GeneralInformation

Hostnames	cn-hangzhou.oss.aliyuncs.com
Domains	aliyuncs.com
Country	China
City	Hangzhou
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

WebTechnologies

IaaS

Alibaba Cloud Object Storage Service

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 15 17 21 22 23 25 26 37 43 49 53 70 79 80 83 95 96 102 106 110 111 119 135 175 179 195 264 311 443 449 503 515 554 587 593 636 666 873 993 995 1000 1023 1025 1099 1153 1177 1200 1234 1337 1433 1515 1599 1604 1723 1800 1883 1911 1926 2000 2002 2003 2055 2081 2083 2087 2121 2181 2200 2222 2320 2323 2332 2345 2376 2455 2549 2550 2709 2761 3001 3099 3104 3269 3310 3389 3780 3790 3953 4000 4022 4063 4242 4321 4433 4443 4444 4506 4523 4786 4840 4949 5001 5006 5009 5025 5172 5201 5222 5431 5432 5435 5672 5938 5984 6000 6001 6002 6443 6512 6633 6653 6666 6667 6668 7001 7071 7171 7218 7415 7434 7537 7548 7634 8009 8013 8024 8029 8066 8081 8087 8089 8099 8126 8181 8200 8291 8333 8334 8426 8500 8545 8575 8649 8728 8801 8829 8834 8839 8864 8880 8988 9000 9001 9011 9025 9026 9040 9042 9051 9091 9095 9100 9151 9203 9418 9443 9530 9633 9690 9876 9998 9999 10001 10176 10250 10443 10554 10911 11112 11211 12000 12345 14344 16464 16993 19000 20000 20547 20880 23023 25565 27015 27017 28015 30002 30003 31337 32764 33060 35000 37777 41443 44158 44818 47990 50000 50100 51235 51443 52869 55000 55554 60129 61616

1767345577 | 2024-10-13T01:04:20.008720

11 / tcp

Hello, this is Quagga (version 0T).
Copyright 1996-200

1842524259 | 2024-10-08T16:55:58.207268

15 / tcp

-1296032851 | 2024-10-10T05:53:55.001446

17 / tcp

\x01=\x01À\x06ÿÿ?"<ZDECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x01\x01

-1384102091 | 2024-10-01T22:56:56.369315

21 / tcp

220 Firewall Authentication required before proceeding with service\r\n

-649223323 | 2024-10-04T04:48:46.240874

22 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3\r\n

676675086 | 2024-10-04T07:18:36.290879

23 / tcp



Password:

117101543 | 2024-10-16T21:02:56.385659

25 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

321971019 | 2024-09-29T14:16:12.008881

26 / tcp

-ERR client ip is not in whitelist\r

1092730853 | 2024-10-05T06:23:29.028786

37 / tcp

/0 0 L\r\n

1004056929 | 2024-09-25T18:17:45.993994

43 / tcp

Invalid request string: Request string is: "
"

-1867457549 | 2024-10-16T05:38:33.034313

49 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)

-1370420049 | 2024-10-08T21:56:22.441632

53 / tcp

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x00\x02\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x00\x02\x00\x04\xac٣.
\x00\x06\x85\x00\x00\x01\x00\x00\x00\x01\x00

-1967791998 | 2024-10-10T15:13:11.477385

70 / tcp

HTTP/1.1 401 Unauthorized
Server: mini_httpd/1.19 19dec2003
Cache-Control: no-cache,no-store
Content-Type: text/html; charset=%s
Connection: close

-972699072 | 2024-10-20T15:17:23.323334

79 / tcp

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

CVE-2018-10088

1058327199 | 2024-10-10T07:01:41.830037

80 / tcp

HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Thu, 10 Oct 2024 07:01:41 GMT
Content-Type: application/xml
Content-Length: 347
Connection: keep-alive
x-oss-request-id: 67077BD5DC44E03431A6D53E
x-oss-server-time: 0
x-oss-ec: 0003-00001201

-2118655245 | 2024-10-15T23:21:50.987762

83 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

-441419608 | 2024-10-07T20:05:03.272066

95 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

-1810987450 | 2024-10-03T19:28:01.820051

96 / tcp

\xc3\xbf

-1399940268 | 2024-10-15T03:02:14.651838

102 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2033111675 | 2024-09-27T14:06:40.121223

106 / tcp

~djb

165188539 | 2024-09-27T15:13:55.880582

110 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-2089734047 | 2024-09-26T04:38:53.932195

111 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

141730637 | 2024-09-24T10:35:42.336130

119 / tcp

HTTP/1.0 200 OK
Server: Proxy

1483120365 | 2024-10-06T09:17:00.348501

135 / tcp

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: OP2\n IP2: 192.168.0.20\n IP3: 61.230.135.142\n IP4: 2001:b011:2006:c3ef:18c0:9e02:ef7:84c8\n\nNTLMSSP:\nTarget_Name: OP2\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: OP2\nNetBIOS_Computer_Name: OP2\nDNS_Domain_Name: OP2\nDNS_Computer_Name: OP2\nSystem_Time: 2024-01-22 07:10:42 +0000 UTC\n\nDCERPC Dump:\n4b112204-0e19-11d3-b42b-

-1399940268 | 2024-10-08T19:44:09.934193

175 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-399606100 | 2024-10-20T10:05:24.837351

179 / tcp

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

-1316398834 | 2024-09-28T14:02:21.819649

195 / tcp

ÿ

-1547821026 | 2024-10-20T20:50:12.043215

264 / tcp

CheckPoint\nFirewall Host: CPFWVSX1A_Audi_ODP_S2S_vsfw\nSmartCenter Host: admin..afx8nn\\x00\n

749429829 | 2024-09-28T03:30:05.680345

311 / tcp

\xc3\xa3\r\n\r\n\\x01KvInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

1509941291 | 2024-10-21T03:02:27.291764

443 / tcp

HTTP/1.1 403 Forbidden
Server: AliyunOSS
Date: Mon, 21 Oct 2024 03:02:27 GMT
Content-Type: application/xml
Content-Length: 347
Connection: keep-alive
x-oss-request-id: 6715C4433849223137A2CACA
x-oss-server-time: 0
x-oss-ec: 0003-00001201

