GeneralInformation

Country	China
City	Beijing
Organization	Aliyun Computing Co., LTD
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 15 17 19 21 23 25 26 43 49 53 70 79 80 100 102 104 110 111 113 119 131 135 143 175 179 195 221 264 311 389 427 443 444 465 480 502 503 515 541 548 554 587 593 636 666 771 772 789 853 873 886 888 943 992 993 995 999 1002 1023 1026 1028 1050 1080 1099 1153 1177 1200 1234 1337 1414 1433 1443 1450 1521 1599 1604 1723 1800 1801 1883 1911 1922 1925 1950 1962 2000 2002 2003 2008 2054 2060 2065 2067 2069 2081 2083 2087 2121 2154 2181 2221 2222 2323 2332 2345 2376 2404 2443 2455 2628 2761 2762 2806 3001 3002 3008 3018 3049 3050 3052 3056 3057 3065 3071 3077 3081 3090 3097 3103 3112 3115 3116 3152 3167 3260 3268 3269 3299 3301 3306 3310 3311 3388 3389 3400 3401 3403 3523 3551 3556 3780 3790 3922 4000 4022 4063 4080 4150 4157 4242 4282 4321 4369 4431 4433 4434 4443 4444 4459 4500 4506 4510 4523 4545 4786 4840 4899 4911 4949 5001 5006 5007 5009 5010 5025 5051 5172 5201 5222 5256 5265 5266 5269 5272 5273 5277 5432 5435 5440 5443 5543 5555 5557 5597 5605 5606 5672 5858 5909 5918 5938 5984 5986 6000 6001 6002 6003 6011 6050 6379 6443 6633 6653 6661 6666 6667 6668 6697 7001 7002 7071 7081 7102 7105 7171 7218 7302 7415 7434 7634 7878 8007 8009 8054 8061 8063 8073 8081 8083 8084 8085 8087 8089 8096 8099 8107 8108 8118 8126 8133 8139 8140 8166 8181 8199 8200 8222 8241 8249 8291 8333 8414 8417 8418 8429 8448 8472 8488 8500 8531 8545 8554 8575 8589 8637 8649 8688 8704 8728 8766 8802 8817 8819 8829 8834 8838 8842 8846 8863 8872 8880 8889 8910 9000 9001 9024 9026 9041 9042 9046 9051 9068 9091 9100 9101 9151 9152 9159 9160 9165 9199 9207 9208 9218 9230 9303 9306 9315 9333 9398 9418 9527 9530 9595 9600 9633 9711 9743 9761 9872 9876 9898 9919 9943 9998 9999 10000 10001 10031 10050 10084 10134 10250 10393 10443 10554 10909 10911 11000 11112 11210 11211 11288 11300 12000 12082 12113 12139 12176 12187 12233 12234 12272 12302 12307 12345 12348 12361 12388 12389 12408 12427 12433 12452 12453 12468 12524 12553 12561 13780 14084 14147 14265 14344 14406 14900 16001 16007 16073 16092 16666 16993 18036 18059 18072 18081 18090 18094 18245 18264 19000 20000 20256 20547 20880 21025 21257 21292 21297 21303 21305 21316 21320 21379 22103 22222 23023 25001 25005 25565 27015 27017 28015 30002 30003 30015 30468 30501 32764 33060 33333 35000 35241 35250 35531 36022 37777 41800 41922 42420 43009 44158 44304 44818 45039 45786 47989 47990 48019 48100 50000 50002 50006 50100 51003 51235 52010 54138 55000 55443 55553 55554 55722 56022 56222 56322 56522 56622 56722 56822 56922 57822 57922 58122 58322 58422 58622 58822 58922 59022 59822 60001 60022 61613 61616 62078 63210 63256 63260 64671

2087396567 | 2025-01-10T23:09:45.710971

11 / tcp

kjnkjabhbanc283ubcsbhdc72

1100205395 | 2025-01-10T03:09:24.172231

13 / tcp

HTTP/1.1 200 OK
Cache-Control: private, max-age=300

2087396567 | 2025-01-11T02:00:10.528047

15 / tcp

kjnkjabhbanc283ubcsbhdc72

-297057753 | 2025-01-11T18:15:36.482332

17 / tcp

HTTP/1.1 401 Unauthorized
X-Plex-Protocol: 1.0
Content-Type: text/html
Connection: close
Cache-Control: no-cache

945910976 | 2025-01-20T00:27:21.014105

19 / tcp

* OK TeamXchange IMAP4rev1 server (otyUg) ready.\r\n

-1248408558 | 2025-01-20T21:42:42.283109

21 / tcp

220 MikroTik FTP server (MikroTik 6.44.3) ready

676675086 | 2025-01-14T10:07:48.641114

23 / tcp



Password:

820958131 | 2025-01-10T19:54:26.563362

25 / tcp

kjnkjabhbanc283ubcsbhdc72\x02

165188539 | 2025-01-01T08:07:38.890405

26 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1620329124 | 2025-01-10T03:04:28.370049

43 / tcp

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

1685693176 | 2025-01-10T01:34:50.394776

49 / tcp

HTTP/1.1 200 OK
X-Powered-By: PHP/5.5.9-1ubuntu4.21
Server: cisco-CPA

CVE-2019-9641 CVE-2019-9023 CVE-2019-9021 CVE-2019-9020 CVE-2018-7584 CVE-2017-12933 CVE-2017-12868 CVE-2017-11147 CVE-2017-9226 CVE-2017-9224 CVE-2017-8923 CVE-2016-9935 CVE-2016-9138 CVE-2016-9137 CVE-2016-8670 CVE-2016-7417 CVE-2016-7414 CVE-2016-7413 CVE-2016-7411 CVE-2016-7129 CVE-2016-7127 CVE-2016-7126 CVE-2016-7124 CVE-2016-6296 CVE-2016-6295 CVE-2016-6294 CVE-2016-6291 CVE-2016-6290 CVE-2016-6288 CVE-2016-5773 CVE-2016-5772 CVE-2016-5771 CVE-2016-5770 CVE-2016-5769 CVE-2016-5768 CVE-2016-5116 CVE-2016-5114 CVE-2016-4544 CVE-2016-4543 CVE-2016-4542 CVE-2016-4541 CVE-2016-4540 CVE-2016-4539 CVE-2016-4538 CVE-2016-4537 CVE-2016-4073 CVE-2016-4072 CVE-2016-4071 CVE-2016-3141 CVE-2016-3074 CVE-2016-2554 CVE-2016-1903 CVE-2015-8876 CVE-2015-8866 CVE-2015-8835 CVE-2015-8394 CVE-2015-8391 CVE-2015-8390 CVE-2015-8389 CVE-2015-8386 CVE-2015-8383 CVE-2015-6835 CVE-2015-6834 CVE-2015-5589 CVE-2015-4643 CVE-2015-4642 CVE-2015-4603 CVE-2015-4602 CVE-2015-4601 CVE-2015-4600 CVE-2015-4599 CVE-2015-4116 CVE-2015-0235 CVE-2014-9912 162 moreCVE-2020-11579 CVE-2019-9639 CVE-2019-9638 CVE-2019-9637 CVE-2019-9024 CVE-2019-6977 CVE-2018-20783 CVE-2018-19520 CVE-2018-19396 CVE-2018-19395 CVE-2018-15132 CVE-2018-14883 CVE-2018-10549 CVE-2018-10548 CVE-2018-10546 CVE-2017-16642 CVE-2017-11628 CVE-2017-11145 CVE-2017-11144 CVE-2017-11143 CVE-2017-11142 CVE-2017-7963 CVE-2017-7272 CVE-2016-10712 CVE-2016-10397 CVE-2016-10161 CVE-2016-10159 CVE-2016-10158 CVE-2016-9934 CVE-2016-9933 CVE-2016-7478 CVE-2016-7418 CVE-2016-7416 CVE-2016-7412 CVE-2016-7132 CVE-2016-7131 CVE-2016-7130 CVE-2016-7125 CVE-2016-6297 CVE-2016-6289 CVE-2016-5767 CVE-2016-5766 CVE-2016-5399 CVE-2016-5385 CVE-2016-5096 CVE-2016-5095 CVE-2016-5094 CVE-2016-5093 CVE-2016-4343 CVE-2016-4342 CVE-2016-4070 CVE-2016-3185 CVE-2016-3142 CVE-2015-8994 CVE-2015-8879 CVE-2015-8877 CVE-2015-8874 CVE-2015-8873 CVE-2015-8867 CVE-2015-8865 CVE-2015-8393 CVE-2015-8387 CVE-2015-6838 CVE-2015-6837 CVE-2015-6836 CVE-2015-6833 CVE-2015-6832 CVE-2015-6831 CVE-2015-5590 CVE-2015-4644 CVE-2015-4605 CVE-2015-4604 CVE-2015-4147 CVE-2015-4026 CVE-2015-4025 CVE-2015-4022 CVE-2015-3416 CVE-2015-3415 CVE-2015-3414 CVE-2015-3329 CVE-2015-3307 CVE-2015-2787 CVE-2015-2331 CVE-2015-2325 CVE-2015-2301 CVE-2015-1351 CVE-2015-0273 CVE-2015-0231 CVE-2014-9705 CVE-2014-9653 CVE-2014-9427 CVE-2014-9426 CVE-2014-9425 CVE-2014-8142 CVE-2014-3669 CVE-2014-3515 CVE-2014-0236 CVE-2014-0185 CVE-2013-7456 CVE-2013-2220 CVE-2022-31629 CVE-2022-4900 CVE-2018-17082 CVE-2018-14851 CVE-2018-10547 CVE-2018-10545 CVE-2018-5712 CVE-2018-5711 CVE-2017-7890 CVE-2016-7128 CVE-2016-6292 CVE-2016-6207 CVE-2015-9253 CVE-2015-8935 CVE-2015-8878 CVE-2015-8838 CVE-2015-7804 CVE-2015-7803 CVE-2015-4598 CVE-2015-4148 CVE-2015-4024 CVE-2015-4021 CVE-2015-3412 CVE-2015-3411 CVE-2015-3330 CVE-2015-3152 CVE-2015-2783 CVE-2015-2348 CVE-2015-2326 CVE-2015-2305 CVE-2015-1352 CVE-2015-0232 CVE-2014-9767 CVE-2014-9709 CVE-2014-9652 CVE-2014-5120 CVE-2014-4698 CVE-2014-4670 CVE-2014-4049 CVE-2014-3710 CVE-2014-3670 CVE-2014-3668 CVE-2014-3597 CVE-2014-3587 CVE-2014-3538 CVE-2014-3487 CVE-2014-3480 CVE-2014-3479 CVE-2014-3478 CVE-2014-2497 CVE-2014-2270 CVE-2014-1943 CVE-2014-0238 CVE-2014-0237 CVE-2014-0207 CVE-2013-7345 CVE-2013-6501 CVE-2007-3205 CVE-2022-31628 CVE-2014-5459 CVE-2014-4721 CVE-2014-3981

