GeneralInformation

Hostnames	m.taobao.com
Domains	taobao.com
Country	China
City	Zhangjiakou
Organization	Hangzhou Alibaba Advertising Co.,Ltd.
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

13 15 17 19 21 25 26 37 43 49 53 70 79 80 89 95 102 104 110 111 113 119 143 175 179 195 221 264 311 389 443 444 448 503 515 548 554 587 593 636 666 789 873 992 993 1022 1023 1025 1027 1029 1080 1099 1153 1177 1200 1234 1337 1414 1433 1443 1471 1500 1515 1521 1604 1723 1801 1833 1883 1911 1922 1926 1962 2000 2002 2003 2008 2058 2067 2068 2081 2083 2087 2121 2154 2181 2211 2222 2323 2332 2345 2376 2379 2404 2455 2650 2761 2762 3001 3050 3054 3062 3084 3101 3105 3260 3268 3269 3299 3306 3310 3388 3389 3401 3406 3521 3551 3690 3780 3790 3952 4000 4022 4063 4064 4150 4200 4242 4321 4369 4433 4444 4500 4505 4506 4786 4840 4899 4911 4949 5001 5006 5007 5009 5010 5201 5222 5432 5435 5454 5597 5672 5858 5938 5986 6000 6001 6002 6379 6510 6603 6633 6653 6666 6668 6697 7001 7010 7071 7090 7218 7415 7434 7443 7465 7548 7634 8001 8002 8005 8009 8022 8040 8044 8081 8083 8087 8089 8099 8139 8140 8181 8200 8282 8291 8333 8384 8402 8422 8424 8500 8545 8554 8649 8728 8816 8851 8867 8880 8889 8899 9000 9002 9017 9020 9035 9042 9044 9051 9084 9092 9095 9100 9109 9110 9160 9208 9222 9302 9306 9311 9333 9398 9418 9500 9530 9600 9633 9761 9898 9943 9944 9950 9998 9999 10001 10050 10051 10443 10554 10909 10911 11000 11112 11210 11288 11300 11434 12000 12345 13047 14147 14265 15443 16010 16993 17000 18080 18081 18245 19000 19200 19930 20256 20547 20880 21025 21379 22000 22001 22067 22070 22556 23023 23424 24245 25001 25565 26657 27015 27016 27017 28015 28017 28080 30002 30003 30222 30301 30303 30422 30522 30722 30822 30922 31122 31322 31922 32022 32222 32422 32522 32722 32764 32822 33022 33060 33333 33338 35000 37215 37777 41800 44158 44818 47022 47990 48922 49022 49152 49222 49422 49622 49922 50000 50022 50100 50322 50422 50522 51122 51235 51443 51522 51622 51722 51822 52122 52422 53222 53822 54122 54138 54222 54322 54622 55000 55022 55122 55222 55322 55422 55443 55522 55554 55722 55822 55922 56122 56322 56622 56722 56822 57122 57222 57322 57522 57622 57822 57922 58022 58322 58422 58722 58922 59122 60129 61613 62078 63210 63256 63257 63260

1725312227 | 2025-01-02T19:04:47.484723

13 / tcp

12:06:55 2024/1/22

819727972 | 2024-12-28T02:21:55.292915

15 / tcp

SSH-2.0-OpenSSH_7.4

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

385232644 | 2024-12-25T23:43:50.539427

17 / tcp

"My spelling is Wobbly.  It's good spelling but it Wobbles, and the letters
 get in the wrong places." A. A. Milne (1882-1958)

751496153 | 2025-01-02T19:41:13.701692

19 / tcp

* OK TeamXchange IMAP4rev1 server (otyUg) ready.

-702037155 | 2025-01-01T21:26:22.120190

21 / tcp

220 Ftp firmware update utility

575925250 | 2024-12-26T18:50:59.220617

25 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

2063598737 | 2024-12-27T15:50:40.892072

26 / tcp

/0 0 L\r\n/0 0 HUH\r\n

1110767461 | 2025-01-05T07:21:00.258803

37 / tcp

HTTP/1.1 200 OK
Server: nginx/1

-952165951 | 2025-01-01T00:12:29.779042

43 / tcp

AB

-359657882 | 2024-12-22T23:48:10.320066

49 / tcp

GBPK\xc3\xbb\xc3\xb7n\\xc2\\x93W\xc2\xaf\\xc2\\x86\\xc2\\x93x@\xc2\xa9\\x0e\xc3\x8a*\\xc2\\x9bS

-1780803173 | 2024-12-08T09:50:53.227585

53 / tcp

9\n\\x81\\x80\\x00\\x01\\x00\\x02\\x00\\x00\\x00\\x00\\x08clients1\\x06google\\x03com\\x00\\x00\\x01\\x00\\x01\\xc0\x0c\\x00\\x05\\x00\\x01\\x00\\x00\\x00U\\x00\x0c\\x07clients\\x01l\\xc0\\x15\\xc01\\x00\\x01\\x00\\x01\\x00\\x00\\x00\\x9d\\x00\\x04\\x8e\\xfb*\\xee\n\\x00\\x06\\x85\\x00\\x00\\x01\\x00\\x01\\x00\\x00\\

-1763883228 | 2024-12-31T00:03:52.147083

70 / tcp

HTTP/1.1 400 Bad Request
Server: vista/0.7
Content-Type: text/html
Connection: close

-1846450790 | 2024-12-31T23:32:51.567773

79 / tcp

<html>
<head><title>400 Bad Request</title></head>
<body bgcolor="white">
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx/1.4.7</center>
</body>
</html>

1635735545 | 2024-12-28T18:25:23.209718

80 / tcp

404 Not Found

HTTP/1.1 404 Not Found
Date: Sat, 28 Dec 2024 18:25:22 GMT
Content-Type: text/html
Content-Length: 1106
Connection: keep-alive
Server: Tengine/Aserver/3.2.64_20241126150519

-1399940268 | 2024-12-25T16:04:30.719814

89 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2024-12-11T01:32:14.412964

95 / tcp

SSH-2.0-OpenSSH_7.4

597764502 | 2025-01-04T09:27:16.638697

102 / tcp

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

-1888448627 | 2025-01-01T00:57:56.405245

104 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

819727972 | 2024-12-30T02:43:52.864383

110 / tcp

SSH-2.0-OpenSSH_7.4

1187188851 | 2024-12-20T09:02:33.987179

111 / tcp

Portmap
Program	Version	Protocol	Port

-527005584 | 2025-01-05T13:49:57.648476

113 / tcp

/0 0 L
/0 0 HUH

141730637 | 2024-12-23T11:43:32.487466

119 / tcp

HTTP/1.0 200 OK
Server: Proxy

-382990917 | 2025-01-03T18:19:35.646152

143 / tcp

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n

-445721795 | 2025-01-05T05:29:27.855788

175 / tcp

\x00[\xc3\xaed\x1a\x7f\x00\x00

-399606100 | 2024-12-14T06:48:43.191730

179 / tcp

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

-971970408 | 2025-01-05T13:46:46.707076

195 / tcp

-303199180 | 2025-01-02T17:38:05.681383

221 / tcp

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

-1707068558 | 2024-12-26T13:11:16.333316

264 / tcp

67948279 | 2024-12-09T20:38:47.911186

311 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Accept-Ranges: bytes
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET

-1639129386 | 2024-12-27T13:13:57.860343

389 / tcp

0%\\x02\\x01\\x01a \n\\x010\\x04\\x00\\x04\\x19anonymous bind disallowed

78786160 | 2024-12-30T21:23:58.718609

443 / tcp

404 Not Found

HTTP/1.1 404 Not Found
Date: Mon, 30 Dec 2024 21:23:55 GMT
Content-Type: text/html
Content-Length: 1107
Connection: keep-alive
Server: Tengine/Aserver/3.2.64_20241126150519

