Comments (9)
bradchiappetta
commented on June 18, 2024
1
Hello @tlynx538 . Sorry that you've run into an issue with pygreynoise. I'm trying to reproduce this issue, but I'm not getting the same result. Can you try a few things for me and follow up with the output of each?
greynoise versionpip3 listgreynoise ip 23.129.64.215greynoise ip 23.129.64.215 -f jsongreynoise query 23.129.64.215 -f json
from pygreynoise.
tlynx538
commented on June 18, 2024
- Running
greynoise version
root@debian:~# greynoise version
greynoise 0.8.0
Python 3.7.3
Linux-4.19.0-14-amd64-x86_64-with-debian-10.8
- Running
pip3 list
root@debian:~# pip3 list
Package Version
------------------- ---------
ansimarkup 1.5.0
asn1crypto 0.24.0
cachetools 4.2.1
certifi 2020.12.5
chardet 4.0.0
click 7.1.2
click-default-group 1.2.2
click-plugins 1.1.1
click-repl 0.1.6
colorama 0.4.4
cryptography 2.6.1
dict2xml 1.7.0
entrypoints 0.3
greynoise 0.8.0
idna 2.10
Jinja2 2.11.3
keyring 17.1.1
keyrings.alt 3.1.1
MarkupSafe 1.1.1
more-itertools 8.7.0
pip 18.1
prompt-toolkit 3.0.18
pycrypto 2.6.1
PyGObject 3.30.4
pyxdg 0.25
requests 2.25.1
SecretStorage 2.3.1
setuptools 40.8.0
shodan 1.25.0
six 1.12.0
structlog 21.1.0
typing-extensions 3.7.4.3
ufw 0.36
urllib3 1.26.4
wcwidth 0.2.5
wheel 0.32.3
XlsxWriter 1.3.8
- Running
greynoise ip 23.129.64.215
root@debian:~# greynoise ip 23.129.64.215
Traceback (most recent call last):
File "/usr/local/bin/greynoise", line 10, in <module>
sys.exit(main())
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 829, in __call__
return self.main(*args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 782, in main
rv = self.invoke(ctx)
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 1259, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 1066, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/usr/local/lib/python3.7/dist-packages/click/core.py", line 610, in invoke
return callback(*args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/greynoise/cli/decorator.py", line 124, in wrapper
return function(api_client, *args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/click/decorators.py", line 21, in new_func
return f(get_current_context(), *args, **kwargs)
File "/usr/local/lib/python3.7/dist-packages/greynoise/cli/decorator.py", line 44, in wrapper
output, file=params.get("output_file", click.open_file("-", mode="w"))
File "/usr/local/lib/python3.7/dist-packages/click/utils.py", line 272, in echo
file.write(message)
UnicodeEncodeError: 'latin-1' codec can't encode characters in position 0-28: ordinal not in range(256)
- Running
greynoise ip 23.129.64.215 -f json
{
"actor": "unknown",
"bot": false,
"classification": "malicious",
"cve": [
"CVE-1999-0526"
],
"first_seen": "2019-06-25",
"ip": "23.129.64.215",
"last_seen": "2021-04-05",
"metadata": {
"asn": "AS396507",
"category": "business",
"city": "San Jose",
"country": "United States",
"country_code": "US",
"organization": "Emerald Onion",
"os": "FreeBSD",
"rdns": "",
"region": "California",
"tor": false
},
"raw_data": {
"hassh": [
{
"fingerprint": "1616c6d18e845e7a01168a44591f7a35",
"port": 22
},
{
"fingerprint": "34e2be231a36f388a636d2140f5bb9aa",
"port": 22
},
{
"fingerprint": "98ddc5604ef6a1006a2b49a58759fbe6",
"port": 22
},
{
"fingerprint": "fda360b1b4f4d3455cb75c6e7edb1d11",
},
[.......]
