GeneralInformation

Hostnames	aliyun.com
Domains	aliyun.com
Country	China
City	Zhangjiakou
Organization	Hangzhou Alibaba Advertising Co.,Ltd.
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

11 13 17 19 21 23 25 37 43 65 70 79 80 92 97 102 104 110 111 119 135 143 175 177 189 195 221 263 264 311 427 443 444 448 465 502 513 515 522 548 593 666 675 685 771 772 800 831 873 992 993 1023 1024 1025 1027 1080 1081 1099 1153 1167 1177 1181 1195 1200 1224 1283 1337 1366 1388 1414 1433 1443 1494 1515 1521 1599 1604 1723 1800 1801 1883 1922 1926 1956 1962 1966 1969 1982 1985 1990 2000 2002 2003 2008 2030 2056 2060 2067 2083 2087 2103 2109 2121 2133 2154 2181 2220 2222 2320 2323 2345 2353 2376 2404 2435 2455 2552 2562 2563 2601 2628 2709 2761 2762 2806 3001 3012 3017 3049 3050 3056 3082 3085 3094 3118 3126 3127 3128 3129 3139 3152 3155 3156 3164 3175 3176 3177 3185 3188 3197 3260 3269 3299 3306 3310 3342 3388 3389 3401 3443 3479 3548 3563 3580 3790 3950 4063 4064 4104 4157 4172 4200 4282 4321 4369 4433 4434 4435 4436 4443 4444 4461 4477 4500 4506 4520 4543 4572 4602 4734 4786 4840 4899 4911 5001 5007 5009 5010 5022 5025 5070 5105 5172 5201 5222 5226 5244 5257 5259 5278 5432 5435 5544 5555 5594 5605 5620 5660 5672 5721 5858 5915 5938 5984 5986 5997 6000 6001 6002 6036 6331 6379 6443 6512 6602 6633 6653 6666 6667 6668 6697 7001 7004 7007 7071 7078 7090 7172 7272 7433 7434 7443 7444 7548 7657 7687 8007 8009 8012 8014 8019 8028 8029 8054 8055 8057 8064 8081 8082 8083 8085 8087 8089 8099 8109 8113 8116 8139 8140 8152 8181 8200 8291 8333 8415 8416 8422 8423 8436 8443 8450 8473 8500 8520 8521 8530 8545 8568 8573 8578 8580 8596 8597 8649 8666 8686 8728 8771 8784 8811 8825 8834 8845 8848 8856 8857 8864 8880 8884 8891 8899 8988 9000 9001 9011 9015 9029 9037 9042 9045 9051 9065 9091 9095 9096 9117 9130 9134 9136 9143 9148 9152 9160 9170 9174 9189 9210 9212 9216 9230 9251 9252 9299 9306 9310 9333 9345 9398 9418 9458 9530 9600 9633 9682 9696 9754 9876 9898 9919 9991 9993 9998 9999 10000 10001 10009 10018 10026 10032 10068 10100 10134 10205 10210 10250 10380 10397 10443 10554 10909 10911 10935 11000 11112 11210 11211 11288 11300 11681 12000 12142 12143 12148 12150 12156 12176 12182 12215 12217 12218 12221 12227 12238 12240 12254 12271 12278 12280 12281 12285 12309 12311 12314 12319 12322 12345 12347 12418 12446 12464 12496 12499 12501 12504 12506 12524 12541 12561 12563 12580 12584 12980 14147 14265 14344 14400 14895 14909 15002 15042 16051 16052 16071 16074 16082 16087 16095 16993 17084 17778 18014 18018 18023 18050 18055 18080 18081 18084 18099 18181 18245 18368 19000 19084 20000 20182 20256 20547 20880 21025 21100 21275 21286 21294 21305 21306 21310 21379 22084 22222 22345 22556 23023 24442 24472 25001 25565 25952 27015 27017 28015 30002 30003 30027 30113 31210 32764 33060 33333 35000 35240 35250 36022 37080 40892 43080 44158 44301 44305 44306 44420 44444 44818 45003 45039 45666 45922 46422 46622 46822 47122 47222 47422 47622 47722 47822 47922 47990 48018 48022 48222 48422 48922 49153 49322 49422 49622 49686 49922 50000 50022 50042 50100 50122 50522 50822 50997 51322 51722 51922 52022 52200 52536 52922 53122 53322 53422 53622 53722 53822 53922 54022 54122 54138 54322 54422 54522 54622 54822 54857 54922 55000 55388 55443 55522 55553 55554 55722 55822 55922 56022 56222 56622 57222 57722 57784 57822 57922 58022 58122 58222 58422 58522 58622 58922 59122 59722 60021 60022 60129 60443 62078 63210 63260 65432

11 / tcp

2087396567 | 2025-01-19T01:25:21.397254

kjnkjabhbanc283ubcsbhdc72

13 / tcp

1215890103 | 2025-01-17T04:44:12.603168

12:58:25 2024-1-22

17 / tcp

1767345577 | 2025-01-27T07:46:37.565430

Hello, this is Quagga (version 0T).
Copyright 1996-200

19 / tcp

-746345752 | 2025-01-18T05:30:13.496602

¥A\x01,\x02L\x08Connectx\x0857222

21 / tcp

1210838212 | 2025-01-16T13:48:59.501417

220 DiskStation FTP server ready.

23 / tcp

-1288412979 | 2025-01-21T11:25:43.850680

Connection refused

25 / tcp

-1729629024 | 2025-01-25T05:40:43.147706

101 imqbroker =unV

37 / tcp

1842948889 | 2024-12-29T13:39:52.188396

431 Unab

43 / tcp

1852418385 | 2025-01-18T06:55:19.896786

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

65 / tcp

103159425 | 2025-01-21T05:01:56.137965

SSH-1.99-RGOS_SSH

70 / tcp

-1385078233 | 2025-01-01T18:28:01.085871

HTTP/1.1 404 
Content-Type: text/html;charset=utf-8
Content-Language: zh-CN

79 / tcp

-1770051369 | 2025-01-25T23:00:56.674078

421 too many connections

80 / tcp

0 | 2025-01-27T06:51:27.182524

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

92 / tcp

-1099385124 | 2025-01-08T23:44:05.346835

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

97 / tcp

1655023012 | 2025-01-08T22:29:39.080776

athinfod: invalid query.\n

102 / tcp

819727972 | 2025-01-13T04:37:41.192424

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

104 / tcp

410249975 | 2025-01-01T02:14:59.119997

LNS READY<>

110 / tcp

819727972 | 2025-01-22T17:38:22.189917

SSH-2.0-OpenSSH_7.4

111 / tcp

410249975 | 2025-01-05T17:24:20.863772

LNS READY<>

119 / tcp

-2107996212 | 2025-01-22T22:42:22.725393

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

135 / tcp

1759440106 | 2025-01-23T20:27:53.172735

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: ASUS\n IP2: 169.254.92.183\n IP3: 115.43.177.186\n\nNTLMSSP:\nTarget_Name: ASUS\nProduct_Version: 6.2.9200 Ntlm 15\nOS: Windows Server 2012/Windows 8\nNetBIOS_Domain_Name: ASUS\nNetBIOS_Computer_Name: ASUS\nDNS_Domain_Name: ASUS\nDNS_Computer_Name: ASUS\nSystem_Time: 2024-01-22 06:22:42 +0000 UTC\n\nDCERPC Dump:\n3a9ef155-691d-4449-8d05-09ad57031823 (schedsvc.dll):\n  - NCACN: 115.43.177.186:49154\n  - NCACN:

143 / tcp

-382990917 | 2025-01-09T22:03:41.734706

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n

175 / tcp

1996932384 | 2025-01-15T21:28:53.535352

"raop" nonce

177 / tcp

-1746074029 | 2025-01-17T05:06:06.686063

101 imqbroker =unV\r\n

189 / tcp

-1329831334 | 2025-01-16T02:26:58.239228

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

195 / tcp

2087396567 | 2024-12-31T20:33:00.852081

kjnkjabhbanc283ubcsbhdc72

221 / tcp

1492413928 | 2025-01-12T17:46:55.444360

SSH-2.0-OpenSSH_7.5

263 / tcp

-1986594217 | 2025-01-16T03:53:44.945814

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

264 / tcp

-1547821026 | 2025-01-15T00:49:18.715071

CheckPoint\nFirewall Host: CPFWVSX1A_Audi_ODP_S2S_vsfw\nSmartCenter Host: admin..afx8nn\\x00\n

311 / tcp

676753056 | 2025-01-22T19:11:52.884716

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html

427 / tcp

1388449297 | 2025-01-19T10:54:48.812433

SAAdvert Response:\nVersion: 2\nFunction: SA Advertisement (11)\nURL: service:service-agent://*.*.*.*\nScopeList: default\nAttrributeList: \n\n\nserviceTypes:\nservice:ipmi\nservice:uartmirrorlog\nservice:lighttpd\nservice:redfish\nservice:management-hardware.ThinkBMC\nservice:cdserver\nservice:hdserver\nservice:adviser\nservice:MCTPMain\nB://l:87/x\n\nResponse of service:ipmi SrvReq:\nVersion: 2\nFunction: Service Reply (2)\nErrorCode: SUCCESS (0)\nURL Entries:\n  Lifetime: 65535\n  URL: service:ipmi://LNV-7D53-J6001R60:623\n\n\nRespo

443 / tcp

-1715152554 | 2025-01-05T20:08:33.282871

Hashes

hash

-474976629

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 05 Jan 2025 20:08:38 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://59.82.112.188:443/

444 / tcp

-1182016972 | 2025-01-08T21:49:37.624942

HTTP/1.1 400 Bad Request
Server: nginx/1.22.1
Date: Wed, 08 Jan 2025 21:49:37 GMT
Content-Type: text/html
Content-Length: 157
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

448 / tcp

819727972 | 2025-01-24T21:33:59.378077

SSH-2.0-OpenSSH_7.4

465 / tcp

897328069 | 2025-01-13T22:26:53.368930

220 mail.scott000.com ESMTP

502 / tcp

-1795027372 | 2025-01-27T23:39:39.561058

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

513 / tcp

-1476017887 | 2025-01-14T21:39:32.644030

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

515 / tcp

-971970408 | 2025-01-21T18:46:27.370706

522 / tcp

117101543 | 2024-12-30T05:03:31.563974

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

548 / tcp

-1769206458 | 2025-01-04T09:21:45.234302

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: NASDF59D2\nMachine Type: \\x10Netatalk3.1.9.q2\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: DHX2\\x0f,No User Authent\\x10,Cleartxt Passwrd\\x00\nServer Signature: 00000000008002000180030002800280

593 / tcp

1308377066 | 2025-01-01T08:10:12.658169

ncacn_http/1.0

666 / tcp

1300162323 | 2025-01-22T13:23:28.450801

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

675 / tcp

165188539 | 2025-01-19T15:44:44.025103

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

685 / tcp

1615193817 | 2025-01-11T07:48:57.002961

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

771 / tcp

-2089734047 | 2025-01-19T04:28:54.563584

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

772 / tcp

-122096153 | 2025-01-18T17:22:41.317911

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

800 / tcp

-29892444 | 2025-01-13T23:16:50.519353

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2540_PS-TSN-01bvK144_7822-18911