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:21:e4:e5:73:fc:7f:09:2a:04:98:d5
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: Feb 19 05:01:07 2024 GMT
            Not After : Mar 22 05:01:06 2025 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=cn-hangzhou.oss.aliyuncs.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e4:33:85:33:df:c3:af:64:36:c4:2f:07:75:c9:
                    3a:b3:26:75:db:43:da:5c:3a:52:cd:1a:22:6e:91:
                    63:82:4a:49:60:30:02:b2:57:00:98:0e:8d:7c:8a:
                    70:cf:bf:d6:9b:82:41:ea:ba:94:fb:3a:bb:e8:7c:
                    2f:79:90:84:d7:a7:24:a3:ef:ee:6a:a7:8e:cf:2a:
                    e0:d1:9a:ac:9c:b6:8c:0c:a4:2f:62:20:54:e0:14:
                    86:b1:3c:7a:30:f2:19:7e:d1:39:17:e9:d6:18:6e:
                    c3:33:ed:1a:4c:e1:9c:89:36:0f:3c:4c:c7:85:60:
                    6e:18:95:3c:c7:a5:3e:77:2e:3a:bb:a8:ff:56:38:
                    37:86:64:c1:7f:36:de:ac:0f:53:7e:b2:09:3e:e0:
                    7a:12:10:10:fb:73:5d:d8:44:08:54:86:67:b0:f9:
                    7d:c4:5a:e4:bf:09:89:1e:c4:8c:fe:0f:de:e3:00:
                    7b:3c:95:53:77:3c:78:dc:c6:13:a1:d2:89:33:66:
                    f1:ef:82:ea:9d:48:1e:5e:ee:cc:26:6c:4e:22:5c:
                    70:e5:4f:6e:9f:29:f2:96:e2:32:8f:1f:f5:ce:7c:
                    59:a7:ce:66:16:c6:1d:8a:e4:f2:3b:ae:7d:4c:23:
                    40:3b:65:06:b9:02:54:82:88:ed:c5:5f:25:7b:db:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
            X509v3 Subject Alternative Name: 
                DNS:cn-hangzhou.oss.aliyuncs.com, DNS:*.oss-cn-hangzhou.aliyuncs.com, DNS:*.img-cn-hangzhou-internal.aliyuncs.com, DNS:*.oss-cn-hzjbp-a-internal.aliyuncs.com, DNS:*.oss-cn-hangzhou-internal.aliyuncs.com, DNS:*.oss-cn-hangzhou-diku-internal.aliyuncs.com, DNS:*.cn-hangzhou.oss.aliyuncs.com, DNS:*.oss-enet-cm.aliyuncs.com, DNS:*.cn-hangzhou.oss-internal-cross.aliyun-inc.com, DNS:*.oss-cn-hangzhou-am101.aliyuncs.com, DNS:*.oss-internal.aliyuncs.com, DNS:*.oss-accelerate.aliyuncs.com, DNS:*.oss-cn-hzjbp-b-internal.aliyuncs.com, DNS:*.img-cn-hangzhou.aliyuncs.com, DNS:*.oss-accelerate-overseas.aliyuncs.com, DNS:*.oss-cn-hangzhou-zmf.aliyuncs.com, DNS:*.oss-cn-hangzhou-hsa.aliyuncs.com, DNS:*.aliyuncs.com, DNS:*.oss.aliyuncs.com, DNS:*.oss-cn-hangzhou-cross.aliyuncs.com, DNS:*.vpc100-oss-cn-hangzhou.aliyuncs.com, DNS:*.oss-cn-hzfinance.aliyuncs.com, DNS:*.oss-enet.aliyuncs.com, DNS:*.cn-hangzhou.oss-internal.aliyuncs.com, DNS:*.oss-enet-cu.aliyuncs.com, DNS:*.oss-enet-ct.aliyuncs.com, DNS:*.oss-cn-hangzhou-zmf-internal.aliyuncs.com, DNS:*.oss-cn-hzfinance-internal.aliyuncs.com, DNS:*.cn-hangzhou-finance.oss.aliyuncs.com, DNS:*.oss-cn-hzjbp-b-console.aliyuncs.com, DNS:*.oss-cache-cn-hangzhou-j.aliyuncs.com, DNS:*.oss-cache-cn-hangzhou-j-cross.aliyuncs.com, DNS:*.oss-enet-cn-east.aliyuncs.com, DNS:*.cn-hangzhou-vpc.oss.aliyuncs.com, DNS:*.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-hangzhou.oss-accesspoint.aliyuncs.com, DNS:*.oss-cn-hangzhou-internal.oss-accesspoint.aliyuncs.com, DNS:*.cn-hangzhou.oss-console.aliyuncs.com, DNS:*.s3.oss-cn-hangzhou.aliyuncs.com, DNS:*.s3.oss-cn-hangzhou-internal.aliyuncs.com, DNS:*.cn-hangzhou.mgw.aliyuncs.com, DNS:*.oss.cn-hangzhou.privatelink.aliyuncs.com, DNS:*.oss-cn-hangzhou.oss-object-process.aliyuncs.com, DNS:*.oss-cn-hangzhou-internal.oss-object-process.aliyuncs.com, DNS:*.s3.oss-accelerate.aliyuncs.com, DNS:*.s3.oss-accelerate-overseas.aliyuncs.com, DNS:*.cn-hangzhou-cross.mgw.aliyuncs.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            X509v3 Subject Key Identifier: 
                A9:B4:08:AD:74:76:24:F8:94:02:09:AF:A1:CD:4B:1D:51:33:C1:61
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 19 05:01:09.851 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:4C:A8:93:C6:9D:10:B5:44:EA:22:C4:6E:
                                92:C3:E2:B2:9B:DE:7D:ED:7C:E4:13:66:7C:BC:00:C6:
                                55:E5:30:FD:02:20:52:7C:85:F1:3E:EA:BE:9A:8E:4B:
                                99:EE:3E:1B:E9:01:06:7D:47:E3:D8:82:C0:E4:29:46:
                                11:A5:F1:30:AB:51
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Feb 19 05:01:09.861 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:FA:47:21:1A:96:CD:EC:11:AE:C7:7C:
                                D9:67:C2:68:9E:BC:61:58:CE:23:BD:45:DD:5F:E5:49:
                                7B:EB:33:BC:CA:02:20:70:0A:31:A8:28:9A:BD:14:21:
                                5C:0A:E9:AA:DD:72:24:80:CE:39:27:5F:A0:48:0E:9C:
                                52:D1:13:61:E3:53:47
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 19 05:01:09.819 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:32:A3:F7:00:A4:8C:A6:78:04:A5:44:F7:
                                70:3D:F8:E4:8D:71:DA:26:14:63:0D:D1:34:8A:C4:5A:
                                C4:ED:62:FC:02:20:39:FD:AC:A3:E6:79:99:18:43:7D:
                                71:8D:1B:B5:39:98:E2:04:70:DD:FD:D2:4F:CD:22:0D:
                                D6:85:2E:46:B7:D5
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        27:c4:7d:9b:75:a3:41:86:a4:06:5f:b8:66:d0:3e:cd:73:9c:
        b2:ba:f0:f3:5b:b9:5c:61:75:10:f9:ec:00:3f:f1:35:1b:64:
        02:ef:a2:0b:64:fe:3a:5f:bd:59:fa:34:17:50:9f:ec:97:0d:
        e8:d9:2c:f4:30:27:5a:51:83:cf:7d:e5:ae:0f:68:b9:ec:a1:
        05:52:98:ff:1d:0b:8a:94:8a:f7:0b:32:e8:2b:91:f2:52:a8:
        ac:44:a7:ab:e0:ae:4f:7e:aa:59:d5:e0:92:e6:ea:6f:a1:3b:
        97:93:68:06:84:a1:8c:eb:76:62:39:00:ff:90:29:b2:90:4c:
        cf:36:f1:82:48:7b:d9:64:f4:6f:fc:1e:e3:90:9d:ea:e0:98:
        f3:99:cd:ca:19:6e:fd:7e:72:12:0e:b6:78:7e:a1:27:7c:a3:
        1f:e5:bc:16:ac:2c:73:fc:1d:db:37:21:6e:7d:30:1d:67:41:
        3e:8d:78:f0:08:76:83:43:df:1d:29:5b:74:9e:20:e0:10:b8:
        69:43:d2:39:ea:65:aa:8b:3f:09:23:82:a5:3a:b8:ad:7f:71:
        9d:22:d8:eb:85:ca:77:97:b1:38:29:02:5d:d1:de:04:ff:cf:
        6d:7c:ee:91:c4:34:33:dc:92:52:f9:48:0c:5f:10:40:dc:5d:
        7d:16:5c:a2

