

5252 / tcp

-1399940268 | 2025-02-05T12:09:04.646888

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5256 / tcp

1911457608 | 2025-01-15T06:08:47.654703

\x00[\x00\x00\x00\x00\x00\x00

5259 / tcp

669849225 | 2025-02-05T23:51:29.988769

SSH-98.60-SysaxSSH_81885..42\r\n

5263 / tcp

-1399940268 | 2025-02-04T06:35:36.218614

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5266 / tcp

-1399940268 | 2025-01-27T16:46:46.478034

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5269 / tcp

-1074907534 | 2025-01-09T04:31:54.866569

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938603.82-w-waf02tjgt

5271 / tcp

-1329831334 | 2025-02-03T21:58:54.178186

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

5278 / tcp

-1248408558 | 2025-01-15T17:08:25.087096

220 MikroTik FTP server (MikroTik 6.44.3) ready

5432 / tcp

1492413928 | 2025-02-01T23:33:47.280837

SSH-2.0-OpenSSH_7.5

5435 / tcp

1911457608 | 2025-01-31T04:27:58.375971

\x00[\x00\x00\x00\x00\x00\x00

5439 / tcp

632542934 | 2025-01-15T18:26:34.464326

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

5552 / tcp

1282941221 | 2025-01-29T07:16:48.061608

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

5555 / tcp

2106853541 | 2025-01-16T22:37:46.802572

HTTP/1.1 403 Forbidden 
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm="proxy"

5605 / tcp

-1399940268 | 2025-01-19T21:05:10.236378

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5672 / tcp

575925250 | 2025-01-26T21:36:58.370312

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5804 / tcp

-1399940268 | 2025-01-15T19:34:45.341229

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5853 / tcp

1504401647 | 2025-01-19T14:00:54.704905

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

5858 / tcp

104385780 | 2025-01-10T19:53:33.059534

ceph v2

5902 / tcp

-1730858130 | 2025-01-17T15:01:14.642372

RFB 003.008
VNC:
  Protocol Version: 3.8

5903 / tcp

1282941221 | 2025-01-12T19:00:07.651983

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

5904 / tcp

1911457608 | 2025-01-30T16:50:30.948455

\x00[\x00\x00\x00\x00\x00\x00

5984 / tcp

1999272906 | 2025-01-28T00:06:42.370920

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

-893477759 | 2025-01-10T05:59:58.191341

!versionbind7 t{RPowerDNS Recursor 410

5992 / tcp

1363464823 | 2025-01-25T22:56:25.410979

\x00[|ox\x7f\x00\x00

5996 / tcp

-1327660293 | 2025-01-09T18:46:21.079802

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

6000 / tcp

120534451 | 2025-01-22T23:10:30.771367

X11 access denied

6002 / tcp

1655023012 | 2025-01-23T02:48:31.730058

athinfod: invalid query.\n

6061 / tcp

819727972 | 2025-01-09T21:40:06.807404

SSH-2.0-OpenSSH_7.4

6081 / tcp

45131230 | 2025-01-18T03:57:50.810700

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

6134 / tcp

-441419608 | 2025-01-28T04:48:18.512710

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

6262 / tcp

321971019 | 2025-01-25T11:03:44.493585

-ERR client ip is not in whitelist\r

6264 / tcp

-2140303521 | 2025-01-26T15:14:57.021434

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

6443 / tcp

14608090 | 2025-01-20T20:04:42.298341

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Mon, 20 Jan 2025 20:04:42 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.103.85.188:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

6488 / tcp

-2089734047 | 2025-01-09T08:17:18.315422

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

6503 / tcp

740837454 | 2025-01-26T05:01:58.323942

SSH-2.0-OpenSSH_5.3

6511 / tcp

632542934 | 2025-01-08T15:28:03.637815

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

6580 / tcp

-1056270173 | 2025-01-14T08:34:44.645398

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

6588 / tcp

-2089734047 | 2025-01-23T16:48:27.163111

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

6602 / tcp

-441419608 | 2025-01-25T22:14:18.292072

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

6633 / tcp

1996932384 | 2025-02-03T04:59:23.196842

"raop" nonce

6653 / tcp

1911457608 | 2025-02-05T21:40:12.040702

\x00[\x00\x00\x00\x00\x00\x00

6666 / tcp

4935895 | 2025-01-19T14:47:26.573380

HTTP/1.1 400 Bad Request
Server: CloudWAF

6667 / tcp

1778988322 | 2025-02-02T00:47:22.933347

* OK GroupWise IMAP4rev1 Server Ready

6668 / tcp

366084633 | 2025-02-05T22:22:33.246967

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

6697 / tcp

897328069 | 2025-01-31T22:21:20.345536

220 mail.scott000.com ESMTP

6779 / tcp

1909672637 | 2025-02-04T11:52:53.925683

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff

7001 / tcp

1749359477 | 2025-02-04T22:38:46.757542

HTTP/1.1 403 Forbidden
Content-Type: text/html
Connection: keep-alive
NO_SERVICE: 1

7015 / tcp

1504401647 | 2025-01-30T01:43:59.773048

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

7070 / tcp

1140765290 | 2025-01-30T17:27:37.190343

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2618_PS-WNZ-01hBk109_18214-4942

7071 / tcp

1852418385 | 2025-01-13T19:40:30.912262

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

7171 / tcp

-358801646 | 2025-02-04T16:48:35.250143

SSH-2.0-OpenSSH_6.6.1

7218 / tcp

-1681927087 | 2025-02-02T11:01:16.447369

kjnkjabhbanc283ubcsbhdc72

7302 / tcp

-1538260461 | 2025-01-25T20:42:42.102882

\x01\x00\x00\x00

7415 / tcp

-2089734047 | 2025-01-24T23:58:09.207648

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

7434 / tcp

2087396567 | 2025-02-03T00:31:43.926713

kjnkjabhbanc283ubcsbhdc72

7443 / tcp

1320285193 | 2025-01-10T04:16:24.581507

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

7510 / tcp

1830697416 | 2025-01-14T10:12:16.713575

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

7535 / tcp

1911457608 | 2025-01-24T16:31:37.980955

\x00[\x00\x00\x00\x00\x00\x00

7548 / tcp

819727972 | 2025-02-04T21:10:14.710222

SSH-2.0-OpenSSH_7.4

7634 / tcp

1077013874 | 2025-01-27T12:56:10.318017

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

7774 / tcp

-1097188123 | 2025-01-16T01:05:08.940725

[g\xc2\x95N\x7f

7776 / tcp

-903067560 | 2025-01-15T07:54:37.698747

\x00[\x13)\xc2\x81\x7f\x00\x00

8003 / tcp

-1428621233 | 2025-01-11T17:42:12.184623

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8004 / tcp

-1399940268 | 2025-02-02T09:20:34.966520

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8005 / tcp

-1399940268 | 2025-01-08T20:35:30.939082

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8012 / tcp

1911457608 | 2025-02-04T08:06:00.983671

\x00[\x00\x00\x00\x00\x00\x00

8017 / tcp

921225407 | 2025-01-13T23:45:09.834112

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8020 / tcp

-457235091 | 2025-01-13T19:29:15.280959

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

8021 / tcp

-1842649824 | 2025-01-30T12:15:17.478506

HTTP/1.1 403 Forbidden
Server: Cdn Cache Server V2.0
Content-Type: text/html
Expires: Mon, 22 Jan 2024 08:31:26 GMT
Via: 1.1 catmaomen21.244:8107
Connection: close

8023 / tcp

-1399940268 | 2025-01-27T19:13:44.041768

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8029 / tcp

1911457608 | 2025-01-15T09:24:33.111298

\x00[\x00\x00\x00\x00\x00\x00

8075 / tcp

-1032713145 | 2025-02-02T18:35:52.661727

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8076 / tcp

-1399940268 | 2025-01-25T19:55:32.247585

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8079 / tcp

-653033013 | 2025-01-09T13:16:06.863570

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

8081 / tcp

2087396567 | 2025-01-20T07:33:24.739080

kjnkjabhbanc283ubcsbhdc72

8083 / tcp

539065883 | 2025-01-11T03:48:37.896454

8084 / tcp

-303199180 | 2025-01-22T09:36:11.704329

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

8085 / tcp

119860953 | 2025-01-10T17:07:45.867462

* OK ArGoSoft Mail Server IMAP Module v.YW at

8087 / tcp

-2096652808 | 2025-01-24T10:26:00.543626

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8102 / tcp

-1399940268 | 2025-01-17T10:54:24.255868

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8112 / tcp

-2118655245 | 2025-01-10T07:42:58.555993

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

8125 / tcp

-1399940268 | 2025-01-26T08:36:07.458002

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8126 / tcp

1632932802 | 2025-01-30T05:21:26.492020

8135 / tcp

1126993057 | 2025-01-19T21:10:05.759518

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

8139 / tcp

1767345577 | 2025-02-06T01:28:57.883523

Hello, this is Quagga (version 0T).
Copyright 1996-200

8140 / tcp

-971970408 | 2025-01-30T23:02:30.460568

8160 / tcp

1911457608 | 2025-02-05T06:48:18.027276

\x00[\x00\x00\x00\x00\x00\x00

8163 / tcp

745343730 | 2025-01-13T22:22:40.292864

220 smtp.qq.com Esmtp QQ Mail Server

8181 / tcp

-358801646 | 2025-01-13T15:53:40.411117

SSH-2.0-OpenSSH_6.6.1

8184 / tcp

321971019 | 2025-02-06T04:42:27.898876

-ERR client ip is not in whitelist\r

8190 / tcp

-1399940268 | 2025-02-06T15:33:54.577133

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8192 / tcp

53740977 | 2025-01-23T18:13:21.536245

HTTP/1.1 200 OK
Server: nginx/1.20.1
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