1252359125 | 2025-01-12T18:35:43.112377

53 / tcp

9
\x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01
\x00\x06\x81\x05\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

-1056270173 | 2025-01-10T10:49:33.684294

70 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close

268196945 | 2025-01-15T20:26:00.880493

79 / tcp

AB\x01

-119996482 | 2025-01-10T07:57:43.923005

80 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

-2089734047 | 2025-01-11T19:03:42.238761

100 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1492413928 | 2025-01-10T15:57:21.528951

102 / tcp

SSH-2.0-OpenSSH_7.5

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

819727972 | 2025-01-16T01:57:53.745997

104 / tcp

SSH-2.0-OpenSSH_7.4

-2089734047 | 2025-01-10T19:10:45.168974

110 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

819727972 | 2025-01-13T16:47:20.004231

111 / tcp

SSH-2.0-OpenSSH_7.4

-1777894858 | 2025-01-14T18:50:14.085550

113 / tcp

113 , 35054 : USERID : OTHER :99

-2107996212 | 2025-01-05T23:21:18.795037

119 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

-445721795 | 2025-01-11T20:54:38.248763

131 / tcp

\x00[\xc3\xaed\x1a\x7f\x00\x00

-1729522695 | 2025-01-10T14:08:37.997469

135 / tcp

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: DESKTOP-BFAHJ06\n IP2: 192.168.3.8\n IP3: 172.29.96.1\n IP4: 172.19.80.1\n\nNTLMSSP:\nTarget_Name: DESKTOP-BFAHJ06\nProduct_Version: 10.0.19041 Ntlm 15\nOS: Windows 10, Version 2004/Windows Server, Version 2004\nNetBIOS_Domain_Name: DESKTOP-BFAHJ06\nNetBIOS_Computer_Name: DESKTOP-BFAHJ06\nDNS_Domain_Name: DESKTOP-BFAHJ06\nDNS_Computer_Name: DESKTOP-BFAHJ06\nSystem_Time: 2024-01-22 04:05:47 +0000 UTC\n\nDCERP

-858402222 | 2025-01-07T21:35:19.116724

143 / tcp

* OK Waiting for authentication process to respond..\r\n

-1327660293 | 2025-01-02T11:24:31.954289

175 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-399606100 | 2025-01-17T02:04:36.478202

179 / tcp

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

2087396567 | 2025-01-20T20:16:59.173426

195 / tcp

kjnkjabhbanc283ubcsbhdc72

-1399940268 | 2025-01-15T07:05:43.612417

221 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1547821026 | 2025-01-15T00:14:42.985694

264 / tcp

CheckPoint\nFirewall Host: CPFWVSX1A_Audi_ODP_S2S_vsfw\nSmartCenter Host: admin..afx8nn\\x00\n

749429829 | 2025-01-10T11:23:28.221957

311 / tcp

\xc3\xa3\r\n\r\n\\x01KvInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

-1713467553 | 2025-01-18T00:04:26.856714

389 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Connection: close

-525136240 | 2025-01-14T09:50:26.577375

427 / tcp

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://bogon.xylink\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:VMwareInfrastructure\nservice:wbem:https\n\nResponse of service:VMwareInfrastructure SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:VMwareInfrastructure://bogon.xylink\n\n\nResponse of service:VMwareInfrastructure AttrRqst:\nVersion: 2\nFunction: Attribute Reply (7)\nErrorCode: SUCCESS (

-571427469 | 2025-01-10T20:26:25.436980

443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 10 Jan 2025 20:26:24 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.94.95.23:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

115711416 | 2025-01-11T00:30:11.291648

444 / tcp

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Sat, 11 Jan 2025 00:30:11 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

897328069 | 2025-01-10T00:26:35.957620

465 / tcp

220 mail.scott000.com ESMTP

1543809371 | 2025-01-17T01:28:41.146923

480 / tcp

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

-1399940268 | 2025-01-10T20:13:39.948025

502 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

632542934 | 2025-01-03T18:06:09.872484

503 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2087396567 | 2025-01-20T21:51:06.638876

515 / tcp

kjnkjabhbanc283ubcsbhdc72

-1876452130 | 2025-01-07T19:17:09.648333

541 / tcp

\\x16\\x03\\x01\\x01N\\x01\\x00\\x01J\\x03\\x03\\x1f\\xa5H\\xe5\\xb5*G%Y\\xc7\\xecN\\xe3\\x87\\xe4\\x86)D.}J\\x13\\xeb\'\\x95\\x8b\xc8\x8cD&b\\xae \\x8e\\x84\\x12\\x9fX\r\\xaf\\xcd)\\xa55kb\\xa2\\x8e\\xe72,\\x9e\x0b\\x90?}cg>\\xe6\\xfb\\x97\\x92O\\x94\\x002\\x13\\x02\\x13\\x03\\x13\\x01\\x009\\x005\\x00k\\x00=\\xc00\\

-2035415184 | 2025-01-19T23:36:47.035644

548 / tcp

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: Landisk2\nMachine Type: \rNetatalk3.1.8\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: Cleartxt Passwrd\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

1207252947 | 2025-01-11T02:01:41.315482

554 / tcp

RTSP/1.0 401 Unauthorized\r\nCSeq: 1\r\n\r\n

-1890071674 | 2025-01-08T10:30:48.040721

587 / tcp

220 JH0PR01CA0066.outlook.office365.com Microsoft ESMTP MAIL Service ready at Mon, 22 Jan 2024 06:32:01 +0000\r\n250-JH0PR01CA0066.outlook.office365.com Hello [*.*.*.*]\r\n250-SIZE 157286400\r\n250-PIPELINING\r\n250-DSN\r\n250-ENHANCEDSTATUSCODES\r\n250-STARTTLS\r\n250-8BITMIME\r\n250-BINARYMIME\r\n250-CHUNKING\r\n250 SMTPUTF8\r\n214-This server supports the following commands:\r\n214 HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT\r\n

-1112304903 | 2024-12-25T03:02:54.997128

593 / tcp

HTTP/1.1 403 Forbidden
Server: Apache/2.4.23 (Win64) OpenSSL/1.0.2h PHP/7.4.13
Content-Type: text/html; charset=iso-8859-1

826560219 | 2025-01-10T18:10:07.562066

636 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 59-8951886-0 0NNN RT(1705909763732 169) q(-1 -1 -1 -1) r(0 -1) b1

-1960639992 | 2025-01-10T12:42:35.423225

666 / tcp

HTTP/1.1 401 Unauthorized

1134517380 | 2025-01-10T19:21:52.472864

771 / tcp

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

2098371729 | 2025-01-16T16:38:47.287752

772 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

1308377066 | 2025-01-19T21:04:51.503507

789 / tcp

ncacn_http/1.0

-1888448627 | 2025-01-11T00:52:21.224928

853 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1970692834 | 2025-01-18T03:05:31.715615

873 / tcp

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

-1399940268 | 2025-01-15T05:32:07.895835

886 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

20021069 | 2025-01-06T10:39:13.381474

888 / tcp

HTTP/1.1 302 Found
X-FRAME-OPTIONS: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-X-WebKit-CSP: default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' http: https: data:; frame-ancestors 'self';
Location: https://61.31.89.205:888/webmail