-1399940268 | 2024-10-06T00:56:06.384905

449 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2024-09-26T00:47:35.846399

503 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-154107716 | 2024-10-12T23:19:58.569105

515 / tcp

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST ...

-1142488525 | 2024-10-08T02:48:33.609044

554 / tcp

RTSP/1.0 401 Unauthorized
CSeq: 0

-1387531546 | 2024-10-09T01:39:44.442684

587 / tcp

220 ESMTP MAIL Server\r\n250-mail.sunnywheel.com.tw\r\n250-PIPELINING\r\n250-SIZE 25600000\r\n250-VRFY\r\n250-ETRN\r\n250-STARTTLS\r\n250-AUTH PLAIN LOGIN\r\n250-ENHANCEDSTATUSCODES\r\n250-8BITMIME\r\n250-DSN\r\n250-SMTPUTF8\r\n250 CHUNKING\r\n502 5.5.2 Error: command not recognized\r\n

1308377066 | 2024-10-02T12:43:18.590290

593 / tcp

ncacn_http/1.0

1402312074 | 2024-10-02T09:37:24.199336

636 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 13-51264013-0 0NNN RT(1705909593861 113) q(-1 -1 -1 -1) r(0 -1) b1

2098053533 | 2024-10-06T18:04:00.183664

666 / tcp

HTTP/1.1 401 Unauthorized
Server: nginx/1.17.7
Content-Type: text/html
Connection: keep-alive

-1598265216 | 2024-10-17T22:23:10.221735

873 / tcp

@RSYNCD: 31.0

-2096652808 | 2024-10-03T07:26:14.834776

993 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-2113068813 | 2024-10-08T08:16:08.880810

995 / tcp

+OK POP3 server ready\n

165188539 | 2024-10-12T00:49:34.069744

1000 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1839934832 | 2024-10-11T01:29:31.546845

1023 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1327660293 | 2024-09-23T21:20:38.519832

1025 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

165188539 | 2024-10-08T10:00:03.238008

1099 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-1839934832 | 2024-10-05T21:43:22.502435

1153 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-971970408 | 2024-10-20T15:50:48.118908

1177 / tcp

740837454 | 2024-10-05T06:23:51.065376

1200 / tcp

SSH-2.0-OpenSSH_5.3

-358801646 | 2024-10-08T09:07:43.410610

1234 / tcp

SSH-2.0-OpenSSH_6.6.1

290819026 | 2024-09-26T10:21:39.132462

1337 / tcp

welcome to Pandora console!
----------------------------
-------------------------
|     Login Time     |     2021-12-08 1...

