GeneralInformation

Hostnames	taobao.cn taobao.com pre-unszyun.api-xspace.taobao.com unszyun.api-xspace.taobao.com trace.cps.taobao.com pre-cambridge.decoration.taobao.com pre-showcase.display.taobao.com showcase.display.taobao.com api.ent.taobao.com pre-i.i.taobao.com gsp.mystg.taobao.com pac.partner.taobao.com ugc.pre.taobao.com click.mz.simba.taobao.com click.tz.simba.taobao.com tmatch.simba2.taobao.com s.ijipiao.trip.taobao.com s.jipiao.trip.taobao.com taobao.tw taobao.wang taopiaopiao.com xiami.com
Domains	taobao.cn taobao.com taobao.tw taobao.wang taopiaopiao.com xiami.com
Country	China
City	Shanghai
Organization	Hangzhou Alibaba Advertising Co.,Ltd.
ISP	Hangzhou Alibaba Advertising Co.,Ltd.
ASN	AS37963

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

2 11 13 15 17 19 21 22 23 25 26 37 38 43 49 53 70 79 80 85 94 95 97 102 104 110 111 113 119 122 135 143 175 179 189 190 195 221 225 311 443 444 448 449 451 465 487 502 503 513 515 548 554 587 632 636 666 675 771 785 806 811 832 833 873 887 993 995 998 1023 1027 1050 1080 1103 1110 1153 1177 1198 1337 1344 1366 1414 1433 1456 1515 1521 1588 1604 1723 1800 1801 1883 1911 1926 1947 1962 1968 1974 1977 1984 1987 1990 2000 2003 2008 2054 2067 2069 2081 2083 2087 2096 2108 2154 2181 2201 2210 2211 2222 2233 2248 2323 2332 2344 2345 2362 2376 2404 2433 2435 2455 2549 2555 2562 2570 2628 2709 2761 2762 2806 3001 3005 3010 3012 3017 3020 3042 3047 3052 3060 3066 3081 3092 3093 3097 3110 3111 3134 3136 3145 3147 3152 3164 3165 3174 3194 3197 3256 3260 3268 3299 3306 3310 3341 3388 3389 3408 3521 3540 3541 3557 3690 3780 3790 3838 3950 3953 4000 4022 4043 4063 4064 4072 4100 4148 4150 4157 4159 4242 4282 4321 4369 4433 4434 4438 4443 4444 4500 4506 4572 4620 4700 4899 4911 4949 5001 5006 5007 5009 5025 5105 5119 5122 5172 5222 5234 5235 5241 5246 5256 5261 5269 5272 5274 5351 5435 5443 5456 5494 5495 5556 5569 5594 5605 5608 5672 5721 5858 5910 5912 5918 5920 5938 5984 5986 5998 5999 6000 6001 6002 6005 6061 6100 6308 6380 6500 6503 6505 6510 6513 6556 6601 6602 6633 6653 6664 6666 6667 6668 6699 6755 6779 6799 6887 7001 7003 7025 7071 7170 7171 7272 7325 7331 7373 7434 7443 7445 7493 7548 7634 7654 7775 7777 7989 8001 8009 8014 8026 8037 8050 8057 8059 8062 8076 8081 8083 8085 8087 8089 8099 8100 8103 8108 8119 8120 8126 8134 8139 8140 8146 8150 8156 8157 8169 8172 8193 8200 8222 8291 8300 8318 8333 8383 8384 8401 8403 8417 8423 8430 8436 8445 8454 8488 8500 8502 8504 8525 8540 8545 8548 8554 8562 8563 8564 8575 8578 8580 8583 8585 8586 8595 8598 8606 8649 8724 8728 8764 8789 8801 8805 8806 8813 8819 8834 8836 8843 8855 8875 8880 8881 8883 8885 8899 8901 8908 8913 9000 9001 9002 9008 9013 9014 9015 9027 9031 9032 9036 9037 9039 9042 9044 9047 9051 9055 9058 9059 9066 9087 9091 9094 9095 9100 9106 9121 9138 9140 9142 9144 9146 9152 9153 9156 9160 9178 9179 9182 9189 9200 9216 9250 9292 9307 9333 9383 9398 9418 9446 9447 9455 9500 9501 9550 9633 9690 9700 9710 9754 9761 9802 9876 9888 9898 9916 9943 9944 9955 9991 9999 10000 10002 10004 10005 10006 10013 10051 10086 10090 10134 10180 10209 10250 10283 10445 10554 10935 11112 11288 11300 11681 12082 12130 12135 12137 12142 12157 12158 12170 12176 12181 12185 12191 12194 12196 12208 12210 12214 12215 12218 12222 12224 12233 12236 12241 12249 12252 12261 12266 12293 12298 12301 12305 12308 12315 12316 12317 12320 12328 12329 12330 12332 12350 12352 12354 12371 12372 12376 12378 12381 12383 12387 12388 12394 12401 12406 12421 12429 12430 12443 12444 12467 12470 12488 12492 12499 12505 12513 12515 12523 12526 12557 12561 12562 12568 12574 12578 12580 12581 12582 12585 12601 12615 13001 13047 13780 14084 14147 14182 14344 14403 14900 15042 15044 15082 15151 15443 16009 16010 16013 16015 16019 16026 16051 16066 16073 16076 16082 16085 16087 16090 16104 16311 16667 16992 16993 17000 17001 17020 17182 17184 17770 17773 17778 17780 18004 18018 18030 18034 18042 18053 18056 18061 18063 18066 18076 18077 18078 18080 18081 18094 18111 18112 18245 18443 18553 19000 19080 19082 19200 19930 20000 20084 20087 20182 20256 20325 20440 20547 20600 20800 20880 20894 21025 21084 21200 21238 21240 21243 21245 21246 21259 21288 21298 21300 21303 21305 21309 21316 21318 21322 21379 22000 22069 22222 22556 23023 23424 24082 24245 25001 25082 25105 25565 26656 26657 27015 27016 27017 27036 27105 28015 28017 28080 30003 30006 30007 30008 30013 30017 30022 30104 30122 30123 30222 30301 30303 30422 30452 30522 30718 30722 30822 30894 30922 31022 31122 31322 31380 31443 31522 31622 31722 31822 31922 32022 32101 32102 32122 32222 32322 32422 32443 32522 32622 32722 32764 32800 32822 33060 33122 33222 33338 33722 34022 34122 34222 34522 34722 34822 34922 35000 35002 35153 35222 35322 35524 35559 35560 35622 35822 36022 36322 36622 36822 37122 37215 37222 37722 37777 38122 38322 38333 40001 40029 40070 41443 41800 42194 43009 43080 44158 44304 44305 44306 44307 44444 44818 45002 45003 45333 45555 45788 45886 46001 47001 47808 47984 47990 48002 48899 49152 49684 50000 50008 50050 50070 50080 50100 50500 51000 51002 51003 51004 51106 51200 51201 51235 51443 52536 52869 53413 53485 54138 54327 54444 54984 55200 55350 55442 55443 55553 55554 57778 57786 58585 58603 60001 60129 61616 62016 62078 62865 63210 63256 63257 63260 64738 65432

2 / tcp

-904840257 | 2025-03-17T05:35:34.434075

572 Relay not authorized\r\n

11 / tcp

2087396567 | 2025-03-19T22:24:12.362323

kjnkjabhbanc283ubcsbhdc72

13 / tcp

1100205395 | 2025-04-06T02:39:31.539864

HTTP/1.1 200 OK
Cache-Control: private, max-age=300

15 / tcp

2087396567 | 2025-03-31T18:56:46.088915

kjnkjabhbanc283ubcsbhdc72

17 / tcp

-297057753 | 2025-03-26T09:30:00.784042

HTTP/1.1 401 Unauthorized
X-Plex-Protocol: 1.0
Content-Type: text/html
Connection: close
Cache-Control: no-cache

19 / tcp

873425297 | 2025-03-27T06:54:18.180949

200 NOD32SS 99 (3318497116)

21 / tcp

1210838212 | 2025-03-27T00:54:56.867044

220 DiskStation FTP server ready.

22 / tcp

-928719327 | 2025-03-15T16:41:18.015591

SSH-2.0-OpenSSH_7.4\r\n

23 / tcp

-23362551 | 2025-04-01T04:05:14.091459

\xff\xfb\x01\xff\xfb\x03\xff\xfd\x18

25 / tcp

1911457608 | 2025-04-12T17:28:16.997296

\x00[\x00\x00\x00\x00\x00\x00

26 / tcp

2063598737 | 2025-03-22T10:22:43.704357

/0 0 L\r\n/0 0 HUH\r\n

37 / tcp

-1795351450 | 2025-03-29T17:16:26.052462

HTTP/1.1 200 OK
Server: nginx/1.24.0
Content-Type: text/html
Connection: keep-alive
Accept-Ranges: bytes

38 / tcp

-339084706 | 2025-04-03T10:22:59.752578

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

43 / tcp

-1114821551 | 2025-03-26T20:37:12.893852

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

49 / tcp

-1909001798 | 2025-03-14T18:58:08.059898

HTTP/1.1 200 OK
Server:  
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Tue, 21 Dec 2021 03:13:39 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=0
X-Content-Type-Options: nosniff

53 / tcp

1369632081 | 2025-04-10T15:55:49.323986

9
\x81\x80\x00\x01\x00\x02\x00\x00\x00\x00\x08clients1\x06google\x03com\x00\x00\x01\x00\x01\xc0\x00\x05\x00\x01\x00\x00\x01\x03\x00\x07clients\x01l\xc0\x15\xc01\x00\x01\x00\x01\x00\x00\x01\x14\x00\x04\xac٠N
\x00\x06\x85\x80\x00\x01\x00\x01\x00\x00\x00

70 / tcp

-1967791998 | 2025-03-24T22:46:01.017379

HTTP/1.1 401 Unauthorized
Server: mini_httpd/1.19 19dec2003
Cache-Control: no-cache,no-store
Content-Type: text/html; charset=%s
Connection: close

79 / tcp

-1264324149 | 2025-04-12T05:59:33.687057

Siemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready
ÿû\x01ÿû\x03ÿý\x01ÿþ\x01Username:

80 / tcp

501077178 | 2025-04-03T06:53:44.716865

Hashes

hash

-1528950885

http.dom_hash

1991980804

http.html_hash

501077178

http.server_hash

1673621694

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: Tengine
Date: Thu, 03 Apr 2025 06:53:44 GMT
Content-Type: text/html
Content-Length: 215
Connection: keep-alive
Location: http://www.taobao.com/
Via: wagbridge.033045072035.ea119[web,302]

85 / tcp

-1019343788 | 2025-04-06T09:25:02.866246

W!\x00\x00\x00\x00

94 / tcp

398077695 | 2025-04-03T19:32:36.629183

95 / tcp

165188539 | 2025-03-19T06:11:11.880756

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

97 / tcp

1996932384 | 2025-03-28T00:36:52.574257

"raop" nonce

102 / tcp

-1839934832 | 2025-03-27T10:03:40.823423

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

104 / tcp

380146262 | 2025-04-04T11:08:11.051404

@RSYNCD: 30.0

110 / tcp

-2033111675 | 2025-03-28T21:06:11.437091

~djb

111 / tcp

1187188851 | 2025-04-04T02:30:26.761023

Portmap
Program	Version	Protocol	Port

113 / tcp

-669112739 | 2025-04-10T07:55:01.052467

Bÿn\x04Too many connections

119 / tcp

141730637 | 2025-04-08T23:16:57.774611

HTTP/1.0 200 OK
Server: Proxy

122 / tcp

-1099385124 | 2025-04-12T17:43:50.185368

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

135 / tcp

-875843738 | 2025-03-16T11:19:31.533743

\\x05\\x00\r\\x03\\x10\\x00\\x00\\x00\\x18\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x04\\x00\\x01\\x05\\x00\\x00\\x00\\x00\n\nServerAlive2: \n IP1: DESKTOP-QII9S59\n IP2: 192.168.2.2\n IP3: 192.168.80.1\n IP4: 172.28.112.1\n\nNTLMSSP:\nTarget_Name: DESKTOP-QII9S59\nProduct_Version: 10.0.19041 Ntlm 15\nOS: Windows 10, Version 2004/Windows Server, Version 2004\nNetBIOS_Domain_Name: DESKTOP-QII9S59\nNetBIOS_Computer_Name: DESKTOP-QII9S59\nDNS_Domain_Name: DESKTOP-QII9S59\nDNS_Computer_Name: DESKTOP-QII9S59\nSystem_Time: 2024-01-22 04:06:58 +0000 UTC\n\nDCE

143 / tcp

-382990917 | 2025-04-06T12:43:00.788574

* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE NAMESPACE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready.\r\n

175 / tcp

1911457608 | 2025-04-06T22:43:22.810762

\x00[\x00\x00\x00\x00\x00\x00

179 / tcp

-399606100 | 2025-04-09T03:55:32.533394

BGP Message\nType: 3\nMajor error Code: 6\nMinor error Code: 5\n

189 / tcp

1426971893 | 2025-03-26T04:39:00.465192

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

190 / tcp

-2118655245 | 2025-04-05T05:03:30.060630

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

195 / tcp

-1013082686 | 2025-04-12T18:45:37.689283

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

221 / tcp

-832380282 | 2025-04-07T09:55:59.657131

lpd [@Boyk]: Print-services are not available to your host (aF2qXkQ2m).\n

225 / tcp

819727972 | 2025-03-14T16:07:33.352295

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

311 / tcp

749429829 | 2025-04-09T10:09:49.789757

\xc3\xa3\r\n\r\n\\x01KvInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

443 / tcp

501077178 | 2025-04-10T11:10:10.298705

Hashes

hash

-563043210

http.dom_hash

1991980804

http.html_hash

501077178

http.robots_hash

-1022729730

http.server_hash

1673621694

http.title_hash

-1828380909

302 Found

HTTP/1.1 302 Moved Temporarily
Server: Tengine
Date: Thu, 10 Apr 2025 11:10:10 GMT
Content-Type: text/html
Content-Length: 215
Connection: keep-alive
Location: http://err.taobao.com/error1.html
Via: wagbridge.033018135124.ea119[web,302]