8200 / tcp

556442608 | 2025-01-26T21:43:27.157445

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2792_dx54_21588-11785

8230 / tcp

-1399940268 | 2025-01-30T22:20:41.616992

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8243 / tcp

-1399940268 | 2025-01-24T05:52:41.005050

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8300 / tcp

-734440417 | 2025-01-17T11:15:21.222696

HTTP/1.1 400 Bad Request
Content-Type: text/html
Connection: close
Server: nginx/1.17.3

8403 / tcp

321971019 | 2025-01-25T11:26:54.951491

-ERR client ip is not in whitelist\r

8410 / tcp

-1099385124 | 2025-01-14T16:38:40.655402

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

8411 / tcp

1830187220 | 2025-02-03T03:37:40.335232

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

8414 / tcp

-2107996212 | 2025-01-23T00:11:09.251688

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

8430 / tcp

-1996280214 | 2025-02-03T04:26:10.543751

\x06\x04\x05@

8435 / tcp

2098371729 | 2025-01-14T12:03:12.016984

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

8436 / tcp

-1888448627 | 2025-01-21T20:04:25.336850

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8440 / tcp

-2089734047 | 2025-01-24T20:56:48.368506

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8442 / tcp

165188539 | 2025-01-30T12:11:14.287199

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8449 / tcp

1011407350 | 2025-01-31T05:20:59.928107

* OK GroupWise IMAP4rev1 Server Ready\r\n

8455 / tcp

-438503381 | 2025-01-25T23:50:30.851983

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

8456 / tcp

-1399940268 | 2025-02-05T23:20:40.687478

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8460 / tcp

-1399940268 | 2025-01-13T11:08:56.242228

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8461 / tcp

119860953 | 2025-01-28T08:27:00.092387

* OK ArGoSoft Mail Server IMAP Module v.YW at

8466 / tcp

-375604792 | 2025-01-30T02:40:00.448323

220 Microsoft FTP Service

8485 / tcp

-792826324 | 2025-01-28T12:36:41.438082

220 FTP server ready - login please

8500 / tcp

-684625978 | 2025-02-06T16:22:42.812440

{Datacenter:dc1 NodeName:consul-dev NodeID:e61aec6b-e338-67fa-3b08-f8185bd5b528 Revision:db839f18b Server:true Version:1.10.1}

8506 / tcp

-1986594217 | 2025-01-25T07:34:57.686924

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

8528 / tcp

-1839934832 | 2025-01-25T23:12:04.750851

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8553 / tcp

-2107996212 | 2025-01-12T19:32:12.271319

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

8562 / tcp

1761482307 | 2025-01-24T09:30:31.841665

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

8571 / tcp

-2089734047 | 2025-01-16T19:39:27.573614

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8573 / tcp

819727972 | 2025-01-20T19:12:59.260372

SSH-2.0-OpenSSH_7.4

8581 / tcp

-2080784861 | 2025-01-15T23:56:58.259979

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

8582 / tcp

-1329831334 | 2025-02-02T07:19:02.637637

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

8585 / tcp

-1888448627 | 2025-01-24T22:56:30.366392

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8592 / tcp

-1699556818 | 2025-01-21T23:45:01.864022

\x01remshd: Kerberos Authentication not enabled.\n

8601 / tcp

165188539 | 2025-01-13T01:57:31.049787

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8605 / tcp

-445721795 | 2025-02-01T02:04:35.705806

\x00[\xc3\xaed\x1a\x7f\x00\x00

8621 / tcp

1332894250 | 2025-01-11T18:47:40.647807

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

8649 / tcp

2098371729 | 2025-02-06T04:34:21.789641

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

8706 / tcp

-1399940268 | 2025-01-28T06:10:29.334220

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8709 / tcp

-1737707071 | 2025-01-26T07:02:08.379358

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

8723 / tcp

-802143704 | 2025-01-12T20:04:38.467330

HTTP/1.0 500 Internal Server Error
D
Connection: close

Command server error

8728 / tcp

-2107996212 | 2025-02-05T07:37:59.245873

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

8733 / tcp

671605376 | 2025-02-04T14:58:57.563222

SSH-2.0-OpenSSH_X.X

8771 / tcp

-1399940268 | 2025-01-12T08:35:08.208475

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8803 / tcp

45131230 | 2025-01-14T17:38:21.202855

inv2W\x04\x0f\x00\x00\x00\x01\x00\t\x00\x00\x00

8804 / tcp

819727972 | 2025-01-30T23:30:52.249435

SSH-2.0-OpenSSH_7.4

8809 / tcp

819727972 | 2025-02-05T05:01:56.748702

SSH-2.0-OpenSSH_7.4

8812 / tcp

819727972 | 2025-01-20T19:25:29.210884

SSH-2.0-OpenSSH_7.4

8813 / tcp

819727972 | 2025-01-18T00:40:26.621143

SSH-2.0-OpenSSH_7.4

8833 / tcp

1381121983 | 2025-01-26T09:54:27.449061

Notify\r\n

8834 / tcp

-79865617 | 2025-02-04T10:32:24.808525

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )

8837 / tcp

-1399940268 | 2025-02-03T07:46:19.954977

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8838 / tcp

-1399940268 | 2025-01-22T10:29:48.434545

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8841 / tcp

1353260875 | 2025-02-04T18:45:21.449374

\x00[g\xc2\x95N\x7f\x00\x00

8852 / tcp

1911457608 | 2025-02-03T01:54:22.969938

\x00[\x00\x00\x00\x00\x00\x00

8861 / tcp

-1019343788 | 2025-01-16T19:15:21.301975

W!\x00\x00\x00\x00

8863 / tcp

1189133115 | 2025-01-10T22:57:04.218303

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

8867 / tcp

-2080784861 | 2025-01-30T15:48:57.219059

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

8869 / tcp

-441419608 | 2025-01-31T23:54:31.367137

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

8880 / tcp

819727972 | 2025-01-09T20:29:23.205977

SSH-2.0-OpenSSH_7.4

8889 / tcp

-2096652808 | 2025-02-06T05:38:20.079291

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8905 / tcp

-1399940268 | 2025-01-30T19:09:49.141975

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8935 / tcp

-249504111 | 2025-02-03T14:07:51.402900

\x00[xU-\x7f\x00\x00

8990 / tcp

740837454 | 2025-01-19T18:18:11.513335

SSH-2.0-OpenSSH_5.3

8993 / tcp

165188539 | 2025-01-13T09:21:48.984625

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9000 / tcp

-2067028711 | 2025-02-01T04:16:05.732953

\x15\x03\x01\x00\x02\x02F

9002 / tcp

660175493 | 2025-02-05T00:49:16.262217

9004 / tcp

1077013874 | 2025-02-02T15:04:26.246112

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

9006 / tcp

-1032713145 | 2025-01-22T11:27:34.464783

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

9031 / tcp

921225407 | 2025-01-25T00:29:01.087369

\x00\x00\x00\x04\x00\x00\x00\x00\x00

9042 / tcp

2087396567 | 2025-01-18T15:29:59.855319

kjnkjabhbanc283ubcsbhdc72

9044 / tcp

819727972 | 2025-01-30T18:45:34.325089

SSH-2.0-OpenSSH_7.4

9047 / tcp

117101543 | 2025-01-29T18:09:16.369389

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

9051 / tcp

-345718689 | 2025-01-27T09:57:30.930579

Vty password is not set.