831 / tcp

819727972 | 2025-01-17T06:13:03.817296

SSH-2.0-OpenSSH_7.4

873 / tcp

-1970692834 | 2025-01-24T05:31:02.494569

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

992 / tcp

-936692830 | 2025-01-13T20:40:03.255341

HTTP/1.1 202 OK
Connection: Keep-Alive
Content-Type: text/html
Keep-Alive: timeout=15; max=19

993 / tcp

-339084706 | 2025-01-22T17:18:35.468926

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

1023 / tcp

-1453516345 | 2025-01-27T21:13:42.386528

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

1024 / tcp

-2118655245 | 2025-01-19T07:12:07.229640

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

1025 / tcp

-1399940268 | 2025-01-08T10:38:55.025619

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1027 / tcp

1911457608 | 2025-01-24T17:34:47.919413

\x00[\x00\x00\x00\x00\x00\x00

1080 / tcp

1362344524 | 2025-01-01T21:25:50.957995

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1081 / tcp

-971970408 | 2025-01-17T12:23:20.541321

1099 / tcp

2103111368 | 2025-01-01T19:13:14.233140

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

1153 / tcp

366084633 | 2024-12-30T20:46:43.610463

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

1167 / tcp

1282941221 | 2025-01-20T11:29:35.576449

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

1177 / tcp

1690634669 | 2025-01-21T12:47:41.844797

1181 / tcp

-1399940268 | 2025-01-21T18:41:39.595548

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1195 / tcp

819727972 | 2025-01-21T00:02:08.451117

SSH-2.0-OpenSSH_7.4

1200 / tcp

-784071826 | 2025-01-23T18:12:29.815104

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

1224 / tcp

-2118655245 | 2025-01-15T09:22:30.645812

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

1283 / tcp

677934968 | 2025-01-24T20:33:22.273777

lm^)Q

1337 / tcp

2087396567 | 2025-01-24T21:44:45.628613

kjnkjabhbanc283ubcsbhdc72

1366 / tcp

819727972 | 2025-01-15T20:53:01.665541

SSH-2.0-OpenSSH_7.4

1388 / tcp

819727972 | 2025-01-14T19:10:32.869142

SSH-2.0-OpenSSH_7.4

1414 / tcp

-1297953727 | 2025-01-28T01:48:00.845576

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

1433 / tcp

-271790512 | 2025-01-04T17:27:03.889407

MSSQL Server\nVersion: 251660240 (0xf0007d0)\nSub-Build: 0\nEncryption:Not available

1443 / tcp

-1715152554 | 2025-01-05T20:08:31.203890

Hashes

hash

659889348

http.dom_hash

1239617585

http.html_hash

-1715152554

http.server_hash

1727046647

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 05 Jan 2025 20:08:35 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://59.82.112.188:443/

1494 / tcp

-1049213899 | 2025-01-16T03:31:29.800799

\\x7f\\x7fICA

1515 / tcp

819727972 | 2025-01-28T03:28:30.139345

SSH-2.0-OpenSSH_7.4

1521 / tcp

-541815454 | 2025-01-01T23:56:23.554351

Version:11.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=186646784)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

1599 / tcp

1492413928 | 2024-12-29T22:07:49.239673

SSH-2.0-OpenSSH_7.5

1604 / tcp

-1626979812 | 2025-01-25T16:57:38.702323

220 Service ready for new user.

1723 / tcp

1103582599 | 2025-01-07T18:01:22.035740

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

1800 / tcp

1161309183 | 2025-01-24T12:57:33.942727

ProxyServer is ready

1801 / tcp

1725077471 | 2025-01-21T06:57:03.750475

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x92\\xb4\\xd9\\x13@w\\xa5F\\xbf\\xbd_\\x00\\xe9(Z\\x1992d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1883 / tcp

1632932802 | 2025-01-23T04:51:36.180691

1922 / tcp

-1261090339 | 2025-01-02T00:21:49.486154

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

1926 / tcp

-905685638 | 2025-01-25T17:35:47.082912

bxz437

1956 / tcp

632542934 | 2025-01-11T01:28:04.817996

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

1962 / tcp

-1810987450 | 2025-01-27T07:57:15.082515

\xc3\xbf

1966 / tcp

-441419608 | 2025-01-23T09:34:30.369446

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

1969 / tcp

-2096652808 | 2025-01-11T16:53:32.334728

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1982 / tcp

-1248408558 | 2025-01-18T20:51:11.065630

220 MikroTik FTP server (MikroTik 6.44.3) ready

1985 / tcp

1830697416 | 2025-01-09T21:11:37.242990

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

1990 / tcp

-1399940268 | 2025-01-13T15:56:56.220613

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2000 / tcp

632542934 | 2025-01-10T22:26:40.858058

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2002 / tcp

-1840865572 | 2025-01-25T01:00:39.006097

HÿjHost '101.133.140.114' is not allowed to 
connect to this MySQL server

2003 / tcp

-1279886438 | 2025-01-23T13:03:22.316477

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

2008 / tcp

819727972 | 2025-01-21T11:30:33.511883

SSH-2.0-OpenSSH_7.4

2030 / tcp

372433470 | 2025-01-18T04:38:39.471281

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

2056 / tcp

1632932802 | 2025-01-19T14:59:05.328608

2060 / tcp

-1399940268 | 2025-01-11T19:52:47.796378

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2067 / tcp

-971970408 | 2025-01-22T04:20:56.106797

2083 / tcp

1741579575 | 2025-01-15T00:39:17.702818

2087 / tcp

233634112 | 2025-01-27T22:06:59.078795

SSH-98.60-SysaxSSH_81885..42

2103 / tcp

339502408 | 2025-01-10T20:41:36.707010

\xc3\xbf\xc3\xbb\\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

2109 / tcp

1642597142 | 2025-01-28T00:48:55.805690

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

2121 / tcp

141730637 | 2025-01-18T10:41:01.031167

HTTP/1.0 200 OK
Server: Proxy

2133 / tcp

-2089734047 | 2025-01-27T17:29:08.442609

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2154 / tcp

323676348 | 2025-01-21T12:22:31.254002

}â

2181 / tcp

546151771 | 2025-01-11T05:58:40.836979

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2220 / tcp

-2089734047 | 2025-01-25T00:03:46.277256

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

2222 / tcp

-1152923582 | 2025-01-17T07:05:47.385695

SSH-2.0-dropbear\r\n\\x00\\x00\\x01\\x84\\x07\\x14\\x82q\\xf3\\x1aG*9\\xe9\\xf7O\xc9\xad#\\xbbpG\\x00\\x00\\x00\\x82curve25519-sha256,curve25519-sha256@libssh.org,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,kexguess2@matt.ucc.asn.au\\x00\\x00\\x00 ssh-ed25519,rsa-sha2-256,ssh-rsa\\x00\\x00\\x003chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr\\x00\\x00\\x003chacha20-poly1305@openssh.com,aes128-ctr,aes256-ctr\\x00\\x00\\x00\\x17hmac-sha1,hmac-sha2-256\\x00\\x00\\x00\\x17hmac-sha1,hmac-sha2-256\\x00\\x00\\x00\\x04none\\x00\\x00\\x00\\x04non

2320 / tcp

819727972 | 2025-01-09T01:44:37.119979

SSH-2.0-OpenSSH_7.4

2323 / tcp

1662205251 | 2025-01-28T08:23:00.916715

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

2345 / tcp

1911457608 | 2025-01-20T09:59:24.026952

\x00[\x00\x00\x00\x00\x00\x00

2353 / tcp

-2107996212 | 2025-01-10T02:15:12.319526

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

2376 / tcp

-971970408 | 2025-01-26T03:13:20.680580

2404 / tcp

597764502 | 2025-01-08T04:50:11.633399

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

2435 / tcp

-297128567 | 2025-01-08T22:43:03.588219

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

2455 / tcp

1842524259 | 2025-01-20T21:57:37.170641

2552 / tcp

-1399940268 | 2025-01-04T17:46:33.387132

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2562 / tcp

819727972 | 2025-01-08T14:50:26.425852

SSH-2.0-OpenSSH_7.4

2563 / tcp

-1036370807 | 2025-01-19T11:02:05.677194

JDWP-Handshake

2601 / tcp

-1804005872 | 2025-01-17T01:56:38.439470

\n\nWelcome to visit GOCLOUD S2A series router!\n\n\r\nUser Access Verification\r\n\r\n\\xff\\xfb\\x01\\xff\\xfb\\x03\\xff\\xfe"\\xff\\xfd\\x1fPassword:

2628 / tcp

539065883 | 2025-01-20T19:28:13.079731

2709 / tcp

-2031152423 | 2025-01-21T23:56:23.203087

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

2761 / tcp

1504401647 | 2025-01-25T11:39:16.351909

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

2762 / tcp

321971019 | 2025-01-05T19:24:59.552362

-ERR client ip is not in whitelist\r

2806 / tcp

398077695 | 2025-01-15T18:39:46.740950

3001 / tcp

707919486 | 2025-01-27T01:00:12.405551

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

3012 / tcp

-1730858130 | 2025-01-27T23:21:39.779621

RFB 003.008
VNC:
  Protocol Version: 3.8

3017 / tcp

-1768187140 | 2025-01-22T17:19:56.761386

HTTP/1.1 403 Forbidden
Server: Microsoft-IIS/10.110
Content-Type: text/plain; charset=utf-8
Connection: close

3049 / tcp

1911457608 | 2025-01-16T10:36:44.441865

\x00[\x00\x00\x00\x00\x00\x00

3050 / tcp

669849225 | 2024-12-30T03:42:15.599813

SSH-98.60-SysaxSSH_81885..42\r\n

3056 / tcp

-1899074860 | 2025-01-19T11:59:00.559183

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

3082 / tcp

-1399940268 | 2025-01-10T20:03:03.236090

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3085 / tcp

-1399940268 | 2025-01-19T11:35:30.395704

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3094 / tcp

165188539 | 2025-01-03T05:32:42.992377

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

3118 / tcp

-1888448627 | 2025-01-09T15:59:34.118508

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3126 / tcp

321971019 | 2025-01-19T08:01:26.513413

-ERR client ip is not in whitelist\r

3127 / tcp

-1810987450 | 2025-01-22T01:55:17.098244

\xc3\xbf

3128 / tcp

1320285193 | 2025-01-17T00:42:13.202604

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

3129 / tcp

1208318993 | 2025-01-25T22:16:46.591713

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

3139 / tcp

1911457608 | 2025-01-22T02:20:22.458285

\x00[\x00\x00\x00\x00\x00\x00

3152 / tcp

1396488228 | 2025-01-20T06:49:35.869352

HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html

3155 / tcp

493955023 | 2025-01-27T17:08:05.380994

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

3156 / tcp

-2089734047 | 2025-01-13T09:45:21.138269

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

3164 / tcp

-1036370807 | 2025-01-23T12:42:55.363320

JDWP-Handshake

3175 / tcp

-904840257 | 2025-01-14T19:00:22.022309

572 Relay not authorized\r\n

3176 / tcp

2143387245 | 2025-01-10T05:23:20.110393

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

3177 / tcp

2143387245 | 2025-01-19T04:09:12.767567

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

3185 / tcp

740837454 | 2025-01-28T09:13:04.199727

SSH-2.0-OpenSSH_5.3

3188 / tcp

-1538260461 | 2025-01-14T11:35:32.898564

\x01\x00\x00\x00

3197 / tcp

921225407 | 2025-01-19T01:41:01.092239

\x00\x00\x00\x04\x00\x00\x00\x00\x00

3260 / tcp

-1341662640 | 2025-01-26T04:33:31.190012

HTTP/1.1 301 Moved Permanently
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3269 / tcp