{
"port": 389,
"protocol": "TCP"
},
{
"port": 443,
"protocol": "TCP"
},
{
"port": 445,
"protocol": "TCP"
},
{
"port": 465,
"protocol": "TCP"
},
{
"port": 514,
"protocol": "TCP"
},
{
"port": 541,
"protocol": "TCP"
},
{
"port": 554,
"protocol": "TCP"
},
{
"port": 587,
"protocol": "TCP"
},
{
"port": 631,
"protocol": "TCP"
},
{
"port": 646,
"protocol": "TCP"
},
{
"port": 700,
"protocol": "TCP"
},
{
"port": 843,
"protocol": "TCP"
},
{
"port": 888,
"protocol": "TCP"
},
{
"port": 902,
"protocol": "TCP"
},
{
"port": 993,
"protocol": "TCP"
},
{
"port": 995,
"protocol": "TCP"
},
{
"port": 1024,
"protocol": "TCP"
},
{
"port": 1027,
"protocol": "TCP"
},
{
"port": 1029,
"protocol": "TCP"
},
{
"port": 1080,
"protocol": "TCP"
},
{
"port": 1089,
"protocol": "TCP"
},
{
"port": 1090,
"protocol": "TCP"
},
{
"port": 1194,
"protocol": "TCP"
},
{
"port": 1275,
"protocol": "TCP"
},
{
"port": 1352,
"protocol": "TCP"
},
{
"port": 1433,
"protocol": "TCP"
},
{
"port": 1494,
"protocol": "TCP"
},
{
"port": 1521,
"protocol": "TCP"
},
{
"port": 1522,
"protocol": "TCP"
},
{
"port": 1524,
"protocol": "TCP"
},
{
"port": 1525,
"protocol": "TCP"
},
{
"port": 1526,
"protocol": "TCP"
},
{
"port": 1527,
"protocol": "TCP"
},
{
"port": 1700,
"protocol": "TCP"
},
{
"port": 1717,
"protocol": "TCP"
},
{
"port": 1718,
"protocol": "TCP"
},
{
"port": 1720,
"protocol": "TCP"
},
{
"port": 1883,
"protocol": "TCP"
},
{
"port": 1900,
"protocol": "TCP"
},
{
"port": 1935,
"protocol": "TCP"
},
{
"port": 2000,
"protocol": "TCP"
},
{
"port": 2052,
"protocol": "TCP"
},
{
"port": 2053,
"protocol": "TCP"
},
{
"port": 2078,
"protocol": "TCP"
},
{
"port": 2080,
"protocol": "TCP"
},
{
"port": 2083,
"protocol": "TCP"
},
{
"port": 2096,
"protocol": "TCP"
},
{
"port": 2100,
"protocol": "TCP"
},
{
"port": 2107,
"protocol": "TCP"
},
{
"port": 2121,
"protocol": "TCP"
},
{
"port": 2222,
"protocol": "TCP"
},
{
"port": 2249,
"protocol": "TCP"
},
{
"port": 2763,
"protocol": "TCP"
},
{
"port": 2844,
"protocol": "TCP"
},
{
"port": 3000,
"protocol": "TCP"
},
{
"port": 3001,
"protocol": "TCP"
},
{
"port": 3050,
"protocol": "TCP"
},
{
"port": 3128,
"protocol": "TCP"
},
{
"port": 3137,
"protocol": "TCP"
},
{
"port": 3299,
"protocol": "TCP"
},
{
"port": 3306,
"protocol": "TCP"
},
{
"port": 3307,
"protocol": "TCP"
},
{
"port": 3322,
"protocol": "TCP"
},
{
"port": 3351,
"protocol": "TCP"
},
{
"port": 3632,
"protocol": "TCP"
},
{
"port": 4000,
"protocol": "TCP"
},
{
"port": 4067,
"protocol": "TCP"
},
{
"port": 4190,
"protocol": "TCP"
},
{
"port": 4273,
"protocol": "TCP"
},
{
"port": 4343,
"protocol": "TCP"
},
{
"port": 4435,
"protocol": "TCP"
},
{
"port": 4567,
"protocol": "TCP"
},
{
"port": 4700,
"protocol": "TCP"
},
{
"port": 4840,
"protocol": "TCP"
},
{
"port": 4848,
"protocol": "TCP"
},
{
"port": 4950,
"protocol": "TCP"
},
{
"port": 4958,
"protocol": "TCP"
},
{
"port": 4962,
"protocol": "TCP"
},
{
"port": 5000,
"protocol": "TCP"
},
{