677934968 | 2025-01-11T05:13:47.269628

943 / tcp

lm^)Q

-1718295362 | 2025-01-14T04:58:30.650536

992 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8

51259122 | 2025-01-10T19:41:15.922468

993 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

-1199842642 | 2025-01-10T10:44:31.877619

995 / tcp

+OK Welcome to RaidenMAILD POP3 SSL service v4902, Mon, 22 Jan 2024 14:24:46 +0800, (C)2001-2023 <1044592421@raidenmaild>\r\n

-1214918252 | 2025-01-11T18:39:10.149212

999 / tcp

HTTP/1.1 502 Bad Gateway
Content-Type: text/html
Connection: keep-alive

-616720387 | 2025-01-19T21:33:59.473547

1002 / tcp

SSH-2.0-SSHD_0.7.6

-801484042 | 2025-01-16T21:40:56.837293

1023 / tcp

ERR 27

819727972 | 2024-12-29T00:50:13.306696

1026 / tcp

SSH-2.0-OpenSSH_7.4

1996932384 | 2024-12-26T20:16:12.280341

1028 / tcp

"raop" nonce

-1947777893 | 2025-01-10T19:15:17.080773

1050 / tcp

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

1362344524 | 2025-01-16T21:29:04.643228

1080 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

-1248408558 | 2025-01-17T05:45:18.172454

1099 / tcp

220 MikroTik FTP server (MikroTik 6.44.3) ready

165188539 | 2025-01-14T01:15:43.970816

1153 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

873425297 | 2025-01-20T13:22:34.895497

1177 / tcp

200 NOD32SS 99 (3318497116)

-971970408 | 2025-01-20T01:02:51.883583

1200 / tcp

1989907056 | 2025-01-16T17:39:39.796138

1234 / tcp

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

546151771 | 2025-01-10T22:48:45.975488

1337 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

321971019 | 2025-01-18T23:21:10.923681

1414 / tcp

-ERR client ip is not in whitelist\r

419886129 | 2025-01-17T10:37:03.169731

1433 / tcp

MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XTZJ-20210317RG\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XTZJ-20210317RG\nNetBIOS_Computer_Name: XTZJ-20210317RG\nDNS_Domain_Name: XTZJ-20210317RG\nDNS_Computer_Name: XTZJ-20210317RG\nSystem_Time: 2024-01-22 04:01:04 +0000 UTC\n\n

-1715152554 | 2025-01-05T01:55:11.699779

1443 / tcp

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 05 Jan 2025 01:55:11 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.94.95.23:443/

-2089734047 | 2025-01-09T05:01:34.250688

1450 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-541815454 | 2025-01-11T00:20:39.507938

1521 / tcp

Version:11.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=186646784)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

1850902677 | 2025-01-16T13:15:01.828125

1599 / tcp

W!

841014058 | 2025-01-20T22:37:13.099896

1604 / tcp

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

1103582599 | 2025-01-18T12:27:49.052494

1723 / tcp

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

205347087 | 2025-01-15T09:21:47.609247

1800 / tcp

SSH-25453-Cisco-3524665.35\n

-833635452 | 2025-01-02T23:33:51.870486

1801 / tcp

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x05\xe8\x9b\xb5\\x95E\\x1eJ\\x85\xd5\xb1\\xe4\\xf9\\xba\\xf6+92d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

401555314 | 2025-01-19T23:44:11.570826

1883 / tcp

NB[GFXjA^R

1911457608 | 2025-01-10T15:29:52.149176

1911 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-2089734047 | 2025-01-07T18:47:38.554830

1922 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1865391109 | 2025-01-20T19:30:57.351744

1925 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0

-1399940268 | 2025-01-06T07:18:42.028039

1950 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1726594447 | 2025-01-10T07:35:03.414500

1962 / tcp

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

-1888448627 | 2025-01-10T22:03:15.613194

2000 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-1598265216 | 2025-01-10T09:55:18.843954

2002 / tcp

@RSYNCD: 31.0

-1013082686 | 2025-01-16T19:55:47.278888

2003 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

2087396567 | 2025-01-06T15:55:48.592688

2008 / tcp

kjnkjabhbanc283ubcsbhdc72

165188539 | 2025-01-17T04:41:46.377442

2054 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1370263973 | 2025-01-16T11:53:48.443819

2060 / tcp

dubbo>

-42767839 | 2025-01-06T16:34:04.640877

2065 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0

1852418385 | 2025-01-10T13:25:53.545003

2067 / tcp

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

-1399940268 | 2024-12-24T21:21:26.921005

2069 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2025-01-10T23:27:09.886087

2081 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-2081419599 | 2025-01-10T01:51:42.195993

2083 / tcp

@
03d

-1900404274 | 2025-01-11T01:58:32.269871

2087 / tcp

Unknown command

141730637 | 2025-01-10T20:02:55.807038

2121 / tcp

HTTP/1.0 200 OK
Server: Proxy

-1835475271 | 2025-01-18T13:45:54.483655

2154 / tcp

200 NOD32SS 99 (3318497116)\r\n

546151771 | 2025-01-20T23:57:44.113848

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

-1399940268 | 2024-12-31T06:41:31.408930

2221 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

372433470 | 2025-01-06T19:29:38.054065

2222 / tcp

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

979705126 | 2025-01-10T22:28:07.991561

2323 / tcp


(none) login: 

TELNET Negotiation:
will: Echo, Suppress Go Ahead
do: Echo, Negotiate About Window Size

1632932802 | 2024-12-29T19:01:29.422591

2332 / tcp

-1399940268 | 2025-01-10T02:49:21.537591

2345 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2025-01-20T17:17:43.315876

2376 / tcp

SSH-2.0-OpenSSH_7.4

1911457608 | 2025-01-10T05:32:51.278808

2404 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1399940268 | 2025-01-18T17:35:02.060561

2443 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1304843095 | 2025-01-10T22:07:17.910393

2455 / tcp

[Ý

539065883 | 2025-01-16T00:31:13.229181

2628 / tcp

921225407 | 2025-01-18T07:47:27.577172

2761 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

740837454 | 2025-01-10T10:59:04.349316

2762 / tcp

SSH-2.0-OpenSSH_5.3

1370263973 | 2024-12-30T09:12:08.659507

2806 / tcp

dubbo>

-805362002 | 2025-01-10T22:46:23.284974

3001 / tcp

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

-1399940268 | 2025-01-09T18:38:26.239017

3002 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

165188539 | 2025-01-10T13:02:31.923511

3008 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1011407350 | 2025-01-09T16:18:54.133438

3018 / tcp

* OK GroupWise IMAP4rev1 Server Ready\r\n

819727972 | 2025-01-05T15:49:19.748236

3049 / tcp

SSH-2.0-OpenSSH_7.4

597764502 | 2025-01-10T08:02:51.717405

3050 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

-16130738 | 2024-12-23T03:13:30.738788

3052 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 9-39806294-0 0NNN RT(1705903382967 0) q(-1 -1 -1 -1) r(0 -1) b1

-2107996212 | 2025-01-18T18:11:43.275064

3056 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

819727972 | 2025-01-19T02:57:50.023861

3057 / tcp

SSH-2.0-OpenSSH_7.4

921225407 | 2025-01-20T21:48:27.379146

3065 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

198844676 | 2025-01-20T09:04:08.141944

3071 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

198844676 | 2024-12-30T15:57:54.742710

3077 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

1911457608 | 2025-01-20T21:48:35.256854

3081 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-445721795 | 2024-12-22T05:27:16.875752

3090 / tcp

\x00[\xc3\xaed\x1a\x7f\x00\x00

1911457608 | 2025-01-11T22:14:52.892779

3097 / tcp

\x00[\x00\x00\x00\x00\x00\x00

401555314 | 2025-01-16T20:50:47.464443

3103 / tcp

NB[GFXjA^R

-1733645023 | 2025-01-08T20:31:28.908304

3112 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

-2089734047 | 2025-01-10T18:41:14.673695

3115 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

493955023 | 2025-01-15T10:56:54.414830

3116 / tcp

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

334289483 | 2025-01-19T04:37:25.732252

3152 / tcp

Invalid request string: Request string is: "\r"

-2096652808 | 2025-01-13T03:00:27.597033

3167 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

175679309 | 2025-01-11T04:55:11.753037

3260 / tcp

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=QNAP Target\nTargetPortalGroupTag=1\n

198844676 | 2025-01-10T23:34:33.095290

3268 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

-1399940268 | 2025-01-10T15:49:38.925590

3269 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1208318993 | 2025-01-15T17:09:00.834317

3299 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

-1399940268 | 2025-01-16T16:48:10.782032

3301 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1801207137 | 2025-01-20T08:37:04.582717

3306 / tcp

F\\x00\\x00\\x00\\xffj\\x04Host \'106.75.96.125\' is not allowed to connect to this MySQL server

1308377066 | 2025-01-10T08:13:39.052411

3310 / tcp

ncacn_http/1.0

1830697416 | 2025-01-07T17:54:19.072810

3311 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

1911457608 | 2025-01-18T18:15:50.907318

3388 / tcp

\x00[\x00\x00\x00\x00\x00\x00

623170236 | 2025-01-10T14:09:04.919088

3389 / tcp

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x1f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: PC82139\nProduct_Version: 10.0.19041 Ntlm 15\nOS: Windows 10, Version 2004/Windows Server, Version 2004\nNetBIOS_Domain_Name: PC82139\nNetBIOS_Computer_Name: PC82139\nDNS_Domain_Name: PC82139\nDNS_Computer_Name: PC82139\nSystem_Time: 2024-01-19 08:39:46 +0000 UTC\n\n

-1036370807 | 2025-01-04T07:39:48.525780

3400 / tcp

JDWP-Handshake

-2096652808 | 2025-01-09T13:55:09.687526

3401 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1399940268 | 2025-01-20T12:27:19.662268

3403 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

103159425 | 2024-12-31T16:21:40.075260

3523 / tcp

SSH-1.99-RGOS_SSH

198844676 | 2025-01-21T03:04:30.376068

3551 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

-1477838366 | 2024-12-26T07:53:00.787829

3556 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

-321444299 | 2025-01-10T12:35:22.022579

3780 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...
:dircproxy NOTICE AUTH :Got your hostname.