103159425 | 2025-01-17T22:04:48.516382

SSH-1.99-RGOS_SSH

3299 / tcp

-1399940268 | 2025-01-26T07:30:47.346607

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3306 / tcp

849822411 | 2025-01-25T14:08:10.791464

Mysql Version: 5.7.44-log \r\nN\\x00\\x00\\x00\n5.7.44-log\\x00s/\\x06\\x00(o>\\x1c`\\x18*a\\x00\\xff\\xff-\\x02\\x00\\xff\\xc1\\x15\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00fFU\\x07_\\x1ay\\x14i}\\x02E\\x00mysql_native_password\\x00

3310 / tcp

819727972 | 2025-01-24T17:47:42.898427

SSH-2.0-OpenSSH_7.4

3342 / tcp

119860953 | 2025-01-20T17:07:26.644327

* OK ArGoSoft Mail Server IMAP Module v.YW at

3388 / tcp

-1248408558 | 2025-01-27T14:18:44.817637

220 MikroTik FTP server (MikroTik 6.44.3) ready

3389 / tcp

-6645672 | 2025-01-06T05:51:32.932941

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x0f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: 172_16_0_11\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: 172_16_0_11\nNetBIOS_Computer_Name: 172_16_0_11\nDNS_Domain_Name: 172_16_0_11\nDNS_Computer_Name: 172_16_0_11\nSystem_Time: 2024-01-22 08:42:27 +0000 UTC\n\n

3401 / tcp

1975288991 | 2025-01-10T15:27:57.737239

OPTI

3443 / tcp

819727972 | 2025-01-16T13:52:20.193083

SSH-2.0-OpenSSH_7.4

3479 / tcp

-653033013 | 2025-01-28T02:54:21.705253

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

3548 / tcp

1991883981 | 2025-01-24T16:24:20.107015

B\x00\x00\x00\xc3\xbfn\x04Too many connections

3563 / tcp

-1888448627 | 2025-01-19T01:48:18.759443

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

3580 / tcp

-1227409554 | 2025-01-24T05:18:33.590200

HTTP/1.1 500 Internal Server Error
Server: Zope/(2.13.23, python 1.7.18, linux2) ZServer/1.1
Content-Type: text/plain; charset=utf-8
Connection: close

3790 / tcp

819727972 | 2025-01-27T18:28:35.660738

SSH-2.0-OpenSSH_7.4

3950 / tcp

1911457608 | 2025-01-13T19:12:26.241669

\x00[\x00\x00\x00\x00\x00\x00

4063 / tcp

-784071826 | 2025-01-11T06:16:08.627023

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

4064 / tcp

1126993057 | 2025-01-17T23:03:35.448500

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

4104 / tcp

-616720387 | 2025-01-09T20:18:49.896665

SSH-2.0-SSHD_0.7.6

4157 / tcp

-441419608 | 2025-01-23T12:25:55.894640

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

4172 / tcp

-1105333987 | 2025-01-15T04:45:50.021758

\x00[KpU\x7f\x00\x00

4200 / tcp

-2031152423 | 2025-01-25T08:18:44.534320

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

4282 / tcp

1763259671 | 2025-01-27T09:01:20.814539

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

4321 / tcp

-1250504565 | 2025-01-06T11:49:59.213461

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x80\x00\x04\x00\x01\x00\x00\x00\x05\x00\xff\xff\xff\x00\x00\x04\x08\x00\x00\x00\x00\x00\x7f\xff\x00\x00\x00\x00\x08\x07\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01

4369 / tcp

-1139539254 | 2025-01-19T09:19:23.280349

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

4433 / tcp

1842524259 | 2025-01-05T17:13:11.052667

4434 / tcp

-1681927087 | 2025-01-25T09:34:37.811743

kjnkjabhbanc283ubcsbhdc72

4435 / tcp

-2096652808 | 2025-01-11T02:48:46.763723

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

4436 / tcp

-1399940268 | 2025-01-13T21:48:04.008658

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4443 / tcp

2140295939 | 2025-01-04T14:31:21.808763

HTTP/1.1 200 
Server: nginx
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache

4444 / tcp

-2089734047 | 2025-01-26T13:04:57.492784

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

4461 / tcp

1911457608 | 2025-01-11T18:28:48.511169

\x00[\x00\x00\x00\x00\x00\x00

4477 / tcp

-1839934832 | 2025-01-26T18:37:41.340303

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

4500 / tcp

320677201 | 2025-01-27T19:09:59.824039

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

4506 / tcp

799468586 | 2025-01-26T18:44:06.179239

ICA

4520 / tcp

-1399940268 | 2025-01-11T00:49:29.461633

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4543 / tcp

-2017887953 | 2025-01-20T05:18:49.932091

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

4572 / tcp

1011407350 | 2025-01-17T14:44:16.730862

* OK GroupWise IMAP4rev1 Server Ready\r\n

4602 / tcp

-1888448627 | 2025-01-27T07:45:01.121784

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

4734 / tcp

1282941221 | 2025-01-22T22:10:18.942725

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

4786 / tcp

-146605374 | 2025-01-06T22:05:15.697407

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

4840 / tcp

1911457608 | 2025-01-09T17:03:14.226679

\x00[\x00\x00\x00\x00\x00\x00

4899 / tcp

104385780 | 2025-01-10T07:46:15.515269

ceph v2

4911 / tcp

-2089734047 | 2024-12-31T17:30:54.371267

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5001 / tcp

-1839934832 | 2024-12-29T19:17:53.805123

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

5007 / tcp

-1399940268 | 2025-01-24T08:07:27.561973

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5009 / tcp

-1338936697 | 2025-01-08T10:36:31.785679

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2109_PStjdxtk16_38957-48596

5010 / tcp

-1375131644 | 2025-01-26T13:25:20.956849

\x00[v\xc3\xbdC\x7f\x00\x00

5022 / tcp

-1746074029 | 2025-01-10T12:20:31.619738

101 imqbroker =unV\r\n

5025 / tcp

819727972 | 2025-01-13T19:44:59.591448

SSH-2.0-OpenSSH_7.4

5070 / tcp

165188539 | 2025-01-24T16:20:16.874214

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

5105 / tcp

-1839934832 | 2025-01-27T21:36:51.669187

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

5172 / tcp

-358801646 | 2025-01-11T00:41:13.428940

SSH-2.0-OpenSSH_6.6.1

5201 / tcp

-122096153 | 2025-01-21T04:34:04.804245

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

5222 / tcp

-952165951 | 2025-01-23T19:59:45.132015

AB

5226 / tcp

-1839934832 | 2025-01-14T12:03:21.500533

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

5244 / tcp

669849225 | 2025-01-23T04:32:29.493906

SSH-98.60-SysaxSSH_81885..42\r\n

5257 / tcp

-1399940268 | 2025-01-20T21:43:46.166163

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5259 / tcp

1308377066 | 2025-01-26T07:26:29.957070

ncacn_http/1.0

5278 / tcp

1911457608 | 2025-01-28T06:16:00.759297

\x00[\x00\x00\x00\x00\x00\x00

5432 / tcp

-1032713145 | 2025-01-22T23:29:25.398612

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

5435 / tcp

819727972 | 2025-01-17T03:57:01.421826

SSH-2.0-OpenSSH_7.4

5544 / tcp

378148627 | 2025-01-25T11:58:30.890905

HTTP/1.1 497 Http to Https
Server: nginx/1.20.1
Content-Type: text/html; charset=utf-8
Connection: close

5555 / tcp

2106853541 | 2025-01-17T00:53:04.203769

HTTP/1.1 403 Forbidden 
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm="proxy"

5594 / tcp

-1399940268 | 2025-01-18T15:00:37.471673

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5605 / tcp

165188539 | 2025-01-16T23:44:56.919982

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

5620 / tcp

-1399940268 | 2025-01-13T15:03:06.672956

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5660 / tcp

-375604792 | 2025-01-12T21:43:05.595943

220 Microsoft FTP Service

5672 / tcp

575925250 | 2025-01-16T07:27:56.408407

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5721 / tcp

1948301213 | 2025-01-13T12:26:50.940285

RFB 003.003
VNC:
  Protocol Version: 3.3

5858 / tcp

-1730858130 | 2025-01-07T07:28:38.560069

RFB 003.008
VNC:
  Protocol Version: 3.8

5915 / tcp

-1249500036 | 2025-01-23T15:35:24.536508

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

5938 / tcp

1011407350 | 2025-01-25T17:55:06.673595

* OK GroupWise IMAP4rev1 Server Ready\r\n

5984 / tcp

1999272906 | 2025-01-01T08:01:18.948857

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

-1013082686 | 2025-01-13T18:41:51.501229

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

5997 / tcp

321971019 | 2025-01-24T18:50:15.102008

-ERR client ip is not in whitelist\r

6000 / tcp

-1019343788 | 2025-01-09T19:53:48.410703

W!\x00\x00\x00\x00

6001 / tcp

1278527606 | 2025-01-12T10:04:11.792958

SSH-2.0-Teleport

6002 / tcp

1632932802 | 2025-01-06T00:12:24.194796

6036 / tcp

-2089734047 | 2025-01-08T02:16:07.951402

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

6331 / tcp

-1399940268 | 2025-01-27T10:58:41.998212

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6379 / tcp

321971019 | 2025-01-17T15:00:44.954499

-ERR client ip is not in whitelist\r

6443 / tcp

-1882997477 | 2025-01-05T11:01:09.913890

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 05 Jan 2025 11:01:09 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://59.82.112.188:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

6512 / tcp

597764502 | 2025-01-14T23:04:05.648021

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

6602 / tcp

669849225 | 2025-01-25T01:27:18.253705

SSH-98.60-SysaxSSH_81885..42\r\n

6633 / tcp

1996932384 | 2025-01-24T22:40:52.635423

"raop" nonce

6653 / tcp

-616720387 | 2025-01-12T13:09:58.365285

SSH-2.0-SSHD_0.7.6

6666 / tcp

4935895 | 2025-01-18T23:37:25.128106

HTTP/1.1 400 Bad Request
Server: CloudWAF

6667 / tcp

2087396567 | 2025-01-19T01:18:39.553754

kjnkjabhbanc283ubcsbhdc72

6668 / tcp

321971019 | 2025-01-28T06:01:32.865075

-ERR client ip is not in whitelist\r

6697 / tcp

819727972 | 2025-01-17T01:30:58.306588

SSH-2.0-OpenSSH_7.4

7001 / tcp

-829704895 | 2025-01-21T18:03:58.553451

+OK-1035|

7004 / tcp

-1043219439 | 2025-01-10T18:06:44.454444

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2744_PS-JJN-01pX761_10323-44071