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:22:e7:c1:f9:9f:7d:94:5e:65:86:ae
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R3 OV TLS CA 2024
        Validity
            Not Before: Feb 18 08:32:09 2025 GMT
            Not After : Jun  7 09:06:05 2025 GMT
        Subject: C=CN, ST=ZheJiang, L=HangZhou, O=Alibaba (China) Technology Co., Ltd., CN=*.taobao.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:38:1b:84:ef:3b:f3:70:32:98:89:34:0a:7c:bd:
                    0c:cc:4a:f1:df:77:9c:ac:d2:44:0e:fd:e2:1a:6f:
                    cf:ed:22:b2:95:ee:bc:1c:ad:33:93:e5:a3:21:d8:
                    c0:ed:89:17:9e:08:a0:d2:a3:33:43:c2:98:32:50:
                    c6:b3:49:75:4f
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Basic Constraints: critical
                CA:FALSE
            Authority Information Access: 
                CA Issuers - URI:http://secure.globalsign.com/cacert/gsgccr3ovtlsca2024.crt
                OCSP - URI:http://ocsp.globalsign.com/gsgccr3ovtlsca2024
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                Policy: 1.3.6.1.4.1.4146.10.1.2
                  CPS: https://www.globalsign.com/repository/
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl.globalsign.com/gsgccr3ovtlsca2024.crl
            X509v3 Subject Alternative Name: 
                DNS:*.taobao.com, DNS:api.ent.taobao.com, DNS:click.mz.simba.taobao.com, DNS:click.tz.simba.taobao.com, DNS:gsp.mystg.taobao.com, DNS:pac.partner.taobao.com, DNS:pre-cambridge.decoration.taobao.com, DNS:pre-i.i.taobao.com, DNS:pre-showcase.display.taobao.com, DNS:pre-unszyun.api-xspace.taobao.com, DNS:s.ijipiao.trip.taobao.com, DNS:s.jipiao.trip.taobao.com, DNS:showcase.display.taobao.com, DNS:tmatch.simba2.taobao.com, DNS:trace.cps.taobao.com, DNS:ugc.pre.taobao.com, DNS:unszyun.api-xspace.taobao.com, DNS:*.110.taobao.com, DNS:*.2.taobao.com, DNS:*.3hours.taobao.com, DNS:*.admin.dataserver.taobao.com, DNS:*.admin.taobao.com, DNS:*.adminconsole.taobao.com, DNS:*.ads.taobao.com, DNS:*.advgateway.taobao.com, DNS:*.aftool.taobao.com, DNS:*.ag.taobao.com, DNS:*.ai.taobao.com, DNS:*.air-inner.taobao.com, DNS:*.airec.taobao.com, DNS:*.aistore.taobao.com, DNS:*.ajax.taobao.com, DNS:*.alibeebot.taobao.com, DNS:*.alicom.taobao.com, DNS:*.alidesign.taobao.com, DNS:*.alidetail.taobao.com, DNS:*.alihealth.taobao.com, DNS:*.alijk.taobao.com, DNS:*.alime.taobao.com, DNS:*.alimebot.taobao.com, DNS:*.alimebot.taobao.tw, DNS:*.aliqin.taobao.com, DNS:*.alisp-openadmin.taobao.com, DNS:*.alisports.taobao.com, DNS:*.alsc.taobao.com, DNS:*.alscad.taobao.com, DNS:*.amp.taobao.com, DNS:*.analysis.taobao.com, DNS:*.api.m.taobao.com, DNS:*.api.taobao.com, DNS:*.apitest.taobao.com, DNS:*.app.taobao.com, DNS:*.astore-alsc-l100crm.taobao.com, DNS:*.astore-alsc.taobao.com, DNS:*.astore-multitenant.taobao.com, DNS:*.auks.m.taobao.com, DNS:*.badcase-es-old.taobao.com, DNS:*.baichuan.taobao.com, DNS:*.baoxian.taobao.com, DNS:*.bbs.taobao.com, DNS:*.bcctg.taobao.com, DNS:*.bcfeedback.taobao.com, DNS:*.bops.taobao.tw, DNS:*.bot.taobao.com, DNS:*.brand.taobao.com, DNS:*.branding.taobao.com, DNS:*.browser.taobao.com, DNS:*.buildsite.taobao.com, DNS:*.caipiao.taobao.com, DNS:*.cbbs.taobao.com, DNS:*.cdn.taobao.com, DNS:*.china.taobao.com, DNS:*.chuangyi.taobao.com, DNS:*.click.taobao.com, DNS:*.click.taobao.tw, DNS:*.cloud.taobao.com, DNS:*.cloud.tmall.com, DNS:*.cms.m.taobao.com, DNS:*.config.taobao.com, DNS:*.console.taobao.com, DNS:*.content.taobao.com, DNS:*.corp.taobao.com, DNS:*.cps.taobao.com, DNS:*.crm-daxue.taobao.com, DNS:*.crm.taobao.com, DNS:*.cro.taobao.com, DNS:*.ct-proxy.taobao.com, DNS:*.cun.taobao.com, DNS:*.darenmcn.taobao.com, DNS:*.daxue.taobao.com, DNS:*.dc.taobao.com, DNS:*.dchain-api-proxy.taobao.com, DNS:*.dchain.taobao.com, DNS:*.dd.taobao.com, DNS:*.debug.taobao.com, DNS:*.design.taobao.com, DNS:*.detail.taobao.com, DNS:*.dev1.taobao.com, DNS:*.developers.taobao.com, DNS:*.deviceplat.taobao.com, DNS:*.di.taobao.com, DNS:*.dian.taobao.com, DNS:*.dianshi.taobao.com, DNS:*.dianxiaomi.taobao.com, DNS:*.dianying.taobao.com, DNS:*.dmp.taobao.com, DNS:*.dongfeng.taobao.com, DNS:*.ds.taobao.com, DNS:*.dsc.taobao.com, DNS:*.einvoice.taobao.com, DNS:*.elm.taobao.com, DNS:*.ershou.taobao.com, DNS:*.faasonasi.taobao.com, DNS:*.farming.taobao.com, DNS:*.fc.taobao.com, DNS:*.fengchao.taobao.com, DNS:*.fenxiao.taobao.com, DNS:*.fliggy.taobao.com, DNS:*.fngroup.taobao.com, DNS:*.fuwu.taobao.com, DNS:*.fuwuwebapp.taobao.com, DNS:*.game.taobao.com, DNS:*.gateway.simba.taobao.com, DNS:*.gds.taobao.com, DNS:*.global.i56.taobao.com, DNS:*.global.taobao.com, DNS:*.gongyi.taobao.com, DNS:*.goofishsolution.taobao.com, DNS:*.gpu.taobao.com, DNS:*.guanghe.taobao.com, DNS:*.haoxue.taobao.com, DNS:*.havana.taobao.com, DNS:*.hellobixi.taobao.com, DNS:*.hi.taobao.com, DNS:*.hjhttpgw.pay.taobao.com, DNS:*.homeai.taobao.com, DNS:*.homelab.taobao.com, DNS:*.homestyler.taobao.com, DNS:*.hot.taobao.com, DNS:*.huyan.taobao.com, DNS:*.i56.taobao.com, DNS:*.idestudio.taobao.com, DNS:*.im.taobao.com, DNS:*.image.taobao.com, DNS:*.imdd.taobao.com, DNS:*.intl.taobao.com, DNS:*.ipfans.taobao.com, DNS:*.istore.taobao.com, DNS:*.item.taobao.com, DNS:*.izhongchou.taobao.com, DNS:*.jianghu.taobao.com, DNS:*.jiangshi.taobao.com, DNS:*.ju.taobao.com, DNS:*.juadmin.taobao.com, DNS:*.julang.taobao.com, DNS:*.lazada.taobao.com, DNS:*.lbs.taobao.com, DNS:*.life.taobao.com, DNS:*.lingshou.taobao.com, DNS:*.linking-test.taobao.com, DNS:*.litetao.taobao.com, DNS:*.livec.taobao.com, DNS:*.livex.taobao.com, DNS:*.log.taobao.com, DNS:*.luban.taobao.com, DNS:*.lz.taobao.com, DNS:*.m.taobao.com, DNS:*.m1.taobao.com, DNS:*.m2.taobao.com, DNS:*.m3.taobao.com, DNS:*.ma.taobao.com, DNS:*.manager.taobao.com, DNS:*.marketingbox.taobao.com, DNS:*.mcache.taobao.com, DNS:*.media.taobao.com, DNS:*.merchant.taobao.com, DNS:*.meta-search.taobao.com, DNS:*.meteor.taobao.com, DNS:*.miaojie.taobao.com, DNS:*.microapp-dmp.taobao.com, DNS:*.miniapp.taobao.com, DNS:*.mkt.taobao.com, DNS:*.mktadapter.taobao.com, DNS:*.ml.taobao.com, DNS:*.moqie.taobao.com, DNS:*.morse.taobao.com, DNS:*.movie.taobao.com, DNS:*.mpop.taobao.com, DNS:*.mtdata.taobao.com, DNS:*.mtop.taobao.com, DNS:*.mts.taobao.com, DNS:*.need.taobao.com, DNS:*.newgateway.taobao.com, DNS:*.nextbi.taobao.com, DNS:*.now.taobao.com, DNS:*.ny.taobao.com, DNS:*.o2o.taobao.com, DNS:*.olap.taobao.com, DNS:*.olympic.taobao.com, DNS:*.onepub.taobao.com, DNS:*.onetake.taobao.com, DNS:*.online.taobao.com, DNS:*.open.taobao.com, DNS:*.operate.taobao.com, DNS:*.oto.taobao.com, DNS:*.oversea.taobao.com, DNS:*.ow.taobao.com, DNS:*.page.taobao.com, DNS:*.paimai.taobao.com, DNS:*.pan.taobao.com, DNS:*.passport.taobao.com, DNS:*.pay.taobao.com, DNS:*.pbx.taobao.com, DNS:*.pinpai.taobao.com, DNS:*.pmcrm.taobao.com, DNS:*.pmsaas.taobao.com, DNS:*.polaris.taobao.com, DNS:*.prada.taobao.com, DNS:*.pre-air-er.taobao.com, DNS:*.pre-dchain-api-proxy.taobao.com, DNS:*.pre-haoxue.taobao.com, DNS:*.pre-imdd.taobao.com, DNS:*.pre-microapp-dmp.taobao.com, DNS:*.pre-repo1-git-jae.taobao.com, DNS:*.pre-sale.taobao.com, DNS:*.pre-tcgw.taobao.com, DNS:*.pre1-sale.taobao.com, DNS:*.pre2-sale.taobao.com, DNS:*.pre3-sale.taobao.com, DNS:*.pre4-sale.taobao.com, DNS:*.prealihealth.taobao.com, DNS:*.prepub.taobao.com, DNS:*.prepub.taobao.tw, DNS:*.progress-center.taobao.com, DNS:*.proxy.taobao.com, DNS:*.publish.taobao.com, DNS:*.qc.taobao.com, DNS:*.qianniu.taobao.com, DNS:*.rate.taobao.com, DNS:*.re.taobao.com, DNS:*.robot.taobao.com, DNS:*.rta.taobao.com, DNS:*.rule.taobao.com, DNS:*.s.taobao.com, DNS:*.saas.taobao.com, DNS:*.sale.taobao.com, DNS:*.scm.taobao.com, DNS:*.search.taobao.com, DNS:*.sec.taobao.com, DNS:*.secondlife.taobao.com, DNS:*.seller.taobao.com, DNS:*.sellercenter-staging.taobao.tw, DNS:*.sellercenter.taobao.com, DNS:*.sellercenter.taobao.tw, DNS:*.service.taobao.com, DNS:*.settle.simba.taobao.com, DNS:*.settle.taobao.com, DNS:*.sh.taobao.com, DNS:*.shell.taobao.com, DNS:*.shop.taobao.com, DNS:*.shopsearch.taobao.com, DNS:*.shuyuan.taobao.com, DNS:*.simba.taobao.com, DNS:*.site.taobao.com, DNS:*.smartdata.taobao.com, DNS:*.solar.taobao.com, DNS:*.sopapi.taobao.com, DNS:*.speech.taobao.com, DNS:*.stadium.taobao.com, DNS:*.survey.taobao.com, DNS:*.sycm-ct.taobao.com, DNS:*.sycm.sycm.taobao.com, DNS:*.sycm.taobao.com, DNS:*.sz.taobao.com, DNS:*.t.taobao.com, DNS:*.tae.taobao.com, DNS:*.taobao.comunity-sign-front-static.taobao.com, DNS:*.taobao.taobao.com, DNS:*.taobao.tw, DNS:*.taobaolive.taobao.com, DNS:*.taodetail.taobao.com, DNS:*.taojinbi.taobao.com, DNS:*.taolive-cp.taobao.com, DNS:*.taopiaopiao.com, DNS:*.taoshehui.taobao.com, DNS:*.taotv.taobao.com, DNS:*.taowoyao.taobao.com, DNS:*.taoxiaopu.taobao.com, DNS:*.tcgw.taobao.com, DNS:*.tejia.taobao.com, DNS:*.temai.taobao.com, DNS:*.test.taobao.com, DNS:*.tf.taobao.com, DNS:*.tgc.taobao.com, DNS:*.themis.taobao.com, DNS:*.timesheet.taobao.com, DNS:*.tjb-sycm.taobao.com, DNS:*.tjb.taobao.com, DNS:*.tjseller.taobao.com, DNS:*.tmall.taobao.com, DNS:*.trade.tw.taobao.com, DNS:*.train.taobao.com, DNS:*.trip.taobao.com, DNS:*.try.taobao.com, DNS:*.tv.taobao.com, DNS:*.tw.taobao.com, DNS:*.txd.taobao.com, DNS:*.uland.taobao.com, DNS:*.ump.taobao.com, DNS:*.unidesk.taobao.com, DNS:*.upload.taobao.com, DNS:*.ut.taobao.com, DNS:*.uz.taobao.com, DNS:*.video.taobao.com, DNS:*.view.taobao.com, DNS:*.vip.taobao.com, DNS:*.virtual.taobao.com, DNS:*.virtualbuy.taobao.com, DNS:*.wangpu.taobao.com, DNS:*.wangwang.taobao.com, DNS:*.wangxin.taobao.com, DNS:*.wapa.taobao.com, DNS:*.wapa.taobao.tw, DNS:*.waptest.taobao.com, DNS:*.we.taobao.com, DNS:*.webappp.taobao.com, DNS:*.work.taobao.com, DNS:*.world.taobao.com, DNS:*.wow-share.taobao.com, DNS:*.ws-nextbi.taobao.com, DNS:*.wt.taobao.com, DNS:*.wuliu.taobao.com, DNS:*.ww.taobao.com, DNS:*.x-space.taobao.com, DNS:*.xconsultant-gateway.taobao.com, DNS:*.xiami.com, DNS:*.xiangqing.taobao.com, DNS:*.xp.taobao.com, DNS:*.xreplay-service.taobao.com, DNS:*.xue.taobao.com, DNS:*.yingxiao.taobao.com, DNS:*.youku.taobao.com, DNS:*.yueke.taobao.com, DNS:*.yulebao.taobao.com, DNS:*.yun.taobao.com, DNS:*.yunditan.taobao.com, DNS:*.yunos-tv.taobao.com, DNS:*.zb.taobao.com, DNS:*.zhichui.taobao.com, DNS:*.zizhanghao.taobao.com, DNS:*.zuanshi.taobao.com, DNS:taobao.cn, DNS:taobao.tw, DNS:taobao.wang, DNS:taopiaopiao.com, DNS:xiami.com, DNS:taobao.com
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Authority Key Identifier: 
                DA:D3:A8:08:48:0C:34:37:58:EE:E5:A7:75:2E:59:FC:D6:DC:3C:38
            X509v3 Subject Key Identifier: 
                94:4C:CC:8D:58:9D:84:0C:61:A9:F9:77:C1:D5:26:22:32:77:E5:F7
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Feb 18 08:32:13.760 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:0E:18:A6:57:84:98:5A:7F:57:64:F0:A8:
                                DE:F9:D7:6F:35:61:99:0D:E0:88:CD:19:93:AE:30:43:
                                86:3C:6C:67:02:21:00:DA:33:8C:71:97:11:57:75:EE:
                                97:3E:25:8B:B6:C8:A7:4F:82:FD:8E:FE:AE:78:C6:54:
                                CE:08:49:38:0F:50:EA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Feb 18 08:32:13.571 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:DB:F8:19:8E:81:9D:16:3D:05:92:99:
                                B6:08:07:22:46:3D:F1:81:73:86:4E:37:47:83:A7:E1:
                                78:3C:BD:15:A8:02:21:00:C4:F0:E0:A0:5A:6A:01:3F:
                                7B:74:DF:D1:55:3F:16:25:39:8E:3B:97:51:A8:56:1F:
                                F3:F0:D7:C0:45:62:92:00
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Feb 18 08:32:13.504 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:AE:B4:2F:23:24:1F:9C:66:BC:B0:86:
                                18:DD:BD:AB:E2:D5:49:22:AD:16:4A:24:A2:63:4C:C9:
                                5C:35:F0:C5:01:02:21:00:F2:19:1B:AC:C6:B4:9A:4F:
                                2A:28:55:75:18:5D:06:4D:94:FB:D3:17:FB:31:65:BE:
                                09:8A:38:CB:6B:C4:FF:5F
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        0d:4b:10:61:49:6c:d3:33:c3:03:58:79:09:42:4b:f6:61:ee:
        d3:0f:b2:f4:f7:47:30:aa:ad:3b:c1:67:02:b0:3c:f9:ba:fd:
        6b:f4:c8:d5:e8:b2:85:47:62:ca:20:77:8d:34:ac:f0:c9:e8:
        c7:33:66:1e:4c:ff:24:7d:b0:86:0f:66:38:81:b2:d1:b4:db:
        f8:f5:7d:09:3e:70:ea:30:25:30:37:2a:3c:6f:36:7b:ab:d1:
        9c:86:30:d7:f4:76:f8:b4:e2:77:e8:08:af:07:87:78:3d:72:
        42:59:21:2b:4e:33:b6:ed:1e:33:a5:47:f5:c8:b8:35:6f:e6:
        92:33:cb:a7:8b:54:44:3e:37:d1:1b:e7:3c:34:ba:0b:87:f2:
        d0:c7:6a:1f:50:a8:18:e8:e8:f3:d2:04:a4:3b:a1:59:90:18:
        46:7a:4a:8c:93:26:44:28:7d:75:8b:09:51:29:84:cc:89:a0:
        70:f6:91:42:7b:2f:7c:31:db:1c:60:07:07:7a:85:9c:c8:58:
        a7:16:d4:ef:da:65:be:68:02:f6:d3:6c:d4:7f:fb:af:bb:73:
        6f:00:2b:1d:f7:d2:c0:23:25:84:fa:01:55:20:38:8b:cf:67:
        82:ee:a1:c8:0c:4a:52:95:3c:8e:c6:5e:55:bf:8d:c6:48:43:
        33:c2:fc:b6

444 / tcp

2033888749 | 2025-03-28T00:25:49.937923

Content-Type: text/rude-rejection
Content-Length: 24


Access Denied, go away.
Content-Type: text/disconnect-notice
C...

448 / tcp

819727972 | 2025-04-04T10:18:52.068123

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

449 / tcp

819727972 | 2025-03-23T12:03:24.894114

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

451 / tcp

-616720387 | 2025-03-19T12:15:13.380361

SSH-2.0-SSHD_0.7.6

465 / tcp

897328069 | 2025-04-02T00:10:10.756819

220 mail.scott000.com ESMTP

487 / tcp

-1399940268 | 2025-04-01T19:56:50.495261

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

502 / tcp

504717326 | 2025-04-05T13:33:59.896313

SSH-2.0-OpenSSH_8.6

Vulnerabilities

2 3 6 1

503 / tcp

819727972 | 2025-04-10T21:57:30.688142

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

513 / tcp

1991883981 | 2025-04-11T13:04:30.505961

B\x00\x00\x00\xc3\xbfn\x04Too many connections

515 / tcp

-1969169410 | 2025-04-05T23:01:28.688082

ÿû
-> GET / HTTP/1.0
GET / HTTP/1.0
undefined symbol: GET
-> 
->

548 / tcp

155249582 | 2025-04-09T07:52:19.713895

Fast Copy: Yes\nExtended Sleep: Yes\nUUIDs: Yes\nUTF8 Server Name: Yes\nDirectory Services: Yes\nReconnect: No\nServer Notifications: Yes\nTCP/IP: Yes\nServer Signature: Yes\nServer Message: No\nPassword Saving Prohibited: No\nPassword Changing: No\nCopy File: Yes\nServer Name: NGU\nMachine Type: \rNetatalk3.1.8\nAFP Versions: AFP2.2, AFPX03, AFP3.1, AFP3.2, AFP3.3, AFP3.4\nUAMs: Cleartxt Passwrd\\x04,DHX2\t,DHCAST128\\x00\nServer Signature: 00000000008002000180030002800280

554 / tcp

902688621 | 2025-03-28T18:09:52.306298

RTSP/1.0 200 OK\r\nCSeq: 1\r\nKeep-Alive: timeout=10, max=1000\r\nPublic: DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, SET_PARAMETER, GET_PARAMETER\r\nConnection: Keep-Alive\r\n\r\n

587 / tcp

745343730 | 2025-03-29T02:38:08.904069

220 smtp.qq.com Esmtp QQ Mail Server

632 / tcp

-1399940268 | 2025-03-26T22:17:26.144907

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

636 / tcp

-1036370807 | 2025-03-27T03:32:54.029862

JDWP-Handshake

666 / tcp

1300162323 | 2025-03-22T08:44:49.703427

HTTP/1.1 404 Not Found
Content-Type: text/plain; charset=utf-8
X-Content-Type-Options: nosniff

675 / tcp

-2089734047 | 2025-04-09T12:05:32.679019

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

771 / tcp

-1626979812 | 2025-04-09T06:36:58.679971

220 Service ready for new user.

785 / tcp

1911457608 | 2025-04-04T20:54:21.155324

\x00[\x00\x00\x00\x00\x00\x00

806 / tcp

-1996280214 | 2025-03-29T15:54:59.629391

\x06\x04\x05@

811 / tcp

1726594447 | 2025-04-08T20:31:55.711628

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

832 / tcp

921225407 | 2025-03-24T07:33:48.068430

\x00\x00\x00\x04\x00\x00\x00\x00\x00

833 / tcp

921225407 | 2025-03-22T22:54:42.287731

\x00\x00\x00\x04\x00\x00\x00\x00\x00

873 / tcp

-1970692834 | 2025-04-10T12:18:15.012413

@RSYNCD: 31.0\n@RSYNCD: EXIT\n

887 / tcp

1282941221 | 2025-04-03T07:05:16.825134

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

993 / tcp

165188539 | 2025-03-25T04:08:03.566714

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

995 / tcp

-1199842642 | 2025-04-02T11:02:46.614455

+OK Welcome to RaidenMAILD POP3 SSL service v4902, Mon, 22 Jan 2024 14:24:46 +0800, (C)2001-2023 <1044592421@raidenmaild>\r\n

998 / tcp

-2089734047 | 2025-03-15T22:14:21.254616

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1023 / tcp

-154107716 | 2025-04-12T00:34:16.798356

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST ...