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ef:de:a6:00:95:21:95:8e:46:ee:af
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Organization Validation CA - SHA256 - G2
        Validity
            Not Before: Nov 15 10:24:38 2016 GMT
            Not After : Nov 16 10:24:38 2017 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.m.taobao.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cf:c0:57:eb:63:81:3f:ca:bc:b8:66:f7:5a:23:
                    79:59:81:3d:26:df:c8:fc:46:0d:b9:13:1f:48:ce:
                    cf:31:2c:64:9e:25:f2:53:b8:51:11:82:81:6b:48:
                    28:f6:84:cd:8b:4d:ad:77:f3:8e:39:7d:4c:a5:39:
                    91:2a:d4:06:a5:d2:d8:fd:6c:b6:57:1d:37:a5:9d:
                    b6:03:f4:a1:16:0a:06:59:e0:d3:5a:fe:3a:a3:7f:
                    82:52:c7:e9:d1:41:f5:3f:58:1f:24:6c:0c:10:bd:
                    b4:ee:07:d4:5c:fb:2b:f8:5d:49:e4:4a:7e:ed:51:
                    b9:27:0e:e3:e0:b7:ec:f0:53:4e:d7:1a:85:0b:e6:
                    5a:6c:0f:03:ec:3d:49:0c:f8:63:18:bb:49:87:e5:
                    73:30:6e:d6:a0:0b:e5:a2:6f:0a:88:ee:21:21:02:
                    38:4d:03:3b:86:46:87:fd:7f:f2:d1:2b:31:5a:10:
                    da:2e:cd:e0:3a:f0:8f:da:69:76:9c:6e:73:f9:e6:
                    5b:57:58:d4:7f:7f:2c:fa:7b:97:31:df:a6:08:1d:
                    e0:30:f2:bd:eb:ce:e5:a7:bd:f9:a8:58:e0:ad:4b:
                    89:32:5e:23:95:ef:17:93:e9:e5:35:d8:2c:dd:70:
                    ea:86:98:d9:00:92:5e:90:fa:4e:30:f1:36:44:d5:
                    8a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
                OCSP - URI:http://ocsp2.globalsign.com/gsorganizationvalsha2g2
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.4146.1.20
                  CPS: https://www.globalsign.com/repository/
                Policy: 2.23.140.1.2.2
            X509v3 Basic Constraints: 
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
            X509v3 Subject Alternative Name: 
                DNS:*.m.taobao.com, DNS:m.taobao.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Subject Key Identifier: 
                F6:BC:D0:34:EC:3B:18:90:EC:7E:6F:B0:C6:9F:12:BF:80:5B:C5:57
            X509v3 Authority Key Identifier: 
                96:DE:61:F1:BD:1C:16:29:53:1C:C0:CC:7D:3B:83:00:40:E6:1A:7C
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        1a:95:01:56:e8:1e:1d:4d:36:ad:f4:a6:53:53:57:0c:ff:a9:
        9d:20:80:91:3a:6f:39:7b:ec:de:af:96:1f:f4:54:45:f6:bf:
        77:e1:53:d2:cc:46:c4:17:d0:53:5b:9f:3f:2e:24:02:4c:a4:
        3c:dc:ee:5b:ea:45:9c:dc:fc:e0:3d:c8:67:2a:60:83:6c:02:
        a0:b5:01:9b:68:41:07:32:0a:d9:a8:9c:66:7d:89:9e:9f:02:
        69:1a:8c:70:bd:3a:44:61:54:de:13:bc:83:a6:da:f3:20:7f:
        02:35:ba:cd:3b:94:fd:35:95:08:af:55:98:f0:7f:3b:3a:8a:
        aa:2d:ae:ea:13:50:a0:47:28:a9:ad:6f:e5:30:15:6a:36:3d:
        5c:55:b3:ae:b4:4c:73:e4:67:ef:c4:92:41:5c:11:ab:d1:40:
        e8:d1:3b:56:95:cc:78:00:c3:14:99:4f:c5:ee:db:ea:34:67:
        30:ab:c8:e9:22:32:1f:c4:60:56:1b:ba:0f:d7:83:96:a5:c7:
        eb:39:b5:79:36:5d:b6:13:9b:ec:b8:a7:2f:0a:38:1c:f5:62:
        77:39:90:ef:fe:ec:cd:3e:5e:c5:bd:14:4b:fa:fe:02:17:e1:
        08:69:93:db:59:2b:54:07:75:33:2c:e5:04:c3:e6:16:09:3f:
        a4:ee:2b:1b

1007664265 | 2024-12-24T20:24:02.075049

444 / tcp

HTTP/1.1 200 OK
Date: Tue, 24 Dec 2024 20:23:58 GMT
Content-Type: text/html
Content-Length: 2497
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: no-cache, no-store
Etag: "d2b79469-a53"
Server: Tengine
Set-Cookie: SERVERID=6064b5ff65a8e1668d5ae5b7f4917979|1735071838|1735071838;Path=/
Vary: Accept-Encoding
Location: htps://ram.us-west-1-b-internal.aliyuncs.com

-1399940268 | 2024-12-11T15:49:22.201824

448 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1504401647 | 2024-12-30T01:26:26.259071

503 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

1741579575 | 2024-12-10T22:05:46.480023

515 / tcp

-1769206458 | 2024-12-30T07:40:24.659887

548 / tcp

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: NASDF59D2\nMachine Type: \\x10Netatalk3.1.9.q2\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: DHX2\\x0f,No User Authent\\x10,Cleartxt Passwrd\\x00\nServer Signature: 00000000008002000180030002800280

448214121 | 2024-12-21T02:26:19.879930

554 / tcp

RTSP/1.0 200 OK
Server: TVT RTSP Server/1.0.0
CSeq: 1
Public: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, GET_PARAMETER, SET_PARAMETER

745343730 | 2024-12-26T07:42:14.486794

587 / tcp

220 smtp.qq.com Esmtp QQ Mail Server

1308377066 | 2024-12-25T16:53:03.188551

593 / tcp

ncacn_http/1.0

826560219 | 2024-12-24T12:32:05.643359

636 / tcp

HTTP/1.1 400 Bad Request
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 59-8951886-0 0NNN RT(1705909763732 169) q(-1 -1 -1 -1) r(0 -1) b1

1300162323 | 2024-12-27T00:34:17.025492

666 / tcp

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

398077695 | 2024-12-27T21:52:47.606818

789 / tcp

-1598265216 | 2024-12-26T06:11:01.992032

873 / tcp

@RSYNCD: 31.0

-1835475271 | 2025-01-04T19:54:10.409943

992 / tcp

200 NOD32SS 99 (3318497116)\r\n

-1399940268 | 2024-12-26T21:26:50.509663

993 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2024-12-21T23:19:57.547414

1022 / tcp

SSH-2.0-OpenSSH_7.4

1887224352 | 2025-01-01T16:18:00.947273

1023 / tcp

-1399940268 | 2024-12-10T18:59:22.924541

1025 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-358801646 | 2024-12-11T18:46:07.096336

1027 / tcp

SSH-2.0-OpenSSH_6.6.1

-358801646 | 2024-12-13T13:18:25.502595

1029 / tcp

SSH-2.0-OpenSSH_6.6.1

1362344524 | 2024-12-18T03:00:01.172760

1080 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

-1399940268 | 2025-01-02T07:34:38.721133

1099 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2096652808 | 2025-01-05T18:49:49.905584

1153 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1729629024 | 2024-12-31T14:33:11.010734

1177 / tcp

101 imqbroker =unV

-345718689 | 2024-12-24T10:07:53.349352

1200 / tcp

Vty password is not set.

1911457608 | 2025-01-04T05:55:45.940406

1234 / tcp

\x00[\x00\x00\x00\x00\x00\x00

291723434 | 2025-01-05T17:45:03.752993

1337 / tcp


Lantronix MSS100 Version V118/523(045538937)

Type HELP at the 'Local_61349> ' prompt for assistance.