7007 / tcp

-1093423073 | 2025-01-16T21:27:33.180468

HTTP/1.1 404 Not Found
Server: Genetic Lifeform and Distributed Open Server 1.6.1
Connection: close
Content-Type: text/html; charset=ISO-8859-1
Cache-Control: public, max-age=31536000

7071 / tcp

1332894250 | 2025-01-27T22:02:37.331099

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

7078 / tcp

15018106 | 2025-01-25T23:12:38.730698

\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00

7090 / tcp

-1399940268 | 2025-01-14T16:42:31.053639

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7172 / tcp

632542934 | 2025-01-20T05:06:11.769367

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

7272 / tcp

1830697416 | 2025-01-16T03:24:45.308244

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

7433 / tcp

-1399940268 | 2025-01-17T00:28:22.502896

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7434 / tcp

1830187220 | 2025-01-06T22:33:32.968300

\xc3\xbf\xc3\xbb\x01\r\n-> GET / HTTP/1.0\r\nGET / HTTP/1.0\r\nundefined symbol: GET\r\n-> \r\n->

7443 / tcp

1342763855 | 2024-12-29T17:03:49.361375

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
Connection: close
Server: Nginx
Expires: 0
Pragma: no-cache
Cache-Control: no-cache
X-LANG: 1
X-Timezone: 0800
X-Timestamp: 1705912071
X-Arch: x86
X-Sysbit: x64
X-Enterprise: 0
X-Support-i18n: 0
X-Support-wifi: 0
Location: /login

7444 / tcp

-980525298 | 2025-01-11T08:48:01.602618

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

7548 / tcp

1741579575 | 2025-01-05T06:48:50.813351

7657 / tcp

-2118655245 | 2025-01-12T19:57:01.326298

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

7687 / tcp

1996932384 | 2025-01-11T03:59:28.534570

"raop" nonce

8007 / tcp

163996600 | 2025-01-10T06:39:32.179292

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae26d8cc39789006deb3e78cc6ce7c

8009 / tcp

320677201 | 2025-01-26T00:16:48.632499

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

8012 / tcp

-1699556818 | 2025-01-27T01:07:37.184853

\x01remshd: Kerberos Authentication not enabled.\n

8014 / tcp

-904840257 | 2025-01-19T21:27:08.807379

572 Relay not authorized\r\n

8019 / tcp

1996932384 | 2025-01-07T23:42:11.162848

"raop" nonce

8028 / tcp

819727972 | 2025-01-14T08:09:38.391006

SSH-2.0-OpenSSH_7.4

8029 / tcp

1278527606 | 2025-01-08T19:39:59.269464

SSH-2.0-Teleport

8054 / tcp

-1399940268 | 2025-01-23T01:47:45.893858

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8055 / tcp

493955023 | 2024-12-31T08:40:56.338545

\x00\x00\x0c\x04\x00\x00\x00\x00\x00\x00\x04\x00\x10\x00\x00\x00\n0\x05\x00\x00@\x00

8057 / tcp

-1248408558 | 2025-01-26T11:14:53.725973

220 MikroTik FTP server (MikroTik 6.44.3) ready

8064 / tcp

1911457608 | 2025-01-25T19:34:53.517186

\x00[\x00\x00\x00\x00\x00\x00

8081 / tcp

1948301213 | 2025-01-13T16:54:17.383284

RFB 003.003
VNC:
  Protocol Version: 3.3

8082 / tcp

819727972 | 2025-01-09T14:55:16.527793

SSH-2.0-OpenSSH_7.4

8083 / tcp

1690634669 | 2025-01-06T22:53:04.128845

8085 / tcp

2087396567 | 2025-01-25T20:15:50.554851

kjnkjabhbanc283ubcsbhdc72

8087 / tcp

937756010 | 2025-01-03T11:08:20.693375

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x01\x00\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

8089 / tcp

819727972 | 2025-01-08T01:48:34.251464

SSH-2.0-OpenSSH_7.4

8099 / tcp

623236583 | 2025-01-17T21:54:40.912163

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae293a_dedxin34_19677-349

8109 / tcp

-1399940268 | 2025-01-17T02:24:11.802951

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8113 / tcp

740837454 | 2025-01-19T04:27:04.232626

SSH-2.0-OpenSSH_5.3

8116 / tcp

-407828767 | 2025-01-17T15:29:18.242109

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

8139 / tcp

-1648456501 | 2025-01-26T20:08:40.662408

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

8140 / tcp

1212921144 | 2025-01-13T02:45:00.117030

0@

8152 / tcp

-358801646 | 2025-01-23T12:37:17.895974

SSH-2.0-OpenSSH_6.6.1

8181 / tcp

-1795027372 | 2025-01-25T01:32:51.513699

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

8200 / tcp

1320285193 | 2025-01-14T06:41:46.714006

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

8291 / tcp

-1327660293 | 2025-01-21T16:04:11.796579

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

8333 / tcp

1723769361 | 2025-01-01T17:40:53.559751

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

8415 / tcp

1189133115 | 2025-01-27T10:32:50.293403

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

8416 / tcp

-1399940268 | 2025-01-18T02:42:58.115129

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8422 / tcp

1989907056 | 2025-01-01T17:30:57.027053

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

8423 / tcp

971933601 | 2025-01-13T22:20:59.819639

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

8436 / tcp

-1399940268 | 2025-01-09T18:33:16.176432

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8443 / tcp

0 | 2025-01-19T19:38:36.198910

Hashes

hash

441816945

http.dom_hash

http.html_hash

http.server_hash

1673621694

HTTP/1.1 200 OK
Date: Sun, 19 Jan 2025 19:38:36 GMT
Content-Type: text/html
Content-Length: 1760
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
Etag: "1a8e1ff8-d86"
Server: Tengine
Set-Cookie: SERVERID=30251be418bbd7105d8f81b465bafa0e|1737315516|1737315516;Path=/
Vary: Accept-Encoding
Location: https://ods.aliyun.com

8450 / tcp

580340387 | 2025-01-11T05:01:06.554859

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

8473 / tcp

-1399940268 | 2025-01-16T02:26:42.333821

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8500 / tcp

1929293267 | 2025-01-26T06:51:36.077364

HTTP/1.1 404 Not Found
Server: nginx
Content-Type: text/html; charset=utf-8
Connection: keep-alive

8520 / tcp

1911457608 | 2025-01-15T16:56:45.603453

\x00[\x00\x00\x00\x00\x00\x00

8521 / tcp

632542934 | 2025-01-22T07:03:42.872053

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

8530 / tcp

-2089734047 | 2025-01-24T20:52:10.491027

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8545 / tcp

1975288991 | 2025-01-06T21:08:00.970598

OPTI

8568 / tcp

-1810987450 | 2025-01-18T21:10:55.284607

\xc3\xbf

8573 / tcp

-358801646 | 2025-01-14T14:45:30.747235

SSH-2.0-OpenSSH_6.6.1

8578 / tcp

-1399940268 | 2025-01-16T02:21:43.608879

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8580 / tcp

819727972 | 2025-01-20T05:29:53.169917

SSH-2.0-OpenSSH_7.4

8596 / tcp

-1297953727 | 2025-01-09T23:47:30.326646

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

8597 / tcp

1989907056 | 2025-01-28T07:59:47.438520

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

8649 / tcp

842535728 | 2025-01-27T19:49:37.299625

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

8666 / tcp

1308377066 | 2025-01-03T12:54:56.943510

ncacn_http/1.0

8686 / tcp

-1148066627 | 2025-01-17T21:25:35.117923

\x00[\xc2\x84\xc2\x86\xc3\xb2\x7f\x00\x00

8728 / tcp

1332894250 | 2025-01-23T01:28:25.996632

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

8771 / tcp

89142341 | 2025-01-21T19:08:24.707703

\x05\x00\x00\x00\x0b\x08\x05\x1a\x00

8784 / tcp

-2089734047 | 2024-12-31T14:33:29.257207

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8811 / tcp

165188539 | 2025-01-19T19:26:02.976530

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8825 / tcp

-1375131644 | 2025-01-05T02:32:22.697428

\x00[v\xc3\xbdC\x7f\x00\x00

8834 / tcp

819727972 | 2025-01-06T14:18:22.785446

SSH-2.0-OpenSSH_7.4

8845 / tcp

-1399940268 | 2025-01-05T14:20:50.452689

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8848 / tcp

1642597142 | 2025-01-26T19:51:38.654824

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

8856 / tcp

-1888448627 | 2025-01-04T18:27:28.455029

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

8857 / tcp

-904840257 | 2025-01-13T18:55:39.052197

572 Relay not authorized\r\n

8864 / tcp

-616720387 | 2024-12-31T00:26:07.962355

SSH-2.0-SSHD_0.7.6

8880 / tcp

1082732927 | 2025-01-14T08:35:44.897894

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

8884 / tcp

-1733645023 | 2025-01-28T05:53:14.210840

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

8891 / tcp

740837454 | 2025-01-12T18:21:35.551405

SSH-2.0-OpenSSH_5.3

8899 / tcp

-1885525731 | 2025-01-08T06:40:09.019908

\\xab\xca\xa5]\\x00\\x00\\x00\\x18\\xc0\\x00\\x00\\x01\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\xab\xca\xa5]\\x00\\x00\\x00\\x18\\xc0\\x00\\x00\\x04\\xff\\xff\\xff\\xb9\\x00\\x00\\x00\\x00\\x00\\x00\\x00\\x00