1027 / tcp

-445721795 | 2025-03-22T13:42:57.825161

\x00[\xc3\xaed\x1a\x7f\x00\x00

1050 / tcp

1332894250 | 2025-04-11T08:15:35.750276

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

1080 / tcp

1362344524 | 2025-03-29T08:48:12.071904

SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.7

1103 / tcp

165188539 | 2025-04-11T11:06:53.491175

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

1110 / tcp

-1231144117 | 2025-04-02T12:04:41.028069

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1702718082.913-s7zzuc

1153 / tcp

1308377066 | 2025-04-06T12:14:04.228196

ncacn_http/1.0

1177 / tcp

539065883 | 2025-04-06T08:14:58.614384

1198 / tcp

-271515508 | 2025-04-12T20:35:03.336038

HTTP/1.1 302 Moved Temporarily
Server: DrcomServer1.0
Location: http://192.168.254.3
Cache-Control: no-cache
Connection: close

1337 / tcp

474736340 | 2025-03-31T05:46:29.582570

431 Unable to negotiate secure command connection.

1344 / tcp

-2089734047 | 2025-04-10T22:47:22.801770

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

1366 / tcp

-784071826 | 2025-03-31T17:50:01.654999

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

1414 / tcp

-1248408558 | 2025-03-16T22:55:11.107305

220 MikroTik FTP server (MikroTik 6.44.3) ready

1433 / tcp

-1279739995 | 2025-04-13T01:04:20.225664

MSSQL Server\nVersion: 167773760 (0xa000640)\nSub-Build: 0\nEncryption:Not available\n\nMSSQL NTLM Info:\nTarget_Name: XINKE20190306\nProduct_Version: 6.1.7601 Ntlm 15\nOS: Windows 7, Service Pack 1/Windows Server 2008 R2, Service Pack 1\nNetBIOS_Domain_Name: XINKE20190306\nNetBIOS_Computer_Name: XINKE20190306\nDNS_Domain_Name: xinke20190306\nDNS_Computer_Name: xinke20190306\nSystem_Time: 2024-01-22 04:04:46 +0000 UTC\n\n

1456 / tcp

-2033111675 | 2025-03-29T16:08:46.112016

~djb

1515 / tcp

472902042 | 2025-04-11T13:44:09.450401

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

1521 / tcp

-541815454 | 2025-04-07T16:51:43.581691

Version:11.2.0.1.0\n"\\x00\\x00Y(DESCRIPTION=(TMP=)(VSNNUM=186646784)(ERR=1189)(ERROR_STACK=(ERROR=(CODE=1189)(EMFI=4))))

1588 / tcp

1975288991 | 2025-04-06T08:29:23.512023

OPTI

1604 / tcp

-180163620 | 2025-04-10T15:12:50.657542

NPC Telnet permit one connection.\r\n But One connection() already keep alive.\r\nGood Bye !! \r\n

1723 / tcp

1103582599 | 2025-03-22T09:23:57.814481

Firmware: 1\nHostname: Vigor\nVendor: DrayTek\n

1800 / tcp

-1810987450 | 2025-04-11T18:49:18.058666

\xc3\xbf

1801 / tcp

-1299899661 | 2025-04-04T11:07:17.397963

\\x10Z\x0b\\x00LIOR<\\x02\\x00\\x00\\xff\\xff\\xff\\xff\\x00\\x00\\x12\\x00a36a0e421af47074\\x97W\\xcd[\\x98\\xc4\\x1aJ\\xa5\xd1\xbf\\xf9\\xbd\\xc7\\xce\\xfd92d3\\x10\\x01\\x00\\x00ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZ

1883 / tcp

401555314 | 2025-03-27T12:11:25.594695

NB[GFXjA^R

1911 / tcp

-1733106930 | 2025-03-18T20:38:35.834479

Mysql Version: 5.6.50-log\nN\n5.6.50-log\x14(\nG5se"tGE\xc3\xbf\xc3\xb7-\x02\x7f\xc2\x80\x15cB^3$Zwh$wM[mysql_native_password

1926 / tcp

1189133115 | 2025-04-12T17:57:11.983969

SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8

1947 / tcp

-541569745 | 2025-04-12T18:58:47.056769

HTTP/1.1 403 Forbidden
Server: HASP LM/25.00
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=0;
X-Content-Type-Options: nosniff
Referrer-Policy: strict-origin
Content-Type: text/html
Connection: Close

1962 / tcp

1519486042 | 2025-03-25T02:22:41.729461

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

1968 / tcp

-407828767 | 2025-03-19T16:09:59.446976

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

1974 / tcp

1944032451 | 2025-03-20T11:43:46.497171

K\\x02%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

1977 / tcp

-1399940268 | 2025-03-15T18:40:02.577413

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

1984 / tcp

-42767839 | 2025-03-27T22:13:49.594709

RFB 005.000

VNC:
  Protocol Version: 5.0

1987 / tcp

1620329124 | 2025-04-07T19:37:48.775848

\r\nSiemens 2766190798 T1E1 [COMBO] Router (7-382-) v13708 Ready\r\n\xc3\xbf\xc3\xbb\x01\xc3\xbf\xc3\xbb\x03\xc3\xbf\xc3\xbd\x01\xc3\xbf\xc3\xbe\x01Username:

1990 / tcp

-903067560 | 2025-04-10T05:05:36.772882

\x00[\x13)\xc2\x81\x7f\x00\x00

2000 / tcp

819727972 | 2025-03-24T05:44:20.379250

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

2003 / tcp

-1453516345 | 2025-03-14T21:38:39.078278

HTTP/1.1 200 OK
Connection: close
Transfer-Encoding: chunked
Pragma: no-cache
Server: nginx
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN

2008 / tcp

-1316398834 | 2025-04-11T00:01:25.320456

ÿ

2054 / tcp

1911457608 | 2025-03-28T14:09:33.432165

\x00[\x00\x00\x00\x00\x00\x00

2067 / tcp

-79865617 | 2025-04-06T19:20:42.556445

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com
mit-revprops depth log-revprops partial-replay ) ) )

2069 / tcp

-345718689 | 2025-04-12T04:13:49.851412

Vty password is not set.

2081 / tcp

-1399940268 | 2025-04-09T00:07:25.865622

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2083 / tcp

1978059005 | 2025-04-11T23:19:10.589608

Sorry, that nickname format is invalid.

2087 / tcp

971933601 | 2025-03-16T00:28:23.368961

HTTP/1.0 404 Not Found
Content-Length: 0
Server: HTTPD
Connection: close
Content-Type: text/html

2096 / tcp

-1428621233 | 2025-03-24T18:22:47.866925

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

2108 / tcp

-1399940268 | 2025-04-07T02:10:03.683498

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2154 / tcp

-1316491703 | 2025-04-08T02:18:10.761706

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready

2181 / tcp

546151771 | 2025-04-05T04:05:28.329242

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC
Clients:
/*.*.*.*:11264[0](queued=0,recved=1,sent=0)

Latency min/avg/max: 0/0.0/0
Received: 8557
Sent: 11410
Connections: 1
Outstanding: 0
Zxid: 0x332907ad3391
Mode: follower
Node count: 104618

2201 / tcp

-358801646 | 2025-03-15T08:06:05.533066

SSH-2.0-OpenSSH_6.6.1

2210 / tcp

632542934 | 2025-04-01T12:13:48.449733

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

2211 / tcp

-2140303521 | 2025-03-19T14:39:52.123552

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

2222 / tcp

-1659353189 | 2025-03-23T18:09:40.954885

SSH-2.0-ssh-server\r\n\\x00\\x00\\x02\\x14\x0b\\x14\x0b\\xed\\x16\\xae\\x96\t\\xc5En\\xbd\\x1cgn\\xff\\xad\\xd7\\x00\\x00\\x00\\xbbcurve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp521,ecdh-sha2-nistp384,ecdh-sha2-nistp256,diffie-hellman-group14-sha256,diffie-hellman-gr

2233 / tcp

671605376 | 2025-04-11T02:22:25.696121

SSH-2.0-OpenSSH_X.X

2248 / tcp

677934968 | 2025-03-18T21:00:16.907416

lm^)Q

2323 / tcp

1051421500 | 2025-04-08T04:55:17.587540


H3C login: 

TELNET Negotiation:
will: Echo, Suppress Go Ahead
do: Echo, Negotiate About Window Size, Remote Flow Control

2332 / tcp

-2046514463 | 2025-03-19T22:34:28.587108

AB\x01\t

2344 / tcp

165188539 | 2025-03-27T22:10:05.431270

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

2345 / tcp

-375604792 | 2025-03-31T16:56:50.028321

220 Microsoft FTP Service

2362 / tcp

1308377066 | 2025-03-23T04:21:11.532384

ncacn_http/1.0

2376 / tcp

2087396567 | 2025-04-12T00:10:37.601228

kjnkjabhbanc283ubcsbhdc72

2404 / tcp

1077013874 | 2025-04-03T02:43:52.786224

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

2433 / tcp

1911457608 | 2025-03-24T05:56:44.495745

\x00[\x00\x00\x00\x00\x00\x00

2435 / tcp

921225407 | 2025-04-12T09:27:11.387614

\x00\x00\x00\x04\x00\x00\x00\x00\x00

2455 / tcp

-1730858130 | 2025-03-28T17:39:02.193860

RFB 003.008
VNC:
  Protocol Version: 3.8

2549 / tcp

-1399940268 | 2025-04-10T20:51:52.758583

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

2555 / tcp

1911457608 | 2025-04-08T07:15:41.223673

\x00[\x00\x00\x00\x00\x00\x00

2562 / tcp

1308377066 | 2025-04-02T13:57:10.434870

ncacn_http/1.0

2570 / tcp

1363464823 | 2025-04-06T07:35:48.978455

\x00[|ox\x7f\x00\x00

2628 / tcp

-1810987450 | 2025-04-08T01:53:23.476958

\xc3\xbf

2709 / tcp

-904840257 | 2025-03-26T07:21:45.063767

572 Relay not authorized\r\n

2761 / tcp

-1477838366 | 2025-04-04T18:19:34.100637

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4

2762 / tcp

-1699556818 | 2025-03-26T21:05:46.361776

\x01remshd: Kerberos Authentication not enabled.\n

2806 / tcp

1911457608 | 2025-04-02T19:56:01.115113

\x00[\x00\x00\x00\x00\x00\x00

3001 / tcp

-971970408 | 2025-03-19T00:09:50.518412

3005 / tcp

1265679359 | 2025-03-19T16:56:59.441507

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 2-17794250-0 0NNN RT(1705901877347 0) q(0 -1 -1 -1) r(0 -1)

3010 / tcp

-1399940268 | 2025-04-08T11:29:35.687817

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3012 / tcp

1767345577 | 2025-03-18T20:35:08.673862

Hello, this is Quagga (version 0T).
Copyright 1996-200

3017 / tcp

587250289 | 2025-04-05T19:50:31.655381

HTTP/1.1 400 Bad Request
Server: nginx/1.18.11011 (Ubuntu)
Content-Type: text/plain; charset=utf-8
Connection: close

3020 / tcp

-1375131644 | 2025-04-08T06:41:21.325748

\x00[v\xc3\xbdC\x7f\x00\x00

3042 / tcp

819727972 | 2025-04-10T23:23:22.750022

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3047 / tcp

-1114821551 | 2025-03-26T17:32:47.053432

\xc3\xa3\r\n\r\n\x00\x01\x00K\x00vInvalid protocol verification, illegal ORMI request or request performed with an incompatible version of this protocol

3052 / tcp

749590237 | 2025-03-19T12:59:05.189276

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked

3060 / tcp

0 | 2025-04-12T01:24:27.775403

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

3066 / tcp

-1399940268 | 2025-03-21T15:59:15.665268

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3081 / tcp

1911457608 | 2025-03-20T11:35:53.328937

\x00[\x00\x00\x00\x00\x00\x00

3092 / tcp

1504401647 | 2025-04-02T00:16:27.481633

:dircproxy NOTICE AUTH :Looking up your hostname...\r\n:dircproxy NOTICE AUTH :Got your hostname.\r\n

3093 / tcp

1911457608 | 2025-04-09T18:25:33.165412

\x00[\x00\x00\x00\x00\x00\x00

3097 / tcp

1011407350 | 2025-03-27T09:44:19.285908

* OK GroupWise IMAP4rev1 Server Ready\r\n

3110 / tcp

1642597142 | 2025-03-27T00:05:14.393325

\x00y\xc3\x90\x02\xc3\xbf\xc3\xbf\x00s\x12L\x00\x06\x11I\x00\x08\x00N\x11S\x00\xc3\x93

3111 / tcp

-1399940268 | 2025-04-02T03:08:00.733188

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3134 / tcp

-1428621233 | 2025-04-11T23:49:51.664563

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

3136 / tcp

1911457608 | 2025-03-22T03:49:35.502075

\x00[\x00\x00\x00\x00\x00\x00

3145 / tcp

-2107996212 | 2025-04-03T22:38:04.577756

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

3147 / tcp

1991883981 | 2025-03-26T16:43:31.481790

B\x00\x00\x00\xc3\xbfn\x04Too many connections

3152 / tcp

-1641514916 | 2025-03-20T17:21:31.067832

* OK Merak 1dFUa2 IMAP4rev1

3164 / tcp

709622286 | 2025-03-17T05:25:57.592642

OK Welcome <299685> on DirectUpdate server 7286\r\n

3165 / tcp

1911457608 | 2025-03-29T06:37:26.902477

\x00[\x00\x00\x00\x00\x00\x00

3174 / tcp

-1329831334 | 2025-04-03T18:57:27.408779

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

3194 / tcp

819727972 | 2025-03-15T12:43:16.089749

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3197 / tcp

1161309183 | 2025-03-26T21:48:03.031413

ProxyServer is ready

3256 / tcp

-971970408 | 2025-04-06T09:39:48.899546

3260 / tcp

-862070606 | 2025-04-04T04:57:28.921062

Login Response Success(0x0000)\nKey/Value Pairs\nAuthMethod=None\nTargetAlias=LIO Target\nTargetPortalGroupTag=1\n\n

3268 / tcp

-561021273 | 2025-04-05T01:03:43.995372

220 2.0.0 prod-cn-momentum2.webpowercn.local ESMTP ecelerity 4.2.1.51128 r(Core:4.2.1.5) Sun, 03 Dec 2023 10:04:37 +0800\r\n

3299 / tcp

575925250 | 2025-04-02T13:33:10.592369

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

3306 / tcp

1673132866 | 2025-04-05T15:13:55.034256

I\\x00\\x00\\x01\\xffj\\x04Host \'*.*.*.*\' is not allowed to connect to this MariaDB server

3310 / tcp

1381121983 | 2025-04-03T13:25:07.836469

Notify\r\n

3341 / tcp

-1327660293 | 2025-04-07T20:12:37.028892

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

3388 / tcp

-1399940268 | 2025-04-10T15:13:06.553987

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3389 / tcp

-2036484723 | 2025-04-04T22:28:51.604044

Remote Desktop Protocol\n\\x03\\x00\\x00\\x13\\x0e\\xd0\\x00\\x00\\x124\\x00\\x02\\x1f\\x08\\x00\\x08\\x00\\x00\\x00\n\nGuess_OS:Windows Server 2016 or 2019 or 2022\nFlag: PROTOCOL_HYBRID_EX\n

3408 / tcp

-1399940268 | 2025-03-24T08:28:43.374134

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3521 / tcp

1911457608 | 2025-03-28T03:46:51.058946

\x00[\x00\x00\x00\x00\x00\x00

3540 / tcp

599074451 | 2025-03-20T13:24:27.087369

msg

3541 / tcp

-2118655245 | 2025-03-21T17:14:32.782287

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

3557 / tcp

-1399940268 | 2025-04-11T01:28:45.688301

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

3690 / tcp

-891714208 | 2025-03-24T23:12:52.183825

( success ( 2 2 ( ) ( edit-pipeline svndiff1 absent-entries com\nmit-revprops depth log-revprops partial-replay ) ) )

3780 / tcp

-1779118422 | 2025-03-16T22:31:21.654504

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

3790 / tcp

-1648456501 | 2025-03-24T09:29:32.300126

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

3838 / tcp

677934968 | 2025-03-25T18:48:06.407374

lm^)Q

3950 / tcp

819727972 | 2025-04-06T01:21:36.618002

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

3953 / tcp

1911457608 | 2025-03-23T22:13:55.805689

\x00[\x00\x00\x00\x00\x00\x00

4000 / tcp

-1101712668 | 2025-04-01T00:29:05.443894

\\x1e\xc3\x80\\x010\\x02\xc2\xa8\xc3\xa3

4022 / tcp

1911457608 | 2025-03-14T19:55:25.830311

\x00[\x00\x00\x00\x00\x00\x00

4043 / tcp

-1399940268 | 2025-03-28T23:28:53.386153

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4063 / tcp

1911457608 | 2025-04-06T23:30:56.562077

\x00[\x00\x00\x00\x00\x00\x00

4064 / tcp

1911457608 | 2025-03-28T14:32:20.051521

\x00[\x00\x00\x00\x00\x00\x00

4072 / tcp

597764502 | 2025-04-02T04:34:15.918819

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

4100 / tcp

-1839934832 | 2025-04-03T17:00:04.039963

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

4148 / tcp

-904840257 | 2025-04-06T20:30:50.379330

572 Relay not authorized\r\n

4150 / tcp

-1327660293 | 2025-04-07T03:27:56.068504

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

4157 / tcp

819727972 | 2025-04-08T05:42:36.176950

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

4159 / tcp

-2096652808 | 2025-03-27T23:49:13.857000

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

4242 / tcp

-1879056922 | 2025-03-18T10:27:59.227560

HTTP/1.1 403 Forbidden
Server: Apache/2.4.41 (Unix) OpenSSL/1.1.1d TST PHP/7.3.11
Content-Type: text/plain; charset=utf-8
Connection: close