Username>

1726594447 | 2024-12-27T10:45:07.165429

1414 / tcp

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

49107754 | 2024-12-28T04:48:08.538442

1433 / tcp

MSSQL Server\nVersion: 134219767 (0x80007f7)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nProduct_Version: 5.2.3790 Ntlm 15\nOS: Windows Server 2003/Windows Server 2003 R2/Windows Server 2003, Service Pack 2\n

-1715152554 | 2024-12-29T21:36:19.846369

1443 / tcp

302 Found

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sun, 29 Dec 2024 21:36:19 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://59.82.122.209:443/

-2118655245 | 2024-12-19T19:32:53.498011

1471 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

-271515508 | 2024-12-14T02:34:18.913746

1500 / tcp

HTTP/1.1 302 Moved Temporarily
Server: DrcomServer1.0
Location: http://192.168.254.3
Cache-Control: no-cache
Connection: close

-1730858130 | 2025-01-01T07:53:22.228360

1515 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-805164506 | 2024-12-18T23:30:55.436623

1521 / tcp

\xc3\xbf\xc3\xbd"\r\nL

1741579575 | 2024-12-24T17:44:11.996239

1604 / tcp

1103582599 | 2024-12-28T21:47:03.084619

1723 / tcp

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

-833635452 | 2024-12-08T19:12:24.838091

1801 / tcp

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x05\xe8\x9b\xb5\\x95E\\x1eJ\\x85\xd5\xb1\\xe4\\xf9\\xba\\xf6+92d3\\x10\\x03\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1948301213 | 2025-01-03T15:14:36.658563

1833 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

410249975 | 2024-12-29T05:15:09.343133

1883 / tcp

LNS READY<>

-1399940268 | 2024-12-17T18:25:31.290168

1911 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1543809371 | 2025-01-02T00:18:54.422487

1922 / tcp

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

-407828767 | 2024-12-25T22:15:57.041903

1926 / tcp

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

-1477838366 | 2024-12-21T01:57:51.841138

1962 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

-1099385124 | 2024-12-28T04:05:10.233180

2000 / tcp

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

1004056929 | 2024-12-07T21:19:33.393768

2002 / tcp

Invalid request string: Request string is: "
"

1948301213 | 2024-12-30T10:52:36.570481

2003 / tcp

RFB 003.003
VNC:
  Protocol Version: 3.3

-2033111675 | 2024-12-29T16:39:36.786552

2008 / tcp

~djb

-1888448627 | 2024-12-20T08:59:09.423252

2058 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1282941221 | 2024-12-30T01:30:07.179153

2067 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-42767839 | 2024-12-24T20:29:28.708095

2068 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0

1911457608 | 2024-12-12T06:52:56.601047

2081 / tcp

\x00[\x00\x00\x00\x00\x00\x00

171352214 | 2025-01-03T05:30:34.612839

2083 / tcp

-ERR client ip is not in whitelist

1353260875 | 2025-01-02T22:46:41.614512

2087 / tcp

\x00[g\xc2\x95N\x7f\x00\x00

141730637 | 2024-12-08T18:47:56.504671

2121 / tcp

HTTP/1.0 200 OK
Server: Proxy

1412519768 | 2025-01-03T19:36:58.792840

2154 / tcp

"AP0F1D85"
Connection: close

<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>
<BODY BGCOLOR

-122096153 | 2025-01-05T10:39:28.151700

2181 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

-1059554316 | 2024-12-29T15:18:54.893120

2211 / tcp

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

-1659353189 | 2024-12-31T16:49:50.108826

2222 / tcp

SSH-2.0-ssh-server\r\n\\x00\\x00\\x02\\x14\x0b\\x14\x0b\\xed\\x16\\xae\\x96\t\\xc5En\\xbd\\x1cgn\\xff\\xad\\xd7\\x00\\x00\\x00\\xbbcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha256,diffie-hellman-gr

1662205251 | 2024-12-27T02:58:32.129226

2323 / tcp

HTTP/1.0 404 FAIL
Content-length:5
Connection:Close

-358801646 | 2025-01-03T17:51:50.320751

2332 / tcp

SSH-2.0-OpenSSH_6.6.1

819727972 | 2024-12-29T21:13:58.330302

2345 / tcp

SSH-2.0-OpenSSH_7.4

-1316491703 | 2024-12-09T14:32:46.161118

2376 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

1282941221 | 2024-12-09T14:57:43.521546

2379 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

921225407 | 2025-01-01T23:45:56.403763

2404 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

2087396567 | 2025-01-03T16:48:34.462721

2455 / tcp

kjnkjabhbanc283ubcsbhdc72

1761482307 | 2024-12-11T10:28:11.045490

2650 / tcp

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

-1265999252 | 2024-12-30T07:17:54.335864

2761 / tcp

220 VMware Authentication Daemon Version 1.0, ServerDaemonProto\ncol:SOAP, MKSDisplayProtocol:VNC , ,

819727972 | 2025-01-05T23:16:00.917592

2762 / tcp

SSH-2.0-OpenSSH_7.4

1975288991 | 2025-01-01T20:03:27.577522

3001 / tcp

OPTI

321971019 | 2024-12-31T18:50:18.670725

3050 / tcp

-ERR client ip is not in whitelist\r

632542934 | 2025-01-04T17:39:13.444183

3054 / tcp

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

-2031152423 | 2025-01-01T23:20:32.653435

3062 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

-1730858130 | 2024-12-09T16:36:31.696589

3084 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

-1399940268 | 2024-12-12T12:11:18.566233

3101 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2024-12-13T00:37:06.900287

3105 / tcp

SSH-2.0-OpenSSH_7.4

-271466677 | 2024-12-31T08:09:14.539349

3260 / tcp

RIFA\\x00\\x00\\x00\\x00\\x10\\x88\\x81\\x00\\x00\\x00\\x00\\x00\\x00\x0b\\x00\\x05\\x00\\x00\\x00:\\x00HD316\\x00\\x01\\x00

-805362002 | 2024-12-26T18:04:15.346493

3268 / tcp

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

-2107996212 | 2024-12-25T09:04:20.545676

3269 / tcp

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

819727972 | 2024-12-23T21:59:19.061810

3299 / tcp

SSH-2.0-OpenSSH_7.4

1673132866 | 2024-12-18T05:43:10.261930

3306 / tcp

I\\x00\\x00\\x01\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MariaDB server

165188539 | 2025-01-05T23:58:18.615648

3310 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1911457608 | 2024-12-24T07:11:39.535021

3388 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-6645672 | 2024-12-19T19:37:11.115633

3389 / tcp

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x0f\\x08\\x00\\x08\\x00\\x00\\x00\n\nFlag: PROTOCOL_HYBRID_EX\nTarget_Name: 172_16_0_11\nProduct_Version: 6.3.9600 Ntlm 15\nOS: Windows 8.1/Windows Server 2012 R2\nNetBIOS_Domain_Name: 172_16_0_11\nNetBIOS_Computer_Name: 172_16_0_11\nDNS_Domain_Name: 172_16_0_11\nDNS_Computer_Name: 172_16_0_11\nSystem_Time: 2024-01-22 08:42:27 +0000 UTC\n\n

-122096153 | 2024-12-30T20:01:21.631637

3401 / tcp

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

-1428621233 | 2024-12-24T06:07:51.876978

3406 / tcp

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

1212285915 | 2025-01-02T14:41:01.356360

3521 / tcp

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

198844676 | 2024-12-31T10:40:18.763550

3551 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

-891714208 | 2024-12-26T12:57:46.418385

3690 / tcp

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

-1045760528 | 2024-12-26T14:42:31.389791

3780 / tcp

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

2087396567 | 2024-12-25T20:37:18.274107

3790 / tcp

kjnkjabhbanc283ubcsbhdc72

-1810987450 | 2024-12-10T03:53:21.243702

3952 / tcp

\xc3\xbf

-1101712668 | 2025-01-03T10:04:18.058373

4000 / tcp

\\x1e\xc3\x80\\x010\\x02\xc2\xa8\xc3\xa3

-1375131644 | 2024-12-08T14:20:37.621702

4022 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

-1681927087 | 2024-12-25T20:09:25.616255

4063 / tcp

kjnkjabhbanc283ubcsbhdc72

-2089734047 | 2024-12-31T16:25:49.086017

4064 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-1399940268 | 2024-12-28T13:32:18.260867

4150 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2024-12-29T08:19:04.414687

4200 / tcp

SSH-2.0-OpenSSH_7.4

198844676 | 2025-01-03T21:40:43.146557

4242 / tcp

HTTP/1.1 404 Not Found
Server: Jetty/9.4.31.v20200723
Content-Type: text/plain; charset=utf-8
Connection: close