8988 / tcp

-801484042 | 2025-01-26T23:53:15.092638

ERR 27

9000 / tcp

-2067028711 | 2025-01-18T03:50:54.754183

\x15\x03\x01\x00\x02\x02F

9001 / tcp

-1026951088 | 2025-01-25T06:24:23.197593

erro ip

9011 / tcp

-1730858130 | 2025-01-07T04:56:37.534727

RFB 003.008
VNC:
  Protocol Version: 3.8

9015 / tcp

-1248408558 | 2025-01-11T00:31:27.433897

220 MikroTik FTP server (MikroTik 6.44.3) ready

9029 / tcp

-358801646 | 2024-12-30T15:23:38.935755

SSH-2.0-OpenSSH_6.6.1

9037 / tcp

1632932802 | 2024-12-30T03:45:24.264744

9042 / tcp

1519486042 | 2025-01-25T18:19:06.463452

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

9045 / tcp

-1059554316 | 2025-01-21T16:07:01.552158

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

9051 / tcp

-546659243 | 2025-01-17T06:32:40.560619

ôInternal Server ErrorAB

9065 / tcp

820958131 | 2025-01-09T11:55:00.928631

kjnkjabhbanc283ubcsbhdc72\x02

9091 / tcp

819727972 | 2025-01-19T13:57:31.051790

SSH-2.0-OpenSSH_7.4

9095 / tcp

-1839934832 | 2025-01-10T01:13:26.915536

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9096 / tcp

1011407350 | 2025-01-03T21:42:08.927583

* OK GroupWise IMAP4rev1 Server Ready\r\n

9117 / tcp

117101543 | 2025-01-19T20:20:42.264019

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

9130 / tcp

819727972 | 2025-01-16T22:34:41.875506

SSH-2.0-OpenSSH_7.4

9134 / tcp

-2033111675 | 2025-01-24T18:09:37.543606

~djb

9136 / tcp

-1399940268 | 2025-01-18T03:00:47.454610

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9143 / tcp

597764502 | 2025-01-24T04:52:14.621377

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

9148 / tcp

819727972 | 2025-01-14T20:38:54.243343

SSH-2.0-OpenSSH_7.4

9152 / tcp

-1373613804 | 2025-01-22T11:06:20.881151

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

9160 / tcp

-1810987450 | 2025-01-06T15:05:55.099050

\xc3\xbf

9170 / tcp

-2089734047 | 2025-01-16T19:28:29.740643

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9174 / tcp

1623746877 | 2025-01-08T21:10:10.280650

500 Permission denied - closing connection.\r\n

9189 / tcp

1911457608 | 2025-01-07T20:29:49.544637

\x00[\x00\x00\x00\x00\x00\x00

9210 / tcp

-1795027372 | 2025-01-05T03:29:33.484571

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

9212 / tcp

-2089734047 | 2025-01-17T04:33:56.079980

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9216 / tcp

307999478 | 2025-01-08T23:35:49.701632

unknown command \r\nunknown command \r\n

9230 / tcp

321971019 | 2025-01-23T21:54:10.107682

-ERR client ip is not in whitelist\r

9251 / tcp

819727972 | 2025-01-01T22:08:20.139789

SSH-2.0-OpenSSH_7.4

9252 / tcp

165188539 | 2025-01-27T05:25:52.187654

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

9299 / tcp

599074451 | 2025-01-25T18:09:22.551769

msg

9306 / tcp

-1888448627 | 2025-01-26T22:56:40.548590

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9310 / tcp

-2089734047 | 2025-01-22T16:29:42.099712

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9333 / tcp

-1399940268 | 2025-01-24T16:40:43.354797

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9345 / tcp

819727972 | 2025-01-25T18:11:03.642875

SSH-2.0-OpenSSH_7.4

9398 / tcp

117101543 | 2025-01-22T18:30:15.291791

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

9418 / tcp

1909672637 | 2025-01-09T11:38:41.092842

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff

9458 / tcp

-1399940268 | 2025-01-10T05:01:23.606824

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9530 / tcp

1642597142 | 2025-01-24T23:29:03.900646

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

9600 / tcp

-358801646 | 2025-01-07T22:41:33.458016

SSH-2.0-OpenSSH_6.6.1

9633 / tcp

2032042134 | 2025-01-24T13:24:25.971389

[¥	¾

9682 / tcp

504717326 | 2025-01-04T15:47:07.586136

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

9696 / tcp

-1399940268 | 2025-01-09T04:34:14.392082

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9754 / tcp

-358801646 | 2025-01-14T11:57:29.959520

SSH-2.0-OpenSSH_6.6.1

9876 / tcp

-1867457549 | 2025-01-17T02:45:24.535556

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)

9898 / tcp

1304012963 | 2025-01-25T06:12:16.251255

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: close

9919 / tcp

-1888448627 | 2025-01-08T23:34:10.551473

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9991 / tcp

1278527606 | 2025-01-11T15:28:50.078669

SSH-2.0-Teleport

9993 / tcp

-1399940268 | 2025-01-10T06:51:14.556974

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9998 / tcp

-347274959 | 2025-01-01T16:49:14.160844

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2831_PS-000-01PIX79_36197-59880

9999 / tcp

1161309183 | 2025-01-23T10:45:25.883869

ProxyServer is ready

10000 / tcp

-1261090339 | 2025-01-10T22:41:00.593609

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

10001 / tcp

1492413928 | 2025-01-24T04:57:02.856830

SSH-2.0-OpenSSH_7.5

10009 / tcp

-709267009 | 2025-01-14T21:59:09.320996

\\x00[\'\\x19\\xc0\\xa8X\\xfd

10018 / tcp

1911457608 | 2025-01-20T09:34:21.350994

\x00[\x00\x00\x00\x00\x00\x00

10026 / tcp

-653033013 | 2025-01-20T06:04:19.069084

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

10032 / tcp

103159425 | 2025-01-11T16:41:11.509979

SSH-1.99-RGOS_SSH

10068 / tcp

632542934 | 2025-01-16T12:01:26.269399

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

10100 / tcp

-1399940268 | 2025-01-10T11:51:29.435816

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10134 / tcp

-1261090339 | 2025-01-13T22:13:28.163621

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

10205 / tcp

-1099385124 | 2025-01-11T22:51:36.542751

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

10210 / tcp

-358801646 | 2025-01-20T05:30:50.148216

SSH-2.0-OpenSSH_6.6.1

10250 / tcp

-1316491703 | 2025-01-06T18:36:40.901387

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

10380 / tcp

-1986594217 | 2025-01-19T05:29:22.622109

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

10397 / tcp

-2089734047 | 2025-01-10T13:18:26.440962

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10443 / tcp

0 | 2025-01-26T10:25:56.778666

Hashes

hash

-950645224

http.dom_hash

http.html_hash

http.server_hash

1673621694

HTTP/1.1 200 OK
Date: Sun, 26 Jan 2025 10:25:56 GMT
Content-Type: application/json
Content-Length: 2132
Connection: keep-alive
Ali-Swift-Global-Savetime: 1737887156
Eagleeye-Traceid: 61fce7067107f380bff71096f3
Eagleid: 61fce7067107f380bff71096f3
S_group: tao-session
S_ip: 6d96268e547c83f3e934c5586f6260bc
S_status: STATUS_SYS_ERR
S_tag: 678158210235608|476545335^|^^
S_tid: 61fce7067107f380bff71096f3
S_ucode: CN:CENTER
S_v: 3.3.3.8
Server: Tengine
Strict-Transport-Security: max-age=0
Timing-Allow-Origin: *, *
Location: https://aps.aliyun.com
Ufe-Result: A5
Via: kunlun20.c8kunlun9[142,136,677-0,M], kunlun67.kunlun50[751,0]
X-Cache: MISS TCP_MISS dirn:-2:-2
X-Swift-Cachetime: 0
X-Swift-Savetime: Sun, 26 Jan 2025 10:25:56 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:49:b2:86:90:3c:9b:46:7a:60:5b:87
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G3
        Validity
            Not Before: May  5 06:21:16 2023 GMT
            Not After : Jun  5 06:21:15 2024 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.aliyun.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:aa:59:84:40:d9:af:34:7b:a7:ab:b2:6a:
                    93:99:f0:9c:8d:c6:88:e5:16:d9:92:a4:10:49:79:
                    da:fb:28:37:40:e7:a4:a8:e4:51:b6:46:ce:cd:1b:
                    a4:b9:0f:e8:93:d7:1b:83:d7:bb:a6:66:c2:65:f2:
                    ee:2c:60:6b:9a:40:36:94:87:c3:9e:8e:08:13:32:
                    c3:f6:fb:36:3f:75:e0:6f:3b:d9:72:b4:25:f8:e7:
                    d7:9d:c1:91:f4:78:69:c8:4e:05:cd:66:af:c9:0c:
                    60:d9:49:82:ca:97:ce:f5:8a:26:40:d0:73:05:7b:
                    22:4e:96:e8:3c:99:3f:12:aa:ce:29:5d:db:43:57:
                    78:4f:9e:77:e0:a0:95:02:cd:80:18:da:af:a8:4a:
                    89:20:e5:94:b6:1c:2d:0e:10:3a:87:85:54:f5:08:
                    3c:ef:17:e6:25:d3:32:20:37:f9:bf:88:77:f8:8b:
                    ec:91:10:73:7c:78:55:73:08:81:8a:0b:35:85:4a:
                    e3:0c:81:30:44:e1:d0:36:9d:8f:6a:0f:47:22:fd:
                    cf:4f:ca:b6:22:eb:ad:65:b5:40:b3:11:d0:df:c5:
                    3d:a8:3e:1c:bc:5f:ef:e7:ce:30:57:86:95:78:8d:
                    60:80:02:87:1e:27:77:a0:19:45:b6:da:ba:8d:30:
                    b5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                FB:43:61:72:DB:90:9F:67:07:2E:AE:74:FB:66:90:A2:E9:C4:FC:15
            X509v3 Authority Key Identifier: 
                68:86:B8:7D:7A:D9:6D:49:6B:87:2F:18:8B:15:34:6C:D7:B4:7A:0E
            Authority Information Access: 
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g3
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt
            X509v3 Subject Alternative Name: 
                DNS:*.aliyun.com, DNS:aliyun.com
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                Policy: 2.23.140.1.2.2
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsorganizationvalsha2g3.crl
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        04:8b:a2:24:82:5c:b2:e7:b9:06:8d:cb:50:7a:af:b7:15:c7:
        a4:f2:9b:8e:43:5a:bf:60:50:9e:0c:2e:db:4d:4d:77:32:dd:
        67:68:3a:f3:89:c3:72:42:20:af:53:56:9e:d1:6f:77:02:f0:
        2f:61:55:23:b5:08:2c:b2:76:30:04:c8:04:ef:84:a5:b5:e3:
        d6:a3:0c:36:6f:e7:e6:58:08:cb:d9:a2:16:b0:9d:57:30:f7:
        1b:e6:b8:7e:0b:ea:76:86:00:b0:4a:f9:14:d7:c5:1b:20:69:
        fb:9d:74:d9:96:b1:56:5f:4f:83:45:c2:98:a4:12:cc:8a:dc:
        27:4f:ed:5b:a7:d9:de:ab:fd:f4:83:ce:f5:c5:2d:72:62:2e:
        e1:09:7c:60:4f:ad:66:0b:5d:f4:70:bd:c5:73:ba:e8:74:8b:
        b2:0c:3f:b2:fc:65:d4:fc:7e:9d:01:c4:6a:d4:d1:94:86:f6:
        57:c6:49:c1:21:3e:1f:00:97:31:ba:36:67:9b:85:ce:3b:f7:
        51:ab:77:30:ea:27:b0:da:00:13:b5:c0:fe:7b:b2:82:37:a9:
        d2:d9:61:9f:a6:fb:79:75:08:e3:79:bd:f0:1c:b2:6b:e2:20:
        68:ae:f9:36:74:53:29:dc:ae:a1:ec:d5:77:11:c8:7a:fb:09:
        52:4d:67:1c

10554 / tcp

-1730858130 | 2025-01-27T09:03:24.054456

RFB 003.008
VNC:
  Protocol Version: 3.8

10909 / tcp

1911457608 | 2025-01-22T20:06:59.279265

\x00[\x00\x00\x00\x00\x00\x00

10911 / tcp

819727972 | 2025-01-20T03:01:58.263749

SSH-2.0-OpenSSH_7.4

10935 / tcp

51259122 | 2025-01-23T04:54:28.360601

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

11000 / tcp

-339084706 | 2025-01-02T10:06:30.532896

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

11112 / tcp

-1888448627 | 2025-01-24T18:50:29.648798

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

11210 / tcp

-1019343788 | 2025-01-27T08:13:12.013884

W!\x00\x00\x00\x00

11211 / tcp

-136006866 | 2025-01-24T10:41:36.032533

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

11288 / tcp

-1730858130 | 2025-01-18T23:32:28.532735

RFB 003.008
VNC:
  Protocol Version: 3.8

11300 / tcp

-1032713145 | 2025-01-25T18:53:49.910134

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

11681 / tcp

1911457608 | 2025-01-08T20:52:39.465453

\x00[\x00\x00\x00\x00\x00\x00

12000 / tcp

1645071342 | 2025-01-09T17:27:32.572074

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.11

12142 / tcp

-1279886438 | 2025-01-09T22:00:12.647810

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

12143 / tcp

-1279886438 | 2025-01-17T19:28:14.629437

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

12148 / tcp

-1888448627 | 2025-01-22T19:48:44.640029

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12150 / tcp

-1399940268 | 2025-01-19T07:24:44.671413

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12156 / tcp

1911457608 | 2025-01-10T20:11:25.705274

\x00[\x00\x00\x00\x00\x00\x00

12176 / tcp

504717326 | 2025-01-18T07:27:52.404429

SSH-2.0-OpenSSH_8.6

CVE-2023-38408 CVE-2008-3844 CVE-2024-6387 CVE-2023-51767 CVE-2021-41617 6 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