4282 / tcp

114471724 | 2025-04-09T10:04:34.528683

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

4321 / tcp

740837454 | 2025-04-11T05:03:51.327443

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

4369 / tcp

-1737707071 | 2025-03-27T19:48:57.038420

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

4433 / tcp

740837454 | 2025-03-18T06:19:42.519440

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

4434 / tcp

1761482307 | 2025-04-04T16:51:25.906049

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

4438 / tcp

-1399940268 | 2025-04-02T01:39:52.401270

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4443 / tcp

2140295939 | 2025-04-11T16:01:35.504220

HTTP/1.1 200 
Server: nginx
Content-Type: text/html;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache

4444 / tcp

-1428621233 | 2025-04-08T20:18:41.518936

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

4500 / tcp

408230060 | 2025-03-19T03:33:02.131609

\r\nSorry, that nickname format is invalid.\r\n

4506 / tcp

1948301213 | 2025-04-06T00:15:03.222435

RFB 003.003
VNC:
  Protocol Version: 3.3

4572 / tcp

-1399940268 | 2025-04-01T04:13:11.476716

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

4620 / tcp

-1737707071 | 2025-03-18T15:00:08.616553

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

4700 / tcp

1911457608 | 2025-04-09T21:35:46.588690

\x00[\x00\x00\x00\x00\x00\x00

4899 / tcp

740837454 | 2025-03-15T14:22:28.866670

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

4911 / tcp

1911457608 | 2025-03-27T23:08:50.595273

\x00[\x00\x00\x00\x00\x00\x00

4949 / tcp

1082732927 | 2025-03-27T07:52:55.767656

STAT pid 1660
STAT uptime 28884
STAT time 1641290377
STAT version 1.2.1
STAT pointer_size 32
STAT curr_items 14
STAT total_items 3533
STAT bytes 30524
STAT curr_connections 1
STAT total_connections 3542
STAT connection_structures 3
STAT cmd_get 3533
STAT cmd_set 3533
STAT get_hits 3519
STAT get_misses 14
STAT bytes_read 7927780
STAT bytes_written 7848552
STAT limit_maxbytes 67108864
END

5001 / tcp

-1189269828 | 2025-04-12T21:54:46.657708

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\xc2\x80\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

5006 / tcp

50497985 | 2025-03-19T01:07:05.871799

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

5007 / tcp

1911457608 | 2025-04-12T22:26:46.577460

\x00[\x00\x00\x00\x00\x00\x00

5009 / tcp

-1122307493 | 2025-04-11T18:34:03.439204

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1ed0_xz202_38367-12424

5025 / tcp

819727972 | 2025-03-21T04:34:17.834328

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5105 / tcp

-2089734047 | 2025-03-31T17:54:23.474620

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5119 / tcp

1911457608 | 2025-03-18T16:09:32.127425

\x00[\x00\x00\x00\x00\x00\x00

5122 / tcp

-249504111 | 2025-03-27T01:05:09.286790

\x00[xU-\x7f\x00\x00

5172 / tcp

2087396567 | 2025-03-25T14:15:28.059656

kjnkjabhbanc283ubcsbhdc72

5222 / tcp

119860953 | 2025-04-02T01:40:30.675895

* OK ArGoSoft Mail Server IMAP Module v.YW at

5234 / tcp

1911457608 | 2025-04-01T00:02:09.793758

\x00[\x00\x00\x00\x00\x00\x00

5235 / tcp

-1399940268 | 2025-04-12T01:14:38.260360

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5241 / tcp

-375604792 | 2025-04-08T15:15:59.526347

220 Microsoft FTP Service

5246 / tcp

-1399940268 | 2025-04-04T00:22:35.109949

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5256 / tcp

-2089734047 | 2025-04-09T23:45:02.795181

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

5261 / tcp

-1399940268 | 2025-04-08T22:11:08.355646

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5269 / tcp

1359734371 | 2025-04-10T18:01:21.480539

HTTP/1.1 400 Bad Request
Server: CWAP-waf
Content-Type: text/html
Connection: close
WZWS-RAY: 1249-1705938451.076-w-waf01tjgt

5272 / tcp

819727972 | 2025-04-03T23:38:52.959631

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5274 / tcp

-1045760528 | 2025-04-12T00:52:47.564868

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

5351 / tcp

-1399940268 | 2025-03-14T13:57:56.774741

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5435 / tcp

-1327660293 | 2025-03-20T18:31:40.277296

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

5443 / tcp

-1399940268 | 2025-03-17T20:34:48.442877

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5456 / tcp

1077013874 | 2025-04-06T09:35:12.187734

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

5494 / tcp

-407828767 | 2025-04-09T21:12:16.350852

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

5495 / tcp

1615193817 | 2025-03-22T03:29:32.670563

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

5556 / tcp

-1248408558 | 2025-04-06T09:23:21.449154

220 MikroTik FTP server (MikroTik 6.44.3) ready

5569 / tcp

-1476017887 | 2025-04-09T16:03:30.476794

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

5594 / tcp

-1399940268 | 2025-04-01T07:50:39.922797

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5605 / tcp

-1297953727 | 2025-03-25T11:55:43.804480

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

5608 / tcp

-441419608 | 2025-03-28T18:23:56.414060

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

5672 / tcp

575925250 | 2025-04-03T17:17:10.093104

AMQP:\ncluster_name:rabbit@rabbitmq-0.rabbitmq-headless.rabbitmq.svc.cluster.local\ncopyright:Copyright (c) 2007-2021 VMware, Inc. or its affiliates.\ninformation:Licensed under the MPL 2.0. Website: https://rabbitmq.com\nplatform:Erlang/OTP 24.1\nproduct:RabbitMQ\nversion:3.9.7\nCapabilities:\npublisher_confirms:true\nexchange_exchange_bindings:true\nbasic.nack:true\nconsumer_cancel_notify:true\nconnection.blocked:true\nconsumer_priorities:true\nauthentication_failure_close:true\nper_consumer_qos:true\ndirect_reply_to:tru

5721 / tcp

1911457608 | 2025-04-04T07:38:42.536091

\x00[\x00\x00\x00\x00\x00\x00

5858 / tcp

819727972 | 2025-04-03T12:25:51.785629

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5910 / tcp

-916278850 | 2025-04-05T10:25:49.832566

HTTP/1.1 302 Moved Temporarily
Server: nginx
Content-Type: text/html
Connection: keep-alive
Location: https://60.169.174.64:5910/webclient

5912 / tcp

921225407 | 2025-03-19T07:34:51.036618

\x00\x00\x00\x04\x00\x00\x00\x00\x00

5918 / tcp

-1399940268 | 2025-04-04T09:05:48.541183

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

5920 / tcp

819727972 | 2025-03-16T08:16:25.048913

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5938 / tcp

819727972 | 2025-03-15T06:28:24.272323

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

5984 / tcp

1999272906 | 2025-04-04T22:53:55.481382

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

5986 / tcp

1636811864 | 2025-03-31T20:42:00.107864

5998 / tcp

1831389527 | 2025-03-25T02:19:54.055520

HTTP/1.1 302 Moved Temporarily
Server: 
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
Location: /login.html?name_jpgraph_antispam=244041082
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html

5999 / tcp

1911457608 | 2025-04-02T16:18:20.183190

\x00[\x00\x00\x00\x00\x00\x00

6000 / tcp

-1045760528 | 2025-04-03T20:48:22.465869

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

6001 / tcp

-1399940268 | 2025-03-26T03:01:56.143336

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6002 / tcp

-339084706 | 2025-04-05T11:58:25.626697

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

6005 / tcp

1492413928 | 2025-04-05T01:03:36.553562

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

6061 / tcp

-1888448627 | 2025-03-22T09:39:08.521114

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

6100 / tcp

-1763998376 | 2025-04-11T03:07:38.169647

\\x00\\x00\\x00\\x02\\x00\\x00\\x00\\x00

6308 / tcp

-1795027372 | 2025-04-03T01:41:15.090190

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

6380 / tcp

321971019 | 2025-04-06T14:43:29.265256

-ERR client ip is not in whitelist\r

6500 / tcp

-1779118422 | 2025-04-06T05:06:43.789645

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

6503 / tcp

-1399940268 | 2025-03-31T06:08:39.061411

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6505 / tcp

-992671574 | 2025-03-19T00:02:44.919573

@RSYNCD: 26

6510 / tcp

1631614226 | 2025-03-29T01:17:59.072048

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 14-150390958-0 0NNN RT(1700879691877 7) q(0 -1 -1 -1) r(0 -1)

6513 / tcp

-2089734047 | 2025-04-10T20:45:32.934020

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

6556 / tcp

-1097188123 | 2025-04-01T13:26:33.055856

[g\xc2\x95N\x7f

6601 / tcp

-1373613804 | 2025-03-19T17:19:34.945447

00970795:d7:smethod,6:shello,8:soptions,80:d10:shttp_port,368696:i1082,5:sname,5:sL_x,10:ssync_port,5:i00469,10:stimestamp,3190459:f920.7251553166,8:sversion,6262522:sl4X,

6602 / tcp

-1230049476 | 2025-03-25T21:34:26.061817

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

6633 / tcp

-339084706 | 2025-04-10T17:55:25.824994

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

6653 / tcp

597764502 | 2025-04-10T02:17:24.568310

\x00[\xc2\x86\xc2\x9f\xc3\x9d\x7f\x00\x00

6664 / tcp

0 | 2025-03-14T16:22:27.313619

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

6666 / tcp

4935895 | 2025-04-02T02:03:41.850893

HTTP/1.1 400 Bad Request
Server: CloudWAF

6667 / tcp

-971970408 | 2025-04-07T00:49:29.702501

6668 / tcp

2063598737 | 2025-04-07T09:01:46.293346

/0 0 L\r\n/0 0 HUH\r\n

6699 / tcp

2022011474 | 2025-03-19T07:05:57.692935

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
WZWS-RAY: 1249-1705941985.55-w-waf06yzm

6755 / tcp

165188539 | 2025-04-10T10:44:59.221874

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

6779 / tcp

1770729856 | 2025-04-05T11:31:45.234939

HTTP/1.1 200 OK
Server: thttpd/2.24 26oct2003
Content-Type: text/html; charset=iso-8859-1
Accept-Ranges: bytes
Connection: close

6799 / tcp

-1399940268 | 2025-04-06T01:34:23.109935

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

6887 / tcp

-2089734047 | 2025-03-19T01:57:46.541132

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

7001 / tcp

-274925451 | 2025-04-06T11:08:23.447870

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae2914_PSzqstdxnz35_3380-26211

7003 / tcp

-2031152423 | 2025-03-18T21:45:17.359164

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

7025 / tcp

-2089734047 | 2025-04-02T20:06:09.733881

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

7071 / tcp

1852418385 | 2025-03-25T09:23:22.169821

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

7170 / tcp

-653033013 | 2025-04-09T14:28:58.384275

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

7171 / tcp

1213931722 | 2025-04-09T16:31:22.081041

ICAP/1.0 501 Other\r\nServer: Traffic Spicer 7788179225\r\n

7272 / tcp

1911457608 | 2025-04-02T17:16:30.537748

\x00[\x00\x00\x00\x00\x00\x00

7325 / tcp

-1399940268 | 2025-04-11T11:15:40.047975

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7331 / tcp

1308377066 | 2025-03-21T02:02:11.154694

ncacn_http/1.0

7373 / tcp

-2031152423 | 2025-03-14T17:54:13.034230

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

7434 / tcp

-345718689 | 2025-04-04T08:30:33.461442

Vty password is not set.

7443 / tcp

-1006110807 | 2025-04-03T05:00:53.607777

HTTP/1.1 403 Forbidden
Server: openresty
Content-Type: text/html
Connection: keep-alive
via: CHN-GDdongguan-GLOBAL1-CACHE20[3]
X-CCDN-ERRCODE-SRC: 01
X-CCDN-FORBID-CODE: 040001

7445 / tcp

-1399940268 | 2025-04-04T09:17:53.383750

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

7493 / tcp

165188539 | 2025-04-03T09:38:57.134540

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

7548 / tcp

-1441741890 | 2025-03-22T08:45:06.393104

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2
0181212])

7634 / tcp

-358801646 | 2025-04-08T19:19:35.467525

SSH-2.0-OpenSSH_6.6.1

7654 / tcp

1911457608 | 2025-04-12T17:44:52.371546

\x00[\x00\x00\x00\x00\x00\x00

7775 / tcp

819727972 | 2025-03-23T01:27:08.216955

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

7777 / tcp

1391945995 | 2025-03-15T08:03:03.207625

HTTP/1.1 403 Forbidden 
Content-Type: text/plain; charset=utf-8
Proxy-Authenticate: Basic realm=""

7989 / tcp

-2118655245 | 2025-03-27T20:26:29.967140

Hashes

hash

1015654041

http.dom_hash

-2006505642

http.html_hash

-2118655245

HTTP/1.0 500 Internal Server Error
Content-Length: 20

8001 / tcp

2103111368 | 2025-03-16T18:05:39.545080

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

8009 / tcp

1911457608 | 2025-03-31T13:49:34.972074

\x00[\x00\x00\x00\x00\x00\x00

8014 / tcp

921225407 | 2025-04-12T16:41:01.682499

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8026 / tcp

-2107996212 | 2025-03-29T02:25:59.757517

HTTP/1.0 200 OK
Server: Proxy

Unauthorized ...

IP Address:

8037 / tcp

819727972 | 2025-04-08T15:47:23.849928

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8050 / tcp

1911457608 | 2025-04-03T05:21:24.730966

\x00[\x00\x00\x00\x00\x00\x00

8057 / tcp

819727972 | 2025-04-04T12:46:30.786371

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8059 / tcp

321971019 | 2025-04-05T09:35:25.828652

-ERR client ip is not in whitelist\r

8062 / tcp

-375604792 | 2025-03-27T16:56:36.728472

220 Microsoft FTP Service

8076 / tcp

1308377066 | 2025-04-05T11:40:42.787104

ncacn_http/1.0

8081 / tcp

1852418385 | 2025-03-19T17:09:19.781413

RTSP/1.0 453 Not Enough Bandwidth
Server: AirTunes/7l_wZ

8083 / tcp

2087396567 | 2025-03-15T08:51:22.563838

kjnkjabhbanc283ubcsbhdc72

8085 / tcp

1741579575 | 2025-03-19T06:21:11.379298

8087 / tcp

-1730858130 | 2025-04-12T15:58:42.776854

RFB 003.008
VNC:
  Protocol Version: 3.8

8089 / tcp

-1730858130 | 2025-04-03T00:22:28.214718

RFB 003.008
VNC:
  Protocol Version: 3.8

8099 / tcp

-749939074 | 2025-04-08T14:06:29.246983

HTTP/1.1 200 
Cache-Control: private
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Access-Control-Allow-Origin: http://localhost:8009
Access-Control-Allow-Methods: *
Access-Control-Max-Age: 0
Access-Control-Allow-Credentials: true
XDomainRequestAllowed: 1
Access-Control-Allow-Headers: Authorization,Origin, X-Requested-With, Content-Type, Accept,Access-Token
Content-Type: text/html;charset=UTF-8
Content-Language: en-US
Transfer-Encoding: chunked

8100 / tcp

-1399940268 | 2025-03-23T06:01:52.694050

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8103 / tcp

921225407 | 2025-03-18T19:03:30.248840

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8108 / tcp

-2089734047 | 2025-04-03T21:07:19.528199

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8119 / tcp

-1399940268 | 2025-04-04T05:45:10.611116

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8120 / tcp

-2046514463 | 2025-03-18T09:54:10.279765

AB\x01\t

8126 / tcp

-546659243 | 2025-04-06T19:46:20.370865

ôInternal Server ErrorAB

8134 / tcp

-653033013 | 2025-03-25T13:04:15.514923

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

8139 / tcp

841014058 | 2025-03-25T18:05:07.700639

Hello, this is FRRouting (version 4.0).

Copyright 19
96-2005 Kunihiro Ishiguro, et al.




Use...