9058 / tcp

-1399940268 | 2025-01-20T12:07:19.930486

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9062 / tcp

-1730858130 | 2025-02-06T22:16:04.270039

RFB 003.008
VNC:
  Protocol Version: 3.8

9087 / tcp

575925250 | 2025-01-29T00:03:33.266311

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

9089 / tcp

-339084706 | 2025-02-03T22:18:25.241460

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

9091 / tcp

104385780 | 2025-01-28T18:58:12.158415

ceph v2

9095 / tcp

996960436 | 2025-02-05T21:52:39.662030

572 Relay not authorized

9114 / tcp

-801484042 | 2025-01-09T01:20:48.848974

ERR 27

9123 / tcp

-339084706 | 2025-01-29T22:53:05.939491

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

9124 / tcp

-136006866 | 2025-02-04T17:04:22.621467

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

9143 / tcp

669849225 | 2025-02-04T04:09:17.814979

SSH-98.60-SysaxSSH_81885..42\r\n

9147 / tcp

-2089734047 | 2025-02-03T11:35:22.333957

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9149 / tcp

-249504111 | 2025-01-10T17:22:15.013678

\x00[xU-\x7f\x00\x00

9151 / tcp

472902042 | 2025-01-17T01:20:34.915459

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

9155 / tcp

2143387245 | 2025-01-10T07:53:33.245743

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

9159 / tcp

819727972 | 2025-01-25T03:47:27.843318

SSH-2.0-OpenSSH_7.4

9160 / tcp

-1839934832 | 2025-01-29T05:17:32.547564

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9187 / tcp

921225407 | 2025-02-01T01:43:27.962909

\x00\x00\x00\x04\x00\x00\x00\x00\x00

9209 / tcp

819727972 | 2025-01-28T19:40:19.370550

SSH-2.0-OpenSSH_7.4

9213 / tcp

1911457608 | 2025-02-04T01:48:40.015104

\x00[\x00\x00\x00\x00\x00\x00

9219 / tcp

-1839934832 | 2025-02-06T22:37:29.791928

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9222 / tcp

-1399940268 | 2025-01-23T00:06:57.842865

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9248 / tcp

819727972 | 2025-01-15T14:43:11.778018

SSH-2.0-OpenSSH_7.4

9304 / tcp

165188539 | 2025-01-27T20:11:09.900526

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9306 / tcp

-1399940268 | 2025-02-06T19:53:44.025881

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9307 / tcp

937756010 | 2025-01-27T14:39:55.161147

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

9333 / tcp

380146262 | 2025-01-15T08:53:08.781581

@RSYNCD: 30.0

9393 / tcp

321971019 | 2025-02-03T18:16:02.207719

-ERR client ip is not in whitelist\r

9398 / tcp

819727972 | 2025-01-24T20:23:26.347271

SSH-2.0-OpenSSH_7.4

9418 / tcp

1529351907 | 2025-01-26T00:40:54.288371

HTTP/1.1 407 OK
Content-Type: text/plain; charset=utf-8
Connection: keep-alive

please add white ip *.*.*.*

9433 / tcp

-2089734047 | 2025-02-06T11:25:38.099580

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9443 / tcp

241345396 | 2025-01-24T22:33:36.729304

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 24 Jan 2025 22:33:36 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.103.85.188:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

9500 / tcp

-1991224470 | 2025-01-15T16:16:30.527013

\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x14TP/1.1\r\n\\x00\\x00\\x00\\x00&

9530 / tcp

-784071826 | 2025-02-04T15:08:04.069209

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

9532 / tcp

-303199180 | 2025-01-11T05:08:22.039298

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

9633 / tcp

-893477759 | 2025-01-30T06:36:04.723774

!versionbind7 t{RPowerDNS Recursor 410

9711 / tcp

-2031152423 | 2025-02-05T03:28:28.057881

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

9761 / tcp

-407828767 | 2025-02-05T16:59:12.311233

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

9802 / tcp

599074451 | 2025-02-02T08:31:19.364448

msg

9888 / tcp

1996932384 | 2025-01-23T09:48:24.714740

"raop" nonce

9898 / tcp

1304012963 | 2025-02-01T06:54:58.160754

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: close

9939 / tcp

819727972 | 2025-01-27T05:50:47.768636

SSH-2.0-OpenSSH_7.4

9943 / tcp

-1839864261 | 2025-01-16T04:49:04.952551

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae25a5_PS-TNH-01Vm9154_3387-14536