12182 / tcp

-1487943323 | 2025-01-14T05:15:18.590004

431 Unable to negotiate secure command connection.\r\n

12215 / tcp

580340387 | 2025-01-09T22:52:09.900225

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

12217 / tcp

-2096652808 | 2025-01-13T17:55:50.846895

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12218 / tcp

1189133115 | 2025-01-24T12:59:11.251642

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

12221 / tcp

1541211644 | 2025-01-17T22:35:57.278311

[\xc2\xba\x7fs\x7f

12227 / tcp

117101543 | 2025-01-14T11:22:41.758788

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

12238 / tcp

-1839934832 | 2025-01-14T10:31:14.003592

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12240 / tcp

671605376 | 2025-01-18T23:33:31.283668

SSH-2.0-OpenSSH_X.X

12254 / tcp

-1399940268 | 2025-01-11T22:20:20.093184

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12271 / tcp

-1399940268 | 2025-01-24T04:55:59.323332

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12278 / tcp

165188539 | 2025-01-27T22:36:02.867924

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12280 / tcp

321971019 | 2025-01-18T23:07:48.046509

-ERR client ip is not in whitelist\r

12281 / tcp

321971019 | 2025-01-17T21:15:56.763922

-ERR client ip is not in whitelist\r

12285 / tcp

1911457608 | 2025-01-26T04:56:37.614433

\x00[\x00\x00\x00\x00\x00\x00

12309 / tcp

-1888448627 | 2025-01-28T04:57:41.122764

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12311 / tcp

819727972 | 2025-01-16T11:56:55.597094

SSH-2.0-OpenSSH_7.4

12314 / tcp

165188539 | 2025-01-22T09:45:20.030157

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12319 / tcp

1282941221 | 2025-01-22T22:58:45.230016

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

12322 / tcp

921225407 | 2025-01-15T18:34:55.805013

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12345 / tcp

488204803 | 2025-01-09T03:38:58.548672

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae263c_CS-000-01Avv40_829-3172

12347 / tcp

-358801646 | 2025-01-22T02:39:48.615498

SSH-2.0-OpenSSH_6.6.1

12418 / tcp

1308377066 | 2025-01-22T12:49:04.457003

ncacn_http/1.0

12446 / tcp

-891714208 | 2025-01-25T20:05:06.045871

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

12464 / tcp

-1399940268 | 2025-01-23T08:27:40.851859

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12496 / tcp

-1261090339 | 2025-01-24T13:37:33.715472

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

12499 / tcp

-457235091 | 2025-01-26T19:47:43.931669

audio 0 RTP/AVP 18 4 3 8 0 101\r\na

12501 / tcp

-1839934832 | 2025-01-24T00:30:32.235242

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12504 / tcp

1077013874 | 2025-01-17T20:54:23.123184

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

12506 / tcp

819727972 | 2025-01-17T20:29:37.304742

SSH-2.0-OpenSSH_7.4

12524 / tcp

677934968 | 2025-01-20T18:47:29.077074

lm^)Q

12541 / tcp

-303199180 | 2025-01-13T02:11:57.619756

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

12561 / tcp

1911457608 | 2025-01-17T18:20:20.710455

\x00[\x00\x00\x00\x00\x00\x00

12563 / tcp

1911457608 | 2025-01-14T00:57:42.054066

\x00[\x00\x00\x00\x00\x00\x00

12580 / tcp

-801484042 | 2025-01-25T01:12:09.791648

ERR 27

12584 / tcp

-1435414831 | 2025-01-26T17:30:21.722823

roku: ready\r\n

12980 / tcp

1948301213 | 2025-01-20T18:46:48.208375

RFB 003.003
VNC:
  Protocol Version: 3.3

14147 / tcp

-585940771 | 2025-01-15T21:21:46.598650

Unknown command\r\n

14265 / tcp

-1140468363 | 2025-01-15T23:27:52.130431

\x02\t\x01

14344 / tcp

-891714208 | 2024-12-30T07:33:23.727860

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

14400 / tcp

921225407 | 2025-01-20T04:24:42.274291

\x00\x00\x00\x04\x00\x00\x00\x00\x00

14895 / tcp

-1375131644 | 2025-01-16T05:50:41.776235

\x00[v\xc3\xbdC\x7f\x00\x00

14909 / tcp

117101543 | 2025-01-12T08:26:17.956837

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

15002 / tcp

-147424911 | 2025-01-25T14:19:30.841852

HTTP/1.1 404 Not Found
Content Length: 0

15042 / tcp

-1399940268 | 2025-01-27T16:54:20.673796

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16051 / tcp

1615193817 | 2025-01-26T21:19:47.196241

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

16052 / tcp

1504401647 | 2025-01-18T07:40:43.555763

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

16071 / tcp

-1399940268 | 2025-01-26T17:52:38.077908

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16074 / tcp

-1399940268 | 2025-01-09T20:44:33.486469

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16082 / tcp

401555314 | 2025-01-25T23:37:06.963878

NB[GFXjA^R

16087 / tcp

2098371729 | 2025-01-13T12:42:43.806247

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

16095 / tcp

632542934 | 2025-01-25T17:45:38.725932

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

16993 / tcp

897328069 | 2025-01-25T20:02:34.217359

220 mail.scott000.com ESMTP

17084 / tcp

-1399940268 | 2025-01-20T23:27:22.970229

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

17778 / tcp

1011407350 | 2025-01-14T00:12:59.852770

* OK GroupWise IMAP4rev1 Server Ready\r\n

18014 / tcp

1911457608 | 2025-01-24T17:08:07.792047

\x00[\x00\x00\x00\x00\x00\x00

18018 / tcp

1911457608 | 2025-01-18T19:14:46.910263

\x00[\x00\x00\x00\x00\x00\x00

18023 / tcp

321971019 | 2025-01-25T13:42:53.642900

-ERR client ip is not in whitelist\r

18050 / tcp

1723769361 | 2025-01-19T21:09:20.712159

ELM Enterprise Manager _l\r\nCopyright \xc2\xa9 18668511-928641920 TNT Software, Inc.\r\n