-971970408 | 2025-01-20T17:21:40.107227

3790 / tcp

-1399940268 | 2025-01-09T17:18:34.138587

3922 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

470305186 | 2025-01-11T00:10:38.448731

4000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET

-1230049476 | 2024-12-30T12:31:01.497706

4022 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

819727972 | 2025-01-19T16:32:36.953373

4063 / tcp

SSH-2.0-OpenSSH_7.4

-653033013 | 2025-01-11T00:12:15.443331

4080 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-2140303521 | 2024-12-31T10:44:55.518243

4150 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

-1760806421 | 2025-01-13T23:23:13.728285

4157 / tcp

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

302222687 | 2025-01-15T02:16:11.731381

4242 / tcp

HTTP/1.1 301 Moved Permanently
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close

1082732927 | 2025-01-01T22:37:11.576209

4282 / tcp

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

-1250504565 | 2025-01-10T08:41:00.488748

4321 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

-1996280214 | 2025-01-18T23:22:17.046155

4369 / tcp

\x06\x04\x05@

-1399940268 | 2025-01-17T00:17:38.343393

4431 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2103111368 | 2025-01-10T11:11:50.044083

4433 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

-154107716 | 2025-01-08T02:06:09.533591

4434 / tcp

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST ...

1140068775 | 2025-01-10T19:45:37.803822

4443 / tcp

HTTP/1.1 200 OK
Connection: Keep-Alive
Content-Type: text/html
X-Frame-Options: DENY

Name: VMware ESXi
FullName: VMware ESXi 6.7.0 build-8169922
Vendor: VMware, Inc.
Version: 6.7.0
Build: 8169922
LocaleVersion: INTL
LocaleBuild: 000
OsType: vmnix-x86
ProductLineId: embeddedEsx
ApiType: HostAgent
ApiVersion: 6.7

-1399940268 | 2025-01-18T17:59:00.073350

4444 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1504401647 | 2025-01-18T19:18:33.000194

4459 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

-1399940268 | 2025-01-16T04:46:37.788796

4500 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

171352214 | 2025-01-05T12:20:21.278307

4506 / tcp

-ERR client ip is not in whitelist

307999478 | 2025-01-16T20:48:33.354221

4510 / tcp

unknown command \r\nunknown command \r\n

-1399940268 | 2025-01-09T21:57:14.614119

4523 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2025-01-07T18:18:50.972090

4545 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-904840257 | 2025-01-08T15:10:06.477594

4786 / tcp

572 Relay not authorized\r\n

819727972 | 2025-01-10T10:07:13.796315

4840 / tcp

SSH-2.0-OpenSSH_7.4

-1839934832 | 2025-01-06T15:11:21.681280

4899 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-2080784861 | 2025-01-14T20:33:09.776250

4911 / tcp

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

-971970408 | 2025-01-15T00:54:05.209838

4949 / tcp

-1428621233 | 2025-01-11T01:26:16.302511

5001 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

819727972 | 2025-01-11T22:22:28.774634

5006 / tcp

SSH-2.0-OpenSSH_7.4

-2089734047 | 2025-01-10T22:11:09.936656

5007 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1413918021 | 2025-01-10T21:22:23.002323

5009 / tcp

acpp\\x00\\x03\\x00\\x01E\\xe2\\x05\\x98\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xff\\xff\\xff\\xf0\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00

-653033013 | 2025-01-19T05:36:33.657305

5010 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-1231966337 | 2025-01-01T11:19:17.124736

5025 / tcp

[ºs

-1399940268 | 2025-01-12T23:06:39.152745

5051 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-956469251 | 2025-01-20T09:56:46.818825

5172 / tcp

[)

114471724 | 2025-01-19T14:06:44.832918

5201 / tcp

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

-1399940268 | 2025-01-04T20:03:47.115596

5222 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

165188539 | 2025-01-12T06:46:40.198788

5256 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-2089734047 | 2025-01-20T14:12:21.991949

5265 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1327660293 | 2025-01-13T15:19:18.933298

5266 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-1854630806 | 2025-01-14T00:36:47.635138

5269 / tcp

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705937491.237-w-waf01tjgt

-2089734047 | 2025-01-10T04:17:31.476709

5272 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

580340387 | 2025-01-17T19:21:42.421556

5273 / tcp

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

-375604792 | 2025-01-12T12:38:34.758219

5277 / tcp

220 Microsoft FTP Service

-1399940268 | 2025-01-10T20:38:59.992971

5432 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1888448627 | 2025-01-20T03:52:08.884371

5435 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1659586688 | 2025-01-12T12:24:59.680073

5440 / tcp

HTTP/1.1 200 OK
CONNECTION: close
Etag: "1641794566:93c7"
CONTENT-LENGTH: 37831
CACHE-CONTROL: max-age=0
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=604800; includeSubDomains
X-XSS-Protection: 1;mode=block
X-Content-Type-Options: nosniff
CONTENT-TYPE: text/html

-1399940268 | 2025-01-01T05:57:53.920091

5443 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1487943323 | 2025-01-12T20:47:20.882653

5543 / tcp

431 Unable to negotiate secure command connection.\r\n

-138456724 | 2025-01-17T00:50:35.063399

5555 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae29c9_PSshwt5vj35_47920-11883

1989907056 | 2025-01-19T00:18:47.702034

5557 / tcp

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

408230060 | 2024-12-25T15:35:44.974277

5597 / tcp

\r\nSorry, that nickname format is invalid.\r\n

-1888448627 | 2025-01-05T23:01:28.591766

5605 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

-2089734047 | 2025-01-13T17:11:33.887982

5606 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

575925250 | 2025-01-10T17:28:10.383354

5672 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

2087396567 | 2025-01-17T14:10:31.272528

5858 / tcp

kjnkjabhbanc283ubcsbhdc72

-122096153 | 2025-01-12T20:26:47.555654

5909 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

-119996482 | 2024-12-29T23:00:39.560673

5918 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

-1730858130 | 2025-01-10T22:16:58.609512

5938 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1999272906 | 2025-01-10T11:07:57.385513

5984 / tcp

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

-1045760528 | 2025-01-10T12:08:12.502396

5986 / tcp

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

120534451 | 2025-01-10T14:01:48.945405

6000 / tcp

X11 access denied

-653033013 | 2025-01-10T19:44:01.953230

6001 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

1231376952 | 2025-01-12T03:50:47.718556

6002 / tcp

-1327660293 | 2025-01-04T21:00:12.692133

6003 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

-653033013 | 2025-01-19T16:32:20.627995

6011 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

1189133115 | 2025-01-14T19:43:20.912624

6050 / tcp

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

321971019 | 2025-01-11T01:38:21.406652

6379 / tcp

-ERR client ip is not in whitelist\r

1840582292 | 2025-01-04T12:35:29.444888

6443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sat, 04 Jan 2025 12:35:29 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.94.95.23:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

-1399940268 | 2025-01-11T22:07:59.507437

6633 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2025-01-10T08:20:35.095710

6653 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1839934832 | 2025-01-14T01:39:38.586410

6661 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

4935895 | 2025-01-03T21:53:53.451684

6666 / tcp

HTTP/1.1 400 Bad Request
Server: CloudWAF

2063598737 | 2025-01-10T14:04:01.818532

6667 / tcp

/0 0 L\r\n/0 0 HUH\r\n

-904840257 | 2025-01-10T12:09:24.124149

6668 / tcp

572 Relay not authorized\r\n

-2089734047 | 2025-01-11T18:29:54.424430

6697 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1624217396 | 2025-01-18T17:51:27.641407

7001 / tcp

HELO:10.3.6.0.false\nAS:2048\nHL:19

CVE-2018-3213 CVE-2018-1258 CVE-2019-2452 CVE-2019-2418 CVE-2019-2398 CVE-2019-2395

575925250 | 2025-01-07T18:35:43.572027

7002 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

2087396567 | 2024-12-25T23:36:18.681636

7071 / tcp

kjnkjabhbanc283ubcsbhdc72

-2096652808 | 2025-01-10T08:50:02.154696

7081 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1399940268 | 2025-01-16T07:45:17.271451