740837454 | 2024-12-18T11:31:31.443721

4321 / tcp

SSH-2.0-OpenSSH_5.3

51259122 | 2024-12-26T09:18:28.622045

4369 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

1741579575 | 2024-12-22T19:28:10.093051

4433 / tcp

-1399940268 | 2024-12-17T20:27:36.383428

4444 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2031152423 | 2025-01-01T21:54:02.919933

4500 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

-1399940268 | 2024-12-20T21:12:50.694983

4505 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

323676348 | 2025-01-04T15:17:08.373957

4506 / tcp

}â

1911457608 | 2024-12-30T22:10:38.495614

4786 / tcp

\x00[\x00\x00\x00\x00\x00\x00

165188539 | 2024-12-19T13:19:15.743331

4840 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

539065883 | 2024-12-10T19:50:36.630805

4899 / tcp

1208318993 | 2024-12-31T23:12:41.633200

4911 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

539065883 | 2024-12-25T03:11:12.487848

4949 / tcp

1741579575 | 2024-12-17T20:29:26.892855

5001 / tcp

-1311598826 | 2024-12-26T22:43:37.292127

5006 / tcp

AMQP:
cluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local
copyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.
information:Licensed under the MPL 2.0. Website: https://rabbitmq.com
platform:Erlang/OTP 24.1
product:RabbitMQ
version:3.9.7
Capabilities:
publisher_confirms:true
exchange_exchange_bindings:true
basic.nack:true
consumer_cancel_notify:true
connection.blocked:true
consumer_priorities:true
authentication_failure_close:true
per_consumer_qos:true
direct_reply_to:tru

1911457608 | 2024-12-25T16:12:57.157869

5007 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1338936697 | 2024-12-18T15:53:34.420078

5009 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2109_PStjdxtk16_38957-48596

-1888448627 | 2025-01-05T21:32:41.899589

5010 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

321971019 | 2024-12-25T00:33:09.779648

5201 / tcp

-ERR client ip is not in whitelist\r

-1327660293 | 2025-01-03T10:58:02.828629

5222 / tcp

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

410249975 | 2024-12-19T15:45:51.897892

5432 / tcp

LNS READY<>

1911457608 | 2024-12-23T09:55:09.688134

5435 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-585940771 | 2024-12-31T18:17:46.500469

5454 / tcp

Unknown command\r\n

-1888448627 | 2024-12-07T03:33:31.019040

5597 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

575925250 | 2024-12-29T21:48:30.152110

5672 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

819727972 | 2024-12-22T02:10:52.526720

5858 / tcp

SSH-2.0-OpenSSH_7.4

-2017887953 | 2024-12-28T20:10:27.874313

5938 / tcp

SSH-2.0-OpenSSH_7.9

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 11 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-971970408 | 2024-12-28T11:53:35.946315

5986 / tcp

1541211644 | 2025-01-03T14:52:33.364533

6000 / tcp

[\xc2\xba\x7fs\x7f

410249975 | 2024-12-10T12:56:56.636259

6001 / tcp

LNS READY<>

233634112 | 2024-12-20T09:10:52.291294

6002 / tcp

SSH-98.60-SysaxSSH_81885..42

321971019 | 2024-12-26T11:09:59.711165

6379 / tcp

-ERR client ip is not in whitelist\r

-297057753 | 2025-01-03T17:59:49.023985

6510 / tcp

HTTP/1.1 401 Unauthorized
X-Plex-Protocol: 1.0
Content-Type: text/html
Connection: close
Cache-Control: no-cache

-1013082686 | 2024-12-29T19:54:49.851497

6603 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

-1746074029 | 2025-01-03T17:00:55.805432

6633 / tcp

101 imqbroker =unV\r\n

1189133115 | 2024-12-12T15:50:55.614176

6653 / tcp

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

-365662216 | 2024-12-12T19:16:57.273817

6666 / tcp

\x05\xff

-1399940268 | 2025-01-04T18:14:45.375593

6668 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

401555314 | 2024-12-23T01:47:32.024306

6697 / tcp

NB[GFXjA^R

641070437 | 2024-12-24T16:35:48.200161

7001 / tcp

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
Deny-Reason: hotload rechange server uri format error!!
Request-Id: 65ae2576b8dddc78c2c56b6d959693af

-1013082686 | 2024-12-27T01:56:48.296191

7010 / tcp

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

2087396567 | 2025-01-03T21:31:13.975012

7071 / tcp

kjnkjabhbanc283ubcsbhdc72

1911457608 | 2025-01-03T18:28:06.701658

7090 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1730858130 | 2024-12-18T20:30:54.427666

7218 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

2063598737 | 2025-01-05T20:25:40.515224

7415 / tcp

/0 0 L\r\n/0 0 HUH\r\n

-527005584 | 2024-12-11T22:17:34.179318

7434 / tcp

/0 0 L
/0 0 HUH

-584993230 | 2025-01-01T12:18:10.735123

7443 / tcp

HTTP/1.1 400 Bad Request
Server:  
Content-Type: text/html
Connection: close

-1399940268 | 2024-12-31T14:32:36.558372

7465 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2087396567 | 2024-12-12T21:22:37.241498

7548 / tcp

kjnkjabhbanc283ubcsbhdc72

2103111368 | 2024-12-30T17:18:31.591562

7634 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

2103111368 | 2024-12-12T03:11:36.431066

8001 / tcp

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

119860953 | 2024-12-11T22:25:12.433398

8002 / tcp

* OK ArGoSoft Mail Server IMAP Module v.YW at

-1399940268 | 2025-01-03T11:17:25.004873

8005 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

819727972 | 2024-12-28T01:12:25.109313

8009 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2024-12-14T18:51:35.890961

8022 / tcp

SSH-2.0-OpenSSH_7.4

1223115691 | 2024-12-18T15:03:37.580190

8040 / tcp

connect

-1399940268 | 2024-12-19T04:13:47.302459

8044 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

171352214 | 2024-12-28T19:38:36.649375

8081 / tcp

-ERR client ip is not in whitelist

740837454 | 2025-01-03T09:41:16.023403

8083 / tcp

SSH-2.0-OpenSSH_5.3

165188539 | 2024-12-18T23:41:24.525245

8087 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1842524259 | 2025-01-04T19:57:33.408410

8089 / tcp

438715403 | 2024-12-15T01:09:44.342354

8099 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2874_pingwangtong53_24882-28622

2087396567 | 2024-12-30T11:02:36.672367

8139 / tcp

kjnkjabhbanc283ubcsbhdc72

-747911285 | 2024-12-11T19:33:58.053737

8140 / tcp

\xc2\xaa

-971970408 | 2025-01-02T22:05:14.739644

8181 / tcp

1320285193 | 2024-12-28T00:44:58.746182

8200 / tcp

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

-1888448627 | 2024-12-13T11:32:15.071779

8282 / tcp

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

1763259671 | 2024-12-27T10:00:45.659295

8291 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

-1261053701 | 2024-12-23T19:58:49.310513

8333 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"

-1559123399 | 2024-12-14T19:16:08.557396

8384 / tcp

500 Permission denied - closing connection.

1703218755 | 2024-12-26T20:29:56.251326

8402 / tcp

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 12-47472864-0 0NNN RT(1700650889597 6) q(0 -1 -1 -1) r(0 -1)

2098371729 | 2024-12-29T01:14:05.191606

8422 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

921225407 | 2024-12-07T17:08:22.319173

8424 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-918002969 | 2024-12-30T03:29:25.486815

8500 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1f0c_CS-000-01n4m185_5018-27088

1911457608 | 2025-01-03T14:56:01.557377

8545 / tcp

\x00[\x00\x00\x00\x00\x00\x00

2087396567 | 2024-12-16T00:10:56.092579

8554 / tcp

kjnkjabhbanc283ubcsbhdc72

842535728 | 2024-12-27T00:01:46.789973

8649 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>
A<!DOCTYPE GANGLIA_XML [
   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...