555056254 | 2024-10-13T03:17:26.297470

1433 / tcp

MSSQL Server\nVersion: 171050560 (0xa320640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: 3NXCU7QCCJGSTII\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: 3NXCU7QCCJGSTII\nNetBIOS_Computer_Name: 3NXCU7QCCJGSTII\nDNS_Domain_Name: 3NXCU7QCCJGSTII\nDNS_Computer_Name: 3NXCU7QCCJGSTII\nMsvAvFlags: 01000000\nSystem_Time: 2024-01-22 01:19:47 +0000 UTC\n\n

1308377066 | 2024-10-13T17:07:50.902361

1515 / tcp

ncacn_http/1.0

-971970408 | 2024-09-27T14:55:27.603897

1599 / tcp

1504401647 | 2024-09-28T14:27:56.633692

1604 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

1103582599 | 2024-10-02T08:29:45.861337

1723 / tcp

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

-1327660293 | 2024-09-27T21:15:26.315146

1800 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

472902042 | 2024-10-06T10:51:59.713399

1883 / tcp

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

632542934 | 2024-09-26T23:25:22.013251

1911 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-2096652808 | 2024-10-18T06:23:27.817341

1926 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1279886438 | 2024-10-12T04:22:48.903769

2000 / tcp

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

1887224352 | 2024-09-25T19:32:42.389263

2002 / tcp

-1399940268 | 2024-10-08T11:00:24.675406

2003 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1282941221 | 2024-09-24T13:10:02.201874

2055 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1911457608 | 2024-10-09T06:26:43.649191

2081 / tcp

\x00[\x00\x00\x00\x00\x00\x00

819727972 | 2024-10-20T16:47:21.115309

2083 / tcp

SSH-2.0-OpenSSH_7.4

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-6111 13 moreCVE-2019-6110 CVE-2019-6109 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

2087396567 | 2024-10-22T02:32:11.065788

2087 / tcp

kjnkjabhbanc283ubcsbhdc72

141730637 | 2024-10-18T09:26:32.656910

2121 / tcp

HTTP/1.0 200 OK
Server: Proxy

546151771 | 2024-10-17T23:50:54.452545

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

1023953321 | 2024-10-06T13:02:11.833328

2200 / tcp

HTTP/1.0 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm="proxy"
Connection: close
Content-type: text/html; charset=utf-8

372433470 | 2024-10-16T21:23:16.131577

2222 / tcp

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

819727972 | 2024-10-17T23:15:49.073192

2320 / tcp

SSH-2.0-OpenSSH_7.4

1662205251 | 2024-10-05T17:55:03.371753

2323 / tcp

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

-1888448627 | 2024-10-09T16:22:05.423396

2332 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

745343730 | 2024-10-20T23:51:58.433613

2345 / tcp

220 smtp.qq.com Esmtp QQ Mail Server

-297128567 | 2024-09-25T08:40:42.252584

2376 / tcp

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

-136006866 | 2024-10-21T01:25:05.739167

2455 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

-407828767 | 2024-10-09T03:07:38.939757

2549 / tcp

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

-339084706 | 2024-10-04T19:33:09.320026

2550 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

945910976 | 2024-10-03T11:49:59.975134

2709 / tcp

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

-1032713145 | 2024-10-11T18:55:26.777139

2761 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

1332894250 | 2024-10-17T23:18:14.628972

3001 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

-1907909544 | 2024-10-08T00:14:57.082372

3099 / tcp

\r\nHello, this is Quagga (version 0T).\r\nCopyright 1996-200

-2107996212 | 2024-10-17T17:17:44.187695

3104 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

119860953 | 2024-10-08T10:11:34.929080

3269 / tcp

* OK ArGoSoft Mail Server IMAP Module v.YW at

-1428621233 | 2024-10-09T11:20:42.900917

3310 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

623170236 | 2024-10-15T19:33:34.786920

3389 / tcp

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x1f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: PC82139\nProduct_Version: 10.0.19041 Ntlm 15\nOS: Windows 10, Version 2004/Windows Server, Version 2004\nNetBIOS_Domain_Name: PC82139\nNetBIOS_Computer_Name: PC82139\nDNS_Domain_Name: PC82139\nDNS_Computer_Name: PC82139\nSystem_Time: 2024-01-19 08:39:46 +0000 UTC\n\n

539065883 | 2024-10-08T14:11:16.918246

3780 / tcp

1690634669 | 2024-10-01T04:13:37.612260

3790 / tcp

-2031152423 | 2024-10-04T20:38:54.616625

3953 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

1300162323 | 2024-09-28T18:22:15.657326

4000 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

740837454 | 2024-10-07T20:32:07.413331

4022 / tcp

SSH-2.0-OpenSSH_5.3

-1839934832 | 2024-10-08T22:29:23.989136

4063 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1879056922 | 2024-10-11T11:40:22.274326

4242 / tcp

HTTP/1.1 403 Forbidden
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close

-1250504565 | 2024-10-07T18:00:33.045115

4321 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

104385780 | 2024-10-09T15:45:11.794070

4433 / tcp

ceph v2

285437346 | 2024-09-29T16:01:23.948114

4443 / tcp

HTTP/1.1 200 OK
Content-Type: text/xml
X-Transcend-Version: 1
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
X-Frame-Options: deny
X-Content-Type-Options: nosniff
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: no-referrer
Clear-Site-Data: "cache","cookies","storage"
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
X-XSS-Protection: 0

1308377066 | 2024-10-02T00:24:26.285079

4444 / tcp

ncacn_http/1.0

988099889 | 2024-09-25T22:31:56.427709

4506 / tcp

[ºs

-1399940268 | 2024-09-26T21:16:46.463285

4523 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-358801646 | 2024-09-30T20:04:44.804427

4786 / tcp

SSH-2.0-OpenSSH_6.6.1

1911457608 | 2024-10-13T05:55:52.408987

4840 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2024-10-09T05:59:23.676686

4949 / tcp

kjnkjabhbanc283ubcsbhdc72

-2081419599 | 2024-09-24T01:52:15.692390

5001 / tcp

@
03d

-1261090339 | 2024-10-17T14:40:44.788818

5006 / tcp

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

-1338936697 | 2024-10-05T21:49:20.643614

5009 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2109_PStjdxtk16_38957-48596

-1699556818 | 2024-10-03T22:34:24.373003

5025 / tcp

\x01remshd: Kerberos Authentication not enabled.\n

1741579575 | 2024-10-04T12:57:33.141181

5172 / tcp

-1019343788 | 2024-10-09T07:37:56.144931

5201 / tcp

W!\x00\x00\x00\x00

-1036370807 | 2024-10-03T19:22:10.631048

5222 / tcp

JDWP-Handshake

-582957865 | 2024-10-02T06:45:10.242609

5431 / tcp

HTTP/1.1 404 Not Found
DATE: Fri, 19 Jan 2024 11:56:42 GMT
Connection: Keep-Alive
Server: LINUX/2.4 UPnP/1.0 BRCM400/1.0
Content-Type: text/xml; charset="utf-8"
EXT:

580340387 | 2024-10-06T16:38:25.997110

5432 / tcp

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

-1399940268 | 2024-10-02T16:19:34.454624

5435 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

575925250 | 2024-10-09T23:01:14.116956

5672 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

669849225 | 2024-10-11T19:06:26.853921

5938 / tcp

SSH-98.60-SysaxSSH_81885..42\r\n

1999272906 | 2024-10-04T19:17:24.217433

5984 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

-1059554316 | 2024-10-18T11:12:24.132402

6000 / tcp

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

-2089734047 | 2024-10-03T09:06:58.450843

6001 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1542849631 | 2024-10-21T00:19:29.503007

6002 / tcp

* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at

583832647 | 2024-10-05T21:27:13.683376

6443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sat, 05 Oct 2024 21:27:13 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.110.177.103:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

1919228981 | 2024-09-22T19:55:35.249673

6512 / tcp

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

2098371729 | 2024-10-17T20:14:36.170408

6633 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

1911457608 | 2024-09-27T21:32:13.310546

6653 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1327849035 | 2024-10-18T09:53:43.302308

6666 / tcp

HTTP/1.1 200 OK
Server: Webs
X-Frame-Options: SAMEORIGIN
Content-Type: text/html
Connection: keep-alive
Keep-Alive: timeout=60, max=99

-2107996212 | 2024-09-25T15:07:52.153824

6667 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-1399940268 | 2024-09-29T09:06:49.602306

6668 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-274925451 | 2024-10-05T19:42:50.912193

7001 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2914_PSzqstdxnz35_3380-26211

722711397 | 2024-10-03T18:56:08.517870

7071 / tcp

\x00[M\xc3\xba\xc3\x9a\x7f\x00\x00

1911457608 | 2024-10-21T16:16:05.038733

7171 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1839934832 | 2024-10-06T08:47:36.365823

7218 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-980525298 | 2024-10-09T20:19:04.757587

7415 / tcp

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-314039103 | 2024-10-08T13:20:25.398014

7434 / tcp

Surnom.
Sorry, that nickname format is invalid.

1830187220 | 2024-10-05T16:52:00.078993

7537 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

2087396567 | 2024-10-10T21:47:10.190278

7548 / tcp

kjnkjabhbanc283ubcsbhdc72

1469043098 | 2024-10-16T09:48:10.091360

7634 / tcp

hddtemp
	: :  
	: :

-1114821551 | 2024-10-21T20:24:45.935196

8009 / tcp

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

745343730 | 2024-10-01T19:36:36.938397

8013 / tcp

220 smtp.qq.com Esmtp QQ Mail Server

-1839934832 | 2024-09-30T20:58:49.984061

8024 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

1282941221 | 2024-10-07T10:40:24.644472

8029 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-1399940268 | 2024-10-05T03:36:05.964294

8066 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1476017887 | 2024-10-02T20:41:00.890446

8081 / tcp

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

-2031152423 | 2024-09-26T07:54:39.734539

8087 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

2087396567 | 2024-10-11T21:42:13.233384

8089 / tcp

kjnkjabhbanc283ubcsbhdc72

438715403 | 2024-09-24T18:28:28.844832

8099 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2874_pingwangtong53_24882-28622

-1399940268 | 2024-10-15T16:19:27.448630

8126 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-154107716 | 2024-10-15T21:57:40.475149

8181 / tcp

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST ...

1320285193 | 2024-10-11T02:23:55.371225

8200 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

165188539 | 2024-10-18T21:11:05.902494

8291 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1335782347 | 2024-10-02T19:04:57.307737

8333 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705940700.09-waf02bjtp3

-119996482 | 2024-09-25T14:29:11.643993

8334 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

-1019343788 | 2024-10-15T01:24:47.301807

8426 / tcp

W!\x00\x00\x00\x00

1929293267 | 2024-10-16T20:52:21.728120

8500 / tcp

HTTP/1.1 404 Not Found
Server: nginx
Content-Type: text/html; charset=utf-8
Connection: keep-alive

632542934 | 2024-10-01T07:34:29.941154

8545 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1126993057 | 2024-10-09T23:22:47.318298

8575 / tcp

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

842535728 | 2024-09-30T10:57:43.289509

8649 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

740837454 | 2024-10-19T00:03:40.313007

8728 / tcp

SSH-2.0-OpenSSH_5.3

820958131 | 2024-09-23T00:48:40.473852

8801 / tcp

kjnkjabhbanc283ubcsbhdc72\x02

-1996280214 | 2024-10-06T15:30:45.939153

8829 / tcp

\x06\x04\x05@

2087396567 | 2024-10-20T21:51:39.070448

8834 / tcp

kjnkjabhbanc283ubcsbhdc72

1308377066 | 2024-10-01T00:56:40.530451

8839 / tcp

ncacn_http/1.0

1282941221 | 2024-09-25T21:39:28.020173

8864 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

2087396567 | 2024-10-09T17:22:45.565712

8880 / tcp

kjnkjabhbanc283ubcsbhdc72

-1795027372 | 2024-10-11T20:14:33.721595

8988 / tcp

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

-2067028711 | 2024-10-03T19:56:23.160325

9000 / tcp

\x15\x03\x01\x00\x02\x02F

-1026951088 | 2024-10-11T18:04:05.281215

9001 / tcp

erro ip

-441419608 | 2024-09-29T16:57:50.711269

9011 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

632542934 | 2024-10-10T23:06:31.609765

9025 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1538260461 | 2024-10-17T03:20:50.077403

9026 / tcp

\x01\x00\x00\x00

1311501949 | 2024-10-06T18:39:14.104398

9040 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65aa14df_PSfjqzdxid16_23679-23338

-971970408 | 2024-10-21T09:07:03.831586

9042 / tcp

1082732927 | 2024-10-13T21:38:58.598306

9051 / tcp

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

1286504516 | 2024-10-20T18:11:01.782200

9091 / tcp

CP2E Control Console
Connected to Host: gZI

-2096652808 | 2024-10-08T04:13:16.433267

9095 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1911457608 | 2024-10-21T15:34:32.439655