7102 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2089734047 | 2025-01-10T06:16:44.141893

7105 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1329831334 | 2025-01-14T18:48:44.548676

7171 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

-1681927087 | 2025-01-16T09:26:47.341213

7218 / tcp

kjnkjabhbanc283ubcsbhdc72

1911457608 | 2025-01-11T21:13:31.863705

7302 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1888448627 | 2025-01-08T19:51:59.796401

7415 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1282941221 | 2024-12-24T19:36:46.497350

7434 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

707919486 | 2025-01-12T18:45:49.708614

7634 / tcp

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

1723769361 | 2025-01-12T18:49:49.162717

7878 / tcp

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

-445955279 | 2025-01-09T21:11:17.671424

8007 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae24c26ba0b56f242738cbb7d05b70

-1461540015 | 2025-01-19T08:05:56.002455

8009 / tcp

audio 0 RTP/AVP 18 4 3 8 0 101
a

639175818 | 2025-01-14T18:46:31.194803

8054 / tcp

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

-1733645023 | 2025-01-12T18:35:09.616889

8061 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

1830187220 | 2025-01-21T03:44:47.869889

8063 / tcp

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

1911457608 | 2025-01-14T14:36:58.820823

8073 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2025-01-10T17:41:20.356580

8081 / tcp

kjnkjabhbanc283ubcsbhdc72

1996932384 | 2024-12-25T18:04:32.686758

8083 / tcp

"raop" nonce

921225407 | 2025-01-10T14:22:46.575042

8084 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-445721795 | 2025-01-19T05:59:25.066146

8085 / tcp

\x00[\xc3\xaed\x1a\x7f\x00\x00

1911457608 | 2025-01-10T08:32:07.294054

8087 / tcp

\x00[\x00\x00\x00\x00\x00\x00

474736340 | 2025-01-18T17:42:13.237687

8089 / tcp

431 Unable to negotiate secure command connection.

-1399940268 | 2024-12-30T20:10:31.892370

8096 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1115736665 | 2025-01-11T14:57:06.111748

8099 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-AREACMCC2-CACHE15[8]
X-CCDN-FORBID-CODE: 040001

-1399940268 | 2025-01-06T18:48:53.560129

8107 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-19T00:00:41.332852

8108 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1327660293 | 2025-01-10T22:41:31.263640

8118 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

819727972 | 2024-12-30T20:28:49.724404

8126 / tcp

SSH-2.0-OpenSSH_7.4

50497985 | 2025-01-20T17:33:46.256053

8133 / tcp

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

-971970408 | 2025-01-15T00:25:14.594292

8139 / tcp

-1990350878 | 2025-01-08T22:18:30.290944

8140 / tcp

 
04 \...

1911457608 | 2025-01-11T00:38:47.841348

8166 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1282941221 | 2025-01-10T05:55:23.693649

8181 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-2089734047 | 2025-01-17T17:08:31.982581

8199 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1015019981 | 2025-01-10T23:59:41.116670

8200 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Connection: close
Server:  DLNADOC/1.50 UPnP/1.0 MiniDLNA/1.1.4
EXT:

759851410 | 2025-01-18T11:37:58.302750

8222 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae252f_PShnhywt2ym144_35291-3960

632542934 | 2025-01-19T22:27:17.086377

8241 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1399940268 | 2025-01-08T15:08:04.730320

8249 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-10T01:41:29.586445

8291 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1300025046 | 2025-01-10T00:23:32.280420

8333 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705941025.555-waf01bjtp3

-616720387 | 2024-12-26T18:22:35.753450

8414 / tcp

SSH-2.0-SSHD_0.7.6

-1839934832 | 2025-01-03T05:37:56.384351

8417 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-1399940268 | 2025-01-19T11:49:59.607557

8418 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2025-01-19T20:08:56.247904

8429 / tcp

\x00[\x00\x00\x00\x00\x00\x00

119860953 | 2025-01-13T00:29:05.147436

8448 / tcp

* OK ArGoSoft Mail Server IMAP Module v.YW at

-2080784861 | 2025-01-12T04:00:32.466572

8472 / tcp

GBPK\xc3\xbb\xc3\xb7n\xc2\x93W\xc2\xaf\xc2\x86\xc2\x93x@\xc2\xa9\x0e\xc3\x8a*\xc2\x9bS\x00

-1626979812 | 2025-01-09T19:53:01.592025

8488 / tcp

220 Service ready for new user.

-684625978 | 2025-01-10T13:07:10.589643

8500 / tcp

{Datacenter:dc1 NodeName:consul-dev NodeID:e61aec6b-e338-67fa-3b08-f8185bd5b528 Revision:db839f18b Server:true Version:1.10.1}

1911457608 | 2025-01-12T23:10:32.927358

8531 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1615193817 | 2025-01-10T11:48:44.480355

8545 / tcp

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

-971970408 | 2025-01-18T20:53:15.675108

8554 / tcp

-1399940268 | 2025-01-17T04:04:18.827938

8575 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

334289483 | 2025-01-21T00:28:13.930598

8589 / tcp

Invalid request string: Request string is: "\r"

1011407350 | 2025-01-07T07:04:13.501469

8637 / tcp

* OK GroupWise IMAP4rev1 Server Ready\r\n

842535728 | 2025-01-10T21:13:30.655052

8649 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

740837454 | 2025-01-02T16:53:51.602741

8688 / tcp

SSH-2.0-OpenSSH_5.3

321971019 | 2025-01-12T00:51:21.526240

8704 / tcp

-ERR client ip is not in whitelist\r

-1399940268 | 2024-12-26T02:15:39.187340

8728 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1492413928 | 2024-12-27T18:20:40.788365

8766 / tcp

SSH-2.0-OpenSSH_7.5

1911457608 | 2025-01-19T11:34:40.395682

8802 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-980525298 | 2025-01-17T06:58:08.144359

8817 / tcp

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

819727972 | 2024-12-28T00:21:23.333119

8819 / tcp

SSH-2.0-OpenSSH_7.4

307999478 | 2025-01-02T08:57:35.751099

8829 / tcp

unknown command \r\nunknown command \r\n

2087396567 | 2024-12-28T13:22:41.508134

8834 / tcp

kjnkjabhbanc283ubcsbhdc72

-1399940268 | 2025-01-08T22:45:48.719553

8838 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-358801646 | 2025-01-12T21:22:37.454027

8842 / tcp

SSH-2.0-OpenSSH_6.6.1

-1399940268 | 2025-01-06T11:43:18.286374

8846 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-03T06:46:27.008841

8863 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-339084706 | 2024-12-24T00:36:32.297509

8872 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

-1887823886 | 2025-01-10T00:59:55.531072

8880 / tcp

K%~)J/\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

539065883 | 2025-01-10T07:44:06.862021

8889 / tcp

-904840257 | 2025-01-16T09:22:18.280040

8910 / tcp

572 Relay not authorized\r\n

-2067028711 | 2025-01-10T15:17:19.004236

9000 / tcp

\x15\x03\x01\x00\x02\x02F

-1026951088 | 2025-01-10T08:40:22.263064

9001 / tcp

erro ip

1911457608 | 2025-01-11T09:18:04.227178

9024 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1210754493 | 2024-12-29T18:42:51.600928

9026 / tcp

0\x0c\x02\x01\x01a\x07\n\x01\x00\x04\x00\x04\x00

819727972 | 2024-12-26T17:48:00.313904

9041 / tcp

SSH-2.0-OpenSSH_7.4

1741579575 | 2025-01-17T21:40:44.130400

9042 / tcp

-1487943323 | 2025-01-05T07:34:16.794694

9046 / tcp

431 Unable to negotiate secure command connection.\r\n

819727972 | 2025-01-10T23:38:44.162287

9051 / tcp

SSH-2.0-OpenSSH_7.4

-1105333987 | 2025-01-17T17:05:24.926398

9068 / tcp

\x00[KpU\x7f\x00\x00

2087396567 | 2025-01-15T10:13:54.898609

9091 / tcp

kjnkjabhbanc283ubcsbhdc72

2143387245 | 2025-01-10T11:43:48.085199

9100 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

-1399940268 | 2025-01-19T21:34:51.183935

9101 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1316398834 | 2024-12-25T11:58:20.390618

9151 / tcp

ÿ

632542934 | 2025-01-15T07:21:12.364954

9152 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-1399940268 | 2025-01-18T19:59:21.020263

9159 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2025-01-10T09:12:56.203239

9160 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-653033013 | 2025-01-10T03:43:00.096651

9165 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-1888448627 | 2025-01-18T09:10:04.475904

9199 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1911457608 | 2025-01-18T13:48:58.413627

9207 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1279886438 | 2025-01-19T20:21:45.965245

9208 / tcp

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

1911457608 | 2025-01-12T19:39:19.779773

9218 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1353260875 | 2025-01-10T15:43:50.934671

9230 / tcp

\x00[g\xc2\x95N\x7f\x00\x00

-2089734047 | 2024-12-26T04:48:44.057749

9303 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1332894250 | 2025-01-10T21:19:29.841784