9977 / tcp

740837454 | 2025-01-27T07:33:49.082480

SSH-2.0-OpenSSH_5.3

9991 / tcp

-2017887953 | 2025-01-14T22:38:46.475608

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

9997 / tcp

1282941221 | 2025-01-17T02:17:07.297953

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

9998 / tcp

372433470 | 2025-01-15T18:46:57.985384

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

9999 / tcp

1161309183 | 2025-01-28T15:05:05.526635

ProxyServer is ready

10000 / tcp

1308377066 | 2025-01-25T23:50:56.203689

ncacn_http/1.0

10001 / tcp

1492413928 | 2025-01-19T08:32:26.173217

SSH-2.0-OpenSSH_7.5

10005 / tcp

819727972 | 2025-01-18T08:40:28.855978

SSH-2.0-OpenSSH_7.4

10008 / tcp

-2046514463 | 2025-02-03T11:28:04.609016

AB\x01\t

10009 / tcp

-709267009 | 2025-01-15T19:21:53.030316

\\x00[\'\\x19\\xc0\\xa8X\\xfd

10012 / tcp

939210732 | 2025-01-22T22:38:32.303706

\\x00[\'\\x1c\\xc0\\xa8Y\\xfd

10015 / tcp

-1059554316 | 2025-02-04T03:27:58.049204

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

10016 / tcp

-1399940268 | 2025-01-10T18:31:10.138240

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10022 / tcp

819727972 | 2025-01-18T01:16:36.529115

SSH-2.0-OpenSSH_7.4

10025 / tcp

-1399940268 | 2025-01-13T09:30:09.670652

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10039 / tcp

1911457608 | 2025-02-03T19:10:15.630924

\x00[\x00\x00\x00\x00\x00\x00

10042 / tcp

-122096153 | 2025-01-26T04:15:36.669038

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

10045 / tcp

-1399940268 | 2025-01-30T22:32:52.795418

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10047 / tcp

1763259671 | 2025-01-09T19:36:08.109687

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

10075 / tcp

-1013082686 | 2025-01-29T03:42:09.440397

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

10084 / tcp

1911457608 | 2025-01-27T21:18:54.464753

\x00[\x00\x00\x00\x00\x00\x00

10093 / tcp

-1399940268 | 2025-01-24T17:31:30.452417

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10134 / tcp

165188539 | 2025-02-05T03:48:30.559231

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

10200 / tcp

1632932802 | 2025-01-19T16:11:45.842052

10205 / tcp

-1399940268 | 2025-02-01T21:06:40.976415

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10283 / tcp

-1839934832 | 2025-01-22T15:27:43.950917

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

10348 / tcp

1332894250 | 2025-01-26T21:50:32.069100

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

10380 / tcp

-1810987450 | 2025-02-04T17:19:45.118213

\xc3\xbf

10398 / tcp

321971019 | 2025-02-02T07:37:14.203820

-ERR client ip is not in whitelist\r

10477 / tcp

722711397 | 2025-02-05T02:57:35.361421

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

10810 / tcp

-2089734047 | 2025-01-14T09:59:27.130320

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10909 / tcp

-1327660293 | 2025-01-27T00:07:51.145554

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

10911 / tcp

307999478 | 2025-01-29T11:34:30.822176

unknown command \r\nunknown command \r\n

11000 / tcp

-1399940268 | 2025-01-31T17:29:44.879480

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11111 / tcp

-1996280214 | 2025-02-01T07:01:18.519240

\x06\x04\x05@

11112 / tcp

-1733645023 | 2025-02-02T01:41:27.376554

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

11210 / tcp

-1399940268 | 2025-02-01T09:45:09.843198

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11211 / tcp

-136006866 | 2025-01-20T21:47:11.157107

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11288 / tcp

-1329831334 | 2025-01-31T10:21:45.078758

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

11701 / tcp

-1329831334 | 2025-01-31T21:37:40.841527

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

12000 / tcp

-1245716040 | 2025-01-23T20:20:49.433115

220 welcome to connecting FTP server

12001 / tcp

165188539 | 2025-02-03T08:54:53.051745

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12084 / tcp

-2089734047 | 2025-01-26T22:29:02.531604

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12103 / tcp

-339084706 | 2025-02-06T00:14:13.252462

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

12107 / tcp

-2089734047 | 2025-02-05T14:51:42.762105

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12117 / tcp

-1327660293 | 2025-02-04T23:32:12.495665

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12118 / tcp

-2046514463 | 2025-01-22T14:20:42.633411

AB\x01\t

12119 / tcp

-1327660293 | 2025-01-23T13:19:43.129714

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12129 / tcp

117101543 | 2025-01-28T11:00:30.191680

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

12132 / tcp

1911457608 | 2025-02-04T08:44:32.699189

\x00[\x00\x00\x00\x00\x00\x00

12140 / tcp

-1888448627 | 2025-01-13T07:06:02.649699

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12151 / tcp

-438503381 | 2025-01-30T23:56:58.292833

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

12152 / tcp

-2107996212 | 2025-01-29T17:34:12.959379

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

12155 / tcp

-1399940268 | 2025-02-03T15:41:42.097791

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12158 / tcp

-249504111 | 2025-01-11T05:47:50.323912

\x00[xU-\x7f\x00\x00

12186 / tcp

-1327660293 | 2025-01-30T22:31:03.278679

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12193 / tcp

165188539 | 2025-01-15T18:43:59.420021

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12205 / tcp

740837454 | 2025-01-20T11:38:05.964251

SSH-2.0-OpenSSH_5.3

12207 / tcp

50497985 | 2025-01-22T05:27:32.599526

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

12219 / tcp

-1399940268 | 2025-02-01T05:39:23.264887

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12220 / tcp

-1399940268 | 2025-01-28T21:44:43.758775

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12238 / tcp

1726594447 | 2025-01-18T23:21:58.573864

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

12249 / tcp

1278527606 | 2025-01-27T01:36:02.507478

SSH-2.0-Teleport

12258 / tcp

819727972 | 2025-01-16T16:02:01.834552

SSH-2.0-OpenSSH_7.4

12268 / tcp

819727972 | 2025-01-24T20:09:29.564632

SSH-2.0-OpenSSH_7.4

12277 / tcp

-339084706 | 2025-01-12T09:20:50.603240

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

12282 / tcp

1624217396 | 2025-01-20T00:05:04.291906

HELO:10.3.6.0.false\nAS:2048\nHL:19

12295 / tcp

1011407350 | 2025-01-24T06:50:55.629544

* OK GroupWise IMAP4rev1 Server Ready\r\n

12300 / tcp

669849225 | 2025-01-20T18:58:26.419924

SSH-98.60-SysaxSSH_81885..42\r\n

12304 / tcp

-784071826 | 2025-01-10T06:03:12.846905

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

12320 / tcp

1911457608 | 2025-01-24T03:59:09.868832

\x00[\x00\x00\x00\x00\x00\x00

12328 / tcp

-1730858130 | 2025-02-03T21:23:51.756014

RFB 003.008
VNC:
  Protocol Version: 3.8

12332 / tcp

1911457608 | 2025-01-26T20:10:37.412274

\x00[\x00\x00\x00\x00\x00\x00

12339 / tcp

-653033013 | 2025-02-02T07:12:00.775806

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

12345 / tcp

878900329 | 2025-01-11T11:07:14.403040

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae24ba_PStjkgwtss75_22411-43255