8140 / tcp

-1839934832 | 2025-03-14T19:44:39.826413

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

8146 / tcp

-1730858130 | 2025-03-23T12:43:43.490145

RFB 003.008
VNC:
  Protocol Version: 3.8

8150 / tcp

-1399940268 | 2025-04-11T16:35:55.838043

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8156 / tcp

-1399940268 | 2025-04-13T00:13:57.870953

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8157 / tcp

-1279886438 | 2025-03-23T04:22:13.696151

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

8169 / tcp

1911457608 | 2025-04-10T21:12:45.618582

\x00[\x00\x00\x00\x00\x00\x00

8172 / tcp

-1327660293 | 2025-03-22T18:59:54.909352

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

8193 / tcp

-339084706 | 2025-04-07T09:48:07.534922

200 ArGoSoft News Server for WinNT/2000/XP v 59869648 ready\r\n

8200 / tcp

1320285193 | 2025-04-01T16:45:22.625436

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: keep-alive

8222 / tcp

1539879210 | 2025-04-02T23:26:07.907969

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae123f_zhoudianxin106_25963-47806

8291 / tcp

669849225 | 2025-03-28T15:40:35.842061

SSH-98.60-SysaxSSH_81885..42\r\n

8300 / tcp

-734440417 | 2025-03-23T16:18:44.870583

HTTP/1.1 400 Bad Request
Content-Type: text/html
Connection: close
Server: nginx/1.17.3

8318 / tcp

-1428621233 | 2025-04-10T16:11:51.388953

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

8333 / tcp

1096654864 | 2025-04-01T04:24:06.113938

HTTP/1.0 200 OK
Server: httpd/2.0
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
Content-Type: text/html
Connection: close

8383 / tcp

-1885823772 | 2025-03-27T18:22:08.686125

HTTP/1.1 403 Forbidden
Server: Tengine
Content-Type: text/html
Connection: keep-alive

8384 / tcp

-971970408 | 2025-03-27T23:34:13.006725

8401 / tcp

1911457608 | 2025-03-31T14:11:41.981554

\x00[\x00\x00\x00\x00\x00\x00

8403 / tcp

2063598737 | 2025-04-09T02:44:18.992639

/0 0 L\r\n/0 0 HUH\r\n

8417 / tcp

-1641514916 | 2025-04-12T09:24:32.276429

* OK Merak 1dFUa2 IMAP4rev1

8423 / tcp

-1399940268 | 2025-03-25T12:06:28.626676

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8430 / tcp

-1329831334 | 2025-04-07T07:07:33.826547

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

8436 / tcp

-2089734047 | 2025-04-08T10:26:35.396897

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8445 / tcp

-1737707071 | 2025-03-31T07:59:11.833924

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

8454 / tcp

-1279886438 | 2025-04-11T09:42:46.480709

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

8488 / tcp

-1435414831 | 2025-03-26T17:50:59.447461

roku: ready\r\n

8500 / tcp

-1455149952 | 2025-03-29T14:49:53.202085

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae1e27_PS-000-01sNY99_31294-28028

8502 / tcp

1911457608 | 2025-03-17T18:05:01.110052

\x00[\x00\x00\x00\x00\x00\x00

8504 / tcp

-1810987450 | 2025-03-20T12:55:57.036783

\xc3\xbf

8525 / tcp

1911457608 | 2025-03-29T02:05:43.434803

\x00[\x00\x00\x00\x00\x00\x00

8540 / tcp

819727972 | 2025-03-27T14:00:13.895114

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8545 / tcp

-1729629024 | 2025-03-29T17:28:35.649807

101 imqbroker =unV

8548 / tcp

-1399940268 | 2025-03-18T06:32:01.528991

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8554 / tcp

201984321 | 2025-04-03T02:54:08.785000

ÿû
Welcome to NetLinx v94 Copyright AMX Corp. 34395-49007
>

8562 / tcp

-1899074860 | 2025-04-02T13:58:21.523293

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00\x00\x00\n03\x00\x00\x00d\x00\x04\x00\x01\x00\x00\x00\x00\x04\x08\x00\x00\x00\n

8563 / tcp

-784071826 | 2025-03-25T21:56:55.346096

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

8564 / tcp

-1139539254 | 2025-03-28T16:39:45.076177

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

8575 / tcp

-1538260461 | 2025-04-01T21:01:52.150135

\x01\x00\x00\x00

8578 / tcp

1911457608 | 2025-03-22T10:01:01.090420

\x00[\x00\x00\x00\x00\x00\x00

8580 / tcp

165188539 | 2025-04-05T16:44:02.902332

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8583 / tcp

-2089734047 | 2025-03-22T16:49:11.191692

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8585 / tcp

-1032713145 | 2025-04-04T05:27:17.469609

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8586 / tcp

165188539 | 2025-03-28T17:43:04.047814

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

8595 / tcp

-2089734047 | 2025-04-05T17:59:59.532493

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

8598 / tcp

-1795027372 | 2025-04-09T12:18:44.735876

\xc3\xbf\xc3\xbd"\r\nLinuxNode v06953 (ggfks)\r\n\r\nlogin:

8606 / tcp

-1032713145 | 2025-03-25T00:36:35.195971

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

8649 / tcp

1489954473 | 2025-03-26T00:47:57.724859

HTTP/1.1 410 Gone
Server: openresty
Transfer-Encoding: chunked
Connection: keep-alive
Via: 1.1 google

8724 / tcp

819727972 | 2025-03-16T01:39:18.244852

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8728 / tcp

-1399940268 | 2025-04-08T11:14:52.566686

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8764 / tcp

1077013874 | 2025-03-23T11:09:01.741642

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

8789 / tcp

921225407 | 2025-03-31T10:07:15.572865

\x00\x00\x00\x04\x00\x00\x00\x00\x00

8801 / tcp

1911457608 | 2025-04-11T17:26:49.617569

\x00[\x00\x00\x00\x00\x00\x00

8805 / tcp

-784071826 | 2025-04-01T03:31:10.421724

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

8806 / tcp

1624217396 | 2025-04-11T01:17:26.839883

HELO:10.3.6.0.false\nAS:2048\nHL:19

8813 / tcp

-616720387 | 2025-04-10T03:42:56.180007

SSH-2.0-SSHD_0.7.6

8819 / tcp

-1399940268 | 2025-03-17T08:04:01.441784

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8834 / tcp

1741579575 | 2025-03-15T04:37:41.700715

8836 / tcp

-1399940268 | 2025-03-17T10:45:47.577507

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

8843 / tcp

819727972 | 2025-04-10T18:16:48.141862

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

8855 / tcp

1761482307 | 2025-04-05T00:01:03.261771

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

8875 / tcp

1332894250 | 2025-04-05T21:05:24.687917

\xc3\xbf\xc3\xbb\x01SOYO_SIP VBNQyQSKc settings\r\nPassword:

8880 / tcp

-971970408 | 2025-03-22T01:21:25.893020

8881 / tcp

-653033013 | 2025-03-22T22:44:20.300650

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

8883 / tcp

-1099385124 | 2025-04-04T03:03:51.185496

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

8885 / tcp

-1105333987 | 2025-03-24T16:35:19.598300

\x00[KpU\x7f\x00\x00

8899 / tcp

372433470 | 2025-03-29T11:50:45.625899

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: Basic realm=""

8901 / tcp

-297128567 | 2025-04-11T14:59:41.084973

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

8908 / tcp

-1476017887 | 2025-04-04T11:15:38.769490

N\x00\x00\x00\n5.6.40-log\x00\xc3\x85\x00\x00\x00TUNEgVX2\x00\x0c\n\xc2\xa2!\x02\x00\x08\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xlB...\n

8913 / tcp

1381121983 | 2025-03-25T06:38:13.224040

Notify\r\n

9000 / tcp

-1795676121 | 2025-04-01T16:13:27.466524

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65aded01_PS-000-01XB730_6341-708

9001 / tcp

-1026951088 | 2025-03-22T07:03:30.395276

erro ip

9002 / tcp

1278527606 | 2025-03-26T22:05:10.897212

SSH-2.0-Teleport

9008 / tcp

-1428621233 | 2025-04-02T10:57:27.277267

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

9013 / tcp

-1399940268 | 2025-04-10T08:53:37.290679

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9014 / tcp

-1888448627 | 2025-03-18T08:49:24.859040

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9015 / tcp

1282941221 | 2025-03-23T06:19:30.679611

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

9027 / tcp

1308377066 | 2025-03-18T03:50:06.491091

ncacn_http/1.0

9031 / tcp

-1399940268 | 2025-04-11T15:27:29.733826

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9032 / tcp

1911457608 | 2025-04-04T14:51:39.353233

\x00[\x00\x00\x00\x00\x00\x00

9036 / tcp

-1327660293 | 2025-03-31T19:14:10.163101

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

9037 / tcp

-1399940268 | 2025-03-27T07:00:00.556398

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9039 / tcp

-1399940268 | 2025-04-05T05:53:10.582310

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9042 / tcp

-21576419 | 2025-04-05T10:24:04.983412


ÿûUDo you want ANSI color? (Y/n)

9044 / tcp

-1399940268 | 2025-04-02T16:28:26.006864

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9047 / tcp

1282941221 | 2025-04-05T19:14:19.390562

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

9051 / tcp

2087396567 | 2025-04-12T13:02:25.849474

kjnkjabhbanc283ubcsbhdc72

9055 / tcp

321971019 | 2025-04-01T00:27:21.076403

-ERR client ip is not in whitelist\r

9058 / tcp

-2089734047 | 2025-03-16T12:12:50.657237

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9059 / tcp

1308377066 | 2025-03-22T19:25:18.972621

ncacn_http/1.0

9066 / tcp

-2089734047 | 2025-04-02T15:13:59.819714

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9087 / tcp

-2089734047 | 2025-03-26T09:20:16.034328

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9091 / tcp

1261582754 | 2025-03-20T07:15:48.553549

unknown command 
unknown command

9094 / tcp

-1888448627 | 2025-04-01T07:08:46.262348

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

9095 / tcp

-358801646 | 2025-03-27T05:19:42.152441

SSH-2.0-OpenSSH_6.6.1

9100 / tcp

-1399940268 | 2025-03-21T11:21:56.836850

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9106 / tcp

-1399940268 | 2025-03-15T20:14:15.113249

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9121 / tcp

455076604 | 2025-04-10T21:57:36.652935

!\x07version\x04bind7 t{RPowerDNS Recursor 410

9138 / tcp

819727972 | 2025-03-25T15:54:10.216483

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9140 / tcp

-1399940268 | 2025-03-27T16:56:55.525996

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9142 / tcp

114471724 | 2025-03-18T17:59:27.639389

HTTP/1.1 302
X-Frame-Options: SAMEORIGIN
Server: NSX

9144 / tcp

-1399940268 | 2025-03-25T05:12:59.771594

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9146 / tcp

-2089734047 | 2025-03-25T02:58:55.634630

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9152 / tcp

-136006866 | 2025-03-17T15:18:06.352742

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

9153 / tcp

-2089734047 | 2025-04-05T21:40:31.223553

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9156 / tcp

-1230049476 | 2025-03-18T23:07:53.083422

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

9160 / tcp

-288825733 | 2025-04-12T21:26:59.159217

HTTP/1.1 200 OK
Connection: close
Content-Length: 2619
Accept-Ranges: bytes
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: authorization,Content-Type
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, HEAD, DELETE
Content-Type: text/html
Server: Jetty(9.4.14.v20181114)
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1

9178 / tcp

1911457608 | 2025-04-02T04:26:01.266528

\x00[\x00\x00\x00\x00\x00\x00

9179 / tcp

-1230049476 | 2025-04-07T12:44:00.705998

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

9182 / tcp

-1399940268 | 2025-04-09T05:30:55.541020

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9189 / tcp

819727972 | 2025-03-21T12:34:17.744338

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9200 / tcp

-1163346640 | 2025-03-31T11:45:06.711573

Hashes

hash

-997913363

http.dom_hash

-2006505642

http.html_hash

-1163346640

HTTP/1.1 200 OK
content-type: application/json; charset=UTF-8
content-length: 215

9216 / tcp

-1375131644 | 2025-03-23T21:55:29.309336

\x00[v\xc3\xbdC\x7f\x00\x00

9250 / tcp

-1013082686 | 2025-03-26T06:00:09.978784

HTTP/1.1 408 Request Timeout
Content-Length: 0
Co
ntent-Type: text/plain

9292 / tcp

-1399940268 | 2025-04-06T23:39:26.171028

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

9307 / tcp

669849225 | 2025-03-22T20:37:36.652974

SSH-98.60-SysaxSSH_81885..42\r\n

9333 / tcp

-136006866 | 2025-03-17T18:32:44.425551

STAT pid 1660\nSTAT uptime 28884\nSTAT time 1641290377\nSTAT version 1.2.1\nSTAT pointer_size 32\nSTAT curr_items 14\nSTAT total_items 3533\nSTAT bytes 30524\nSTAT curr_connections 1\nSTAT total_connections 3542\nSTAT connection_structures 3\nSTAT cmd_get 3533\nSTAT cmd_set 3533\nSTAT get_hits 3519\nSTAT get_misses 14\nSTAT bytes_read 7927780\nSTAT bytes_written 7848552\nSTAT limit_maxbytes 67108864\nEND

9383 / tcp

819727972 | 2025-04-04T17:24:24.505302

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

9398 / tcp

-1839934832 | 2025-03-20T21:49:32.377760

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

9418 / tcp

1909672637 | 2025-03-15T00:16:56.067716

HTTP/1.1 400 Bad Request
Content-Type: text/plain; charset=utf-8
Sec-Websocket-Version: 13
X-Content-Type-Options: nosniff

9446 / tcp

-1097188123 | 2025-04-11T16:02:24.594532

[g\xc2\x95N\x7f

9447 / tcp

820958131 | 2025-03-22T20:27:40.785667

kjnkjabhbanc283ubcsbhdc72\x02

9455 / tcp

-1626979812 | 2025-03-19T14:35:11.076098

220 Service ready for new user.

9500 / tcp

-1991224470 | 2025-03-21T11:24:35.086348

\\x00\\x00\\x00\\x01\\x00\\x00\\x00\\x14TP/1.1\r\n\\x00\\x00\\x00\\x00&

9501 / tcp

921225407 | 2025-03-18T06:19:47.392632

\x00\x00\x00\x04\x00\x00\x00\x00\x00

9550 / tcp

-2089734047 | 2025-03-23T21:28:19.303039

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9633 / tcp

-438503381 | 2025-04-10T20:55:30.105221

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

9690 / tcp

1126993057 | 2025-04-12T14:20:08.027523

* OK [CAPABILITY a2,M\\] nBwXk2pPP IMAP4rev1 20qx at

9700 / tcp

1767345577 | 2025-04-13T01:01:39.249489

Hello, this is Quagga (version 0T).
Copyright 1996-200

9710 / tcp

-274082663 | 2025-03-19T01:29:00.922152

\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01

9754 / tcp

1426971893 | 2025-03-15T06:44:32.753427

\x00[s\xc3\x85\xc3\x93\x7f\x00\x00

9761 / tcp

740837454 | 2025-03-31T09:23:38.015623

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

9802 / tcp

-585940771 | 2025-03-15T20:03:02.854300

Unknown command\r\n

9876 / tcp

2070013657 | 2025-03-20T20:38:47.525999

\\x00\\x00\\x01+\\x00\\x00\\x00_{"code":0,"flag":1,"language":"JAVA","opaque":0,"serializeTypeCurrentRPC":"JSON","version":433}{"brokerAddrTable":{"broker-a":{"brokerAddrs":{0:"127.63.135.245:10911"},"brokerName":"broker-a","cluster":"DefaultCluster","enableActingMaster":false}},"clusterAddrTable":{"DefaultCluster":["broker-a"]}}

9888 / tcp

-2089734047 | 2025-04-01T11:14:15.195546

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

9898 / tcp

1304012963 | 2025-04-07T00:06:26.775438

HTTP/1.1 404 Not Found
Server: CloudWAF
Content-Type: text/html
Connection: close

9916 / tcp

455076604 | 2025-03-31T16:06:45.127985

!\x07version\x04bind7 t{RPowerDNS Recursor 410

9943 / tcp

1833368189 | 2025-04-08T18:53:33.429765

HTTP/1.1 400 Bad Request
Server: nginx
Content-Type: text/html
Connection: close
x-ws-request-id: 65ae18b9_dong118_31397-16667

9944 / tcp

-1810987450 | 2025-03-18T06:30:07.573506

\xc3\xbf

9955 / tcp

1911457608 | 2025-04-08T11:06:14.042017

\x00[\x00\x00\x00\x00\x00\x00

9991 / tcp

1396488228 | 2025-04-12T23:28:35.605307

HTTP/1.1 200 OK
Content-Length: 2037
Cache-Control: private, max-age=300
Content-Type: text/html

9999 / tcp

1161309183 | 2025-03-26T16:26:03.755959

ProxyServer is ready

10000 / tcp

-345718689 | 2025-04-02T23:21:04.016402

Vty password is not set.

10002 / tcp

1911457608 | 2025-04-10T04:02:43.344536

\x00[\x00\x00\x00\x00\x00\x00

10004 / tcp

-1986594217 | 2025-03-20T11:53:20.397383

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

10005 / tcp

-1986594217 | 2025-03-24T08:15:10.723682

"AP0F1D85"\r\nConnection: close\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD>\n<BODY BGCOLOR

10006 / tcp

-1399940268 | 2025-03-14T16:04:36.892310

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10013 / tcp

-2089734047 | 2025-04-12T11:04:08.326374

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10051 / tcp

-1681927087 | 2025-03-14T16:08:06.449069

kjnkjabhbanc283ubcsbhdc72

10086 / tcp

819727972 | 2025-03-24T05:59:01.641116

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

10090 / tcp

-1399940268 | 2025-03-28T13:39:39.464360

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10134 / tcp

-1399940268 | 2025-04-06T15:04:52.472002

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

10180 / tcp

698877129 | 2025-03-24T03:59:10.170900

\\x00[\'\\xc4\\xc0\\xa8X\\xfd

10209 / tcp

1830697416 | 2025-03-20T23:27:16.113418

HTTP/1.0 200 OK
Cache-Control: must-revalidate
Content-Length: 243
Content-Type: application/json
Server: CouchDB/3.2.0 (Erlang OTP/20)
X-Cloudant-Action: cloudantnosqldb.account-meta-info.read
X-Couch-Request-ID: a2da79eef6
X-Content-Type-Options: nosniff
X-Cloudant-Request-Class: unlimited
X-Cloudant-Backend: bm-cc-uk-01
Via: 1.0 lb1.bm-cc-uk-01 (Glum/1.101.1)

10250 / tcp

2087396567 | 2025-04-12T12:52:31.190310

kjnkjabhbanc283ubcsbhdc72

10283 / tcp

-2089734047 | 2025-04-06T21:15:59.399636

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

10445 / tcp

1134517380 | 2025-04-11T14:40:00.251125

welcome to Pandora console!\r\n----------------------------\n-------------------------\n|     Login Time     |     2021-12-08 1...\n

10554 / tcp

-1779118422 | 2025-03-29T08:24:57.975392

\x00[\xc2\xae\xc2\x8d{\x7f\x00\x00

10935 / tcp

-1105333987 | 2025-04-12T13:45:39.552315

\x00[KpU\x7f\x00\x00

11112 / tcp

-1888448627 | 2025-04-02T10:52:38.151839

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

11288 / tcp

-1399940268 | 2025-03-29T09:46:37.470744

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

11300 / tcp

-1327660293 | 2025-04-09T04:50:04.450503

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

11681 / tcp

819727972 | 2025-04-02T23:56:15.365946

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12082 / tcp

1911457608 | 2025-03-21T19:42:35.195177

\x00[\x00\x00\x00\x00\x00\x00

12130 / tcp

-2031152423 | 2025-03-22T23:22:38.410300

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

12135 / tcp

819727972 | 2025-03-29T19:47:09.799739

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12137 / tcp

819727972 | 2025-03-31T06:20:07.813486

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12142 / tcp

165188539 | 2025-04-06T21:05:37.574881

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12157 / tcp

-2046514463 | 2025-04-04T21:48:24.490708

AB\x01\t

12158 / tcp

-1839934832 | 2025-03-19T21:38:17.645801

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12170 / tcp

-2096652808 | 2025-03-27T17:13:23.785385

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12176 / tcp

-2089734047 | 2025-04-03T23:56:13.296638

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12181 / tcp

-345718689 | 2025-03-17T12:21:14.520698

Vty password is not set.