9306 / tcp

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

1975288991 | 2025-01-09T10:58:34.981852

9315 / tcp

OPTI

-1399940268 | 2025-01-20T04:26:15.641115

9333 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1139539254 | 2025-01-04T01:58:04.590462

9398 / tcp

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

233634112 | 2025-01-10T20:35:32.918988

9418 / tcp

SSH-98.60-SysaxSSH_81885..42

-1399940268 | 2024-12-30T01:37:20.942177

9527 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1126993057 | 2025-01-10T12:56:47.694554

9530 / tcp

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

-119996482 | 2025-01-18T08:26:34.588392

9595 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0

321971019 | 2025-01-18T21:26:53.983557

9600 / tcp

-ERR client ip is not in whitelist\r

366084633 | 2025-01-20T23:11:00.117657

9633 / tcp

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

-2107996212 | 2025-01-12T18:51:26.263076

9711 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

165188539 | 2025-01-08T17:55:56.148270

9743 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2063598737 | 2025-01-10T19:09:17.285287

9761 / tcp

/0 0 L\r\n/0 0 HUH\r\n

1911457608 | 2025-01-19T11:04:48.462416

9872 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1977569953 | 2025-01-17T17:33:37.036078

9876 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2987_PS-SHA-01Jtm19_12756-43634

1320285193 | 2025-01-17T21:49:32.691970

9898 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

819727972 | 2025-01-11T05:25:09.083658

9919 / tcp

SSH-2.0-OpenSSH_7.4

-726580714 | 2025-01-10T10:37:45.379878

9943 / tcp

\\x03\\x10\\x08\\x02\\xc2\\x80}\\x08\\x02\\xc2\\x80\xc3\xa2\\x14\\x01

-1223770960 | 2025-01-10T14:50:24.199716

9998 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae28e5_PS-PEK-01Whk40_31773-63705

1161309183 | 2025-01-15T22:57:25.065969

9999 / tcp

ProxyServer is ready

-1990350878 | 2025-01-10T15:13:45.203916

10000 / tcp

 
04 \...

1492413928 | 2025-01-05T22:56:42.788419

10001 / tcp

SSH-2.0-OpenSSH_7.5

-1399940268 | 2025-01-11T08:02:39.265106

10031 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2025-01-18T16:14:07.973789

10050 / tcp

SSH-2.0-OpenSSH_7.4

921225407 | 2025-01-17T21:56:29.257751

10084 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

119860953 | 2024-12-24T11:25:45.419277

10134 / tcp

* OK ArGoSoft Mail Server IMAP Module v.YW at

1690634669 | 2025-01-10T23:30:55.325390

10250 / tcp

-1097188123 | 2025-01-09T05:31:55.121828

10393 / tcp

[g\xc2\x95N\x7f

-52204024 | 2025-01-10T18:45:51.214485

10443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Fri, 10 Jan 2025 18:45:50 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://47.94.95.23:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

2087396567 | 2025-01-18T19:03:45.546547

10554 / tcp

kjnkjabhbanc283ubcsbhdc72

819727972 | 2025-01-20T00:50:42.274993

10909 / tcp

SSH-2.0-OpenSSH_7.4

-2096652808 | 2025-01-19T16:58:27.557654

10911 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

307999478 | 2025-01-10T21:41:53.027056

11000 / tcp

unknown command \r\nunknown command \r\n

-1839934832 | 2025-01-03T17:24:54.603196

11112 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

921225407 | 2025-01-13T14:19:58.508573

11210 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-136006866 | 2025-01-19T13:25:05.627320

11211 / tcp

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

-1099385124 | 2025-01-04T14:48:13.991576

11288 / tcp

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

-1399940268 | 2025-01-10T21:10:31.860398

11300 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1723613895 | 2025-01-10T19:18:46.027520

12000 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2232_PS-HAK-01h6h34_6336-63973

-1888448627 | 2025-01-14T01:25:25.989106

12082 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

51259122 | 2025-01-09T19:55:53.195048

12113 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

-2096652808 | 2025-01-09T17:04:21.901616

12139 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1648456501 | 2025-01-11T22:10:00.839485

12176 / tcp

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

-1399940268 | 2025-01-15T16:30:51.618345

12187 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2096652808 | 2025-01-13T12:00:34.921941

12233 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

819727972 | 2025-01-12T07:23:38.076462

12234 / tcp

SSH-2.0-OpenSSH_7.4

1282941221 | 2025-01-18T21:30:09.397197

12272 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-1399940268 | 2025-01-17T18:03:54.442470

12302 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2025-01-18T18:45:38.668216

12307 / tcp

SSH-2.0-OpenSSH_7.4

296364507 | 2024-12-30T22:53:11.731356

12345 / tcp

HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

897328069 | 2025-01-20T18:10:24.765277

12348 / tcp

220 mail.scott000.com ESMTP

-1399940268 | 2025-01-17T10:48:01.182262

12361 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-17T18:48:03.949819

12388 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-20T00:38:09.968446

12389 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1947777893 | 2025-01-15T23:30:28.249953

12408 / tcp

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

321971019 | 2025-01-13T00:28:24.179233

12427 / tcp

-ERR client ip is not in whitelist\r

-2089734047 | 2025-01-10T02:10:38.794115

12433 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1032713145 | 2025-01-15T09:26:56.902015

12452 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-1261090339 | 2025-01-10T22:24:51.657157

12453 / tcp

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

-1399940268 | 2025-01-08T21:06:47.754828

12468 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2025-01-09T09:48:47.790568

12524 / tcp

SSH-2.0-OpenSSH_7.4

-358801646 | 2025-01-16T06:01:33.419723

12553 / tcp

SSH-2.0-OpenSSH_6.6.1

-1399940268 | 2025-01-20T06:10:34.236702

12561 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1105333987 | 2025-01-20T21:55:05.498686

13780 / tcp

\x00[KpU\x7f\x00\x00

-1026951088 | 2025-01-09T02:49:55.253189

14084 / tcp

erro ip

-1729629024 | 2025-01-08T23:43:35.461436

14147 / tcp

101 imqbroker =unV

-1399940268 | 2025-01-10T12:31:13.231892

14265 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

455076604 | 2025-01-12T00:23:10.344034

14344 / tcp

!\x07version\x04bind7 t{RPowerDNS Recursor 410

-2033111675 | 2025-01-11T16:17:02.505452

14406 / tcp

~djb

-1399940268 | 2025-01-18T07:04:16.418699

14900 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

89142341 | 2025-01-11T23:29:34.653946

16001 / tcp

\x05\x00\x00\x00\x0b\x08\x05\x1a\x00

1504401647 | 2025-01-18T14:55:04.710218

16007 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

-1375131644 | 2025-01-18T07:09:07.142150

16073 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

-1399940268 | 2025-01-16T05:49:47.385100

16092 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

937756010 | 2025-01-14T02:42:34.379025

16666 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

104385780 | 2025-01-10T19:31:35.682428

16993 / tcp

ceph v2

-2031152423 | 2025-01-12T17:02:37.096443

18036 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

2098371729 | 2025-01-17T22:05:25.043362

18059 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

-1327660293 | 2025-01-15T01:22:46.523430

18072 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

1282941221 | 2025-01-10T22:32:27.418628

18081 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

380146262 | 2025-01-18T09:55:14.370040

18090 / tcp

@RSYNCD: 30.0

165188539 | 2025-01-17T19:50:25.123394

18094 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

921225407 | 2025-01-15T09:12:39.559249

18245 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-653033013 | 2025-01-11T07:08:45.670779

18264 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

-1399940268 | 2025-01-10T02:48:31.990433

19000 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1900503736 | 2025-01-08T13:28:38.172272

20000 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

1077013874 | 2025-01-11T04:47:12.962354

20256 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

2143387245 | 2025-01-10T20:30:22.974478

20547 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

1370263973 | 2025-01-06T04:27:31.552289

20880 / tcp

dubbo>

-792826324 | 2024-12-22T19:45:05.645379

21025 / tcp

220 FTP server ready - login please

-1399940268 | 2025-01-17T20:04:23.591648

21257 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-441419608 | 2025-01-17T13:59:03.041364

21292 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

-1399940268 | 2025-01-14T19:19:15.783694

21297 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1730858130 | 2025-01-17T11:17:14.479497

21303 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

632542934 | 2025-01-09T11:15:14.766964

21305 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1208318993 | 2025-01-15T13:17:43.862809

21316 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

1212285915 | 2025-01-17T11:26:13.690599

21320 / tcp

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

-1907909544 | 2025-01-13T03:56:26.455800

21379 / tcp

\r\nHello, this is Quagga (version 0T).\r\nCopyright 1996-200

1282941221 | 2025-01-15T18:52:22.268309

22103 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-358801646 | 2025-01-04T21:07:26.959958

22222 / tcp

SSH-2.0-OpenSSH_6.6.1

-1609150592 | 2025-01-20T00:58:19.917348

23023 / tcp

ÿÿÿ
0 ...