18055 / tcp

-146605374 | 2025-01-25T13:29:16.544339

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

18080 / tcp

-1888448627 | 2025-01-09T20:56:05.896910

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

18081 / tcp

321971019 | 2025-01-11T18:04:05.446677

-ERR client ip is not in whitelist\r

18084 / tcp

307999478 | 2025-01-18T21:51:20.287437

unknown command \r\nunknown command \r\n

18099 / tcp

307999478 | 2025-01-17T00:19:21.785804

unknown command \r\nunknown command \r\n

18181 / tcp

307999478 | 2025-01-09T14:15:56.887338

unknown command \r\nunknown command \r\n

18245 / tcp

-1329831334 | 2025-01-14T13:07:27.878605

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

18368 / tcp

-1399940268 | 2025-01-26T14:44:19.443042

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

19000 / tcp

-2046514463 | 2025-01-07T20:40:52.572778

AB\x01\t

19084 / tcp

-2031152423 | 2025-01-13T07:21:26.146502

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

20000 / tcp

1900503736 | 2025-01-16T01:34:47.731839

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20182 / tcp

455076604 | 2025-01-16T22:49:34.337676

!\x07version\x04bind7 t{RPowerDNS Recursor 410

20256 / tcp

1911457608 | 2025-01-26T06:09:17.494362

\x00[\x00\x00\x00\x00\x00\x00

20547 / tcp

321971019 | 2024-12-29T17:35:26.314638

-ERR client ip is not in whitelist\r

20880 / tcp

1370263973 | 2025-01-08T16:32:54.889397

dubbo>

21025 / tcp

2087396567 | 2025-01-07T17:48:19.122620

kjnkjabhbanc283ubcsbhdc72

21100 / tcp

165188539 | 2025-01-19T21:12:18.825356

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21275 / tcp

-1399940268 | 2025-01-19T02:42:00.894557

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21286 / tcp

-358801646 | 2025-01-17T01:25:33.461290

SSH-2.0-OpenSSH_6.6.1

21294 / tcp

-1399940268 | 2025-01-13T16:16:25.989909

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

21305 / tcp

819727972 | 2025-01-27T09:59:27.763235

SSH-2.0-OpenSSH_7.4

21306 / tcp

165188539 | 2025-01-26T02:08:51.208636

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21310 / tcp

-2089734047 | 2025-01-15T21:04:16.070639

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

21379 / tcp

-1487943323 | 2025-01-27T19:30:16.002572

431 Unable to negotiate secure command connection.\r\n

22084 / tcp

-1399940268 | 2025-01-19T23:14:59.640111

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

22222 / tcp

-358801646 | 2025-01-12T05:33:44.607247

SSH-2.0-OpenSSH_6.6.1

22345 / tcp

-1399940268 | 2025-01-15T05:16:58.850397

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

22556 / tcp

-122096153 | 2025-01-18T01:26:20.591517

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

23023 / tcp

540463538 | 2025-01-13T11:55:18.609924

@
03d

24442 / tcp

-1059554316 | 2025-01-21T09:35:22.670483

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

24472 / tcp

1632932802 | 2025-01-24T22:53:19.171459

25001 / tcp

205347087 | 2025-01-15T19:25:41.905025

SSH-25453-Cisco-3524665.35\n

25565 / tcp

1911457608 | 2024-12-31T16:38:43.838368

\x00[\x00\x00\x00\x00\x00\x00

25952 / tcp

-136006866 | 2025-01-25T22:11:01.254033

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

27015 / tcp

-2089734047 | 2025-01-07T04:11:54.830449

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

27017 / tcp

1763259671 | 2025-01-26T08:28:42.255138

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

28015 / tcp

-1477838366 | 2025-01-25T09:49:41.799249

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

30002 / tcp

-1316491703 | 2025-01-15T01:32:09.081857

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

30003 / tcp

1492413928 | 2024-12-30T19:19:33.588375

SSH-2.0-OpenSSH_7.5

30027 / tcp

-1399940268 | 2025-01-19T01:29:28.334788

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

30113 / tcp

1282941221 | 2025-01-24T11:35:54.801653

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

31210 / tcp

-2089734047 | 2025-01-19T10:54:15.134560

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

32764 / tcp

2087396567 | 2025-01-27T21:31:08.370462

kjnkjabhbanc283ubcsbhdc72

33060 / tcp

2087396567 | 2025-01-11T20:03:57.378320

kjnkjabhbanc283ubcsbhdc72

33333 / tcp

51259122 | 2025-01-05T17:53:51.324104

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

35000 / tcp

1911457608 | 2025-01-02T16:06:04.312199

\x00[\x00\x00\x00\x00\x00\x00

35240 / tcp

819727972 | 2025-01-20T03:49:37.606312

SSH-2.0-OpenSSH_7.4

35250 / tcp

921225407 | 2025-01-22T19:35:56.167459

\x00\x00\x00\x04\x00\x00\x00\x00\x00

36022 / tcp

2087396567 | 2025-01-06T17:15:12.172861

kjnkjabhbanc283ubcsbhdc72

37080 / tcp

-1099385124 | 2025-01-19T06:18:05.157248

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

40892 / tcp

1332894250 | 2025-01-17T21:24:18.767310

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

43080 / tcp

-1261090339 | 2025-01-27T19:20:41.189936

\x00[l\xc2\xb6\xc3\x90\x7f\x00\x00

44158 / tcp

-433302150 | 2025-01-19T11:39:39.682659

/multistream/1.0.0

44301 / tcp

1282941221 | 2025-01-28T02:46:24.573252

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

44305 / tcp

-585940771 | 2025-01-16T06:25:06.662326

Unknown command\r\n

44306 / tcp

1426971893 | 2025-01-26T17:55:26.564481

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

44420 / tcp

-2096652808 | 2025-01-12T23:54:25.833669

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

44444 / tcp

-136006866 | 2025-01-12T10:50:54.373436

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

44818 / tcp

307999478 | 2025-01-23T08:14:22.112460

unknown command \r\nunknown command \r\n

45003 / tcp

117101543 | 2025-01-22T20:40:53.287520

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

45039 / tcp

1911457608 | 2025-01-10T22:26:39.000827

\x00[\x00\x00\x00\x00\x00\x00

45666 / tcp

1282941221 | 2025-01-11T02:13:05.743432

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

45922 / tcp

-971970408 | 2025-01-27T21:56:56.784703

46422 / tcp

2087396567 | 2025-01-28T06:20:33.369919

kjnkjabhbanc283ubcsbhdc72

46622 / tcp

1208318993 | 2025-01-27T22:59:26.134461

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

46822 / tcp

-1730858130 | 2025-01-27T15:59:48.446378

RFB 003.008
VNC:
  Protocol Version: 3.8

47122 / tcp

-971970408 | 2025-01-27T21:17:16.582583

47222 / tcp

-441419608 | 2025-01-27T01:16:41.331162

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

47422 / tcp

-1730858130 | 2025-01-27T12:37:59.346389

RFB 003.008
VNC:
  Protocol Version: 3.8

47622 / tcp

2087396567 | 2025-01-27T07:57:09.217843

kjnkjabhbanc283ubcsbhdc72

47722 / tcp

1978059005 | 2025-01-27T01:57:44.926065

Sorry, that nickname format is invalid.

47822 / tcp

-2096652808 | 2025-01-27T04:52:11.174567

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

47922 / tcp

-952165951 | 2025-01-27T03:11:06.169891

AB

47990 / tcp

-358801646 | 2025-01-15T23:13:32.334568

SSH-2.0-OpenSSH_6.6.1

48018 / tcp

-1839934832 | 2025-01-18T14:21:15.015892

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

48022 / tcp

-1230049476 | 2025-01-26T16:13:26.990408

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

48222 / tcp

2087396567 | 2025-01-26T14:26:12.304171

kjnkjabhbanc283ubcsbhdc72

48422 / tcp

1353260875 | 2025-01-26T18:02:29.571297

\x00[g\xc2\x95N\x7f\x00\x00

48922 / tcp

1741579575 | 2025-01-25T17:00:03.587944

49153 / tcp

-2118655245 | 2025-01-02T22:48:32.608635

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

49322 / tcp

171352214 | 2025-01-26T01:52:30.422209

-ERR client ip is not in whitelist

49422 / tcp

1690634669 | 2025-01-25T13:36:36.120944

49622 / tcp

-1059554316 | 2025-01-06T17:57:28.352870

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

49686 / tcp

103159425 | 2025-01-12T13:06:04.702965

SSH-1.99-RGOS_SSH

49922 / tcp

539065883 | 2025-01-25T18:39:14.869226

50000 / tcp

-1441741890 | 2025-01-15T09:08:05.313394

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2
0181212])

50022 / tcp

819727972 | 2025-01-25T03:47:00.249633

SSH-2.0-OpenSSH_7.4

50042 / tcp

15018106 | 2025-01-22T00:57:36.286306

\x00\x19\x02\x00\x02\x00\x07\x00Protocol version mismatch\x00

50100 / tcp

2033888749 | 2024-12-31T02:40:15.715599

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

50122 / tcp

819727972 | 2025-01-25T11:08:58.434991

SSH-2.0-OpenSSH_7.4

50522 / tcp

819727972 | 2025-01-25T05:46:41.867665

SSH-2.0-OpenSSH_7.4

50822 / tcp

-2107996212 | 2025-01-24T22:18:36.023848

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

50997 / tcp

1519486042 | 2025-01-21T20:45:27.639240

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

51322 / tcp

-1559123399 | 2025-01-24T09:54:04.178625

500 Permission denied - closing connection.

51722 / tcp

-971970408 | 2025-01-23T20:02:41.635297

51922 / tcp

1741579575 | 2025-01-24T04:06:50.392342

52022 / tcp

2087396567 | 2025-01-23T14:15:20.149188

kjnkjabhbanc283ubcsbhdc72

52200 / tcp

-1399940268 | 2025-01-12T02:44:46.468318

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

52536 / tcp

-1733106930 | 2025-01-22T04:33:14.906333

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

52922 / tcp

-971970408 | 2025-01-23T00:26:40.001782

53122 / tcp

1830697416 | 2025-01-22T22:11:27.034131

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

53322 / tcp

-1036370807 | 2025-01-22T18:21:04.629084

JDWP-Handshake

53422 / tcp

-1641514916 | 2025-01-22T16:31:18.601952

* OK Merak 1dFUa2 IMAP4rev1

53622 / tcp

-1730858130 | 2025-01-22T12:54:44.869656

RFB 003.008
VNC:
  Protocol Version: 3.8

53722 / tcp

-971970408 | 2025-01-22T09:12:10.639377

53822 / tcp

2087396567 | 2025-01-22T11:03:45.071843

kjnkjabhbanc283ubcsbhdc72

53922 / tcp

2087396567 | 2025-01-22T03:40:52.051111

kjnkjabhbanc283ubcsbhdc72

54022 / tcp

819727972 | 2025-01-22T05:28:38.985052

SSH-2.0-OpenSSH_7.4

54122 / tcp

2087396567 | 2025-01-22T07:23:51.922862

kjnkjabhbanc283ubcsbhdc72

54138 / tcp

1208318993 | 2025-01-24T14:02:41.053059

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

54322 / tcp

2103111368 | 2025-01-21T23:59:36.819280

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

54422 / tcp

-2017887953 | 2025-01-21T18:25:18.229705

SSH-2.0-OpenSSH_7.9

54522 / tcp

-2096652808 | 2025-01-21T20:13:00.754416

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

54622 / tcp

-1316491703 | 2025-01-21T16:28:12.034021

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

54822 / tcp

971933601 | 2025-01-21T04:56:34.190320

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

54857 / tcp

-1399940268 | 2025-01-15T23:30:20.948371

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

54922 / tcp

422524323 | 2025-01-21T12:59:46.808393

{
"Version": "3.4.18",
"VersionArray": [
3,
4,
18,
0
],
"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",
"OpenSSLVersion": "",
"SysInfo": "",
"Bits": 64,
"Debug": false,
"MaxObjectSize": 16777216
}

55000 / tcp

-1114821551 | 2025-01-19T13:49:30.665389

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

55388 / tcp

-358801646 | 2025-01-12T06:33:39.582421

SSH-2.0-OpenSSH_6.6.1

55443 / tcp

-784071826 | 2025-01-12T06:24:19.695900

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

55522 / tcp

2143387245 | 2025-01-20T16:47:35.159841

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

55553 / tcp

1842524259 | 2025-01-12T14:10:12.360620

55554 / tcp

539065883 | 2025-01-06T20:42:52.232456

55722 / tcp

1690634669 | 2025-01-20T23:26:05.528945

55822 / tcp

-1839934832 | 2025-01-20T20:09:03.366916

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

55922 / tcp

842535728 | 2025-01-20T18:14:00.660571

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

56022 / tcp

1632932802 | 2025-01-20T12:37:56.484181

56222 / tcp

2087396567 | 2025-01-20T05:49:31.652896

kjnkjabhbanc283ubcsbhdc72

56622 / tcp

660175493 | 2025-01-19T20:15:55.421853

57222 / tcp

-971970408 | 2025-01-19T21:38:45.034150

57722 / tcp

819727972 | 2025-01-19T08:41:22.705863

SSH-2.0-OpenSSH_7.4

57784 / tcp

740837454 | 2025-01-26T19:10:39.313636

SSH-2.0-OpenSSH_5.3

57822 / tcp

-146605374 | 2025-01-19T03:03:01.340053

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

57922 / tcp

819727972 | 2025-01-19T00:34:05.876081

SSH-2.0-OpenSSH_7.4

58022 / tcp

819727972 | 2025-01-19T04:57:17.878605

SSH-2.0-OpenSSH_7.4

58122 / tcp

2087396567 | 2025-01-19T01:17:22.637303

kjnkjabhbanc283ubcsbhdc72

58222 / tcp

-971970408 | 2025-01-18T20:02:00.815814

58422 / tcp

-971970408 | 2025-01-18T17:44:36.267890

58522 / tcp

-2107996212 | 2025-01-18T12:09:12.813308

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

58622 / tcp

2087396567 | 2025-01-16T17:04:27.232639

kjnkjabhbanc283ubcsbhdc72

58922 / tcp

-971970408 | 2025-01-18T10:16:17.793453

59122 / tcp

-746114901 | 2025-01-18T06:32:23.041222

[KpU

59722 / tcp

2087396567 | 2025-01-17T14:28:29.336047

kjnkjabhbanc283ubcsbhdc72

60021 / tcp

-792826324 | 2025-01-20T07:38:15.988367

220 FTP server ready - login please

60022 / tcp

-616720387 | 2025-01-17T10:27:35.555401

SSH-2.0-SSHD_0.7.6

60129 / tcp

-1733645023 | 2025-01-07T14:24:30.047603

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

60443 / tcp

908861024 | 2025-01-17T21:19:06.059935

HTTP/1.1 200 OK
X-Frame-Options: SAMEORIGIN
Content-Type: text/html
Accept-Ranges: bytes

62078 / tcp

-1113435755 | 2025-01-22T20:45:02.641970

/1.1 404 Not Found
Content Length: 0

63210 / tcp

740837454 | 2025-01-02T19:30:51.463477

SSH-2.0-OpenSSH_5.3

63260 / tcp

-1888448627 | 2025-01-25T22:41:33.749013

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

65432 / tcp

819727972 | 2025-01-27T16:55:24.289661

SSH-2.0-OpenSSH_7.4

59.82.112.188

Last Seen: 2025-01-28

Tags:

GeneralInformation

OpenPorts

11 / tcp 2087396567 | 2025-01-19T01:25:21.397254

13 / tcp 1215890103 | 2025-01-17T04:44:12.603168

17 / tcp 1767345577 | 2025-01-27T07:46:37.565430

19 / tcp -746345752 | 2025-01-18T05:30:13.496602

21 / tcp 1210838212 | 2025-01-16T13:48:59.501417

23 / tcp -1288412979 | 2025-01-21T11:25:43.850680

25 / tcp -1729629024 | 2025-01-25T05:40:43.147706

37 / tcp 1842948889 | 2024-12-29T13:39:52.188396

43 / tcp 1852418385 | 2025-01-18T06:55:19.896786

65 / tcp 103159425 | 2025-01-21T05:01:56.137965

70 / tcp -1385078233 | 2025-01-01T18:28:01.085871

79 / tcp -1770051369 | 2025-01-25T23:00:56.674078

80 / tcp 0 | 2025-01-27T06:51:27.182524

Hashes

92 / tcp -1099385124 | 2025-01-08T23:44:05.346835

97 / tcp 1655023012 | 2025-01-08T22:29:39.080776

102 / tcp 819727972 | 2025-01-13T04:37:41.192424

104 / tcp 410249975 | 2025-01-01T02:14:59.119997

110 / tcp 819727972 | 2025-01-22T17:38:22.189917

111 / tcp 410249975 | 2025-01-05T17:24:20.863772

119 / tcp -2107996212 | 2025-01-22T22:42:22.725393

135 / tcp 1759440106 | 2025-01-23T20:27:53.172735

143 / tcp -382990917 | 2025-01-09T22:03:41.734706

175 / tcp 1996932384 | 2025-01-15T21:28:53.535352

177 / tcp -1746074029 | 2025-01-17T05:06:06.686063

189 / tcp -1329831334 | 2025-01-16T02:26:58.239228

195 / tcp 2087396567 | 2024-12-31T20:33:00.852081

221 / tcp 1492413928 | 2025-01-12T17:46:55.444360

263 / tcp -1986594217 | 2025-01-16T03:53:44.945814

264 / tcp -1547821026 | 2025-01-15T00:49:18.715071

311 / tcp 676753056 | 2025-01-22T19:11:52.884716

427 / tcp 1388449297 | 2025-01-19T10:54:48.812433

443 / tcp -1715152554 | 2025-01-05T20:08:33.282871

Hashes

444 / tcp -1182016972 | 2025-01-08T21:49:37.624942

448 / tcp 819727972 | 2025-01-24T21:33:59.378077

465 / tcp 897328069 | 2025-01-13T22:26:53.368930

502 / tcp -1795027372 | 2025-01-27T23:39:39.561058

513 / tcp -1476017887 | 2025-01-14T21:39:32.644030

515 / tcp -971970408 | 2025-01-21T18:46:27.370706

522 / tcp 117101543 | 2024-12-30T05:03:31.563974

548 / tcp -1769206458 | 2025-01-04T09:21:45.234302

593 / tcp 1308377066 | 2025-01-01T08:10:12.658169

666 / tcp 1300162323 | 2025-01-22T13:23:28.450801

675 / tcp 165188539 | 2025-01-19T15:44:44.025103

685 / tcp 1615193817 | 2025-01-11T07:48:57.002961

771 / tcp -2089734047 | 2025-01-19T04:28:54.563584

772 / tcp -122096153 | 2025-01-18T17:22:41.317911

800 / tcp -29892444 | 2025-01-13T23:16:50.519353

831 / tcp 819727972 | 2025-01-17T06:13:03.817296

873 / tcp -1970692834 | 2025-01-24T05:31:02.494569

992 / tcp -936692830 | 2025-01-13T20:40:03.255341

993 / tcp -339084706 | 2025-01-22T17:18:35.468926

1023 / tcp -1453516345 | 2025-01-27T21:13:42.386528

1024 / tcp -2118655245 | 2025-01-19T07:12:07.229640

Hashes

1025 / tcp -1399940268 | 2025-01-08T10:38:55.025619

1027 / tcp 1911457608 | 2025-01-24T17:34:47.919413

1080 / tcp 1362344524 | 2025-01-01T21:25:50.957995

1081 / tcp -971970408 | 2025-01-17T12:23:20.541321

1099 / tcp 2103111368 | 2025-01-01T19:13:14.233140

1153 / tcp 366084633 | 2024-12-30T20:46:43.610463

1167 / tcp 1282941221 | 2025-01-20T11:29:35.576449

1177 / tcp 1690634669 | 2025-01-21T12:47:41.844797

1181 / tcp -1399940268 | 2025-01-21T18:41:39.595548

1195 / tcp 819727972 | 2025-01-21T00:02:08.451117

1200 / tcp -784071826 | 2025-01-23T18:12:29.815104

1224 / tcp -2118655245 | 2025-01-15T09:22:30.645812

Hashes

1283 / tcp 677934968 | 2025-01-24T20:33:22.273777

1337 / tcp 2087396567 | 2025-01-24T21:44:45.628613

1366 / tcp 819727972 | 2025-01-15T20:53:01.665541

1388 / tcp 819727972 | 2025-01-14T19:10:32.869142

1414 / tcp -1297953727 | 2025-01-28T01:48:00.845576

1433 / tcp -271790512 | 2025-01-04T17:27:03.889407

11 / tcp

2087396567 | 2025-01-19T01:25:21.397254

13 / tcp

1215890103 | 2025-01-17T04:44:12.603168

17 / tcp

1767345577 | 2025-01-27T07:46:37.565430

19 / tcp

-746345752 | 2025-01-18T05:30:13.496602

21 / tcp

1210838212 | 2025-01-16T13:48:59.501417

23 / tcp

-1288412979 | 2025-01-21T11:25:43.850680

25 / tcp

-1729629024 | 2025-01-25T05:40:43.147706

37 / tcp

1842948889 | 2024-12-29T13:39:52.188396

43 / tcp

1852418385 | 2025-01-18T06:55:19.896786

65 / tcp

103159425 | 2025-01-21T05:01:56.137965

70 / tcp

-1385078233 | 2025-01-01T18:28:01.085871

79 / tcp

-1770051369 | 2025-01-25T23:00:56.674078

80 / tcp

0 | 2025-01-27T06:51:27.182524

92 / tcp

-1099385124 | 2025-01-08T23:44:05.346835

97 / tcp

1655023012 | 2025-01-08T22:29:39.080776

102 / tcp

819727972 | 2025-01-13T04:37:41.192424

104 / tcp

410249975 | 2025-01-01T02:14:59.119997

110 / tcp

819727972 | 2025-01-22T17:38:22.189917

111 / tcp

410249975 | 2025-01-05T17:24:20.863772

119 / tcp

-2107996212 | 2025-01-22T22:42:22.725393

135 / tcp

1759440106 | 2025-01-23T20:27:53.172735

143 / tcp

-382990917 | 2025-01-09T22:03:41.734706

175 / tcp

1996932384 | 2025-01-15T21:28:53.535352

177 / tcp

-1746074029 | 2025-01-17T05:06:06.686063

189 / tcp

-1329831334 | 2025-01-16T02:26:58.239228

195 / tcp

2087396567 | 2024-12-31T20:33:00.852081

221 / tcp

1492413928 | 2025-01-12T17:46:55.444360

263 / tcp

-1986594217 | 2025-01-16T03:53:44.945814

264 / tcp

-1547821026 | 2025-01-15T00:49:18.715071

311 / tcp

676753056 | 2025-01-22T19:11:52.884716

427 / tcp

1388449297 | 2025-01-19T10:54:48.812433

443 / tcp

-1715152554 | 2025-01-05T20:08:33.282871

444 / tcp

-1182016972 | 2025-01-08T21:49:37.624942

448 / tcp

819727972 | 2025-01-24T21:33:59.378077

465 / tcp

897328069 | 2025-01-13T22:26:53.368930

502 / tcp

-1795027372 | 2025-01-27T23:39:39.561058

513 / tcp

-1476017887 | 2025-01-14T21:39:32.644030

515 / tcp

-971970408 | 2025-01-21T18:46:27.370706

522 / tcp

117101543 | 2024-12-30T05:03:31.563974

548 / tcp

-1769206458 | 2025-01-04T09:21:45.234302

593 / tcp

1308377066 | 2025-01-01T08:10:12.658169

666 / tcp

1300162323 | 2025-01-22T13:23:28.450801

675 / tcp

165188539 | 2025-01-19T15:44:44.025103

685 / tcp

1615193817 | 2025-01-11T07:48:57.002961

771 / tcp

-2089734047 | 2025-01-19T04:28:54.563584

772 / tcp

-122096153 | 2025-01-18T17:22:41.317911

800 / tcp

-29892444 | 2025-01-13T23:16:50.519353

831 / tcp

819727972 | 2025-01-17T06:13:03.817296

873 / tcp

-1970692834 | 2025-01-24T05:31:02.494569

992 / tcp

-936692830 | 2025-01-13T20:40:03.255341

993 / tcp

-339084706 | 2025-01-22T17:18:35.468926

1023 / tcp

-1453516345 | 2025-01-27T21:13:42.386528

1024 / tcp

-2118655245 | 2025-01-19T07:12:07.229640

1025 / tcp

-1399940268 | 2025-01-08T10:38:55.025619

1027 / tcp

1911457608 | 2025-01-24T17:34:47.919413

1080 / tcp

1362344524 | 2025-01-01T21:25:50.957995

1081 / tcp

-971970408 | 2025-01-17T12:23:20.541321

1099 / tcp

2103111368 | 2025-01-01T19:13:14.233140

1153 / tcp

366084633 | 2024-12-30T20:46:43.610463

1167 / tcp

1282941221 | 2025-01-20T11:29:35.576449

1177 / tcp

1690634669 | 2025-01-21T12:47:41.844797

1181 / tcp

-1399940268 | 2025-01-21T18:41:39.595548

1195 / tcp

819727972 | 2025-01-21T00:02:08.451117

1200 / tcp

-784071826 | 2025-01-23T18:12:29.815104

1224 / tcp

-2118655245 | 2025-01-15T09:22:30.645812

1283 / tcp

677934968 | 2025-01-24T20:33:22.273777

1337 / tcp

2087396567 | 2025-01-24T21:44:45.628613

1366 / tcp

819727972 | 2025-01-15T20:53:01.665541

1388 / tcp

819727972 | 2025-01-14T19:10:32.869142

1414 / tcp

-1297953727 | 2025-01-28T01:48:00.845576

1433 / tcp

-271790512 | 2025-01-04T17:27:03.889407

1443 / tcp

-1715152554 | 2025-01-05T20:08:31.203890

1494 / tcp

-1049213899 | 2025-01-16T03:31:29.800799

1515 / tcp

819727972 | 2025-01-28T03:28:30.139345

1521 / tcp

-541815454 | 2025-01-01T23:56:23.554351

1599 / tcp

1492413928 | 2024-12-29T22:07:49.239673

1604 / tcp

-1626979812 | 2025-01-25T16:57:38.702323

1723 / tcp

1103582599 | 2025-01-07T18:01:22.035740

1800 / tcp

1161309183 | 2025-01-24T12:57:33.942727

1801 / tcp

1725077471 | 2025-01-21T06:57:03.750475