"port": 5001,
"protocol": "TCP"
},
{
"port": 5040,
"protocol": "TCP"
},
{
"port": 5060,
"protocol": "TCP"
},
{
"port": 5061,
"protocol": "TCP"
},
{
"port": 5070,
"protocol": "TCP"
},
{
"port": 5101,
"protocol": "TCP"
},
{
"port": 5432,
"protocol": "TCP"
},
{
"port": 5433,
"protocol": "TCP"
},
{
"port": 5446,
"protocol": "TCP"
},
{
"port": 5555,
"protocol": "TCP"
},
{
"port": 5666,
"protocol": "TCP"
},
{
"port": 5900,
"protocol": "TCP"
},
{
"port": 5901,
"protocol": "TCP"
},
{
"port": 5936,
"protocol": "TCP"
},
{
"port": 5942,
"protocol": "TCP"
},
{
"port": 5984,
"protocol": "TCP"
},
{
"port": 6001,
"protocol": "TCP"
},
{
"port": 6002,
"protocol": "TCP"
},
{
"port": 6022,
"protocol": "TCP"
},
{
"port": 6036,
"protocol": "TCP"
},
{
"port": 6060,
"protocol": "TCP"
},
{
"port": 6129,
"protocol": "TCP"
},
{
"port": 6379,
"protocol": "TCP"
},
{
"port": 6443,
"protocol": "TCP"
},
{
"port": 6466,
"protocol": "TCP"
},
{
"port": 6467,
"protocol": "TCP"
},
{
"port": 6699,
"protocol": "TCP"
},
{
"port": 6713,
"protocol": "TCP"
},
{
"port": 6783,
"protocol": "TCP"
},
{
"port": 6917,
"protocol": "TCP"
},
{
"port": 6921,
"protocol": "TCP"
},
{
"port": 7062,
"protocol": "TCP"
},
{
"port": 7080,
"protocol": "TCP"
},
{
"port": 7170,
"protocol": "TCP"
},
{
"port": 7474,
"protocol": "TCP"
},
{
"port": 7557,
"protocol": "TCP"
},
{
"port": 7676,
"protocol": "TCP"
},
{
"port": 7680,
"protocol": "TCP"
},
{
"port": 7681,
"protocol": "TCP"
},
{
"port": 7746,
"protocol": "TCP"
},
{
"port": 7777,
"protocol": "TCP"
},
{
"port": 7920,
"protocol": "TCP"
},
{
"port": 8000,
"protocol": "TCP"
},
{
"port": 8001,
"protocol": "TCP"
},
{
"port": 8008,
"protocol": "TCP"
},
{
"port": 8010,
"protocol": "TCP"
},
{
"port": 8020,
"protocol": "TCP"
},
{
"port": 8022,
"protocol": "TCP"
},
{
"port": 8080,
"protocol": "TCP"
},
{
"port": 8081,
"protocol": "TCP"
},
{
"port": 8082,
"protocol": "TCP"
},
{
"port": 8083,
"protocol": "TCP"
},
{
"port": 8084,
"protocol": "TCP"
},
{
"port": 8085,
"protocol": "TCP"
},
{
"port": 8088,
"protocol": "TCP"
},
{
"port": 8089,
"protocol": "TCP"
},
{
"port": 8098,
"protocol": "TCP"
},
{
"port": 8099,
"protocol": "TCP"
},
{
"port": 8112,
"protocol": "TCP"
},
{
"port": 8181,
"protocol": "TCP"
},
{
"port": 8200,
"protocol": "TCP"
},
{
"port": 8291,
"protocol": "TCP"
},
{
"port": 8437,
"protocol": "TCP"
},
{
"port": 8443,
"protocol": "TCP"
},
{
"port": 8471,
"protocol": "TCP"
},
{
"port": 8512,
"protocol": "TCP"
},
{
"port": 8728,
"protocol": "TCP"
},
{
"port": 8729,
"protocol": "TCP"
},
{
"port": 8800,
"protocol": "TCP"
},
{
"port": 8880,
"protocol": "TCP"
},
{
"port": 8883,
"protocol": "TCP"
},
{
"port": 8888,
"protocol": "TCP"
},
{
"port": 8990,
"protocol": "TCP"
},
{
"port": 8991,
"protocol": "TCP"
},
{
"port": 8999,
"protocol": "TCP"
},
{
"port": 9000,
"protocol": "TCP"
},
{
"port": 9001,
"protocol": "TCP"
},
{
"port": 9002,
"protocol": "TCP"
},
{
"port": 9010,