-1399940268 | 2025-01-14T09:37:52.735157

25001 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

455076604 | 2025-01-11T20:07:19.221895

25005 / tcp

!\x07version\x04bind7 t{RPowerDNS Recursor 410

-1032713145 | 2025-01-16T12:55:21.345170

25565 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-80321085 | 2025-01-20T03:16:51.213799

27015 / tcp

Command: None
Size: 1802398315
ID: 1751277930
Type: 1668178274

1763259671 | 2025-01-10T21:35:17.632064

27017 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

-1641514916 | 2025-01-15T07:53:17.159543

28015 / tcp

* OK Merak 1dFUa2 IMAP4rev1

-1914935523 | 2025-01-18T18:08:07.520960

30002 / tcp

ceph v2

-1681927087 | 2025-01-05T03:24:01.677847

30003 / tcp

kjnkjabhbanc283ubcsbhdc72

-1248408558 | 2025-01-18T08:41:51.204834

30015 / tcp

220 MikroTik FTP server (MikroTik 6.44.3) ready

-2107996212 | 2025-01-09T08:51:36.231695

30468 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

321971019 | 2025-01-11T14:55:33.322079

30501 / tcp

-ERR client ip is not in whitelist\r

-1729629024 | 2025-01-18T17:23:25.734002

32764 / tcp

101 imqbroker =unV

1208318993 | 2025-01-20T18:09:26.881790

33060 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

-1013082686 | 2025-01-05T18:27:33.805304

33333 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

1911457608 | 2025-01-16T14:58:51.383210

35000 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1911457608 | 2025-01-18T11:49:15.179819

35241 / tcp

\x00[\x00\x00\x00\x00\x00\x00

819727972 | 2025-01-08T22:25:00.154945

35250 / tcp

SSH-2.0-OpenSSH_7.4

639175818 | 2025-01-09T05:20:09.861449

35531 / tcp

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

104385780 | 2025-01-06T17:42:26.221239

36022 / tcp

ceph v2

-1045760528 | 2025-01-10T10:57:50.453076

37777 / tcp

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

599074451 | 2025-01-17T19:47:31.572989

41800 / tcp

msg

2087396567 | 2025-01-06T16:59:31.369147

41922 / tcp

kjnkjabhbanc283ubcsbhdc72

-1399940268 | 2025-01-15T23:06:45.960265

42420 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1911457608 | 2025-01-18T21:45:50.809164

43009 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-433302150 | 2025-01-10T18:35:15.107597

44158 / tcp

/multistream/1.0.0

165188539 | 2025-01-18T11:50:36.338025

44304 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

-2089734047 | 2025-01-20T03:53:13.682859

44818 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-303199180 | 2025-01-13T15:57:03.724480

45039 / tcp

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

819727972 | 2025-01-10T12:23:47.957970

45786 / tcp

SSH-2.0-OpenSSH_7.4

-1399940268 | 2025-01-10T02:53:46.924668

47989 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1778988322 | 2024-12-28T11:28:48.827974

47990 / tcp

* OK GroupWise IMAP4rev1 Server Ready

-1399940268 | 2025-01-16T11:07:43.432212

48019 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1835475271 | 2025-01-16T16:39:24.770877

48100 / tcp

200 NOD32SS 99 (3318497116)\r\n

1690634669 | 2025-01-18T05:59:18.728404

50000 / tcp

1948301213 | 2025-01-12T08:13:16.760224

50002 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

-1426182427 | 2025-01-16T20:24:32.324585

50006 / tcp

\\x00[\\x00\\x00\\x00\\x00\\x00\\x00

962700458 | 2024-12-26T15:14:23.808512

50100 / tcp

-1839934832 | 2025-01-17T10:23:27.012743

51003 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

-2046514463 | 2025-01-11T13:14:18.324919

51235 / tcp

AB\x01\t

580340387 | 2025-01-18T00:39:28.778743

52010 / tcp

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

921225407 | 2025-01-13T00:48:15.977741

54138 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

307999478 | 2025-01-17T18:02:34.630864

55000 / tcp

unknown command \r\nunknown command \r\n

1261582754 | 2025-01-10T09:00:50.276040

55443 / tcp

unknown command 
unknown command

-971970408 | 2025-01-10T09:59:32.609828

55553 / tcp

-319440554 | 2025-01-01T23:13:53.237256

55554 / tcp

2087396567 | 2025-01-21T00:41:12.295088

55722 / tcp

kjnkjabhbanc283ubcsbhdc72

-1392039491 | 2025-01-20T14:07:40.348611

56022 / tcp

"Broadband Router"

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

-1476017887 | 2025-01-20T06:27:46.629518

56222 / tcp

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

-653033013 | 2025-01-20T15:51:31.272808

56322 / tcp

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

1690634669 | 2025-01-20T10:07:03.778373

56522 / tcp

996960436 | 2025-01-19T21:00:18.123322

56622 / tcp

572 Relay not authorized

-784071826 | 2025-01-20T04:30:19.463282

56722 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-971970408 | 2025-01-20T09:47:12.643797

56822 / tcp

233634112 | 2025-01-19T19:13:35.655444

56922 / tcp

SSH-98.60-SysaxSSH_81885..42

539065883 | 2025-01-19T04:25:04.982535

57822 / tcp

819727972 | 2025-01-19T01:43:19.573389

57922 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2025-01-19T02:40:56.472468

58122 / tcp

SSH-2.0-OpenSSH_7.4

740837454 | 2025-01-18T22:40:59.761495

58322 / tcp

SSH-2.0-OpenSSH_5.3

-971970408 | 2025-01-18T19:01:57.985632

58422 / tcp

2087396567 | 2025-01-16T19:07:27.832544

58622 / tcp

kjnkjabhbanc283ubcsbhdc72

1842524259 | 2025-01-18T18:45:44.521184

58822 / tcp

-1013082686 | 2025-01-18T11:28:09.936496

58922 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

-2031152423 | 2025-01-18T09:37:11.088313

59022 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

-2096652808 | 2025-01-17T21:15:00.622921

59822 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1865391109 | 2025-01-10T17:58:09.319373

60001 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0

-616720387 | 2025-01-17T11:40:49.352928

60022 / tcp

SSH-2.0-SSHD_0.7.6

-1399940268 | 2025-01-09T07:34:11.035317

61613 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2087396567 | 2025-01-14T15:22:56.545227

61616 / tcp

kjnkjabhbanc283ubcsbhdc72

-860824904 | 2025-01-18T11:17:38.397071

62078 / tcp

\x00\x01)

-616720387 | 2025-01-07T21:19:30.229116

63210 / tcp

SSH-2.0-SSHD_0.7.6

-1230049476 | 2024-12-27T19:52:01.041084

63256 / tcp

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

-1399940268 | 2025-01-09T12:03:08.350401

63260 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1888448627 | 2025-01-15T17:59:26.726075

64671 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

47.94.95.23

Last Seen: 2025-01-21

Tags:

GeneralInformation

OpenPorts

2087396567 | 2025-01-10T23:09:45.710971 11 / tcp

1100205395 | 2025-01-10T03:09:24.172231 13 / tcp

2087396567 | 2025-01-11T02:00:10.528047 15 / tcp

-297057753 | 2025-01-11T18:15:36.482332 17 / tcp

945910976 | 2025-01-20T00:27:21.014105 19 / tcp

-1248408558 | 2025-01-20T21:42:42.283109 21 / tcp

676675086 | 2025-01-14T10:07:48.641114 23 / tcp

820958131 | 2025-01-10T19:54:26.563362 25 / tcp

165188539 | 2025-01-01T08:07:38.890405 26 / tcp

1620329124 | 2025-01-10T03:04:28.370049 43 / tcp

1685693176 | 2025-01-10T01:34:50.394776 49 / tcp

1252359125 | 2025-01-12T18:35:43.112377 53 / tcp

-1056270173 | 2025-01-10T10:49:33.684294 70 / tcp

268196945 | 2025-01-15T20:26:00.880493 79 / tcp

-119996482 | 2025-01-10T07:57:43.923005 80 / tcp

-2089734047 | 2025-01-11T19:03:42.238761 100 / tcp

1492413928 | 2025-01-10T15:57:21.528951 102 / tcp

819727972 | 2025-01-16T01:57:53.745997 104 / tcp

-2089734047 | 2025-01-10T19:10:45.168974 110 / tcp

819727972 | 2025-01-13T16:47:20.004231 111 / tcp

-1777894858 | 2025-01-14T18:50:14.085550 113 / tcp

-2107996212 | 2025-01-05T23:21:18.795037 119 / tcp

-445721795 | 2025-01-11T20:54:38.248763 131 / tcp

-1729522695 | 2025-01-10T14:08:37.997469 135 / tcp

-858402222 | 2025-01-07T21:35:19.116724 143 / tcp

-1327660293 | 2025-01-02T11:24:31.954289 175 / tcp

-399606100 | 2025-01-17T02:04:36.478202 179 / tcp

2087396567 | 2025-01-20T20:16:59.173426 195 / tcp

-1399940268 | 2025-01-15T07:05:43.612417 221 / tcp

-1547821026 | 2025-01-15T00:14:42.985694 264 / tcp

749429829 | 2025-01-10T11:23:28.221957 311 / tcp

-1713467553 | 2025-01-18T00:04:26.856714 389 / tcp

-525136240 | 2025-01-14T09:50:26.577375 427 / tcp

-571427469 | 2025-01-10T20:26:25.436980 443 / tcp

115711416 | 2025-01-11T00:30:11.291648 444 / tcp

897328069 | 2025-01-10T00:26:35.957620 465 / tcp

1543809371 | 2025-01-17T01:28:41.146923 480 / tcp

-1399940268 | 2025-01-10T20:13:39.948025 502 / tcp

632542934 | 2025-01-03T18:06:09.872484 503 / tcp

2087396567 | 2025-01-20T21:51:06.638876 515 / tcp

-1876452130 | 2025-01-07T19:17:09.648333 541 / tcp

-2035415184 | 2025-01-19T23:36:47.035644 548 / tcp

1207252947 | 2025-01-11T02:01:41.315482 554 / tcp

-1890071674 | 2025-01-08T10:30:48.040721 587 / tcp

-1112304903 | 2024-12-25T03:02:54.997128 593 / tcp

826560219 | 2025-01-10T18:10:07.562066 636 / tcp

-1960639992 | 2025-01-10T12:42:35.423225 666 / tcp

1134517380 | 2025-01-10T19:21:52.472864 771 / tcp

2098371729 | 2025-01-16T16:38:47.287752 772 / tcp

1308377066 | 2025-01-19T21:04:51.503507 789 / tcp

-1888448627 | 2025-01-11T00:52:21.224928 853 / tcp

-1970692834 | 2025-01-18T03:05:31.715615 873 / tcp

-1399940268 | 2025-01-15T05:32:07.895835 886 / tcp

20021069 | 2025-01-06T10:39:13.381474 888 / tcp

677934968 | 2025-01-11T05:13:47.269628 943 / tcp

-1718295362 | 2025-01-14T04:58:30.650536 992 / tcp

51259122 | 2025-01-10T19:41:15.922468 993 / tcp

-1199842642 | 2025-01-10T10:44:31.877619 995 / tcp

-1214918252 | 2025-01-11T18:39:10.149212 999 / tcp

-616720387 | 2025-01-19T21:33:59.473547 1002 / tcp

-801484042 | 2025-01-16T21:40:56.837293 1023 / tcp

819727972 | 2024-12-29T00:50:13.306696 1026 / tcp

1996932384 | 2024-12-26T20:16:12.280341 1028 / tcp

-1947777893 | 2025-01-10T19:15:17.080773 1050 / tcp

1362344524 | 2025-01-16T21:29:04.643228 1080 / tcp

-1248408558 | 2025-01-17T05:45:18.172454 1099 / tcp

165188539 | 2025-01-14T01:15:43.970816 1153 / tcp

873425297 | 2025-01-20T13:22:34.895497 1177 / tcp

-971970408 | 2025-01-20T01:02:51.883583 1200 / tcp

1989907056 | 2025-01-16T17:39:39.796138 1234 / tcp

546151771 | 2025-01-10T22:48:45.975488 1337 / tcp

321971019 | 2025-01-18T23:21:10.923681 1414 / tcp

419886129 | 2025-01-17T10:37:03.169731 1433 / tcp

-1715152554 | 2025-01-05T01:55:11.699779 1443 / tcp

-2089734047 | 2025-01-09T05:01:34.250688 1450 / tcp

2087396567 | 2025-01-10T23:09:45.710971
11 / tcp

1100205395 | 2025-01-10T03:09:24.172231
13 / tcp

2087396567 | 2025-01-11T02:00:10.528047
15 / tcp

-297057753 | 2025-01-11T18:15:36.482332
17 / tcp

945910976 | 2025-01-20T00:27:21.014105
19 / tcp

-1248408558 | 2025-01-20T21:42:42.283109
21 / tcp

676675086 | 2025-01-14T10:07:48.641114
23 / tcp

820958131 | 2025-01-10T19:54:26.563362
25 / tcp

165188539 | 2025-01-01T08:07:38.890405
26 / tcp

1620329124 | 2025-01-10T03:04:28.370049
43 / tcp

1685693176 | 2025-01-10T01:34:50.394776
49 / tcp

1252359125 | 2025-01-12T18:35:43.112377
53 / tcp

-1056270173 | 2025-01-10T10:49:33.684294
70 / tcp

268196945 | 2025-01-15T20:26:00.880493
79 / tcp

-119996482 | 2025-01-10T07:57:43.923005
80 / tcp

-2089734047 | 2025-01-11T19:03:42.238761
100 / tcp

1492413928 | 2025-01-10T15:57:21.528951
102 / tcp

819727972 | 2025-01-16T01:57:53.745997
104 / tcp

-2089734047 | 2025-01-10T19:10:45.168974
110 / tcp

819727972 | 2025-01-13T16:47:20.004231
111 / tcp

-1777894858 | 2025-01-14T18:50:14.085550
113 / tcp

-2107996212 | 2025-01-05T23:21:18.795037
119 / tcp

-445721795 | 2025-01-11T20:54:38.248763
131 / tcp

-1729522695 | 2025-01-10T14:08:37.997469
135 / tcp

-858402222 | 2025-01-07T21:35:19.116724
143 / tcp

-1327660293 | 2025-01-02T11:24:31.954289
175 / tcp

-399606100 | 2025-01-17T02:04:36.478202
179 / tcp

2087396567 | 2025-01-20T20:16:59.173426
195 / tcp

-1399940268 | 2025-01-15T07:05:43.612417
221 / tcp

-1547821026 | 2025-01-15T00:14:42.985694
264 / tcp

749429829 | 2025-01-10T11:23:28.221957
311 / tcp

-1713467553 | 2025-01-18T00:04:26.856714
389 / tcp

-525136240 | 2025-01-14T09:50:26.577375
427 / tcp

-571427469 | 2025-01-10T20:26:25.436980
443 / tcp

115711416 | 2025-01-11T00:30:11.291648
444 / tcp

897328069 | 2025-01-10T00:26:35.957620
465 / tcp

1543809371 | 2025-01-17T01:28:41.146923
480 / tcp

-1399940268 | 2025-01-10T20:13:39.948025
502 / tcp

632542934 | 2025-01-03T18:06:09.872484
503 / tcp

2087396567 | 2025-01-20T21:51:06.638876
515 / tcp

-1876452130 | 2025-01-07T19:17:09.648333
541 / tcp

-2035415184 | 2025-01-19T23:36:47.035644
548 / tcp

1207252947 | 2025-01-11T02:01:41.315482
554 / tcp

-1890071674 | 2025-01-08T10:30:48.040721
587 / tcp

-1112304903 | 2024-12-25T03:02:54.997128
593 / tcp

826560219 | 2025-01-10T18:10:07.562066
636 / tcp

-1960639992 | 2025-01-10T12:42:35.423225
666 / tcp

1134517380 | 2025-01-10T19:21:52.472864
771 / tcp

2098371729 | 2025-01-16T16:38:47.287752
772 / tcp

1308377066 | 2025-01-19T21:04:51.503507
789 / tcp

-1888448627 | 2025-01-11T00:52:21.224928
853 / tcp

-1970692834 | 2025-01-18T03:05:31.715615
873 / tcp

-1399940268 | 2025-01-15T05:32:07.895835
886 / tcp

20021069 | 2025-01-06T10:39:13.381474
888 / tcp

677934968 | 2025-01-11T05:13:47.269628
943 / tcp

-1718295362 | 2025-01-14T04:58:30.650536
992 / tcp

51259122 | 2025-01-10T19:41:15.922468
993 / tcp

-1199842642 | 2025-01-10T10:44:31.877619
995 / tcp

-1214918252 | 2025-01-11T18:39:10.149212
999 / tcp

-616720387 | 2025-01-19T21:33:59.473547
1002 / tcp

-801484042 | 2025-01-16T21:40:56.837293
1023 / tcp

819727972 | 2024-12-29T00:50:13.306696
1026 / tcp

1996932384 | 2024-12-26T20:16:12.280341
1028 / tcp

-1947777893 | 2025-01-10T19:15:17.080773
1050 / tcp

1362344524 | 2025-01-16T21:29:04.643228
1080 / tcp

-1248408558 | 2025-01-17T05:45:18.172454
1099 / tcp

165188539 | 2025-01-14T01:15:43.970816
1153 / tcp

873425297 | 2025-01-20T13:22:34.895497
1177 / tcp

-971970408 | 2025-01-20T01:02:51.883583
1200 / tcp

1989907056 | 2025-01-16T17:39:39.796138
1234 / tcp

546151771 | 2025-01-10T22:48:45.975488
1337 / tcp

321971019 | 2025-01-18T23:21:10.923681
1414 / tcp

419886129 | 2025-01-17T10:37:03.169731
1433 / tcp

-1715152554 | 2025-01-05T01:55:11.699779
1443 / tcp

-2089734047 | 2025-01-09T05:01:34.250688
1450 / tcp

-541815454 | 2025-01-11T00:20:39.507938
1521 / tcp

1850902677 | 2025-01-16T13:15:01.828125
1599 / tcp

841014058 | 2025-01-20T22:37:13.099896
1604 / tcp

1103582599 | 2025-01-18T12:27:49.052494
1723 / tcp

205347087 | 2025-01-15T09:21:47.609247
1800 / tcp