12361 / tcp

1381121983 | 2025-01-12T18:11:42.438260

Notify\r\n

12371 / tcp

-1399940268 | 2025-01-21T19:22:13.931404

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12372 / tcp

819727972 | 2025-01-30T08:43:50.866482

SSH-2.0-OpenSSH_7.4

12374 / tcp

-1399940268 | 2025-01-28T14:47:01.636883

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12395 / tcp

-441419608 | 2025-01-17T16:56:42.099792

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

12407 / tcp

-1733645023 | 2025-01-30T14:27:23.766755

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

12411 / tcp

-1399940268 | 2025-01-31T20:02:49.297434

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12417 / tcp

722711397 | 2025-02-06T20:20:48.239424

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

12437 / tcp

-358801646 | 2025-01-15T06:29:00.396406

SSH-2.0-OpenSSH_6.6.1

12439 / tcp

1911457608 | 2025-01-26T19:51:05.523097

\x00[\x00\x00\x00\x00\x00\x00

12443 / tcp

819727972 | 2025-01-15T04:32:37.370319

SSH-2.0-OpenSSH_7.4

12445 / tcp

-1888448627 | 2025-01-29T06:21:36.694216

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12449 / tcp

819727972 | 2025-01-12T13:26:38.953499

SSH-2.0-OpenSSH_7.4

12451 / tcp

-1399940268 | 2025-01-31T03:03:14.128174

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12454 / tcp

-904840257 | 2025-02-04T14:55:13.166878

572 Relay not authorized\r\n

12459 / tcp

819727972 | 2025-01-12T21:14:42.767559

SSH-2.0-OpenSSH_7.4

12469 / tcp

-1947777893 | 2025-01-27T12:15:00.768301

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

12471 / tcp

321971019 | 2025-02-06T20:51:23.637554

-ERR client ip is not in whitelist\r

12500 / tcp

599074451 | 2025-01-27T05:14:25.819166

msg

12513 / tcp

-1399940268 | 2025-01-09T14:37:21.947737

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12529 / tcp

1911457608 | 2025-01-20T12:17:46.187333

\x00[\x00\x00\x00\x00\x00\x00

12544 / tcp

-891714208 | 2025-02-01T16:19:59.407200

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

12555 / tcp

709622286 | 2025-01-21T20:40:55.597461

OK Welcome <299685> on DirectUpdate server 7286\r\n

12559 / tcp

165188539 | 2025-01-16T08:53:48.195357

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12586 / tcp

165188539 | 2025-01-18T16:04:34.262046

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

13000 / tcp

-457235091 | 2025-01-31T04:33:40.389913

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

14130 / tcp

-653033013 | 2025-02-01T08:22:46.404148

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

14265 / tcp

1911457608 | 2025-02-04T18:45:26.299286

\x00[\x00\x00\x00\x00\x00\x00

14344 / tcp

-1399940268 | 2025-02-05T10:18:00.948599

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14873 / tcp

-122096153 | 2025-01-18T09:29:11.421696

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

15006 / tcp

-1487943323 | 2025-01-20T12:06:04.581256

431 Unable to negotiate secure command connection.\r\n

15018 / tcp

-1399940268 | 2025-02-05T22:23:20.553955

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

15504 / tcp

-1013082686 | 2025-01-24T23:08:36.318498

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

15588 / tcp

-1835475271 | 2025-01-15T06:13:25.980851

200 NOD32SS 99 (3318497116)\r\n

15673 / tcp

669849225 | 2025-01-30T05:46:08.430198

SSH-98.60-SysaxSSH_81885..42\r\n

16005 / tcp

2143387245 | 2025-01-14T05:01:40.473418

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

16012 / tcp

-147424911 | 2025-02-04T11:06:23.865387

HTTP/1.1 404 Not Found
Content Length: 0

16013 / tcp

707919486 | 2025-02-01T07:40:13.413346

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

16015 / tcp

1911457608 | 2025-02-05T06:23:59.803249

\x00[\x00\x00\x00\x00\x00\x00

16045 / tcp

1767345577 | 2025-01-10T21:13:19.872502

Hello, this is Quagga (version 0T).
Copyright 1996-200

16046 / tcp

-142686627 | 2025-01-25T16:52:29.048610

\x00[\xc2\xba\x7fs\x7f\x00\x00

16067 / tcp

-407828767 | 2025-01-26T08:13:22.159884

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

16074 / tcp

-1399940268 | 2025-01-14T02:53:29.733472

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16090 / tcp

103159425 | 2025-01-21T11:08:11.289065

SSH-1.99-RGOS_SSH

16092 / tcp

165188539 | 2025-02-01T08:44:44.080486

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

16094 / tcp

1911457608 | 2025-01-21T16:57:07.959850

\x00[\x00\x00\x00\x00\x00\x00

16102 / tcp

819727972 | 2025-02-01T09:39:50.272462

SSH-2.0-OpenSSH_7.4

16993 / tcp

1690634669 | 2025-01-20T12:16:59.879467

17000 / tcp

-1810987450 | 2025-01-14T10:00:08.848050

\xc3\xbf

17001 / tcp

-1810987450 | 2025-01-21T17:40:41.669484

\xc3\xbf

17010 / tcp

1911457608 | 2025-02-06T13:47:16.430867

\x00[\x00\x00\x00\x00\x00\x00

17775 / tcp

2103111368 | 2025-01-21T15:15:28.795636

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

17778 / tcp

1726594447 | 2025-01-11T02:44:00.937326

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

18018 / tcp

-1839934832 | 2025-01-22T10:40:53.006308

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

18022 / tcp

-616720387 | 2025-01-13T18:25:09.166999

SSH-2.0-SSHD_0.7.6

18035 / tcp

-2089734047 | 2025-01-10T18:45:46.580758

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

18042 / tcp

1911457608 | 2025-01-26T09:51:39.790296

\x00[\x00\x00\x00\x00\x00\x00

18054 / tcp

1332894250 | 2025-01-09T04:24:26.303491

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

18055 / tcp

-1737707071 | 2025-01-09T10:30:17.655151

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

18067 / tcp

-1139539254 | 2025-02-03T03:26:51.339111

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

18068 / tcp

408230060 | 2025-01-15T07:51:08.754093

\r\nSorry, that nickname format is invalid.\r\n

18081 / tcp

819727972 | 2025-01-08T00:00:25.680212

SSH-2.0-OpenSSH_7.4

18090 / tcp

-2096652808 | 2025-01-26T00:13:02.187504

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

18096 / tcp

2121220663 | 2025-01-30T11:06:46.093711

SSH-58-Ingrian_SSH\r\n

18245 / tcp

819727972 | 2025-01-15T20:28:11.476858

SSH-2.0-OpenSSH_7.4

19000 / tcp

-1399940268 | 2025-02-04T05:20:42.739851

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

19014 / tcp

-1399940268 | 2025-02-04T07:14:36.190582

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

19017 / tcp

1911457608 | 2025-01-31T04:40:31.893910

\x00[\x00\x00\x00\x00\x00\x00

19084 / tcp

1504401647 | 2025-01-11T20:19:21.661116

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

20000 / tcp

1900503736 | 2025-02-03T20:16:56.463485

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20121 / tcp

-1888448627 | 2025-01-21T08:00:03.896860

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

20200 / tcp

-407828767 | 2025-01-25T16:33:59.122337

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

20201 / tcp

-1986594217 | 2025-01-20T13:47:43.192475

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

20256 / tcp

-10442315 | 2025-01-25T16:55:17.102982

ª

20443 / tcp

819727972 | 2025-01-29T19:34:03.672954

SSH-2.0-OpenSSH_7.4

20880 / tcp

1370263973 | 2025-01-12T16:59:29.970822

dubbo>

21025 / tcp

2087396567 | 2025-01-23T15:33:10.302842

kjnkjabhbanc283ubcsbhdc72

21233 / tcp

1830697416 | 2025-01-16T17:48:16.290491

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

21234 / tcp

819727972 | 2025-01-19T01:00:50.697422

SSH-2.0-OpenSSH_7.4

21245 / tcp

1504401647 | 2025-02-02T17:43:03.125344

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

21265 / tcp

321971019 | 2025-02-01T16:17:46.440685

-ERR client ip is not in whitelist\r

21276 / tcp

1911457608 | 2025-01-16T06:46:53.369518

\x00[\x00\x00\x00\x00\x00\x00

21280 / tcp

165188539 | 2025-01-23T07:54:24.729296

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21302 / tcp

165188539 | 2025-01-27T04:44:21.704234

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21310 / tcp

1624217396 | 2025-02-01T09:39:16.304706

HELO:10.3.6.0.false\nAS:2048\nHL:19

21311 / tcp

-1399940268 | 2025-01-16T03:51:51.489167

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21313 / tcp

-1399940268 | 2025-02-01T17:29:36.682576

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21323 / tcp

-1261090339 | 2025-02-02T07:19:21.653909

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

21325 / tcp

-441419608 | 2025-01-30T09:19:42.287365

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

21379 / tcp

-1399940268 | 2025-01-11T14:58:12.696873

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

22103 / tcp

-1487943323 | 2025-01-19T01:14:59.517123

431 Unable to negotiate secure command connection.\r\n

22380 / tcp

-653033013 | 2025-01-09T14:31:14.502339

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

22556 / tcp

-1428621233 | 2025-02-01T22:27:32.812501

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

23023 / tcp

-1730858130 | 2025-02-01T07:01:21.352953

RFB 003.008
VNC:
  Protocol Version: 3.8

23082 / tcp

-1099385124 | 2025-01-17T17:00:11.463579

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

24084 / tcp

1948301213 | 2025-01-16T11:12:17.746830

RFB 003.003
VNC:
  Protocol Version: 3.3

25001 / tcp

-1888448627 | 2025-01-18T22:25:53.481697

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

25004 / tcp

-249504111 | 2025-01-27T01:54:22.527016

\x00[xU-\x7f\x00\x00

25565 / tcp

-1399940268 | 2025-02-06T07:31:58.485148

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

27015 / tcp

-80321085 | 2025-01-30T05:02:52.137265

Command: None
Size: 1802398315
ID: 1751277930
Type: 1668178274

27017 / tcp

1763259671 | 2025-02-02T21:20:26.159289

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

28015 / tcp

165188539 | 2025-01-21T03:20:29.862778

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

29984 / tcp

-303199180 | 2025-01-13T17:35:23.141647

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

30002 / tcp

540463538 | 2025-02-01T11:41:56.491938

@
03d

30003 / tcp

1077013874 | 2025-02-05T06:46:53.283318

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

30017 / tcp

-1888448627 | 2025-02-05T20:05:34.995770

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

30019 / tcp

1332894250 | 2025-01-16T01:31:08.098203

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

30029 / tcp

165188539 | 2025-02-03T17:25:07.218524

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

30444 / tcp

321971019 | 2025-01-09T08:02:55.816286

-ERR client ip is not in whitelist\r

30452 / tcp

-375604792 | 2025-01-17T16:57:48.568197

220 Microsoft FTP Service

30473 / tcp

321971019 | 2025-01-15T18:46:36.593914

-ERR client ip is not in whitelist\r

30479 / tcp

945910976 | 2025-01-10T09:03:42.277547

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

31001 / tcp

-1327660293 | 2025-01-21T14:19:21.665805

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

31337 / tcp

-147424911 | 2025-01-27T14:32:55.134112

HTTP/1.1 404 Not Found
Content Length: 0

32080 / tcp

-2140303521 | 2025-02-02T05:09:16.430960

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

32764 / tcp

671605376 | 2025-01-18T10:30:16.921153

SSH-2.0-OpenSSH_X.X

33060 / tcp

2087396567 | 2025-02-05T21:52:26.119213

kjnkjabhbanc283ubcsbhdc72

33422 / tcp

539065883 | 2025-02-06T23:07:17.407287

33522 / tcp

410249975 | 2025-02-06T17:50:37.328801

LNS READY<>

33722 / tcp

-319440554 | 2025-02-06T21:59:55.731666

34122 / tcp

-1990350878 | 2025-02-06T14:35:46.050167

 
04 \...

34225 / tcp

-2089734047 | 2025-01-17T18:13:07.436694

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

34522 / tcp

-1598265216 | 2025-02-05T20:54:15.360054

@RSYNCD: 31.0

34622 / tcp

2087396567 | 2025-02-06T05:42:48.773065

kjnkjabhbanc283ubcsbhdc72

34922 / tcp

-1013082686 | 2025-02-06T01:03:36.984332

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

35000 / tcp

-1399940268 | 2025-01-20T01:10:32.872288

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

35002 / tcp

-1399940268 | 2025-01-12T19:22:11.002052

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

35100 / tcp

1911457608 | 2025-02-06T11:53:02.451115

\x00[\x00\x00\x00\x00\x00\x00

35422 / tcp

2087396567 | 2025-02-05T13:20:31.495337

kjnkjabhbanc283ubcsbhdc72

35522 / tcp

1842524259 | 2025-02-05T17:26:21.718434

36322 / tcp

-971970408 | 2025-02-04T20:23:15.795143

36422 / tcp

-1730858130 | 2025-02-04T23:38:53.859817

RFB 003.008
VNC:
  Protocol Version: 3.8

36982 / tcp

669849225 | 2025-01-14T21:07:08.444137

SSH-98.60-SysaxSSH_81885..42\r\n

37422 / tcp

1978059005 | 2025-02-03T19:33:15.232274

Sorry, that nickname format is invalid.