9100 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1559123399 | 2024-10-06T09:45:00.769389

9151 / tcp

500 Permission denied - closing connection.

-457235091 | 2024-10-06T03:34:34.473126

9203 / tcp

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

-833168972 | 2024-09-29T22:29:59.593102

9418 / tcp

HTTP/1.1 200 
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked

1866470291 | 2024-09-25T21:16:45.313135

9443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Wed, 25 Sep 2024 21:16:45 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.110.177.103:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

-2096652808 | 2024-10-09T05:19:26.702528

9530 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

819727972 | 2024-10-21T21:35:49.959568

9633 / tcp

SSH-2.0-OpenSSH_7.4

-1810987450 | 2024-10-08T13:22:32.773240

9690 / tcp

\xc3\xbf

1127011450 | 2024-10-19T05:24:35.373925

9876 / tcp

HTTP/1.1 200 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Accept-Ranges: bytes
Content-Type: text/html;charset=utf-8
Content-Language: en

-1223770960 | 2024-10-12T13:57:34.551308

9998 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28e5_PS-PEK-01Whk40_31773-63705

1161309183 | 2024-10-06T18:23:59.723217

9999 / tcp

ProxyServer is ready

1492413928 | 2024-10-08T18:48:41.185719

10001 / tcp

SSH-2.0-OpenSSH_7.5

1741579575 | 2024-10-16T17:43:51.297128

10176 / tcp

1544300041 | 2024-10-21T22:01:21.064799

10250 / tcp

SSH-25453-Cisco-3524665.35

1881230227 | 2024-10-06T22:00:38.547048

10443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 06 Oct 2024 22:00:38 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.110.177.103:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

819727972 | 2024-10-16T08:13:33.798831

10554 / tcp

SSH-2.0-OpenSSH_7.4

-1032713145 | 2024-10-20T16:58:23.676507

10911 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

1991883981 | 2024-10-02T10:46:45.346822

11112 / tcp

B\x00\x00\x00\xc3\xbfn\x04Too many connections

-136006866 | 2024-10-10T17:24:10.052339

11211 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

-1723613895 | 2024-10-20T02:09:30.650016

12000 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2232_PS-HAK-01h6h34_6336-63973

296364507 | 2024-10-21T19:15:37.151267

12345 / tcp

HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

1911457608 | 2024-10-04T23:20:51.864407

14344 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2024-10-20T14:19:27.393281

16464 / tcp

kjnkjabhbanc283ubcsbhdc72

740837454 | 2024-10-20T06:14:04.482771

16993 / tcp

SSH-2.0-OpenSSH_5.3

-1839934832 | 2024-10-02T01:22:43.662179

19000 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

1900503736 | 2024-10-20T16:45:50.136158

20000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

-1399940268 | 2024-10-13T18:03:37.420099

20547 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1370263973 | 2024-09-30T18:05:38.555177

20880 / tcp

dubbo>

819727972 | 2024-10-01T23:59:31.620521

23023 / tcp

SSH-2.0-OpenSSH_7.4

1767345577 | 2024-10-22T04:04:48.462961

25565 / tcp

Hello, this is Quagga (version 0T).
Copyright 1996-200

-232716176 | 2024-10-12T23:23:26.973807

27015 / tcp

Command: None
Size: 759714643
ID: 758132274
Type: 1852141647

1763259671 | 2024-10-15T12:10:45.702208

27017 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

819727972 | 2024-10-21T19:55:11.974969

28015 / tcp

SSH-2.0-OpenSSH_7.4

-1729629024 | 2024-10-05T02:37:49.497156

30002 / tcp

101 imqbroker =unV

211952361 | 2024-09-24T23:47:37.357683

30003 / tcp

BÿnToo many connections

-147424911 | 2024-10-18T07:18:12.299954

31337 / tcp

HTTP/1.1 404 Not Found
Content Length: 0

1741579575 | 2024-10-17T20:18:26.964548

32764 / tcp

2087396567 | 2024-10-17T04:37:19.367721

33060 / tcp

kjnkjabhbanc283ubcsbhdc72

-1888448627 | 2024-10-17T09:50:58.836115

35000 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-784071826 | 2024-10-21T09:28:33.924167

37777 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-16905 7 moreCVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368

1741579575 | 2024-10-20T17:37:40.259068

41443 / tcp

-433302150 | 2024-10-12T11:03:39.530630

44158 / tcp

/multistream/1.0.0

-2017887953 | 2024-09-30T15:59:45.006464

44818 / tcp

SSH-2.0-OpenSSH_7.9

CVE-2008-3844 CVE-2021-41617 CVE-2020-15778 CVE-2020-14145 CVE-2019-16905 11 moreCVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2016-20012 CVE-2007-2768 CVE-2023-51767 CVE-2023-51385 CVE-2023-48795 CVE-2023-38408 CVE-2021-36368 CVE-2018-20685

-438503381 | 2024-09-27T02:08:07.296629

47990 / tcp

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

819727972 | 2024-10-17T05:36:26.546640

50000 / tcp

SSH-2.0-OpenSSH_7.4

128380719 | 2024-10-18T01:52:37.251752

50100 / tcp

-339084706 | 2024-10-13T03:41:01.312111

51235 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

2087396567 | 2024-10-16T22:56:13.656079

51443 / tcp

kjnkjabhbanc283ubcsbhdc72

-1072158793 | 2024-10-17T15:16:33.766986

52869 / tcp

HTTP/1.1 500 Internal Server Error
SERVER: Linux/2.6.21.5, UPnP/1.0, Portable SDK for UPnP devices/1.6.6
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

819727972 | 2024-10-05T00:30:38.571561

55000 / tcp

SSH-2.0-OpenSSH_7.4

-1013082686 | 2024-09-25T19:54:00.157283

55554 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

201984321 | 2024-09-25T23:39:17.370324

60129 / tcp

ÿû
Welcome to NetLinx v94 Copyright AMX Corp. 34395-49007
>

291723434 | 2024-09-24T11:09:19.004010

61616 / tcp


Lantronix MSS100 Version V118/523(045538937)

Type HELP at the 'Local_61349> ' prompt for assistance.