"protocol": "TCP"
},
{
"port": 9080,
"protocol": "TCP"
},
{
"port": 9084,
"protocol": "TCP"
},
{
"port": 9090,
"protocol": "TCP"
},
{
"port": 9091,
"protocol": "TCP"
},
{
"port": 9092,
"protocol": "TCP"
},
{
"port": 9160,
"protocol": "TCP"
},
{
"port": 9200,
"protocol": "TCP"
},
{
"port": 9300,
"protocol": "TCP"
},
{
"port": 9444,
"protocol": "TCP"
},
{
"port": 9699,
"protocol": "TCP"
},
{
"port": 9997,
"protocol": "TCP"
},
{
"port": 9998,
"protocol": "TCP"
},
{
"port": 9999,
"protocol": "TCP"
},
{
"port": 10000,
"protocol": "TCP"
},
{
"port": 10001,
"protocol": "TCP"
},
{
"port": 10002,
"protocol": "TCP"
},
{
"port": 10010,
"protocol": "TCP"
},
{
"port": 10050,
"protocol": "TCP"
},
{
"port": 10080,
"protocol": "TCP"
},
{
"port": 10101,
"protocol": "TCP"
},
{
"port": 10107,
"protocol": "TCP"
},
{
"port": 10443,
"protocol": "TCP"
},
{
"port": 12345,
"protocol": "TCP"
},
{
"port": 14430,
"protocol": "TCP"
},
{
"port": 15627,
"protocol": "TCP"
},
{
"port": 15691,
"protocol": "TCP"
},
{
"port": 15800,
"protocol": "TCP"
},
{
"port": 17500,
"protocol": "TCP"
},
{
"port": 18264,
"protocol": "TCP"
},
{
"port": 18301,
"protocol": "TCP"
},
{
"port": 20202,
"protocol": "TCP"
},
{
"port": 21242,
"protocol": "TCP"
},
{
"port": 21300,
"protocol": "TCP"
},
{
"port": 22232,
"protocol": "TCP"
},
{
"port": 22288,
"protocol": "TCP"
},
{
"port": 27017,
"protocol": "TCP"
},
{
"port": 27018,
"protocol": "TCP"
},
{
"port": 27080,
"protocol": "TCP"
},
{
"port": 27117,
"protocol": "TCP"
},
{
"port": 28017,
"protocol": "TCP"
},
{
"port": 30004,
"protocol": "TCP"
},
{
"port": 30005,
"protocol": "TCP"
},
{
"port": 30006,
"protocol": "TCP"
},
{
"port": 30007,
"protocol": "TCP"
},
{
"port": 30010,
"protocol": "TCP"
},
{
"port": 30083,
"protocol": "TCP"
},
{
"port": 32531,
"protocol": "TCP"
},
{
"port": 32768,
"protocol": "TCP"
},
{
"port": 34567,
"protocol": "TCP"
},
{
"port": 34964,
"protocol": "TCP"
},
{
"port": 37304,
"protocol": "TCP"
},
{
"port": 37443,
"protocol": "TCP"
},
{
"port": 37777,
"protocol": "TCP"
},
{
"port": 38182,
"protocol": "TCP"
},
{
"port": 38520,
"protocol": "TCP"
},
{
"port": 38646,
"protocol": "TCP"
},
{
"port": 40000,
"protocol": "TCP"
},
{
"port": 40005,
"protocol": "TCP"
},
{
"port": 40197,
"protocol": "TCP"
},
{
"port": 44401,
"protocol": "TCP"
},
{
"port": 47001,
"protocol": "TCP"
},
{
"port": 48460,
"protocol": "TCP"
},
{
"port": 49153,
"protocol": "TCP"
},
{
"port": 49155,
"protocol": "TCP"
},
{
"port": 49157,
"protocol": "TCP"
},
{
"port": 49158,
"protocol": "TCP"
},
{
"port": 49160,
"protocol": "TCP"
},
{
"port": 49501,
"protocol": "TCP"
},
{
"port": 49664,
"protocol": "TCP"
},
{
"port": 49667,
"protocol": "TCP"
},
{
"port": 49669,
"protocol": "TCP"
},
{
"port": 50001,
"protocol": "TCP"
},
{
"port": 50580,
"protocol": "TCP"
},
{
"port": 50996,
"protocol": "TCP"
},
{
"port": 51007,
"protocol": "TCP"
},
{
"port": 51200,
"protocol": "TCP"
},
{
"port": 52200,