37443 / tcp

632542934 | 2025-01-10T02:38:32.390430

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

37777 / tcp

1363464823 | 2025-01-29T04:14:19.169079

\x00[|ox\x7f\x00\x00

37822 / tcp

873425297 | 2025-02-03T08:51:33.713794

200 NOD32SS 99 (3318497116)

38022 / tcp

-801484042 | 2025-02-03T14:08:32.164960

ERR 27

38322 / tcp

2087396567 | 2025-02-03T00:04:11.738710

kjnkjabhbanc283ubcsbhdc72

38422 / tcp

-1428621233 | 2025-02-03T07:06:08.667867

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

38522 / tcp

2087396567 | 2025-02-03T02:37:54.112323

kjnkjabhbanc283ubcsbhdc72

38622 / tcp

-971970408 | 2025-02-03T05:20:26.466268

38922 / tcp

957278843 | 2025-02-02T20:28:11.284496

[|ox

39001 / tcp

-1399940268 | 2025-02-03T23:31:05.100784

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

39322 / tcp

1082732927 | 2025-02-02T15:29:45.256392

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

39622 / tcp

-1311598826 | 2025-02-01T21:12:59.488572

AMQP:
cluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local
copyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.
information:Licensed under the MPL 2.0. Website: https://rabbitmq.com
platform:Erlang/OTP 24.1
product:RabbitMQ
version:3.9.7
Capabilities:
publisher_confirms:true
exchange_exchange_bindings:true
basic.nack:true
consumer_cancel_notify:true
connection.blocked:true
consumer_priorities:true
authentication_failure_close:true
per_consumer_qos:true
direct_reply_to:tru

40022 / tcp

-1316491703 | 2025-02-01T22:59:24.506912

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

40122 / tcp

1690634669 | 2025-02-01T10:46:11.931542

40222 / tcp

459162008 | 2025-02-02T03:00:40.091143

Notify

40822 / tcp

-971970408 | 2025-02-01T01:55:31.366965

40922 / tcp

-952165951 | 2025-02-01T12:31:09.097140

AB

41122 / tcp

-1045760528 | 2025-02-01T09:50:02.682527

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

41222 / tcp

740837454 | 2025-02-01T05:29:19.851788

SSH-2.0-OpenSSH_5.3

41322 / tcp

-445721795 | 2025-02-01T04:33:40.334863

\x00[\xc3\xaed\x1a\x7f\x00\x00

41800 / tcp

-1045760528 | 2025-02-04T07:07:31.343189

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

41922 / tcp

2087396567 | 2025-01-31T17:01:04.790292

kjnkjabhbanc283ubcsbhdc72

42022 / tcp

539065883 | 2025-01-31T11:27:18.705188

42322 / tcp

1208318993 | 2025-01-30T22:20:25.297550

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

42622 / tcp

-1428621233 | 2025-01-31T06:29:27.897957

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

42922 / tcp

-1261090339 | 2025-01-31T01:32:35.431996

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

43022 / tcp

-527005584 | 2025-01-30T04:41:14.198893

/0 0 L
/0 0 HUH

43222 / tcp

-1428621233 | 2025-01-30T20:33:46.358545

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

43322 / tcp

707919486 | 2025-01-29T20:14:35.955333

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

43422 / tcp

-2080784861 | 2025-01-30T18:48:22.380922

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

43722 / tcp

-971970408 | 2025-01-30T10:09:51.269674

43822 / tcp

-79865617 | 2025-01-30T09:05:53.167392

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )

44122 / tcp

2087396567 | 2025-01-30T02:52:42.669384

kjnkjabhbanc283ubcsbhdc72

44158 / tcp

2054287019 | 2025-02-06T18:01:57.895750

\x13/multistream/1.0.0

44309 / tcp

321971019 | 2025-01-30T00:38:41.380846

-ERR client ip is not in whitelist\r

44333 / tcp

1911457608 | 2025-02-04T15:38:21.887669

\x00[\x00\x00\x00\x00\x00\x00

44337 / tcp

-2017887953 | 2025-01-28T05:09:51.246487

SSH-2.0-OpenSSH_7.9

44410 / tcp

398077695 | 2025-01-18T09:31:11.905084

44422 / tcp

2087396567 | 2025-01-29T22:31:19.467777

kjnkjabhbanc283ubcsbhdc72

44722 / tcp

-1428621233 | 2025-01-30T01:05:31.254489

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

44818 / tcp

366084633 | 2025-01-12T05:47:57.198764

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

44822 / tcp

2087396567 | 2025-01-28T16:25:48.418142

kjnkjabhbanc283ubcsbhdc72

45002 / tcp

819727972 | 2025-02-01T08:36:14.676489

SSH-2.0-OpenSSH_7.4

45322 / tcp

1741579575 | 2025-01-29T05:46:17.746108

45522 / tcp

-2017887953 | 2025-01-28T22:32:43.279018

SSH-2.0-OpenSSH_7.9

45622 / tcp

1741579575 | 2025-01-28T17:50:12.113532

45777 / tcp

-2080784861 | 2025-01-17T12:04:09.328680

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

45821 / tcp

-1399940268 | 2025-01-30T11:22:41.676850

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

45822 / tcp

474736340 | 2025-01-28T20:58:08.839457

431 Unable to negotiate secure command connection.

45922 / tcp

1261582754 | 2025-01-27T21:26:35.032582

unknown command 
unknown command

46001 / tcp

-1399940268 | 2025-01-18T19:26:36.532338

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

46122 / tcp

1077013874 | 2025-01-28T13:44:04.626583

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

46422 / tcp

740837454 | 2025-01-28T06:20:09.081664

SSH-2.0-OpenSSH_5.3

46722 / tcp

-1779118422 | 2025-01-28T02:41:56.289114

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

46822 / tcp

-358801646 | 2025-01-27T16:15:16.889337

SSH-2.0-OpenSSH_6.6.1

46922 / tcp

-1795027372 | 2025-01-27T17:37:31.800388

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

47022 / tcp

-1681927087 | 2025-01-27T10:30:43.320327

kjnkjabhbanc283ubcsbhdc72

47222 / tcp

819727972 | 2025-01-27T01:16:35.032715

SSH-2.0-OpenSSH_7.4

47322 / tcp

50497985 | 2025-01-27T13:56:07.135592

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

47422 / tcp

-1810987450 | 2025-01-27T12:05:00.967497

\xc3\xbf

47922 / tcp

2087396567 | 2025-01-27T03:23:37.352416

kjnkjabhbanc283ubcsbhdc72

47990 / tcp

819727972 | 2025-01-31T01:46:05.481460

SSH-2.0-OpenSSH_7.4

48001 / tcp

401555314 | 2025-02-01T07:01:57.145443

NB[GFXjA^R

48002 / tcp

-249504111 | 2025-02-01T14:32:05.344074

\x00[xU-\x7f\x00\x00

48019 / tcp

-1399940268 | 2025-01-23T18:03:59.011936

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

48022 / tcp

-1730858130 | 2025-01-26T16:13:31.112597

RFB 003.008
VNC:
  Protocol Version: 3.8

48100 / tcp

1911457608 | 2025-01-20T03:19:29.979434

\x00[\x00\x00\x00\x00\x00\x00

48322 / tcp

-314039103 | 2025-01-26T19:52:09.997404

Surnom.
Sorry, that nickname format is invalid.

48522 / tcp

-971970408 | 2025-01-26T12:39:42.415426

49022 / tcp

-1230049476 | 2025-01-26T07:19:35.212202

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

49222 / tcp

-971970408 | 2025-01-26T05:50:32.148299

49522 / tcp

1948301213 | 2025-01-26T00:03:18.849314

RFB 003.003
VNC:
  Protocol Version: 3.3

49592 / tcp

819727972 | 2025-01-11T08:59:57.450151

SSH-2.0-OpenSSH_7.4

49694 / tcp

-2096652808 | 2025-01-19T11:51:45.373823

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

50000 / tcp

1690634669 | 2025-02-04T18:24:44.917147

50050 / tcp

-2118655245 | 2025-02-04T13:00:23.666007

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

50100 / tcp

-1399940268 | 2025-01-16T16:06:08.096960

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

50101 / tcp

-1888448627 | 2025-02-06T18:36:42.651653

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

50102 / tcp

205347087 | 2025-01-29T09:13:09.190444

SSH-25453-Cisco-3524665.35\n

50122 / tcp

-1327660293 | 2025-01-23T03:30:38.733815

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

50522 / tcp

1842524259 | 2025-01-25T05:46:54.549005

50922 / tcp

819727972 | 2025-01-24T16:55:21.055113

SSH-2.0-OpenSSH_7.4

51122 / tcp

1690634669 | 2025-01-24T20:31:14.026384

51200 / tcp

-1399940268 | 2025-01-30T16:22:57.925445

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

51235 / tcp

1059192566 | 2025-02-04T13:57:24.460766

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 670
S-Host: https://sukz-mc-u.aliyuncs.com/checkout/share/admit-import/unblend-deactivate/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div