12185 / tcp

-122096153 | 2025-04-05T17:28:38.540468

Zookeeper version: 3.7.0-e3704b390a6697bfdf4b0bef79e3da7a4f6bac4b, built on 2021-09-17 18:36 UTC\nClients:\n/*.*.*.*:11264[0](queued=0,recved=1,sent=0)\n\nLatency min/avg/max: 0/0.0/0\nReceived: 8557\nSent: 11410\nConnections: 1\nOutstanding: 0\nZxid: 0x332907ad3391\nMode: follower\nNode count: 104618

12191 / tcp

-1399940268 | 2025-04-04T10:30:36.717410

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12194 / tcp

1624217396 | 2025-04-12T22:32:45.154054

HELO:10.3.6.0.false\nAS:2048\nHL:19

12196 / tcp

-2089734047 | 2025-03-19T21:55:12.110431

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12208 / tcp

-1059554316 | 2025-04-06T07:31:04.457489

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

12210 / tcp

-2031152423 | 2025-04-11T03:58:16.532351

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

12214 / tcp

-1399940268 | 2025-03-28T21:36:16.708059

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12215 / tcp

408230060 | 2025-03-16T02:35:26.102667

\r\nSorry, that nickname format is invalid.\r\n

12218 / tcp

-441419608 | 2025-03-29T02:53:11.461753

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

12222 / tcp

1615193817 | 2025-04-08T11:29:35.383465

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

12224 / tcp

-1399940268 | 2025-03-23T16:39:48.747178

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12233 / tcp

819727972 | 2025-04-06T07:41:24.126801

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12236 / tcp

1208318993 | 2025-04-10T13:10:01.660294

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

12241 / tcp

-1399940268 | 2025-03-23T17:56:04.588856

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12249 / tcp

410249975 | 2025-03-28T21:37:31.886608

LNS READY<>

12252 / tcp

1212285915 | 2025-03-31T07:35:37.078433

\x00K\x00\x00\x02\x00\x00\x00%~)J/\\tHjU(IAGENT = (AGENT_VERSION = 2388790170)(RPC_VERSION = 5..722))

12261 / tcp

-1032713145 | 2025-03-22T14:58:39.367487

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

12266 / tcp

669849225 | 2025-04-12T22:18:19.641915

SSH-98.60-SysaxSSH_81885..42\r\n

12293 / tcp

-1947777893 | 2025-03-23T11:19:44.929550

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

12298 / tcp

-441419608 | 2025-03-27T01:13:06.146283

SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.3

12301 / tcp

-2096652808 | 2025-03-23T02:09:37.207654

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

12305 / tcp

-1947777893 | 2025-04-07T16:48:52.558801

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

12308 / tcp

819727972 | 2025-03-22T19:14:38.411443

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12315 / tcp

632542934 | 2025-03-23T09:14:48.059357

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12316 / tcp

1208318993 | 2025-03-24T00:34:59.785087

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

12317 / tcp

-1036370807 | 2025-03-18T17:16:11.644209

JDWP-Handshake

12320 / tcp

-1888448627 | 2025-03-22T11:33:30.716893

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12328 / tcp

-1888448627 | 2025-04-07T21:04:05.570079

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12329 / tcp

1911457608 | 2025-03-28T01:58:28.632710

\x00[\x00\x00\x00\x00\x00\x00

12330 / tcp

321971019 | 2025-03-17T05:09:28.792575

-ERR client ip is not in whitelist\r

12332 / tcp

-1399940268 | 2025-03-19T11:52:09.324634

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12350 / tcp

-1839934832 | 2025-04-08T02:08:59.732302

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

12352 / tcp

671605376 | 2025-03-18T02:51:19.277111

SSH-2.0-OpenSSH_X.X

12354 / tcp

1632932802 | 2025-04-11T03:36:06.142697

12371 / tcp

819727972 | 2025-03-24T10:17:40.618682

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12372 / tcp

-616720387 | 2025-03-27T15:18:07.249755

SSH-2.0-SSHD_0.7.6

12376 / tcp

119860953 | 2025-03-27T13:43:49.613418

* OK ArGoSoft Mail Server IMAP Module v.YW at

12378 / tcp

119860953 | 2025-04-01T11:36:37.282414

* OK ArGoSoft Mail Server IMAP Module v.YW at

12381 / tcp

165188539 | 2025-04-09T20:35:59.934822

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12383 / tcp

-616720387 | 2025-04-10T09:28:45.767054

SSH-2.0-SSHD_0.7.6

12387 / tcp

-805362002 | 2025-03-17T19:19:30.978939

ICAP/1.0 501 Other
Server: Traffic Spicer 7788179225

12388 / tcp

1282941221 | 2025-03-24T03:37:34.778276

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

12394 / tcp

921225407 | 2025-04-08T04:25:59.966321

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12401 / tcp

-1888448627 | 2025-04-02T18:43:13.515158

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12406 / tcp

-2046514463 | 2025-03-17T13:41:20.192069

AB\x01\t

12421 / tcp

1911457608 | 2025-03-25T06:41:19.049699

\x00[\x00\x00\x00\x00\x00\x00

12429 / tcp

1911457608 | 2025-03-15T03:23:01.612108

\x00[\x00\x00\x00\x00\x00\x00

12430 / tcp

1519486042 | 2025-03-25T08:14:03.109727

<KU_goodbye>Protocol Error: XML data is not well-formed.</KU_goodbye>

12443 / tcp

321971019 | 2025-04-01T19:24:08.397727

-ERR client ip is not in whitelist\r

12444 / tcp

632542934 | 2025-03-16T07:33:01.473850

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

12467 / tcp

2098371729 | 2025-04-05T20:54:55.286874

<?xml version="1.0" encoding="ISO-8859-1" standalone="yes"?>\nA<!DOCTYPE GANGLIA_XML [\n   <!ELEMENT GANGLIA_XML (GRID|CLUSTER|H...\n

12470 / tcp

-1737707071 | 2025-03-31T06:31:41.321097

\x00b\x00\x01\x00\x00\x00\x00x\x0b\x00\x00\x00\x00z\x00437

12488 / tcp

-1428621233 | 2025-04-04T07:32:14.934091

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

12492 / tcp

819727972 | 2025-03-25T08:28:49.231824

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

12499 / tcp

165188539 | 2025-03-15T02:33:41.332215

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

12505 / tcp

321971019 | 2025-03-16T17:09:10.991351

-ERR client ip is not in whitelist\r

12513 / tcp

1991883981 | 2025-03-22T08:58:12.275984

B\x00\x00\x00\xc3\xbfn\x04Too many connections

12515 / tcp

-2089734047 | 2025-03-15T03:57:40.154775

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

12523 / tcp

-438503381 | 2025-03-20T20:18:22.208094

WORLD OF WARCRAFT CONNECTION - SERVER TO CLIENT - V2

12526 / tcp

-1399940268 | 2025-03-31T19:51:03.278045

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12557 / tcp

-1399940268 | 2025-04-07T22:22:52.995088

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12561 / tcp

-1399940268 | 2025-04-03T01:50:49.742534

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

12562 / tcp

1911457608 | 2025-04-09T17:35:05.307034

\x00[\x00\x00\x00\x00\x00\x00

12568 / tcp

-1888448627 | 2025-04-11T04:04:19.991472

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12574 / tcp

709622286 | 2025-04-02T20:18:32.590059

OK Welcome <299685> on DirectUpdate server 7286\r\n

12578 / tcp

-1428621233 | 2025-03-25T08:16:49.477904

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

12580 / tcp

921225407 | 2025-04-06T15:26:48.599125

\x00\x00\x00\x04\x00\x00\x00\x00\x00

12581 / tcp

-1888448627 | 2025-03-26T01:18:22.552710

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

12582 / tcp

-1327660293 | 2025-03-29T21:33:40.478125

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

12585 / tcp

-653033013 | 2025-04-11T03:53:53.178041

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

12601 / tcp

-1329831334 | 2025-04-12T08:05:11.850213

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00 \x00\x00\n04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00\\...\n

12615 / tcp

819727972 | 2025-03-20T18:08:39.485092

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

13001 / tcp

-1327660293 | 2025-04-07T01:05:16.388774

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

13047 / tcp

2087396567 | 2025-03-27T09:18:50.393110

kjnkjabhbanc283ubcsbhdc72

13780 / tcp

-1399940268 | 2025-04-10T00:09:13.406337

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14084 / tcp

-1538260461 | 2025-04-12T21:49:33.895551

\x01\x00\x00\x00

14147 / tcp

1282941221 | 2025-03-24T01:41:44.028118

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

14182 / tcp

1726594447 | 2025-04-03T20:39:20.959358

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

14344 / tcp

-297128567 | 2025-04-09T11:30:29.801369

\x04\x01\xc3\xb4\x00\x15Internal Server Error\x00\x00\x00AB\x00\x02\x05\x00

14403 / tcp

-1399940268 | 2025-03-14T14:45:30.074015

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

14900 / tcp

-1399940268 | 2025-03-28T07:08:48.874522

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

15042 / tcp

1996932384 | 2025-04-11T12:29:12.927359

"raop" nonce

15044 / tcp

119860953 | 2025-04-01T11:28:55.112490

* OK ArGoSoft Mail Server IMAP Module v.YW at

15082 / tcp

-1626979812 | 2025-04-11T16:08:57.863363

220 Service ready for new user.

15151 / tcp

321971019 | 2025-03-22T07:19:40.290384

-ERR client ip is not in whitelist\r

15443 / tcp

171352214 | 2025-04-07T00:22:53.065768

-ERR client ip is not in whitelist

16009 / tcp

165188539 | 2025-04-01T19:16:34.314902

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

16010 / tcp

-146605374 | 2025-04-01T02:22:08.669048

\x00[\xc2\x81\xc2\x8b\xc3\xa7\x7f\x00\x00

16013 / tcp

1911457608 | 2025-04-08T17:09:15.546734

\x00[\x00\x00\x00\x00\x00\x00

16015 / tcp

1911457608 | 2025-03-25T08:22:26.232719

\x00[\x00\x00\x00\x00\x00\x00

16019 / tcp

1911457608 | 2025-03-16T11:55:26.360220

\x00[\x00\x00\x00\x00\x00\x00

16026 / tcp

-1399940268 | 2025-04-08T06:14:03.615837

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16051 / tcp

-904840257 | 2025-03-18T11:22:24.150398

572 Relay not authorized\r\n

16066 / tcp

819727972 | 2025-03-27T17:33:04.721769

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

16073 / tcp

669849225 | 2025-04-12T22:49:01.161841

SSH-98.60-SysaxSSH_81885..42\r\n

16076 / tcp

-358801646 | 2025-03-29T17:10:09.217426

SSH-2.0-OpenSSH_6.6.1

16082 / tcp

-375604792 | 2025-03-26T02:57:12.705073

220 Microsoft FTP Service

16085 / tcp

1308377066 | 2025-03-15T22:48:17.516020

ncacn_http/1.0

16087 / tcp

-2089734047 | 2025-04-01T03:49:41.888676

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

16090 / tcp

-1399940268 | 2025-03-25T12:20:53.575928

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

16104 / tcp

1911457608 | 2025-03-29T10:47:38.845659

\x00[\x00\x00\x00\x00\x00\x00

16311 / tcp

-303199180 | 2025-03-26T23:09:42.488542

Content-Type: text/rude-rejection\nContent-Length: 24\n\n\nAccess Denied, go away.\nContent-Type: text/disconnect-notice\nC...\n

16667 / tcp

-1810987450 | 2025-04-07T23:27:45.745929

\xc3\xbf

16992 / tcp

-1900404274 | 2025-03-31T07:49:49.393627

Unknown command

16993 / tcp

819727972 | 2025-04-09T00:23:39.530419

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

17000 / tcp

-1810987450 | 2025-04-03T19:06:29.584548

\xc3\xbf

17001 / tcp

-1810987450 | 2025-03-28T16:20:28.808741

\xc3\xbf

17020 / tcp

2063598737 | 2025-03-15T17:47:31.322627

/0 0 L\r\n/0 0 HUH\r\n

17182 / tcp

1911457608 | 2025-03-22T14:00:59.233404

\x00[\x00\x00\x00\x00\x00\x00

17184 / tcp

-1888448627 | 2025-03-29T19:39:18.873130

\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

17770 / tcp

51259122 | 2025-04-09T13:24:26.050353

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

17773 / tcp

1911457608 | 2025-03-25T12:37:49.763019

\x00[\x00\x00\x00\x00\x00\x00

17778 / tcp

819727972 | 2025-04-09T10:40:31.432560

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

17780 / tcp

50497985 | 2025-04-07T19:13:29.954027

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

18004 / tcp

632542934 | 2025-04-03T17:24:54.350115

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

18018 / tcp

-2096652808 | 2025-04-08T00:55:15.411067

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

18030 / tcp

119860953 | 2025-04-11T12:40:34.294282

* OK ArGoSoft Mail Server IMAP Module v.YW at

18034 / tcp

-1626979812 | 2025-04-05T12:45:22.825653

220 Service ready for new user.

18042 / tcp

380146262 | 2025-03-23T10:04:09.014609

@RSYNCD: 30.0

18053 / tcp

-1399940268 | 2025-03-21T18:10:47.755607

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18056 / tcp

1282941221 | 2025-03-27T07:51:31.542553

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

18061 / tcp

1282941221 | 2025-03-18T18:10:18.140534

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

18063 / tcp

-1839934832 | 2025-04-09T18:09:59.111408

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

18066 / tcp

-1399940268 | 2025-04-06T06:17:18.365462

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

18076 / tcp

921225407 | 2025-03-27T13:25:32.520912

\x00\x00\x00\x04\x00\x00\x00\x00\x00

18077 / tcp

103159425 | 2025-04-11T19:49:22.228302

SSH-1.99-RGOS_SSH

18078 / tcp

1975288991 | 2025-04-08T10:26:22.096478

OPTI

18080 / tcp

2087396567 | 2025-03-17T16:45:03.131122

kjnkjabhbanc283ubcsbhdc72

18081 / tcp

1978059005 | 2025-03-31T06:35:55.386797

Sorry, that nickname format is invalid.

18094 / tcp

320677201 | 2025-03-27T08:25:12.073035

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

18111 / tcp

1278527606 | 2025-03-28T03:17:02.999142

SSH-2.0-Teleport

18112 / tcp

921225407 | 2025-03-20T17:42:18.741873

\x00\x00\x00\x04\x00\x00\x00\x00\x00

18245 / tcp

-904840257 | 2025-04-12T20:04:07.998731

572 Relay not authorized\r\n

18443 / tcp

-1730858130 | 2025-03-28T21:36:40.443359

RFB 003.008
VNC:
  Protocol Version: 3.8

18553 / tcp

104385780 | 2025-04-06T20:45:32.919905

ceph v2

19000 / tcp

-2140303521 | 2025-04-07T06:43:55.401098

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected\n

19080 / tcp

1911457608 | 2025-03-24T00:23:24.916908

\x00[\x00\x00\x00\x00\x00\x00

19082 / tcp

1911457608 | 2025-03-22T22:58:06.030987

\x00[\x00\x00\x00\x00\x00\x00

19200 / tcp

2087396567 | 2025-04-04T03:20:02.380657

kjnkjabhbanc283ubcsbhdc72

19930 / tcp

2087396567 | 2025-03-26T17:58:00.649958

kjnkjabhbanc283ubcsbhdc72

20000 / tcp

1900503736 | 2025-04-03T22:36:25.899571

HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Server: Microsoft-HTTPAPI/2.0

20084 / tcp

117101543 | 2025-03-24T01:49:46.506612

\x18\x01\x00\x00\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\n0\x0c\x00\x04\x00\x00\x00\x08\x00\n\x00\x00\x00d\x04\x00\x00\xc3\xb8\x00...\n

20087 / tcp

104385780 | 2025-04-13T01:27:17.115169

ceph v2

20182 / tcp

740837454 | 2025-04-04T08:37:33.075512

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

20256 / tcp

1308377066 | 2025-03-26T13:28:53.880872

ncacn_http/1.0

20325 / tcp

1991883981 | 2025-04-02T19:08:18.289725

B\x00\x00\x00\xc3\xbfn\x04Too many connections

20440 / tcp

-1139539254 | 2025-03-22T08:04:10.442568

\xc3\xbf\xc3\xbb\x01\n\rno data rcvd for version string\n\rrecv version id unsuccessful\n\rSSH Session task 0xY: Version Exchange Failed\n\r

20547 / tcp

-1230049476 | 2025-04-12T21:41:30.040838

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

20600 / tcp

-358801646 | 2025-03-20T20:23:07.855686

SSH-2.0-OpenSSH_6.6.1

20800 / tcp

-1105333987 | 2025-03-31T09:13:07.539200

\x00[KpU\x7f\x00\x00

20880 / tcp

1370263973 | 2025-04-10T21:29:07.781724

dubbo>

20894 / tcp

677934968 | 2025-04-06T00:03:56.682008

lm^)Q

21025 / tcp

-984990168 | 2025-03-21T14:50:10.464357


0ÿñ

21084 / tcp

-1648456501 | 2025-03-22T14:09:44.157622

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

21200 / tcp

-1428621233 | 2025-04-07T04:25:08.987594

\x00\x00\x18\x04\x00\x00\x00\x00\x00\x00\x04\x00@\x00\x00\x00\x00\n05\x00@\x00\x00\x00\x06\x00\x00 \x00\xc3\xbe\x03\x00\x00\x00\x01\x00\x00...\n

21238 / tcp

1615193817 | 2025-04-07T11:24:25.512221

Hello, this is FRRouting (version 4.0).\r\r\nCopyright 19\n96-2005 Kunihiro Ishiguro, et al.\r\r\n\r\r\n\r\nUse...\n

21240 / tcp

321971019 | 2025-03-27T20:22:04.983846

-ERR client ip is not in whitelist\r

21243 / tcp

819727972 | 2025-03-15T05:47:11.560693

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

21245 / tcp

-784071826 | 2025-03-25T17:30:44.167738

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

21246 / tcp

-784071826 | 2025-04-01T17:07:47.486192

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

21259 / tcp

1911457608 | 2025-03-20T17:41:06.998711

\x00[\x00\x00\x00\x00\x00\x00

21288 / tcp

1948301213 | 2025-03-23T21:06:19.427800

RFB 003.003
VNC:
  Protocol Version: 3.3

21298 / tcp

-2033111675 | 2025-04-07T07:10:13.274724

~djb

21300 / tcp

632542934 | 2025-03-18T17:52:09.999551

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

21303 / tcp

1948301213 | 2025-04-02T14:01:25.859788

RFB 003.003
VNC:
  Protocol Version: 3.3

21305 / tcp

165188539 | 2025-03-17T05:21:16.374978

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

21309 / tcp

1543809371 | 2025-03-20T12:00:21.427415

220 corpease.net Anti-spam GT for Coremail System (icmhosting[2\n0181212])