"protocol": "TCP"
},
{
"port": 52869,
"protocol": "TCP"
},
{
"port": 53000,
"protocol": "TCP"
},
{
"port": 53416,
"protocol": "TCP"
},
{
"port": 54322,
"protocol": "TCP"
},
{
"port": 54660,
"protocol": "TCP"
},
{
"port": 55170,
"protocol": "TCP"
},
{
"port": 55555,
"protocol": "TCP"
},
{
"port": 55920,
"protocol": "TCP"
},
{
"port": 57331,
"protocol": "TCP"
},
{
"port": 58603,
"protocol": "TCP"
},
{
"port": 60088,
"protocol": "TCP"
},
{
"port": 65004,
"protocol": "TCP"
},
{
"port": 65062,
"protocol": "TCP"
}
],
"web": {
"paths": [
"/aY4o",
"/owa/",
"/f5xJ",
"/owa/auth/logon.aspx",
"/",
"/BgIk",
"/nice ports,/Trinity.txt.bak",
"/mgmt/shared/authn/login"
],
"useragents": [
"Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0",
"",
"Go-http-client/1.1",
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:76.0) Gecko/20100101 Firefox/76.0",
"TBI-HttpOpenPlugin/0.1.0 (+https://leakix.net/)",
"Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)",
"Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36",
"Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.13; ko; rv:1.9.1b2) Gecko/20081201 Firefox/60.0",
"Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36",
"WhatWeb/0.5.5"
]
}
},
"seen": true,
"spoofable": false,
"tags": [
"404 Crawler",
"EHLO Crawler",
"Generic Lines Crawler",
"Generic Outlook Web Access Crawler",
"Go HTTP Client",
"HTTP OPTIONS Crawler",
"JRMI Scanner",
"Nmap",
"Open Proxy Scanner",
"Outlook Web Access Login Crawler",
"Radmin Crawler",
"SSH Alternative Port Crawler",
"SSH Bruteforcer",
"TLS/SSL Crawler",
"Web Crawler",
"X Server Connection Attempt"
],
"vpn": false,
"vpn_service": ""
}
]
- Running
greynoise query 23.129.64.215 -f json
greynoise query 23.129.64.215 -f json
{"ip": "23.129.64.215", "metadata": {"asn": "AS396507", "city": "San Jose", "country": "United States", "country_code": "US", "organization": "Emerald Onion", "category": "business", "tor": false, "rdns": "", "os": "FreeBSD", "region": "California"}, "bot": false, "vpn": false, "vpn_service": "", "spoofable": false, "raw_data": {"scan": [{"port": 21, "protocol": "TCP"}, {"port": 22, "protocol": "TCP"}, {"port": 23, "protocol": "TCP"}, {"port": 25, "protocol": "TCP"}, {"port": 26, "protocol": "TCP"}, {"port": 43, "protocol": "TCP"}, {"port": 79, "protocol": "TCP"}, {"port": 80, "protocol": "TCP"}, {"port": 81, "protocol": "TCP"}, {"port": 85, "protocol": "TCP"}, {"port": 88, "protocol": "TCP"}, {"port": 110, "protocol": "TCP"}, {"port": 111, "protocol": "TCP"}, {"port": 135, "protocol": "TCP"}, {"port": 139, "protocol": "TCP"}, {"port": 143, "protocol": "TCP"}, {"port": 389, "protocol": "TCP"}, {"port": 443, "protocol": "TCP"}, {"port": 445, "protocol": "TCP"}, {"port": 465, "protocol": "TCP"}, {"port": 514, "protocol": "TCP"}, {"port": 541, "protocol": "TCP"}, {"port": 554, "protocol": "TCP"}, {"port": 587, "protocol": "TCP"}, {"port": 631, "protocol": "TCP"}, {"port": 