51422 / tcp

808560482 | 2025-01-24T04:00:59.917188

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP
 : USERID : UNIX : Cr8

51622 / tcp

2103111368 | 2025-01-24T11:25:45.507954

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

51722 / tcp

1767345577 | 2025-01-23T20:32:14.025334

Hello, this is Quagga (version 0T).
Copyright 1996-200

52010 / tcp

-1399940268 | 2025-01-29T03:52:30.762615

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

52122 / tcp

1842524259 | 2025-01-24T00:25:36.091963

52230 / tcp

-2096652808 | 2025-01-29T11:30:09.363464

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

52922 / tcp

1632932802 | 2025-01-23T00:25:30.368029

53022 / tcp

2087396567 | 2025-01-23T02:16:58.094017

kjnkjabhbanc283ubcsbhdc72

53122 / tcp

104385780 | 2025-01-22T22:20:27.823052

ceph v2

53322 / tcp

-1529979118 | 2025-01-22T18:20:57.473127

inv2W

53622 / tcp

1948301213 | 2025-01-22T12:54:53.702333

RFB 003.003
VNC:
  Protocol Version: 3.3

53822 / tcp

2087396567 | 2025-01-22T14:24:59.938868

kjnkjabhbanc283ubcsbhdc72

53922 / tcp

1741579575 | 2025-01-22T03:40:43.913510

54138 / tcp

1332894250 | 2025-02-06T04:10:13.112977

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

54222 / tcp

-784071826 | 2025-01-22T02:24:21.679483

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

54322 / tcp

-971970408 | 2025-01-21T23:58:51.833357

54422 / tcp

2087396567 | 2025-01-21T18:29:59.789495

kjnkjabhbanc283ubcsbhdc72

54490 / tcp

819727972 | 2025-01-30T23:01:22.396387

SSH-2.0-OpenSSH_7.4

54522 / tcp

1690634669 | 2025-01-21T20:22:49.538953

54857 / tcp

1126993057 | 2025-01-29T03:50:26.512033

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

55000 / tcp

-1888448627 | 2025-02-03T21:35:24.902414

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

55081 / tcp

-445721795 | 2025-01-29T11:36:12.017646

\x00[\xc3\xaed\x1a\x7f\x00\x00

55470 / tcp

-407828767 | 2025-01-25T17:29:50.825689

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

55475 / tcp

-1327660293 | 2025-01-17T01:59:50.886685

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

55522 / tcp

-438503381 | 2025-01-20T16:27:43.217092

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

55554 / tcp

171352214 | 2025-01-26T23:53:19.080295

-ERR client ip is not in whitelist

55622 / tcp

2087396567 | 2025-01-21T03:17:14.022331

kjnkjabhbanc283ubcsbhdc72

55722 / tcp

-321444299 | 2025-01-20T23:25:50.201594

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

55822 / tcp

819727972 | 2025-01-20T20:08:53.037167

SSH-2.0-OpenSSH_7.4

56022 / tcp

1741579575 | 2025-01-20T12:34:56.358040

56322 / tcp

-2017887953 | 2025-01-20T14:37:37.034321

SSH-2.0-OpenSSH_7.9

56522 / tcp

-1839934832 | 2025-01-20T09:06:47.135648

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

57022 / tcp

819727972 | 2025-01-19T16:14:54.354379

SSH-2.0-OpenSSH_7.4

57122 / tcp

-1729629024 | 2025-01-19T23:32:01.653355

101 imqbroker =unV

57222 / tcp

-971970408 | 2025-01-19T22:25:42.928587

57522 / tcp

2087396567 | 2025-01-19T06:51:33.983987

kjnkjabhbanc283ubcsbhdc72

57779 / tcp

820958131 | 2025-01-18T20:32:33.308163

kjnkjabhbanc283ubcsbhdc72\x02

57782 / tcp

-585940771 | 2025-01-10T09:23:05.059530

Unknown command\r\n

57822 / tcp

-1136600457 | 2025-01-19T03:03:03.576823

HELO:10.3.6.0.false
AS:2048
HL:19

58322 / tcp

-1730858130 | 2025-01-18T21:58:17.789423

RFB 003.008
VNC:
  Protocol Version: 3.8

58392 / tcp

-1399940268 | 2025-01-16T18:10:30.812703

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

58422 / tcp

2087396567 | 2025-01-18T17:44:42.609279

kjnkjabhbanc283ubcsbhdc72

58443 / tcp

1726594447 | 2025-01-21T17:57:23.899660

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

58532 / tcp

599074451 | 2025-01-15T03:16:18.862310

msg

58722 / tcp

-1032713145 | 2025-01-18T15:19:37.307115

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

59322 / tcp

808560482 | 2025-01-18T04:41:33.691612

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP
 : USERID : UNIX : Cr8

59622 / tcp

996960436 | 2025-01-17T16:55:38.238976

572 Relay not authorized

59922 / tcp

-1559123399 | 2025-01-17T18:23:34.995716

500 Permission denied - closing connection.

60122 / tcp

-79865617 | 2025-01-17T03:16:58.326223

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )

60129 / tcp

740837454 | 2025-01-17T14:30:15.606197

SSH-2.0-OpenSSH_5.3

61613 / tcp

-358801646 | 2025-02-01T03:35:08.756964

SSH-2.0-OpenSSH_6.6.1

61616 / tcp

921225407 | 2025-02-01T12:17:59.114643

\x00\x00\x00\x04\x00\x00\x00\x00\x00

61619 / tcp

165188539 | 2025-01-19T10:39:52.636080

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

62016 / tcp

-2031152423 | 2025-02-01T02:02:25.703495

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

62078 / tcp

-860824904 | 2025-01-31T17:50:25.786296

\x00\x01)

63210 / tcp

321971019 | 2025-01-31T22:14:33.832649

-ERR client ip is not in whitelist\r

63256 / tcp

-1131649482 | 2025-02-05T12:08:48.344208

À0¨ã

63443 / tcp

-1996280214 | 2025-01-22T18:19:43.980930

\x06\x04\x05@

64295 / tcp

-339084706 | 2025-01-10T20:28:33.912530

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

47.103.85.188

Last Seen: 2025-02-06

Tags:

GeneralInformation

OpenPorts

11 / tcp 842535728 | 2025-01-16T02:10:52.089765

13 / tcp -1036370807 | 2025-02-04T14:28:58.051308

15 / tcp 2087396567 | 2025-01-26T09:49:23.928335

17 / tcp 5698739 | 2025-02-05T12:52:49.948241

19 / tcp 81614701 | 2025-01-11T10:56:19.451581

21 / tcp 1210838212 | 2025-02-04T12:28:00.932444

23 / tcp 676675086 | 2025-01-16T06:23:02.291985

25 / tcp 921225407 | 2025-01-29T20:20:27.514542

37 / tcp 2046098166 | 2025-01-30T11:31:19.039539

38 / tcp -1032713145 | 2025-01-29T02:30:05.215021

43 / tcp 2087396567 | 2025-01-24T19:19:43.049066

49 / tcp -801484042 | 2025-02-03T13:05:38.281744

53 / tcp -626196604 | 2025-02-06T10:31:58.014468

70 / tcp 1412519768 | 2025-02-02T14:43:31.401709

92 / tcp 709622286 | 2025-01-25T08:28:32.128822

104 / tcp -1477838366 | 2025-01-20T09:11:54.877385

110 / tcp 819727972 | 2025-01-17T21:20:33.062292

111 / tcp 819727972 | 2025-02-01T21:17:04.146183

113 / tcp -527005584 | 2025-01-27T14:12:38.723686

119 / tcp 141730637 | 2025-01-27T00:36:44.434407

135 / tcp 1302177452 | 2025-01-30T14:56:09.667380

175 / tcp 1077013874 | 2025-01-23T20:34:34.416010

177 / tcp -1189269828 | 2025-02-06T16:00:30.591859

179 / tcp -399606100 | 2025-01-22T15:30:46.194915

195 / tcp 819727972 | 2025-01-15T04:52:05.810800

221 / tcp -2089734047 | 2025-01-18T04:37:45.433720

222 / tcp -1174972798 | 2025-01-17T20:09:01.083273

264 / tcp -654288545 | 2025-01-14T02:29:34.666608

285 / tcp 1911457608 | 2025-01-28T00:32:56.923813

311 / tcp -1547976805 | 2025-01-30T13:28:01.968037

340 / tcp -444830029 | 2025-01-15T17:06:24.383923

389 / tcp -1713467553 | 2025-01-29T20:50:18.250879

427 / tcp 1998636604 | 2025-02-04T21:15:22.520697

442 / tcp -303199180 | 2025-02-02T04:56:09.784160

444 / tcp -750658243 | 2025-02-01T08:54:13.526324

449 / tcp 819727972 | 2025-01-29T15:31:48.887250

502 / tcp 945910976 | 2025-02-04T22:47:36.067157

503 / tcp -1114821551 | 2025-02-01T10:27:54.270879

513 / tcp 1574088840 | 2025-01-21T20:26:47.046054

541 / tcp 836108941 | 2025-02-06T20:49:35.481391

548 / tcp 155249582 | 2025-01-26T00:24:33.352936

554 / tcp -1142488525 | 2025-01-24T20:12:45.575595

593 / tcp 1308377066 | 2025-02-04T01:44:20.861477

636 / tcp 1732481781 | 2025-01-27T06:45:38.950891

646 / tcp -1206199995 | 2025-01-24T05:45:27.282388

666 / tcp 2098053533 | 2025-02-02T12:27:25.886426

782 / tcp -2089734047 | 2025-01-19T23:18:35.239420

789 / tcp 819727972 | 2025-01-17T00:56:42.669527

832 / tcp 117101543 | 2025-01-29T05:27:32.561309

873 / tcp -1598265216 | 2025-01-30T06:15:14.372953

888 / tcp -972447056 | 2025-02-01T17:49:55.131455

902 / tcp 1956828827 | 2025-01-31T20:50:37.772163

947 / tcp -122096153 | 2025-01-15T19:27:11.660903

953 / tcp -1399940268 | 2025-01-20T16:49:30.486811

992 / tcp -936692830 | 2025-01-17T05:26:55.596525

993 / tcp 320677201 | 2025-02-02T22:31:24.230063

995 / tcp -2113068813 | 2025-01-24T00:35:10.266515

1023 / tcp 1544300041 | 2025-01-21T13:50:51.461756

1025 / tcp 819727972 | 2025-02-01T23:40:07.240219

1026 / tcp 1911457608 | 2025-01-14T21:35:51.772407

1063 / tcp -1810987450 | 2025-01-14T19:05:17.519446

1080 / tcp 1362344524 | 2025-01-26T08:37:21.925837

1177 / tcp -971970408 | 2025-01-27T22:13:57.878418

1195 / tcp -747911285 | 2025-01-15T05:34:16.152681

1198 / tcp -2050145619 | 2025-01-09T09:34:19.871388

1234 / tcp 819727972 | 2025-01-31T19:55:30.605071

1290 / tcp 1911457608 | 2025-01-19T15:04:17.936494

1291 / tcp 1624217396 | 2025-01-13T20:19:06.932609

1293 / tcp 1615193817 | 2025-01-20T21:11:07.208543

1343 / tcp -1399940268 | 2025-01-16T02:56:46.505455

1433 / tcp 419886129 | 2025-02-05T13:30:27.994477

1457 / tcp 1761482307 | 2025-01-24T21:40:42.843445

1515 / tcp 819727972 | 2025-01-23T10:57:17.960052

1521 / tcp -1337747449 | 2025-01-16T10:35:10.250679

1599 / tcp 2087396567 | 2025-02-05T11:43:20.058811

11 / tcp

842535728 | 2025-01-16T02:10:52.089765

13 / tcp

-1036370807 | 2025-02-04T14:28:58.051308

15 / tcp

2087396567 | 2025-01-26T09:49:23.928335

17 / tcp

5698739 | 2025-02-05T12:52:49.948241

19 / tcp

81614701 | 2025-01-11T10:56:19.451581

21 / tcp

1210838212 | 2025-02-04T12:28:00.932444

23 / tcp

676675086 | 2025-01-16T06:23:02.291985

25 / tcp

921225407 | 2025-01-29T20:20:27.514542

37 / tcp

2046098166 | 2025-01-30T11:31:19.039539

38 / tcp

-1032713145 | 2025-01-29T02:30:05.215021

43 / tcp

2087396567 | 2025-01-24T19:19:43.049066

49 / tcp

-801484042 | 2025-02-03T13:05:38.281744

53 / tcp

-626196604 | 2025-02-06T10:31:58.014468

70 / tcp

1412519768 | 2025-02-02T14:43:31.401709

92 / tcp

709622286 | 2025-01-25T08:28:32.128822

104 / tcp

-1477838366 | 2025-01-20T09:11:54.877385

110 / tcp

819727972 | 2025-01-17T21:20:33.062292

111 / tcp

819727972 | 2025-02-01T21:17:04.146183

113 / tcp

-527005584 | 2025-01-27T14:12:38.723686

119 / tcp

141730637 | 2025-01-27T00:36:44.434407

135 / tcp

1302177452 | 2025-01-30T14:56:09.667380

175 / tcp

1077013874 | 2025-01-23T20:34:34.416010

177 / tcp

-1189269828 | 2025-02-06T16:00:30.591859

179 / tcp

-399606100 | 2025-01-22T15:30:46.194915

195 / tcp

819727972 | 2025-01-15T04:52:05.810800

221 / tcp

-2089734047 | 2025-01-18T04:37:45.433720

222 / tcp

-1174972798 | 2025-01-17T20:09:01.083273

264 / tcp

-654288545 | 2025-01-14T02:29:34.666608

285 / tcp

1911457608 | 2025-01-28T00:32:56.923813

311 / tcp

-1547976805 | 2025-01-30T13:28:01.968037

340 / tcp

-444830029 | 2025-01-15T17:06:24.383923

389 / tcp

-1713467553 | 2025-01-29T20:50:18.250879

427 / tcp

1998636604 | 2025-02-04T21:15:22.520697

442 / tcp

-303199180 | 2025-02-02T04:56:09.784160

444 / tcp

-750658243 | 2025-02-01T08:54:13.526324

449 / tcp

819727972 | 2025-01-29T15:31:48.887250

502 / tcp

945910976 | 2025-02-04T22:47:36.067157

503 / tcp

-1114821551 | 2025-02-01T10:27:54.270879

513 / tcp

1574088840 | 2025-01-21T20:26:47.046054

541 / tcp

836108941 | 2025-02-06T20:49:35.481391

548 / tcp

155249582 | 2025-01-26T00:24:33.352936

554 / tcp

-1142488525 | 2025-01-24T20:12:45.575595

593 / tcp

1308377066 | 2025-02-04T01:44:20.861477

636 / tcp

1732481781 | 2025-01-27T06:45:38.950891

646 / tcp

-1206199995 | 2025-01-24T05:45:27.282388

666 / tcp

2098053533 | 2025-02-02T12:27:25.886426

782 / tcp

-2089734047 | 2025-01-19T23:18:35.239420

789 / tcp

819727972 | 2025-01-17T00:56:42.669527

832 / tcp

117101543 | 2025-01-29T05:27:32.561309

873 / tcp

-1598265216 | 2025-01-30T06:15:14.372953

888 / tcp

-972447056 | 2025-02-01T17:49:55.131455

902 / tcp

1956828827 | 2025-01-31T20:50:37.772163

947 / tcp

-122096153 | 2025-01-15T19:27:11.660903

953 / tcp

-1399940268 | 2025-01-20T16:49:30.486811

992 / tcp

-936692830 | 2025-01-17T05:26:55.596525

993 / tcp

320677201 | 2025-02-02T22:31:24.230063

995 / tcp

-2113068813 | 2025-01-24T00:35:10.266515

1023 / tcp

1544300041 | 2025-01-21T13:50:51.461756

1025 / tcp

819727972 | 2025-02-01T23:40:07.240219

1026 / tcp

1911457608 | 2025-01-14T21:35:51.772407

1063 / tcp

-1810987450 | 2025-01-14T19:05:17.519446

1080 / tcp

1362344524 | 2025-01-26T08:37:21.925837

1177 / tcp

-971970408 | 2025-01-27T22:13:57.878418

1195 / tcp

-747911285 | 2025-01-15T05:34:16.152681

1198 / tcp

-2050145619 | 2025-01-09T09:34:19.871388

1234 / tcp

819727972 | 2025-01-31T19:55:30.605071

1290 / tcp

1911457608 | 2025-01-19T15:04:17.936494

1291 / tcp

1624217396 | 2025-01-13T20:19:06.932609

1293 / tcp

1615193817 | 2025-01-20T21:11:07.208543

1343 / tcp

-1399940268 | 2025-01-16T02:56:46.505455

1433 / tcp

419886129 | 2025-02-05T13:30:27.994477

1457 / tcp

1761482307 | 2025-01-24T21:40:42.843445

1515 / tcp

819727972 | 2025-01-23T10:57:17.960052

1521 / tcp

-1337747449 | 2025-01-16T10:35:10.250679

1599 / tcp

2087396567 | 2025-02-05T11:43:20.058811

1604 / tcp

1911457608 | 2025-01-29T22:23:23.300186

1800 / tcp

820958131 | 2025-02-05T12:08:30.973904

1801 / tcp

-1299899661 | 2025-02-02T22:00:44.660757

1830 / tcp

-2089734047 | 2025-01-08T14:56:48.298974

1883 / tcp

819727972 | 2025-01-29T13:31:00.499818