21316 / tcp

-1947777893 | 2025-04-07T19:43:04.016334

"Broadband Router"\r\n\r\n<HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD><BODY onLoad

21318 / tcp

-1746074029 | 2025-03-17T11:32:08.218445

101 imqbroker =unV\r\n

21322 / tcp

580340387 | 2025-03-21T23:53:42.593826

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

21379 / tcp

474736340 | 2025-04-12T19:51:21.554031

431 Unable to negotiate secure command connection.

22000 / tcp

-971970408 | 2025-04-01T18:02:36.575683

22069 / tcp

-2031152423 | 2025-04-01T05:56:24.099147

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3

22222 / tcp

-358801646 | 2025-04-12T18:01:37.391292

SSH-2.0-OpenSSH_6.6.1

22556 / tcp

-1872120160 | 2025-04-08T04:43:41.817622

">Application and Content Networking Software 3.9</a>)
</BODY><

23023 / tcp

1746071618 | 2025-03-16T05:47:14.071939

bxz437

23424 / tcp

-1730858130 | 2025-04-12T09:39:19.771346

RFB 003.008
VNC:
  Protocol Version: 3.8

24082 / tcp

-1032713145 | 2025-04-11T15:21:23.221458

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

24245 / tcp

2087396567 | 2025-03-26T04:42:25.171241

kjnkjabhbanc283ubcsbhdc72

25001 / tcp

-1399940268 | 2025-03-18T13:08:39.113238

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

25082 / tcp

1989907056 | 2025-04-08T04:39:44.408642

RTSP/1.0 453 Not Enough Bandwidth\r\nServer: AirTunes/7l_wZ\r\n\r\n

25105 / tcp

-784071826 | 2025-04-12T10:46:49.950113

SSH-2.0-OpenSSH_8.0

Vulnerabilities

2 4 6 1

25565 / tcp

707919486 | 2025-04-12T16:08:11.397627

\x00\x06\xc2\x81\xc2\x81\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

26656 / tcp

1278527606 | 2025-04-07T18:56:49.707108

SSH-2.0-Teleport

26657 / tcp

2087396567 | 2025-04-07T15:23:29.277042

kjnkjabhbanc283ubcsbhdc72

27015 / tcp

1741579575 | 2025-04-12T14:18:10.889682

27016 / tcp

2087396567 | 2025-04-11T22:47:04.565211

kjnkjabhbanc283ubcsbhdc72

27017 / tcp

422524323 | 2025-04-12T07:48:10.088405

{
"Version": "3.4.18",
"VersionArray": [
3,
4,
18,
0
],
"GitVersion": "4410706bef6463369ea2f42399e9843903b31923",
"OpenSSLVersion": "",
"SysInfo": "",
"Bits": 64,
"Debug": false,
"MaxObjectSize": 16777216
}

27036 / tcp

-1032713145 | 2025-04-12T05:25:03.965745

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

27105 / tcp

165188539 | 2025-04-11T18:34:35.551123

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

28015 / tcp

2087396567 | 2025-04-11T23:44:05.129366

kjnkjabhbanc283ubcsbhdc72

28017 / tcp

171352214 | 2025-04-12T01:29:43.751958

-ERR client ip is not in whitelist

28080 / tcp

2087396567 | 2025-03-28T05:00:37.783812

kjnkjabhbanc283ubcsbhdc72

30003 / tcp

-842670865 | 2025-03-17T17:07:31.615142

0@

30006 / tcp

921225407 | 2025-04-11T20:19:37.403613

\x00\x00\x00\x04\x00\x00\x00\x00\x00

30007 / tcp

1996932384 | 2025-04-09T01:34:06.795241

"raop" nonce

30008 / tcp

-1297953727 | 2025-03-20T08:41:48.877849

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

30013 / tcp

1911457608 | 2025-03-27T02:42:50.199968

\x00[\x00\x00\x00\x00\x00\x00

30017 / tcp

-1099385124 | 2025-03-17T02:02:09.826825

"Magic:ActiveMQ\nVersion:12\n\x00\x00\x01<\x01ActiveMQ\x00\x00\x00\x0c\x01\x00\x00\x01*\x00\x00\x00\x0c\x00\x11TcpNoDelayEnabled\x01\x01\x00\x12SizePrefixDisabled\x01\x00\x00 CacheSize\x05\x00\x00\x04\x00\x00\x0cProviderName \x00\x08ActiveMQ\x00\x11StackTraceEnabled\x01\x01\x00\x0fPlatformDetails \x00\x04Java\x00\x0cCacheEnabled\x01\x01\x00\x14TightEncodingEnabled\x01\x01\x00\x0cMaxFrameSize\x06\x00\x00\x00\x00\x06@\x00\x00\x00\x15MaxInac

30022 / tcp

104385780 | 2025-04-06T00:41:05.203470

ceph v2

30104 / tcp

1919228981 | 2025-03-27T21:33:21.666445

\x00\x1e\x00\x06\xc2\x81\xc2\x85\x00\x01\x00\x00\x00\x00\x00\x00\x07version\x04bind\x00\x00\x10\x00\x03

30122 / tcp

472902042 | 2025-04-06T04:15:20.891065

"Magic:ActiveMQ
Version:12
<ActiveMQ*TcpNoDelayEnabledSizePrefixDisabled CacheSizeProviderName ActiveMQStackTraceEnabledPlatformDetails JavaCacheEnabledTightEncodingEnabledMaxFrameSize@MaxInac

30123 / tcp

1282941221 | 2025-04-01T20:03:04.969678

HTTP/1.0 500 Internal Server Error
Content-Length: 20
D
Connection: close

Command server error

30222 / tcp

-971970408 | 2025-04-05T19:29:04.029355

30301 / tcp

-1059554316 | 2025-03-31T18:54:43.093895

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

30303 / tcp

1975288991 | 2025-03-31T22:46:35.725201

OPTI

30422 / tcp

539065883 | 2025-04-05T21:20:26.885648

30452 / tcp

-1399940268 | 2025-03-28T21:37:10.714996

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

30522 / tcp

104385780 | 2025-04-06T05:59:08.188764

ceph v2

30718 / tcp

428036883 | 2025-04-11T20:32:02.740377

LH\xdb\xc6\xdd\xf6g\x10\x19\x00\x00\x00\x18\x00\x01\x02\x00\x10\x00\x04\x00\x00\x00\x01b\xa8\xacO\xd0\x10D!\xce\x19Aa\xaf\x04\x8c\xfe

30722 / tcp

-971970408 | 2025-04-05T06:02:21.312012

30822 / tcp

-1729629024 | 2025-03-25T21:46:40.088026

101 imqbroker =unV

30894 / tcp

-1327660293 | 2025-04-06T16:59:28.753018

ceph v2\n\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00

30922 / tcp

2087396567 | 2025-04-05T22:55:37.988313

kjnkjabhbanc283ubcsbhdc72

31022 / tcp

819727972 | 2025-04-05T17:42:44.494880

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

31122 / tcp

-1136600457 | 2025-04-05T14:15:49.843581

HELO:10.3.6.0.false
AS:2048
HL:19

31322 / tcp

2087396567 | 2025-03-25T05:44:23.260005

kjnkjabhbanc283ubcsbhdc72

31380 / tcp

1726594447 | 2025-04-11T21:42:40.200908

\r\n\nLantronix MSS100 Version V118/523(045538937)\n\r\nType HELP at the \'Local_61349> \' prompt for assistance.\n\r\n\r\n\nUsername>

31443 / tcp

-971970408 | 2025-04-07T17:07:33.400011

31522 / tcp

819727972 | 2025-04-04T22:59:58.862489

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

31622 / tcp

2087396567 | 2025-04-04T15:33:02.434647

kjnkjabhbanc283ubcsbhdc72

31722 / tcp

504717326 | 2025-04-05T00:20:32.260065

SSH-2.0-OpenSSH_8.6

Vulnerabilities

2 3 6 1

31822 / tcp

-971970408 | 2025-03-20T19:43:42.196507

31922 / tcp

745343730 | 2025-03-24T06:13:49.768507

220 smtp.qq.com Esmtp QQ Mail Server

32022 / tcp

1991883981 | 2025-04-05T03:54:38.716636

B\x00\x00\x00\xc3\xbfn\x04Too many connections

32101 / tcp

-1399940268 | 2025-03-14T17:23:04.197290

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

32102 / tcp

504717326 | 2025-03-19T18:51:23.316619

SSH-2.0-OpenSSH_8.6

Vulnerabilities

2 3 6 1

32122 / tcp

233634112 | 2025-04-04T17:33:22.020134

SSH-98.60-SysaxSSH_81885..42

32222 / tcp

-1681927087 | 2025-03-23T17:51:32.017068

kjnkjabhbanc283ubcsbhdc72

32322 / tcp

819727972 | 2025-04-04T20:48:09.081613

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

32422 / tcp

-2096652808 | 2025-03-23T13:52:15.095190

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

32443 / tcp

-1399940268 | 2025-03-23T06:55:50.190663

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

32522 / tcp

-616720387 | 2025-03-22T04:18:17.835762

SSH-2.0-SSHD_0.7.6

32622 / tcp

1208318993 | 2025-04-04T12:06:54.530434

\x01\x00\x0b\x00\x00\x00=\x00\x01\x00\x00\x00\x00\x00\xc3\x80\x06\xc3\xbf\xc3\xbf?"<Z\x00DECWINDOWS Digital Equipment Corporation Digital UNIX V2eT03T7w_Q6\x00\x00\x01\x01

32722 / tcp

-1045760528 | 2025-04-04T11:04:45.583608

HTTP/1.1 302 Found
Connection: close
Location: http://*.*.*.*/solr/

32764 / tcp

-1729629024 | 2025-04-03T22:52:54.287912

101 imqbroker =unV

32800 / tcp

-2089734047 | 2025-03-22T21:47:34.319169

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

32822 / tcp

819727972 | 2025-03-23T04:04:11.335513

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

33060 / tcp

1996932384 | 2025-04-11T19:03:23.889867

"raop" nonce

33122 / tcp

1077013874 | 2025-03-22T23:01:56.308088

HTTP/1.1 400 Bad Request
Server: squid/3.5.8
Mime-Version: 1.0
Content-Length: 3510
X-Squid-Error: ERR_INVALID_URL 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from p1
Via: 1.1 p1 (squid/3.5.8)
Connection: close

33222 / tcp

-1810987450 | 2025-03-20T00:10:36.443512

\xc3\xbf

33338 / tcp

-1097188123 | 2025-04-02T18:31:24.413130

[g\xc2\x95N\x7f

33722 / tcp

1761482307 | 2025-03-18T05:04:49.070793

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

34022 / tcp

-1626979812 | 2025-03-20T17:58:58.784087

220 Service ready for new user.

34122 / tcp

1842524259 | 2025-03-20T15:56:16.784667

34222 / tcp

-409020351 | 2025-03-20T01:57:14.202118

NPC Telnet permit one connection.
 But One connection() already keep alive.
Good Bye !!

34522 / tcp

539065883 | 2025-03-19T11:51:07.862409

34722 / tcp

2087396567 | 2025-03-19T08:40:47.990848

kjnkjabhbanc283ubcsbhdc72

34822 / tcp

740837454 | 2025-03-19T06:47:43.500472

SSH-2.0-OpenSSH_5.3

Vulnerabilities

3 9 19 5

34922 / tcp

2087396567 | 2025-03-18T22:17:04.383013

kjnkjabhbanc283ubcsbhdc72

35000 / tcp

-1839934832 | 2025-04-10T18:56:24.294561

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

35002 / tcp

-345718689 | 2025-04-06T01:09:04.303122

Vty password is not set.

35153 / tcp

165188539 | 2025-04-12T07:21:03.505265

\x00\x00\x06\x04\x00\x00\x00\x00\x00\x00\x05\x00\x00@\x00

35222 / tcp

459162008 | 2025-03-18T10:03:13.104040

Notify

35322 / tcp

2087396567 | 2025-03-17T10:40:29.610034

kjnkjabhbanc283ubcsbhdc72

35524 / tcp

1492413928 | 2025-04-10T16:29:50.742792

SSH-2.0-OpenSSH_7.5

Vulnerabilities

2 3 13 1

35559 / tcp

-980525298 | 2025-03-20T06:49:02.586619

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

35560 / tcp

320677201 | 2025-03-17T22:14:50.323097

H\x00\x00\x00\xc3\xbfj\x04Host \'101.133.140.114\' is not allowed to \nconnect to this MySQL server

35622 / tcp

339872247 | 2025-03-18T08:10:25.859154


0 ...

35822 / tcp

-971970408 | 2025-03-17T18:11:08.827015

36022 / tcp

-527005584 | 2025-03-17T21:43:15.277782

/0 0 L
/0 0 HUH

36322 / tcp

2087396567 | 2025-03-17T12:30:58.630661

kjnkjabhbanc283ubcsbhdc72

36622 / tcp

1767345577 | 2025-03-16T08:28:21.890067

Hello, this is Quagga (version 0T).
Copyright 1996-200

36822 / tcp

2087396567 | 2025-03-18T15:04:17.012219

kjnkjabhbanc283ubcsbhdc72

37122 / tcp

819727972 | 2025-03-16T23:42:48.660835

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

37215 / tcp

819727972 | 2025-04-11T13:23:47.249595

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

37222 / tcp

1544300041 | 2025-03-14T20:12:43.049719

SSH-25453-Cisco-3524665.35

37722 / tcp

-971970408 | 2025-03-16T00:44:36.496224

37777 / tcp

1911457608 | 2025-04-12T18:16:09.879703

\x00[\x00\x00\x00\x00\x00\x00

38122 / tcp

1541211644 | 2025-03-15T18:06:29.433075

[\xc2\xba\x7fs\x7f

38322 / tcp

2087396567 | 2025-03-15T14:08:31.820274

kjnkjabhbanc283ubcsbhdc72

38333 / tcp

1308377066 | 2025-03-28T19:03:57.255105

ncacn_http/1.0

40001 / tcp

-1399940268 | 2025-04-05T10:58:30.286484

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

40029 / tcp

-375604792 | 2025-04-02T04:02:46.679042

220 Microsoft FTP Service

40070 / tcp

-1399940268 | 2025-04-12T00:33:45.022950

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

41443 / tcp

1761482307 | 2025-04-07T20:37:16.665435

\x00[\xc2\xa5\t\xc2\xbe\x7f\x00\x00

41800 / tcp

-407828767 | 2025-03-16T21:09:35.878624

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

42194 / tcp

632542934 | 2025-04-08T18:44:00.463445

\x0f\x00\x02\x00\x05\x00\r\x00\x00\x00\x00\x00\x01\x00\x00\x00\n0\x00

43009 / tcp

921225407 | 2025-04-02T11:31:20.281585

\x00\x00\x00\x04\x00\x00\x00\x00\x00

43080 / tcp

-1297953727 | 2025-04-10T04:52:01.934075

\x02\x00\x00\x00\x00\x00\x06\x04\x00\x00\x00\x00\x00\x0c\x00\x00\n0\x00\x1c

44158 / tcp

-433302150 | 2025-03-19T11:58:30.977461

/multistream/1.0.0

44304 / tcp

-1279886438 | 2025-04-09T02:21:27.589878

GET / HTTP/1.0 : USERID : UNIX : TKUXZmP\r\n : USERID : UNIX : Cr8\r\n

44305 / tcp

0 | 2025-03-26T18:44:52.851030

Hashes

hash

-119996482

http.dom_hash

http.html_hash

HTTP/1.1 408 Request Timeout
Content-Length: 0

44306 / tcp

-1059554316 | 2025-03-20T04:10:17.957239

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

44307 / tcp

1975288991 | 2025-03-21T00:18:03.914242

OPTI

44444 / tcp

-616720387 | 2025-04-06T23:35:43.588752

SSH-2.0-SSHD_0.7.6

44818 / tcp

-1032713145 | 2025-04-11T05:27:58.552198

\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x04\x08\x00\x00\x00\n0\x00\x00\x00\x0e\xc3\xbf\xc3\xb1

45002 / tcp

639175818 | 2025-03-14T14:22:36.191303

\r\nSurnom.\r\nSorry, that nickname format is invalid.\r\n

45003 / tcp

-1399940268 | 2025-04-04T13:44:50.675710

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

45333 / tcp

-407828767 | 2025-03-20T00:33:28.651589

\x00[\xc2\xbc/\xc2\x9f\x7f\x00\x00

45555 / tcp

-2089734047 | 2025-03-16T16:31:11.534795

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

45788 / tcp

-1399940268 | 2025-04-07T04:11:48.579034

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

45886 / tcp

-1713437100 | 2025-04-09T01:08:41.573111

\xc3\xbf\xc3\xbb\x01\r\nWelcome to NetLinx v94 Copyright AMX Corp. 34395-49007\r\n>

46001 / tcp

-904840257 | 2025-04-09T00:03:15.941777

572 Relay not authorized\r\n

47001 / tcp

819727972 | 2025-03-23T18:45:13.425109

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

47808 / tcp

-971970408 | 2025-03-24T04:37:51.887240

47984 / tcp

921225407 | 2025-04-12T12:20:31.615141

\x00\x00\x00\x04\x00\x00\x00\x00\x00

47990 / tcp

-527005584 | 2025-04-09T10:32:16.527965

/0 0 L
/0 0 HUH

48002 / tcp

-616720387 | 2025-04-07T07:38:25.943604

SSH-2.0-SSHD_0.7.6

48899 / tcp

-786044033 | 2025-03-31T09:55:43.355000

OK Welcome <299685> on DirectUpdate server 7286

49152 / tcp

-1292343804 | 2025-03-31T20:52:59.664157

HTTP/1.1 500 Internal Server Error
CONTENT-LENGTH: 411
CONTENT-TYPE: text/xml; charset="utf-8"
DATE: Mon, 22 Jan 2024 16:32:35 GMT
EXT:
SERVER: Linux/3.10.0, UPnP/1.0, Portable SDK for UPnP devices/1.6.18
X-User-Agent: redsonic