Username>

47.110.177.103

Last Seen: 2024-10-22

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 79 Port 1200 Port 2083 Port 2320 Port 4022 Port 8728 Port 9633 Port 10001 Port 10554 Port 16993 Port 23023 Port 28015 Port 37777 Port 44818 Port 50000 Port 55000 Latest CVSS

OpenPorts

1767345577 | 2024-10-13T01:04:20.008720 11 / tcp

1842524259 | 2024-10-08T16:55:58.207268 15 / tcp

-1296032851 | 2024-10-10T05:53:55.001446 17 / tcp

-1384102091 | 2024-10-01T22:56:56.369315 21 / tcp

-649223323 | 2024-10-04T04:48:46.240874 22 / tcp

676675086 | 2024-10-04T07:18:36.290879 23 / tcp

117101543 | 2024-10-16T21:02:56.385659 25 / tcp

321971019 | 2024-09-29T14:16:12.008881 26 / tcp

1092730853 | 2024-10-05T06:23:29.028786 37 / tcp

1004056929 | 2024-09-25T18:17:45.993994 43 / tcp

-1867457549 | 2024-10-16T05:38:33.034313 49 / tcp

-1370420049 | 2024-10-08T21:56:22.441632 53 / tcp

-1967791998 | 2024-10-10T15:13:11.477385 70 / tcp

-972699072 | 2024-10-20T15:17:23.323334 79 / tcp

1058327199 | 2024-10-10T07:01:41.830037 80 / tcp

-2118655245 | 2024-10-15T23:21:50.987762 83 / tcp

-441419608 | 2024-10-07T20:05:03.272066 95 / tcp

-1810987450 | 2024-10-03T19:28:01.820051 96 / tcp

-1399940268 | 2024-10-15T03:02:14.651838 102 / tcp

-2033111675 | 2024-09-27T14:06:40.121223 106 / tcp

165188539 | 2024-09-27T15:13:55.880582 110 / tcp

-2089734047 | 2024-09-26T04:38:53.932195 111 / tcp

141730637 | 2024-09-24T10:35:42.336130 119 / tcp

1483120365 | 2024-10-06T09:17:00.348501 135 / tcp

-1399940268 | 2024-10-08T19:44:09.934193 175 / tcp

-399606100 | 2024-10-20T10:05:24.837351 179 / tcp

-1316398834 | 2024-09-28T14:02:21.819649 195 / tcp

-1547821026 | 2024-10-20T20:50:12.043215 264 / tcp

749429829 | 2024-09-28T03:30:05.680345 311 / tcp

1509941291 | 2024-10-21T03:02:27.291764 443 / tcp

-1399940268 | 2024-10-06T00:56:06.384905 449 / tcp

-1399940268 | 2024-09-26T00:47:35.846399 503 / tcp

-154107716 | 2024-10-12T23:19:58.569105 515 / tcp

-1142488525 | 2024-10-08T02:48:33.609044 554 / tcp

-1387531546 | 2024-10-09T01:39:44.442684 587 / tcp

1308377066 | 2024-10-02T12:43:18.590290 593 / tcp

1402312074 | 2024-10-02T09:37:24.199336 636 / tcp

2098053533 | 2024-10-06T18:04:00.183664 666 / tcp

-1598265216 | 2024-10-17T22:23:10.221735 873 / tcp

-2096652808 | 2024-10-03T07:26:14.834776 993 / tcp

-2113068813 | 2024-10-08T08:16:08.880810 995 / tcp

165188539 | 2024-10-12T00:49:34.069744 1000 / tcp

-1839934832 | 2024-10-11T01:29:31.546845 1023 / tcp

-1327660293 | 2024-09-23T21:20:38.519832 1025 / tcp

165188539 | 2024-10-08T10:00:03.238008 1099 / tcp

-1839934832 | 2024-10-05T21:43:22.502435 1153 / tcp

-971970408 | 2024-10-20T15:50:48.118908 1177 / tcp

740837454 | 2024-10-05T06:23:51.065376 1200 / tcp

-358801646 | 2024-10-08T09:07:43.410610 1234 / tcp

290819026 | 2024-09-26T10:21:39.132462 1337 / tcp

555056254 | 2024-10-13T03:17:26.297470 1433 / tcp

1308377066 | 2024-10-13T17:07:50.902361 1515 / tcp

-971970408 | 2024-09-27T14:55:27.603897 1599 / tcp

1504401647 | 2024-09-28T14:27:56.633692 1604 / tcp

1103582599 | 2024-10-02T08:29:45.861337 1723 / tcp

-1327660293 | 2024-09-27T21:15:26.315146 1800 / tcp

472902042 | 2024-10-06T10:51:59.713399 1883 / tcp

632542934 | 2024-09-26T23:25:22.013251 1911 / tcp

-2096652808 | 2024-10-18T06:23:27.817341 1926 / tcp

-1279886438 | 2024-10-12T04:22:48.903769 2000 / tcp

1887224352 | 2024-09-25T19:32:42.389263 2002 / tcp

-1399940268 | 2024-10-08T11:00:24.675406 2003 / tcp

1282941221 | 2024-09-24T13:10:02.201874 2055 / tcp

1911457608 | 2024-10-09T06:26:43.649191 2081 / tcp

819727972 | 2024-10-20T16:47:21.115309 2083 / tcp

2087396567 | 2024-10-22T02:32:11.065788 2087 / tcp

141730637 | 2024-10-18T09:26:32.656910 2121 / tcp

546151771 | 2024-10-17T23:50:54.452545 2181 / tcp

1023953321 | 2024-10-06T13:02:11.833328 2200 / tcp

372433470 | 2024-10-16T21:23:16.131577 2222 / tcp

819727972 | 2024-10-17T23:15:49.073192 2320 / tcp

1662205251 | 2024-10-05T17:55:03.371753 2323 / tcp

-1888448627 | 2024-10-09T16:22:05.423396 2332 / tcp

Vulnerabilities