-1487943323 | 2024-12-21T15:06:34.959472

8728 / tcp

431 Unable to negotiate secure command connection.\r\n

-1399940268 | 2024-12-29T21:47:29.129015

8816 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1623746877 | 2025-01-03T22:00:31.037556

8851 / tcp

500 Permission denied - closing connection.\r\n

580340387 | 2024-12-13T21:37:23.155495

8867 / tcp

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

-1441741890 | 2024-12-21T05:16:32.523634

8880 / tcp

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2
0181212])

1082732927 | 2024-12-15T16:53:57.132629

8889 / tcp

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

372433470 | 2024-12-30T20:51:52.689019

8899 / tcp

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

-1795676121 | 2024-12-31T11:02:06.805085

9000 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65aded01_PS-000-01XB730_6341-708

2087396567 | 2024-12-22T17:35:02.108475

9002 / tcp

kjnkjabhbanc283ubcsbhdc72

575925250 | 2024-12-09T19:36:22.355400

9017 / tcp

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

334289483 | 2024-12-25T18:19:02.395505

9020 / tcp

Invalid request string: Request string is: "\r"

-1139539254 | 2024-12-25T21:39:48.751902

9035 / tcp

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

1544300041 | 2024-12-09T15:42:44.128882

9042 / tcp

SSH-25453-Cisco-3524665.35

-441419608 | 2024-12-20T08:52:45.735713

9044 / tcp

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

-971970408 | 2024-12-08T07:23:26.035596

9051 / tcp

-2096652808 | 2024-12-22T17:41:50.398121

9084 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

165188539 | 2024-12-24T15:39:00.336640

9092 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1690634669 | 2025-01-06T00:29:05.546949

9095 / tcp

-1399940268 | 2025-01-02T16:56:16.833318

9100 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-03T05:36:54.634414

9109 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

88628486 | 2024-12-18T05:34:40.999794

9110 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 657beb90_CS-NKG-01Hep254_64458-38078

-345718689 | 2024-12-23T05:30:15.411648

9160 / tcp

Vty password is not set.

51259122 | 2024-12-24T11:58:17.254286

9208 / tcp

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

-2096652808 | 2024-12-07T01:06:04.807091

9222 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1032713145 | 2024-12-23T19:56:17.240243

9302 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-784071826 | 2024-12-26T19:03:26.894928

9306 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-1375131644 | 2024-12-11T04:16:45.574542

9311 / tcp

\x00[v\xc3\xbdC\x7f\x00\x00

921225407 | 2025-01-04T00:54:20.810308

9333 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

-1441741890 | 2024-12-25T13:21:39.731379

9398 / tcp

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2
0181212])

-1036370807 | 2024-12-08T14:18:21.885155

9418 / tcp

JDWP-Handshake

-1991224470 | 2024-12-28T04:31:46.105528

9500 / tcp

\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x14TP/1.1\r\n\\x00\\x00\\x00\\x00&

819727972 | 2025-01-01T03:08:22.179816

9530 / tcp

SSH-2.0-OpenSSH_7.4

-1032713145 | 2025-01-05T17:09:21.687028

9600 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

819727972 | 2024-12-23T19:10:35.385793

9633 / tcp

SSH-2.0-OpenSSH_7.4

-358801646 | 2024-12-24T16:39:38.012203

9761 / tcp

SSH-2.0-OpenSSH_6.6.1

1615676803 | 2024-12-24T22:58:19.630000

9898 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=utf-8
Connection: keep-alive
Accept-Ranges: bytes
Etag: "s5sw6112h"

1712606111 | 2024-12-31T10:46:30.851499

9943 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1282_PSzqstdxyw34_8689-21922

539065883 | 2024-12-11T16:06:34.005938

9944 / tcp

-1399940268 | 2024-12-27T19:28:19.580886

9950 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

372433470 | 2024-12-20T20:06:36.480983

9998 / tcp

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

1161309183 | 2025-01-01T10:56:34.473150

9999 / tcp

ProxyServer is ready

1492413928 | 2025-01-03T12:40:52.847881

10001 / tcp

SSH-2.0-OpenSSH_7.5

-616720387 | 2024-12-09T21:11:31.180945

10050 / tcp

SSH-2.0-SSHD_0.7.6

171352214 | 2024-12-09T18:52:51.724345

10051 / tcp

-ERR client ip is not in whitelist

-943718306 | 2024-12-21T13:40:22.089503

10443 / tcp

HTTP/1.1 302 Moved Temporarily
Server: nginx/1.22.1
Date: Sat, 21 Dec 2024 13:40:21 GMT
Content-Type: text/html
Content-Length: 145
Connection: close
Location: https://59.82.122.209:443/

<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx/1.22.1</center>
</body>
</html>

1741579575 | 2024-12-27T19:06:28.984609

10554 / tcp

819727972 | 2025-01-01T17:55:09.321185

10909 / tcp

SSH-2.0-OpenSSH_7.4

1911457608 | 2025-01-01T20:07:09.257013

10911 / tcp

\x00[\x00\x00\x00\x00\x00\x00

1763259671 | 2025-01-05T18:52:14.625834

11000 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

-1399940268 | 2024-12-28T06:03:17.061140

11112 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2143387245 | 2024-12-26T20:33:09.970582

11210 / tcp

HTTP/1.1 408 Request Timeout
content-length: 0
co
nnection: close
date: Fri, 26 Nov 2021 07:46:40 GMT

819727972 | 2025-01-04T07:23:06.352629

11288 / tcp

SSH-2.0-OpenSSH_7.4

819727972 | 2024-12-27T09:59:34.405483

11300 / tcp

SSH-2.0-OpenSSH_7.4

-2118655245 | 2024-12-08T00:48:31.479932

11434 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20

227700176 | 2024-12-29T16:53:59.582985

12000 / tcp

HTTP/1.1 200 OK
Server: nginx
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-store, no-transform
Set-Cookie: _csrf=kW6lEf7WlBTiDChV5oht1zfpUBE6MTcwNTkxMjc1NjU1NzkzNjYwNQ; Path=/; Expires=Tue, 23 Jan 2024 08:39:16 GMT; HttpOnly; SameSite=Lax
Set-Cookie: macaron_flash=; Path=/; Max-Age=0; HttpOnly; SameSite=Lax
X-Frame-Options: SAMEORIGIN
Cache-Control: no-cache

296364507 | 2025-01-03T01:04:11.081366

12345 / tcp

HTTP/1.1 500 Internal Server Error
SERVER: Trend Chip UPnP/1.0 DMS
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

1082732927 | 2024-12-10T03:30:37.852608

13047 / tcp

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

1911457608 | 2024-12-25T19:46:10.918880

14147 / tcp

\x00[\x00\x00\x00\x00\x00\x00

671605376 | 2024-12-16T00:28:40.538289

14265 / tcp

SSH-2.0-OpenSSH_X.X

1632932802 | 2024-12-10T22:21:51.087587

15443 / tcp

1975288991 | 2024-12-14T14:05:07.586630

16010 / tcp

OPTI

410249975 | 2024-12-28T06:43:18.693924

16993 / tcp

LNS READY<>

-1810987450 | 2024-12-14T11:19:19.064750

17000 / tcp

\xc3\xbf

1991883981 | 2024-12-12T16:17:54.193735

18080 / tcp

B\x00\x00\x00\xc3\xbfn\x04Too many connections

-1399940268 | 2025-01-02T13:18:47.857243

18081 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-1399940268 | 2025-01-01T22:04:47.192356

18245 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-2096652808 | 2024-12-26T21:26:04.307304

19000 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1542849631 | 2024-12-14T17:47:40.096329

19200 / tcp

* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at

819727972 | 2024-12-10T05:50:43.799564

19930 / tcp

SSH-2.0-OpenSSH_7.4

740837454 | 2024-12-23T11:28:24.447631

20256 / tcp

SSH-2.0-OpenSSH_5.3

-1399940268 | 2024-12-31T18:07:29.879318

20547 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1370263973 | 2024-12-30T23:53:58.226461