<s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/">
<s:Body>
<s:Fault>
<faultcode>s:Client</faultcode>
<faultstring>UPnPError</faultstring>
<detail>
<UPnPError xmlns="urn:schemas-upnp-org:control-1-0">

49684 / tcp

-980525298 | 2025-04-08T12:58:41.342099

\x01\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00

50000 / tcp

1984588611 | 2025-04-11T01:38:16.041390

50008 / tcp

-1538260461 | 2025-03-28T22:55:50.484432

\x01\x00\x00\x00

50050 / tcp

50497985 | 2025-04-10T23:48:42.023196

\x00[\xc3\x88\xc3\x9dS\x7f\x00\x00

50070 / tcp

-746114901 | 2025-04-10T16:14:39.058643

[KpU

50080 / tcp

1541211644 | 2025-03-23T04:43:22.676552

[\xc2\xba\x7fs\x7f

50100 / tcp

1632932802 | 2025-04-10T07:42:35.775859

50500 / tcp

1342742850 | 2025-04-10T03:27:15.615119

HTTP/1.1 503 Service Unavailable
Content-Type: text/html
Cache-Control: no-cache, no-store
Connection: close
X-Iinfo: 11-95441870-0 0NNN RT(1701249031731 8) q(0 -1 -1 -1) r(0 -1)

51000 / tcp

-1399940268 | 2025-04-05T09:55:43.181275

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

51002 / tcp

1911457608 | 2025-03-20T15:11:10.030046

\x00[\x00\x00\x00\x00\x00\x00

51003 / tcp

321971019 | 2025-03-22T02:58:13.987359

-ERR client ip is not in whitelist\r

51004 / tcp

51259122 | 2025-04-07T09:19:35.117965

\r\nCP2E Control Console\r\nConnected to Host: gZI\r\n

51106 / tcp

-905685638 | 2025-04-10T19:41:11.999762

bxz437

51200 / tcp

1911457608 | 2025-03-23T16:08:09.154762

\x00[\x00\x00\x00\x00\x00\x00

51201 / tcp

-2096652808 | 2025-04-11T15:11:49.548115

\x00\x00\x12\x04\x00\x00\x00\x00\x00\x00\x03\x7f\xc3\xbf\xc3\xbf\xc3\xbf\x00\n0\x04\x00\x10\x00\x00\x00\x06\x00\x00 \x00\x00\x00\x04\x08\x00\x00\x00...\n

51235 / tcp

2087396567 | 2025-04-10T14:35:48.733293

kjnkjabhbanc283ubcsbhdc72

51443 / tcp

819727972 | 2025-04-07T02:27:12.513948

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

52536 / tcp

-1230049476 | 2025-03-29T02:13:20.470915

HTTP/1.0 200 OK
Connection: close
X-Powered-By: Undertow/1
Server: JBoss-EAP/7
Content-Type: text/html
Content-Length: 98
Accept-Ranges: bytes

52869 / tcp

-1072158793 | 2025-04-10T12:48:53.748296

HTTP/1.1 500 Internal Server Error
SERVER: Linux/2.6.21.5, UPnP/1.0, Portable SDK for UPnP devices/1.6.6
CONNECTION: close
CONTENT-LENGTH: 60
CONTENT-TYPE: text/html

53413 / tcp

2087396567 | 2025-04-10T09:08:32.030729

kjnkjabhbanc283ubcsbhdc72

53485 / tcp

-1399940268 | 2025-03-22T06:18:09.586700

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

54138 / tcp

-1990350878 | 2025-04-09T20:35:59.515554

 
04 \...

54327 / tcp

-1399940268 | 2025-03-16T23:40:38.225257

kjnkjabhbanc283ubcsbhdc72\x00\x00\x00\x02

54444 / tcp

1911457608 | 2025-04-07T23:50:20.295106

\x00[\x00\x00\x00\x00\x00\x00

54984 / tcp

119860953 | 2025-04-10T07:22:27.361942

* OK ArGoSoft Mail Server IMAP Module v.YW at

55200 / tcp

2103111368 | 2025-03-25T23:37:31.093734

HTTP/1.0 403 Access denied
Server: tinyproxy/1.8.3
0AContent-Type: text/html
Connection: close

<?...

55350 / tcp

-653033013 | 2025-03-24T15:43:17.154016

\xc3\xbf\x00\x00\x00\x00\x00\x00\x00\x01\x7f

55442 / tcp

1842524259 | 2025-03-20T21:05:07.282938

55443 / tcp

104385780 | 2025-04-10T11:45:21.457052

ceph v2

55553 / tcp

-1760806421 | 2025-04-07T17:52:51.927795

protocolErrorInf error=Missing hw string from : null. Check hardware state=disconnected

55554 / tcp

-971970408 | 2025-04-10T00:49:09.796707

57778 / tcp

-2089734047 | 2025-04-03T02:51:21.237442

\x02\t\x00\x01\x00\x00\x00\x00\x00\x00

57786 / tcp

-1105333987 | 2025-03-21T01:42:48.445106

\x00[KpU\x7f\x00\x00

58585 / tcp

307999478 | 2025-04-07T13:13:57.503971

unknown command \r\nunknown command \r\n

58603 / tcp

-1730858130 | 2025-03-22T06:22:44.836742

RFB 003.008
VNC:
  Protocol Version: 3.8

60001 / tcp

1741579575 | 2025-03-29T06:16:45.197053

60129 / tcp

-952165951 | 2025-04-09T15:13:17.004003

AB

61616 / tcp

819727972 | 2025-03-25T18:20:03.799012

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

62016 / tcp

-1059554316 | 2025-04-01T10:25:20.256204

\xc2\xa5A\x00\x01\x00\x00\x00,\x00\x00\x00\x02\x00\x00\x00L\x00\x00\x00\x08Connect\x00\x00\x00\x00x\x00\x00\x00\x0857222\x00\x00\x00

62078 / tcp

1978059005 | 2025-04-09T16:55:00.008238

Sorry, that nickname format is invalid.

62865 / tcp

-1648456501 | 2025-04-13T01:22:00.206926

\n\r\xc3\xbf\xc3\xbbUDo you want ANSI color? (Y/n)

63210 / tcp

1690634669 | 2025-03-14T23:30:33.342611

63256 / tcp

171352214 | 2025-04-07T04:25:59.887038

-ERR client ip is not in whitelist

63257 / tcp

819727972 | 2025-04-06T22:24:57.328121

SSH-2.0-OpenSSH_7.4

Vulnerabilities

2 3 13 1

63260 / tcp

580340387 | 2025-04-01T01:42:44.287092

220 Microsoft FTP Service\n530 User cannot log in.\n214-The following commands are recognized (* ==>\'s unimplemented).\n    ABOR \n    ACCT \n    ADAT *\n    ALLO \n    APPE \n    AUTH \n    CCC \n    CDUP \n    CWD \n    DELE \n    ENC *\n    EPRT \n    EPSV \n    FEAT \n    HELP \n    HOST \n    LANG \n    LIST ...

64738 / tcp

-905685638 | 2025-04-09T22:34:12.838026

bxz437

65432 / tcp

-1839934832 | 2025-03-26T13:04:54.738835

HTTP/1.0 408 Request Time-out
Cache-Control: no-cache
D
Connection: close
Content-Type: text/html

...

59.82.43.29

Last Seen: 2025-04-13

Tags:

GeneralInformation

OpenPorts

2 / tcp -904840257 | 2025-03-17T05:35:34.434075

11 / tcp 2087396567 | 2025-03-19T22:24:12.362323

13 / tcp 1100205395 | 2025-04-06T02:39:31.539864

15 / tcp 2087396567 | 2025-03-31T18:56:46.088915

17 / tcp -297057753 | 2025-03-26T09:30:00.784042

19 / tcp 873425297 | 2025-03-27T06:54:18.180949

21 / tcp 1210838212 | 2025-03-27T00:54:56.867044

22 / tcp -928719327 | 2025-03-15T16:41:18.015591

23 / tcp -23362551 | 2025-04-01T04:05:14.091459

25 / tcp 1911457608 | 2025-04-12T17:28:16.997296

26 / tcp 2063598737 | 2025-03-22T10:22:43.704357

37 / tcp -1795351450 | 2025-03-29T17:16:26.052462

38 / tcp -339084706 | 2025-04-03T10:22:59.752578

43 / tcp -1114821551 | 2025-03-26T20:37:12.893852

49 / tcp -1909001798 | 2025-03-14T18:58:08.059898

53 / tcp 1369632081 | 2025-04-10T15:55:49.323986

70 / tcp -1967791998 | 2025-03-24T22:46:01.017379

79 / tcp -1264324149 | 2025-04-12T05:59:33.687057

80 / tcp 501077178 | 2025-04-03T06:53:44.716865

Hashes

85 / tcp -1019343788 | 2025-04-06T09:25:02.866246

94 / tcp 398077695 | 2025-04-03T19:32:36.629183

95 / tcp 165188539 | 2025-03-19T06:11:11.880756

97 / tcp 1996932384 | 2025-03-28T00:36:52.574257

102 / tcp -1839934832 | 2025-03-27T10:03:40.823423

104 / tcp 380146262 | 2025-04-04T11:08:11.051404

110 / tcp -2033111675 | 2025-03-28T21:06:11.437091

111 / tcp 1187188851 | 2025-04-04T02:30:26.761023

113 / tcp -669112739 | 2025-04-10T07:55:01.052467

119 / tcp 141730637 | 2025-04-08T23:16:57.774611

122 / tcp -1099385124 | 2025-04-12T17:43:50.185368

135 / tcp -875843738 | 2025-03-16T11:19:31.533743

143 / tcp -382990917 | 2025-04-06T12:43:00.788574

175 / tcp 1911457608 | 2025-04-06T22:43:22.810762

179 / tcp -399606100 | 2025-04-09T03:55:32.533394

189 / tcp 1426971893 | 2025-03-26T04:39:00.465192

190 / tcp -2118655245 | 2025-04-05T05:03:30.060630

Hashes

195 / tcp -1013082686 | 2025-04-12T18:45:37.689283

221 / tcp -832380282 | 2025-04-07T09:55:59.657131

225 / tcp 819727972 | 2025-03-14T16:07:33.352295

311 / tcp 749429829 | 2025-04-09T10:09:49.789757

443 / tcp 501077178 | 2025-04-10T11:10:10.298705

Hashes

444 / tcp 2033888749 | 2025-03-28T00:25:49.937923

448 / tcp 819727972 | 2025-04-04T10:18:52.068123

449 / tcp 819727972 | 2025-03-23T12:03:24.894114

451 / tcp -616720387 | 2025-03-19T12:15:13.380361

465 / tcp 897328069 | 2025-04-02T00:10:10.756819

487 / tcp -1399940268 | 2025-04-01T19:56:50.495261

502 / tcp 504717326 | 2025-04-05T13:33:59.896313

503 / tcp 819727972 | 2025-04-10T21:57:30.688142

513 / tcp 1991883981 | 2025-04-11T13:04:30.505961

515 / tcp -1969169410 | 2025-04-05T23:01:28.688082

548 / tcp 155249582 | 2025-04-09T07:52:19.713895

554 / tcp 902688621 | 2025-03-28T18:09:52.306298

587 / tcp 745343730 | 2025-03-29T02:38:08.904069

632 / tcp -1399940268 | 2025-03-26T22:17:26.144907

636 / tcp -1036370807 | 2025-03-27T03:32:54.029862

666 / tcp 1300162323 | 2025-03-22T08:44:49.703427

675 / tcp -2089734047 | 2025-04-09T12:05:32.679019

771 / tcp -1626979812 | 2025-04-09T06:36:58.679971

785 / tcp 1911457608 | 2025-04-04T20:54:21.155324

806 / tcp -1996280214 | 2025-03-29T15:54:59.629391

811 / tcp 1726594447 | 2025-04-08T20:31:55.711628

832 / tcp 921225407 | 2025-03-24T07:33:48.068430

833 / tcp 921225407 | 2025-03-22T22:54:42.287731

873 / tcp -1970692834 | 2025-04-10T12:18:15.012413

887 / tcp 1282941221 | 2025-04-03T07:05:16.825134

993 / tcp 165188539 | 2025-03-25T04:08:03.566714

995 / tcp -1199842642 | 2025-04-02T11:02:46.614455

998 / tcp -2089734047 | 2025-03-15T22:14:21.254616

1023 / tcp -154107716 | 2025-04-12T00:34:16.798356

1027 / tcp -445721795 | 2025-03-22T13:42:57.825161

1050 / tcp 1332894250 | 2025-04-11T08:15:35.750276

2 / tcp

-904840257 | 2025-03-17T05:35:34.434075

11 / tcp

2087396567 | 2025-03-19T22:24:12.362323

13 / tcp

1100205395 | 2025-04-06T02:39:31.539864

15 / tcp

2087396567 | 2025-03-31T18:56:46.088915

17 / tcp

-297057753 | 2025-03-26T09:30:00.784042

19 / tcp

873425297 | 2025-03-27T06:54:18.180949

21 / tcp

1210838212 | 2025-03-27T00:54:56.867044

22 / tcp

-928719327 | 2025-03-15T16:41:18.015591

23 / tcp

-23362551 | 2025-04-01T04:05:14.091459

25 / tcp

1911457608 | 2025-04-12T17:28:16.997296

26 / tcp

2063598737 | 2025-03-22T10:22:43.704357

37 / tcp

-1795351450 | 2025-03-29T17:16:26.052462

38 / tcp

-339084706 | 2025-04-03T10:22:59.752578

43 / tcp

-1114821551 | 2025-03-26T20:37:12.893852

49 / tcp

-1909001798 | 2025-03-14T18:58:08.059898

53 / tcp

1369632081 | 2025-04-10T15:55:49.323986

70 / tcp

-1967791998 | 2025-03-24T22:46:01.017379

79 / tcp

-1264324149 | 2025-04-12T05:59:33.687057

80 / tcp

501077178 | 2025-04-03T06:53:44.716865

85 / tcp

-1019343788 | 2025-04-06T09:25:02.866246

94 / tcp

398077695 | 2025-04-03T19:32:36.629183

95 / tcp

165188539 | 2025-03-19T06:11:11.880756

97 / tcp

1996932384 | 2025-03-28T00:36:52.574257

102 / tcp

-1839934832 | 2025-03-27T10:03:40.823423

104 / tcp

380146262 | 2025-04-04T11:08:11.051404

110 / tcp

-2033111675 | 2025-03-28T21:06:11.437091

111 / tcp

1187188851 | 2025-04-04T02:30:26.761023

113 / tcp

-669112739 | 2025-04-10T07:55:01.052467

119 / tcp

141730637 | 2025-04-08T23:16:57.774611

122 / tcp

-1099385124 | 2025-04-12T17:43:50.185368

135 / tcp

-875843738 | 2025-03-16T11:19:31.533743

143 / tcp

-382990917 | 2025-04-06T12:43:00.788574

175 / tcp

1911457608 | 2025-04-06T22:43:22.810762

179 / tcp

-399606100 | 2025-04-09T03:55:32.533394

189 / tcp

1426971893 | 2025-03-26T04:39:00.465192

190 / tcp

-2118655245 | 2025-04-05T05:03:30.060630

195 / tcp

-1013082686 | 2025-04-12T18:45:37.689283

221 / tcp

-832380282 | 2025-04-07T09:55:59.657131

225 / tcp

819727972 | 2025-03-14T16:07:33.352295

311 / tcp

749429829 | 2025-04-09T10:09:49.789757

443 / tcp

501077178 | 2025-04-10T11:10:10.298705

444 / tcp

2033888749 | 2025-03-28T00:25:49.937923

448 / tcp

819727972 | 2025-04-04T10:18:52.068123

449 / tcp

819727972 | 2025-03-23T12:03:24.894114

451 / tcp

-616720387 | 2025-03-19T12:15:13.380361

465 / tcp

897328069 | 2025-04-02T00:10:10.756819

487 / tcp

-1399940268 | 2025-04-01T19:56:50.495261

502 / tcp

504717326 | 2025-04-05T13:33:59.896313

503 / tcp

819727972 | 2025-04-10T21:57:30.688142

513 / tcp

1991883981 | 2025-04-11T13:04:30.505961

515 / tcp

-1969169410 | 2025-04-05T23:01:28.688082

548 / tcp

155249582 | 2025-04-09T07:52:19.713895

554 / tcp

902688621 | 2025-03-28T18:09:52.306298

587 / tcp

745343730 | 2025-03-29T02:38:08.904069

632 / tcp

-1399940268 | 2025-03-26T22:17:26.144907

636 / tcp

-1036370807 | 2025-03-27T03:32:54.029862

666 / tcp

1300162323 | 2025-03-22T08:44:49.703427

675 / tcp

-2089734047 | 2025-04-09T12:05:32.679019

771 / tcp

-1626979812 | 2025-04-09T06:36:58.679971

785 / tcp

1911457608 | 2025-04-04T20:54:21.155324

806 / tcp

-1996280214 | 2025-03-29T15:54:59.629391

811 / tcp

1726594447 | 2025-04-08T20:31:55.711628

832 / tcp

921225407 | 2025-03-24T07:33:48.068430

833 / tcp

921225407 | 2025-03-22T22:54:42.287731

873 / tcp

-1970692834 | 2025-04-10T12:18:15.012413

887 / tcp

1282941221 | 2025-04-03T07:05:16.825134

993 / tcp

165188539 | 2025-03-25T04:08:03.566714

995 / tcp

-1199842642 | 2025-04-02T11:02:46.614455

998 / tcp

-2089734047 | 2025-03-15T22:14:21.254616

1023 / tcp

-154107716 | 2025-04-12T00:34:16.798356

1027 / tcp

-445721795 | 2025-03-22T13:42:57.825161

1050 / tcp

1332894250 | 2025-04-11T08:15:35.750276

1080 / tcp

1362344524 | 2025-03-29T08:48:12.071904

1103 / tcp

165188539 | 2025-04-11T11:06:53.491175

1110 / tcp

-1231144117 | 2025-04-02T12:04:41.028069

1153 / tcp

1308377066 | 2025-04-06T12:14:04.228196

1177 / tcp

539065883 | 2025-04-06T08:14:58.614384

1198 / tcp

-271515508 | 2025-04-12T20:35:03.336038

1337 / tcp

474736340 | 2025-03-31T05:46:29.582570

1344 / tcp

-2089734047 | 2025-04-10T22:47:22.801770