1767345577 | 2024-10-13T01:04:20.008720
11 / tcp

1842524259 | 2024-10-08T16:55:58.207268
15 / tcp

-1296032851 | 2024-10-10T05:53:55.001446
17 / tcp

-1384102091 | 2024-10-01T22:56:56.369315
21 / tcp

-649223323 | 2024-10-04T04:48:46.240874
22 / tcp

676675086 | 2024-10-04T07:18:36.290879
23 / tcp

117101543 | 2024-10-16T21:02:56.385659
25 / tcp

321971019 | 2024-09-29T14:16:12.008881
26 / tcp

1092730853 | 2024-10-05T06:23:29.028786
37 / tcp

1004056929 | 2024-09-25T18:17:45.993994
43 / tcp

-1867457549 | 2024-10-16T05:38:33.034313
49 / tcp

-1370420049 | 2024-10-08T21:56:22.441632
53 / tcp

-1967791998 | 2024-10-10T15:13:11.477385
70 / tcp

-972699072 | 2024-10-20T15:17:23.323334
79 / tcp

1058327199 | 2024-10-10T07:01:41.830037
80 / tcp

-2118655245 | 2024-10-15T23:21:50.987762
83 / tcp

-441419608 | 2024-10-07T20:05:03.272066
95 / tcp

-1810987450 | 2024-10-03T19:28:01.820051
96 / tcp

-1399940268 | 2024-10-15T03:02:14.651838
102 / tcp

-2033111675 | 2024-09-27T14:06:40.121223
106 / tcp

165188539 | 2024-09-27T15:13:55.880582
110 / tcp

-2089734047 | 2024-09-26T04:38:53.932195
111 / tcp

141730637 | 2024-09-24T10:35:42.336130
119 / tcp

1483120365 | 2024-10-06T09:17:00.348501
135 / tcp

-1399940268 | 2024-10-08T19:44:09.934193
175 / tcp

-399606100 | 2024-10-20T10:05:24.837351
179 / tcp

-1316398834 | 2024-09-28T14:02:21.819649
195 / tcp

-1547821026 | 2024-10-20T20:50:12.043215
264 / tcp

749429829 | 2024-09-28T03:30:05.680345
311 / tcp

1509941291 | 2024-10-21T03:02:27.291764
443 / tcp

-1399940268 | 2024-10-06T00:56:06.384905
449 / tcp

-1399940268 | 2024-09-26T00:47:35.846399
503 / tcp

-154107716 | 2024-10-12T23:19:58.569105
515 / tcp

-1142488525 | 2024-10-08T02:48:33.609044
554 / tcp

-1387531546 | 2024-10-09T01:39:44.442684
587 / tcp

1308377066 | 2024-10-02T12:43:18.590290
593 / tcp

1402312074 | 2024-10-02T09:37:24.199336
636 / tcp

2098053533 | 2024-10-06T18:04:00.183664
666 / tcp

-1598265216 | 2024-10-17T22:23:10.221735
873 / tcp

-2096652808 | 2024-10-03T07:26:14.834776
993 / tcp

-2113068813 | 2024-10-08T08:16:08.880810
995 / tcp

165188539 | 2024-10-12T00:49:34.069744
1000 / tcp

-1839934832 | 2024-10-11T01:29:31.546845
1023 / tcp

-1327660293 | 2024-09-23T21:20:38.519832
1025 / tcp

165188539 | 2024-10-08T10:00:03.238008
1099 / tcp

-1839934832 | 2024-10-05T21:43:22.502435
1153 / tcp

-971970408 | 2024-10-20T15:50:48.118908
1177 / tcp

740837454 | 2024-10-05T06:23:51.065376
1200 / tcp

-358801646 | 2024-10-08T09:07:43.410610
1234 / tcp

290819026 | 2024-09-26T10:21:39.132462
1337 / tcp

555056254 | 2024-10-13T03:17:26.297470
1433 / tcp

1308377066 | 2024-10-13T17:07:50.902361
1515 / tcp

-971970408 | 2024-09-27T14:55:27.603897
1599 / tcp

1504401647 | 2024-09-28T14:27:56.633692
1604 / tcp

1103582599 | 2024-10-02T08:29:45.861337
1723 / tcp

-1327660293 | 2024-09-27T21:15:26.315146
1800 / tcp

472902042 | 2024-10-06T10:51:59.713399
1883 / tcp

632542934 | 2024-09-26T23:25:22.013251
1911 / tcp

-2096652808 | 2024-10-18T06:23:27.817341
1926 / tcp

-1279886438 | 2024-10-12T04:22:48.903769
2000 / tcp

1887224352 | 2024-09-25T19:32:42.389263
2002 / tcp

-1399940268 | 2024-10-08T11:00:24.675406
2003 / tcp

1282941221 | 2024-09-24T13:10:02.201874
2055 / tcp

1911457608 | 2024-10-09T06:26:43.649191
2081 / tcp

819727972 | 2024-10-20T16:47:21.115309
2083 / tcp

2087396567 | 2024-10-22T02:32:11.065788
2087 / tcp

141730637 | 2024-10-18T09:26:32.656910
2121 / tcp

546151771 | 2024-10-17T23:50:54.452545
2181 / tcp

1023953321 | 2024-10-06T13:02:11.833328
2200 / tcp

372433470 | 2024-10-16T21:23:16.131577
2222 / tcp

819727972 | 2024-10-17T23:15:49.073192
2320 / tcp

1662205251 | 2024-10-05T17:55:03.371753
2323 / tcp

-1888448627 | 2024-10-09T16:22:05.423396
2332 / tcp

745343730 | 2024-10-20T23:51:58.433613
2345 / tcp

-297128567 | 2024-09-25T08:40:42.252584
2376 / tcp

-136006866 | 2024-10-21T01:25:05.739167
2455 / tcp

-407828767 | 2024-10-09T03:07:38.939757
2549 / tcp

-339084706 | 2024-10-04T19:33:09.320026
2550 / tcp

945910976 | 2024-10-03T11:49:59.975134
2709 / tcp