20880 / tcp

dubbo>

819727972 | 2024-12-26T17:22:03.570446

21025 / tcp

SSH-2.0-OpenSSH_7.4

1911457608 | 2024-12-31T23:13:25.183400

21379 / tcp

\x00[\x00\x00\x00\x00\x00\x00

-1810987450 | 2024-12-14T20:42:30.376789

22000 / tcp

\xc3\xbf

-1887823886 | 2024-12-14T17:31:51.334702

22001 / tcp

K%~)J/\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

2033888749 | 2024-12-14T17:05:15.378216

22067 / tcp

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

-2081419599 | 2024-12-14T15:30:31.754547

22070 / tcp

@
03d

-1733645023 | 2024-12-23T02:58:55.566266

22556 / tcp

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.10

-358801646 | 2025-01-01T21:25:56.781608

23023 / tcp

SSH-2.0-OpenSSH_6.6.1

2033888749 | 2024-12-14T03:44:46.397352

23424 / tcp

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

819727972 | 2024-12-09T17:32:46.957410

24245 / tcp

SSH-2.0-OpenSSH_7.4

-375604792 | 2025-01-02T12:54:24.084665

25001 / tcp

220 Microsoft FTP Service

-2046514463 | 2024-12-31T20:12:23.120999

25565 / tcp

AB\x01\t

819727972 | 2024-12-11T09:46:53.997366

26657 / tcp

SSH-2.0-OpenSSH_7.4

2098371729 | 2024-12-26T18:45:57.219309

27015 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

-79865617 | 2024-12-14T01:01:46.541308

27016 / tcp

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )

1763259671 | 2024-12-20T05:12:24.064652

27017 / tcp

{\n"Version": "3.4.18",\n"VersionArray": [\n3,\n4,\n18,\n0\n],\n"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",\n"OpenSSLVersion": "",\n"SysInfo": "",\n"Bits": 64,\n"Debug": false,\n"MaxObjectSize": 16777216\n}\n\n

-2089734047 | 2024-12-27T08:19:24.478221

28015 / tcp

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

-971970408 | 2024-12-13T22:26:11.686575

28017 / tcp

291723434 | 2024-12-10T20:52:01.734040

28080 / tcp


Lantronix MSS100 Version V118/523(045538937)

Type HELP at the 'Local_61349> ' prompt for assistance.



Username>

962700458 | 2024-12-28T14:19:23.508737

30002 / tcp

-992671574 | 2025-01-04T02:45:24.663823

30003 / tcp

@RSYNCD: 26

-2096652808 | 2024-12-09T11:17:38.013031

30222 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

819727972 | 2024-12-12T18:04:57.736025

30301 / tcp

SSH-2.0-OpenSSH_7.4

1690634669 | 2024-12-12T21:56:58.217233

30303 / tcp

1282941221 | 2024-12-09T06:36:12.632922

30422 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-971970408 | 2024-12-09T04:38:54.702830

30522 / tcp

-2096652808 | 2024-12-09T02:46:10.172224

30722 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-746114901 | 2024-12-09T02:15:36.922591

30822 / tcp

[KpU

2087396567 | 2024-12-08T20:35:51.447045

30922 / tcp

kjnkjabhbanc283ubcsbhdc72

-1730858130 | 2024-12-08T16:37:43.015356

31122 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

599074451 | 2024-12-08T12:44:47.024834

31322 / tcp

msg

1282941221 | 2024-12-08T01:18:57.210397

31922 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-2096652808 | 2024-12-07T22:52:35.867672

32022 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

-1311598826 | 2024-12-07T19:03:41.644017

32222 / tcp

AMQP:
cluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local
copyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.
information:Licensed under the MPL 2.0. Website: https://rabbitmq.com
platform:Erlang/OTP 24.1
product:RabbitMQ
version:3.9.7
Capabilities:
publisher_confirms:true
exchange_exchange_bindings:true
basic.nack:true
consumer_cancel_notify:true
connection.blocked:true
consumer_priorities:true
authentication_failure_close:true
per_consumer_qos:true
direct_reply_to:tru

1282941221 | 2024-12-07T14:59:41.458841

32422 / tcp

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

-903067560 | 2024-12-07T13:01:03.532700

32522 / tcp

\x00[\x13)\xc2\x81\x7f\x00\x00

-2096652808 | 2024-12-07T09:25:25.993030

32722 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

1077013874 | 2024-12-29T14:05:31.769582

32764 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

320677201 | 2024-12-07T07:46:31.096777

32822 / tcp

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

1492413928 | 2024-12-07T12:03:12.056968

33022 / tcp

SSH-2.0-OpenSSH_7.5

-1399940268 | 2024-12-29T21:41:00.931267

33060 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

-146605374 | 2025-01-05T17:49:38.488809

33333 / tcp

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

819727972 | 2024-12-13T18:46:37.146724

33338 / tcp

SSH-2.0-OpenSSH_7.4

1996932384 | 2025-01-01T15:35:35.957127

35000 / tcp

"raop" nonce

-952165951 | 2024-12-13T17:56:53.157713

37215 / tcp

AB

165188539 | 2024-12-30T12:54:30.513280

37777 / tcp

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1504401647 | 2025-01-05T19:07:20.799700

41800 / tcp

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

-433302150 | 2024-12-18T08:55:38.147761

44158 / tcp

/multistream/1.0.0

819727972 | 2024-12-30T09:42:49.807927

44818 / tcp

SSH-2.0-OpenSSH_7.4

-2096652808 | 2024-12-20T19:27:17.233440

47022 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

2087396567 | 2024-12-29T02:58:23.120936

47990 / tcp

kjnkjabhbanc283ubcsbhdc72

-2033111675 | 2024-12-20T19:58:07.860357

48922 / tcp

~djb

819727972 | 2024-12-20T19:48:59.183993

49022 / tcp

SSH-2.0-OpenSSH_7.4

130818875 | 2024-12-13T13:15:27.738693

49152 / tcp

HTTP/1.1 500 Internal Server Error
CONTENT-LENGTH: 411
CONTENT-TYPE: text/xml; charset="utf-8"
DATE: Mon, 22 Jan 2024 16:06:03 GMT
EXT:
SERVER: Linux/4.9.118, UPnP/1.0, Portable SDK for UPnP devices/1.6.18
X-User-Agent: redsonic

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<s:Body>
<s:Fault>
<faultcode>s:Client</faultcode>
<faultstring>UPnPError</faultstring>
<detail>
<UPnPError xmlns="urn:schemas-upnp-org:control-1-0">

-2031152423 | 2024-12-20T15:24:46.133833

49222 / tcp

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

863754335 | 2024-12-20T12:17:25.957510

49422 / tcp

0a

-971970408 | 2024-12-20T12:54:58.696973

49622 / tcp

2087396567 | 2024-12-20T08:45:03.917340

49922 / tcp

kjnkjabhbanc283ubcsbhdc72

-786044033 | 2024-12-30T10:45:39.569909

50000 / tcp

OK Welcome <299685> on DirectUpdate server 7286

819727972 | 2024-12-20T10:52:34.858071

50022 / tcp

SSH-2.0-OpenSSH_7.4

1632932802 | 2024-12-30T05:57:52.748449

50100 / tcp

-1189269828 | 2024-12-20T08:19:13.462899

50322 / tcp

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

819727972 | 2024-12-20T06:00:11.972124

50422 / tcp

SSH-2.0-OpenSSH_7.4

-1839934832 | 2024-12-20T04:57:25.211028

50522 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

660175493 | 2024-12-20T02:36:07.124004

51122 / tcp

-1399940268 | 2024-12-27T05:26:28.374385

51235 / tcp

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

677934968 | 2024-12-11T00:34:54.167303

51443 / tcp

lm^)Q

2087396567 | 2024-12-19T23:49:43.690951

51522 / tcp

kjnkjabhbanc283ubcsbhdc72

117101543 | 2024-12-19T23:47:27.450103

51622 / tcp

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

1741579575 | 2024-12-19T20:08:30.914645

51722 / tcp

-314039103 | 2024-12-19T23:10:55.895950

51822 / tcp

Surnom.
Sorry, that nickname format is invalid.

539065883 | 2024-12-19T17:50:58.611456

52122 / tcp

2087396567 | 2024-12-19T16:57:56.214953

52422 / tcp

kjnkjabhbanc283ubcsbhdc72

-971970408 | 2024-12-19T12:11:23.686551

53222 / tcp

-454087041 | 2024-12-19T03:52:40.416508

53822 / tcp

\x1e\xc3\x80\x010\x02\x00\xc2\xa8\xc3\xa3\x00\x00\x00\x00

-971970408 | 2024-12-19T05:24:39.927283

54122 / tcp

921225407 | 2024-12-17T20:23:53.434082

54138 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00

401555314 | 2025-01-03T20:40:54.261171

54222 / tcp

NB[GFXjA^R

1741579575 | 2024-12-19T03:09:14.455400

54322 / tcp

2087396567 | 2024-12-18T23:51:45.361925

54622 / tcp

kjnkjabhbanc283ubcsbhdc72

1996932384 | 2024-12-27T21:14:39.594595

55000 / tcp

"raop" nonce

-1730858130 | 2024-12-18T21:31:16.674284

55022 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

1542849631 | 2024-12-18T20:07:24.564196

55122 / tcp

* OK [CAPABILITY a2,M\] nBwXk2pPP IMAP4rev1 20qx at

1632932802 | 2024-12-15T23:22:31.976798

55222 / tcp

2033888749 | 2024-12-18T19:45:33.482152

55322 / tcp

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

1690634669 | 2024-12-18T20:51:28.436209

55422 / tcp

-971970408 | 2024-12-24T06:48:20.100768

55443 / tcp

-971970408 | 2024-12-18T16:09:55.607059

55522 / tcp

-1316491703 | 2024-12-27T15:23:49.954598

55554 / tcp

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

1996932384 | 2024-12-15T19:56:29.495885

55722 / tcp

"raop" nonce

1208318993 | 2024-12-15T19:24:19.082261

55822 / tcp

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

-1730858130 | 2024-12-15T18:39:54.323979

55922 / tcp

RFB 003.008
VNC:
  Protocol Version: 3.8

819727972 | 2024-12-15T17:17:55.312399

56122 / tcp

SSH-2.0-OpenSSH_7.4

-826610984 | 2024-12-15T15:53:57.390019

56322 / tcp

HTTP/1.1 200
Accept-Ranges: bytes
Content-Type: text/html;charset=UTF-8
Content-Length: 602
Connect-To: https://member.aliyun.com/unshift-flush/object-trigger/jobs/nacos/

<!DOCTYPE html>
<html lang="en">
<head>
	<meta charset="UTF-8">
	<title>Nacos</title>
	<link rel="shortcut icon" href="/nacos/console-ui/public/img/nacos-logo.png" type="image/x-icon">

<link href="./css/main.css" rel="stylesheet"></head>
<body>
	<div id="root" style="overflow:hidden"></div>
	<div id="app"></div>
	<div id="other"></

-971970408 | 2025-01-03T20:50:50.556180

56622 / tcp

671605376 | 2024-12-18T11:14:54.402592

56722 / tcp

SSH-2.0-OpenSSH_X.X

171352214 | 2024-12-18T09:53:42.323884

56822 / tcp

-ERR client ip is not in whitelist

-1476017887 | 2024-12-15T11:09:35.608630

57122 / tcp

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

1077013874 | 2024-12-18T05:48:33.045363

57222 / tcp

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

2087396567 | 2024-12-18T07:48:49.509816

57322 / tcp

kjnkjabhbanc283ubcsbhdc72

410249975 | 2024-12-15T07:44:16.148732

57522 / tcp

LNS READY<>

-1045760528 | 2024-12-18T06:24:42.624948

57622 / tcp

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

-1839934832 | 2024-12-17T22:14:55.120449

57822 / tcp

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

660175493 | 2024-12-18T03:41:01.975799

57922 / tcp

-1032713145 | 2024-12-15T04:18:34.976493

58022 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

-1032713145 | 2024-12-17T23:32:12.192463

58322 / tcp

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

2087396567 | 2024-12-18T00:20:18.116721

58422 / tcp

kjnkjabhbanc283ubcsbhdc72

-971970408 | 2024-12-17T20:54:21.221380

58722 / tcp

-154107716 | 2024-12-17T20:16:20.311074

58922 / tcp

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST ...

-784071826 | 2024-12-17T18:57:07.447977

59122 / tcp

SSH-2.0-OpenSSH_8.0

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 7 moreCVE-2019-16905 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

819727972 | 2025-01-04T17:34:52.377874

60129 / tcp

SSH-2.0-OpenSSH_7.4

2098371729 | 2024-12-27T08:45:52.903093

61613 / tcp

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

1443792109 | 2025-01-01T13:35:48.016968

62078 / tcp

\\x00\\x00\\x01)

-2017887953 | 2025-01-05T16:01:57.224963

63210 / tcp

SSH-2.0-OpenSSH_7.9

-805362002 | 2024-12-30T17:31:09.085132

63256 / tcp

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

366084633 | 2024-12-10T09:20:03.218147

63257 / tcp

<HTML><HEAD><TITLE>Error</TITLE></HEAD><BODY><H1>Error</H1>Bad request or resource not found.</BODY></HTML>

-358801646 | 2025-01-05T05:21:09.122512

63260 / tcp

SSH-2.0-OpenSSH_6.6.1

59.82.122.209

Last Seen: 2025-01-06

Tags:

GeneralInformation

OpenPorts

1725312227 | 2025-01-02T19:04:47.484723 13 / tcp

819727972 | 2024-12-28T02:21:55.292915 15 / tcp

385232644 | 2024-12-25T23:43:50.539427 17 / tcp

751496153 | 2025-01-02T19:41:13.701692 19 / tcp

-702037155 | 2025-01-01T21:26:22.120190 21 / tcp

575925250 | 2024-12-26T18:50:59.220617 25 / tcp

2063598737 | 2024-12-27T15:50:40.892072 26 / tcp

1110767461 | 2025-01-05T07:21:00.258803 37 / tcp

-952165951 | 2025-01-01T00:12:29.779042 43 / tcp

-359657882 | 2024-12-22T23:48:10.320066 49 / tcp

-1780803173 | 2024-12-08T09:50:53.227585 53 / tcp

-1763883228 | 2024-12-31T00:03:52.147083 70 / tcp

-1846450790 | 2024-12-31T23:32:51.567773 79 / tcp

1635735545 | 2024-12-28T18:25:23.209718 80 / tcp

-1399940268 | 2024-12-25T16:04:30.719814 89 / tcp

819727972 | 2024-12-11T01:32:14.412964 95 / tcp

597764502 | 2025-01-04T09:27:16.638697 102 / tcp

-1888448627 | 2025-01-01T00:57:56.405245 104 / tcp

819727972 | 2024-12-30T02:43:52.864383 110 / tcp

1187188851 | 2024-12-20T09:02:33.987179 111 / tcp

-527005584 | 2025-01-05T13:49:57.648476 113 / tcp

141730637 | 2024-12-23T11:43:32.487466 119 / tcp

-382990917 | 2025-01-03T18:19:35.646152 143 / tcp

-445721795 | 2025-01-05T05:29:27.855788 175 / tcp

-399606100 | 2024-12-14T06:48:43.191730 179 / tcp

-971970408 | 2025-01-05T13:46:46.707076 195 / tcp

-303199180 | 2025-01-02T17:38:05.681383 221 / tcp

-1707068558 | 2024-12-26T13:11:16.333316 264 / tcp

67948279 | 2024-12-09T20:38:47.911186 311 / tcp

-1639129386 | 2024-12-27T13:13:57.860343 389 / tcp

78786160 | 2024-12-30T21:23:58.718609 443 / tcp

1007664265 | 2024-12-24T20:24:02.075049 444 / tcp

-1399940268 | 2024-12-11T15:49:22.201824 448 / tcp

1504401647 | 2024-12-30T01:26:26.259071 503 / tcp

1741579575 | 2024-12-10T22:05:46.480023 515 / tcp

-1769206458 | 2024-12-30T07:40:24.659887 548 / tcp

448214121 | 2024-12-21T02:26:19.879930 554 / tcp

745343730 | 2024-12-26T07:42:14.486794 587 / tcp

1308377066 | 2024-12-25T16:53:03.188551 593 / tcp

826560219 | 2024-12-24T12:32:05.643359 636 / tcp

1300162323 | 2024-12-27T00:34:17.025492 666 / tcp

398077695 | 2024-12-27T21:52:47.606818 789 / tcp

-1598265216 | 2024-12-26T06:11:01.992032 873 / tcp

-1835475271 | 2025-01-04T19:54:10.409943 992 / tcp

-1399940268 | 2024-12-26T21:26:50.509663 993 / tcp

819727972 | 2024-12-21T23:19:57.547414 1022 / tcp

1887224352 | 2025-01-01T16:18:00.947273 1023 / tcp

-1399940268 | 2024-12-10T18:59:22.924541 1025 / tcp

-358801646 | 2024-12-11T18:46:07.096336 1027 / tcp

-358801646 | 2024-12-13T13:18:25.502595 1029 / tcp

1362344524 | 2024-12-18T03:00:01.172760 1080 / tcp

-1399940268 | 2025-01-02T07:34:38.721133 1099 / tcp

-2096652808 | 2025-01-05T18:49:49.905584 1153 / tcp

-1729629024 | 2024-12-31T14:33:11.010734 1177 / tcp

-345718689 | 2024-12-24T10:07:53.349352 1200 / tcp

1911457608 | 2025-01-04T05:55:45.940406 1234 / tcp

291723434 | 2025-01-05T17:45:03.752993 1337 / tcp

1726594447 | 2024-12-27T10:45:07.165429 1414 / tcp

49107754 | 2024-12-28T04:48:08.538442 1433 / tcp

-1715152554 | 2024-12-29T21:36:19.846369 1443 / tcp

-2118655245 | 2024-12-19T19:32:53.498011 1471 / tcp

-271515508 | 2024-12-14T02:34:18.913746 1500 / tcp

-1730858130 | 2025-01-01T07:53:22.228360 1515 / tcp

-805164506 | 2024-12-18T23:30:55.436623 1521 / tcp

1741579575 | 2024-12-24T17:44:11.996239 1604 / tcp

1103582599 | 2024-12-28T21:47:03.084619 1723 / tcp

-833635452 | 2024-12-08T19:12:24.838091 1801 / tcp

1948301213 | 2025-01-03T15:14:36.658563 1833 / tcp

410249975 | 2024-12-29T05:15:09.343133 1883 / tcp

-1399940268 | 2024-12-17T18:25:31.290168 1911 / tcp

1543809371 | 2025-01-02T00:18:54.422487 1922 / tcp

-407828767 | 2024-12-25T22:15:57.041903 1926 / tcp

-1477838366 | 2024-12-21T01:57:51.841138 1962 / tcp

-1099385124 | 2024-12-28T04:05:10.233180 2000 / tcp

1004056929 | 2024-12-07T21:19:33.393768 2002 / tcp

1725312227 | 2025-01-02T19:04:47.484723
13 / tcp

819727972 | 2024-12-28T02:21:55.292915
15 / tcp

385232644 | 2024-12-25T23:43:50.539427
17 / tcp

751496153 | 2025-01-02T19:41:13.701692
19 / tcp

-702037155 | 2025-01-01T21:26:22.120190
21 / tcp

575925250 | 2024-12-26T18:50:59.220617
25 / tcp

2063598737 | 2024-12-27T15:50:40.892072
26 / tcp

1110767461 | 2025-01-05T07:21:00.258803
37 / tcp

-952165951 | 2025-01-01T00:12:29.779042
43 / tcp

-359657882 | 2024-12-22T23:48:10.320066
49 / tcp

-1780803173 | 2024-12-08T09:50:53.227585
53 / tcp

-1763883228 | 2024-12-31T00:03:52.147083
70 / tcp

-1846450790 | 2024-12-31T23:32:51.567773
79 / tcp

1635735545 | 2024-12-28T18:25:23.209718
80 / tcp

-1399940268 | 2024-12-25T16:04:30.719814
89 / tcp

819727972 | 2024-12-11T01:32:14.412964
95 / tcp

597764502 | 2025-01-04T09:27:16.638697
102 / tcp

-1888448627 | 2025-01-01T00:57:56.405245
104 / tcp

819727972 | 2024-12-30T02:43:52.864383
110 / tcp

1187188851 | 2024-12-20T09:02:33.987179
111 / tcp

-527005584 | 2025-01-05T13:49:57.648476
113 / tcp

141730637 | 2024-12-23T11:43:32.487466
119 / tcp

-382990917 | 2025-01-03T18:19:35.646152
143 / tcp

-445721795 | 2025-01-05T05:29:27.855788
175 / tcp

-399606100 | 2024-12-14T06:48:43.191730
179 / tcp

-971970408 | 2025-01-05T13:46:46.707076
195 / tcp

-303199180 | 2025-01-02T17:38:05.681383
221 / tcp

-1707068558 | 2024-12-26T13:11:16.333316
264 / tcp

67948279 | 2024-12-09T20:38:47.911186
311 / tcp

-1639129386 | 2024-12-27T13:13:57.860343
389 / tcp

78786160 | 2024-12-30T21:23:58.718609
443 / tcp

1007664265 | 2024-12-24T20:24:02.075049
444 / tcp

-1399940268 | 2024-12-11T15:49:22.201824
448 / tcp

1504401647 | 2024-12-30T01:26:26.259071
503 / tcp

1741579575 | 2024-12-10T22:05:46.480023
515 / tcp

-1769206458 | 2024-12-30T07:40:24.659887
548 / tcp

448214121 | 2024-12-21T02:26:19.879930
554 / tcp

745343730 | 2024-12-26T07:42:14.486794
587 / tcp

1308377066 | 2024-12-25T16:53:03.188551
593 / tcp

826560219 | 2024-12-24T12:32:05.643359
636 / tcp

1300162323 | 2024-12-27T00:34:17.025492
666 / tcp

398077695 | 2024-12-27T21:52:47.606818
789 / tcp

-1598265216 | 2024-12-26T06:11:01.992032
873 / tcp

-1835475271 | 2025-01-04T19:54:10.409943
992 / tcp

-1399940268 | 2024-12-26T21:26:50.509663
993 / tcp

819727972 | 2024-12-21T23:19:57.547414
1022 / tcp

1887224352 | 2025-01-01T16:18:00.947273
1023 / tcp

-1399940268 | 2024-12-10T18:59:22.924541
1025 / tcp

-358801646 | 2024-12-11T18:46:07.096336
1027 / tcp

-358801646 | 2024-12-13T13:18:25.502595
1029 / tcp

1362344524 | 2024-12-18T03:00:01.172760
1080 / tcp

-1399940268 | 2025-01-02T07:34:38.721133
1099 / tcp

-2096652808 | 2025-01-05T18:49:49.905584
1153 / tcp

-1729629024 | 2024-12-31T14:33:11.010734
1177 / tcp

-345718689 | 2024-12-24T10:07:53.349352
1200 / tcp

1911457608 | 2025-01-04T05:55:45.940406
1234 / tcp

291723434 | 2025-01-05T17:45:03.752993
1337 / tcp

1726594447 | 2024-12-27T10:45:07.165429
1414 / tcp

49107754 | 2024-12-28T04:48:08.538442
1433 / tcp

-1715152554 | 2024-12-29T21:36:19.846369
1443 / tcp

-2118655245 | 2024-12-19T19:32:53.498011
1471 / tcp

-271515508 | 2024-12-14T02:34:18.913746
1500 / tcp

-1730858130 | 2025-01-01T07:53:22.228360
1515 / tcp

-805164506 | 2024-12-18T23:30:55.436623
1521 / tcp

1741579575 | 2024-12-24T17:44:11.996239
1604 / tcp

1103582599 | 2024-12-28T21:47:03.084619
1723 / tcp

-833635452 | 2024-12-08T19:12:24.838091
1801 / tcp

1948301213 | 2025-01-03T15:14:36.658563
1833 / tcp

410249975 | 2024-12-29T05:15:09.343133
1883 / tcp

-1399940268 | 2024-12-17T18:25:31.290168
1911 / tcp

1543809371 | 2025-01-02T00:18:54.422487
1922 / tcp

-407828767 | 2024-12-25T22:15:57.041903
1926 / tcp

-1477838366 | 2024-12-21T01:57:51.841138
1962 / tcp

-1099385124 | 2024-12-28T04:05:10.233180
2000 / tcp

1004056929 | 2024-12-07T21:19:33.393768
2002 / tcp

1948301213 | 2024-12-30T10:52:36.570481
2003 / tcp

-2033111675 | 2024-12-29T16:39:36.786552
2008 / tcp

-1888448627 | 2024-12-20T08:59:09.423252
2058 / tcp

1282941221 | 2024-12-30T01:30:07.179153
2067 / tcp

-42767839 | 2024-12-24T20:29:28.708095
2068 / tcp