646, "protocol": "TCP"}, {"port": 700, "protocol": "TCP"}, {"port": 843, "protocol": "TCP"}, {"port": 888, "protocol": "TCP"}, {"port": 902, "protocol": "TCP"}, {"port": 993, "protocol": "TCP"}, {"port": 995, "protocol": "TCP"}, {"port": 1024, "protocol": "TCP"}, {"port": 1027, "protocol": "TCP"}, {"port": 1029, "protocol": "TCP"}, {"port": 1080, "protocol": "TCP"}, {"port": 1089, "protocol": "TCP"}, {"port": 1090, "protocol": "TCP"}, {"port": 1194, "protocol": "TCP"}, {"port": 1275, "protocol": "TCP"}, {"port": 1352, "protocol": "TCP"}, {"port": 1433, "protocol": "TCP"}, {"port": 1494, "protocol": "TCP"}, {"port": 1521, "protocol": "TCP"}, {"port": 1522, "protocol": "TCP"}, {"port": 1524, "protocol": "TCP"}, {"port": 1525, "protocol": "TCP"}, {"port": 1526, "protocol": "TCP"}, {"port": 1527, "protocol": "TCP"}, {"port": 1700, "protocol": "TCP"}, {"port": 1717, "protocol": "TCP"}, {"port": 1718, "protocol": "TCP"}, {"port": 1720, "protocol": "TCP"}, {"port": 1883, "protocol": "TCP"}, {"port": 1900, "protocol": "TCP"}, {"port": 1935, "protocol": "TCP"}, {"port": 2000, "protocol": "TCP"}, {"port": 2052, "protocol": "TCP"}, {"port": 2053, "protocol": "TCP"}, {"port": 2078, "protocol": "TCP"}, {"port": 2080, "protocol": "TCP"}, {"port": 2083, "protocol": "TCP"}, {"port": 2096, "protocol": "TCP"}, {"port": 2100, "protocol": "TCP"}, {"port": 2107, "protocol": "TCP"}, {"port": 2121, "protocol": "TCP"}, {"port": 2222, "protocol": "TCP"}, {"port": 2249, "protocol": "TCP"}, {"port": 2763, "protocol": "TCP"}, {"port": 2844, "protocol": "TCP"}, {"port": 3000, "protocol": "TCP"}, {"port": 3001, "protocol": "TCP"}, {"port": 3050, "protocol": "TCP"}, {"port": 3128, "protocol": "TCP"}, {"port": 3137, "protocol": "TCP"}, {"port": 3299, "protocol": "TCP"}, {"port": 3306, "protocol": "TCP"}, {"port": 3307, "protocol": "TCP"}, {"port": 3322, "protocol": "TCP"}, {"port": 3351, "protocol": "TCP"}, {"port": 3632, "protocol": "TCP"}, {"port": 4000, "protocol": "TCP"}, {"port": 4067, "protocol": "TCP"}, {"port": 4190, "protocol": "TCP"}, {"port": 4273, "protocol": "TCP"}, {"port": 4343, "protocol": "TCP"}, {"port": 4435, "protocol": "TCP"}, {"port": 4567, "protocol": "TCP"}, {"port": 4700, "protocol": "TCP"}, {"port": 4840, "protocol": "TCP"}, {"port": 4848, "protocol": "TCP"}, {"port": 4950, "protocol": "TCP"}, {"port": 4958, "protocol": "TCP"}, {"port": 4962, "protocol": "TCP"}, {"port": 5000, "protocol": "TCP"}, {"port": 5001, "protocol": "TCP"}, {"port": 5040, "protocol": "TCP"}, {"port": 5060, "protocol": "TCP"}, {"port": 5061, "protocol": "TCP"}, {"port": 5070, "protocol": "TCP"}, {"port": 5101, "protocol": "TCP"}, {"port": 5432, "protocol": "TCP"}, {"port": 5433, "protocol": "TCP"}, {"port": 5446, "protocol": "TCP"}, {"port": 5555, "protocol": "TCP"}, {"port": 5666, "protocol": "TCP"}, {"port": 5900, "protocol": "TCP"}, {"port": 5901, "protocol": "TCP"}, {"port": 5936, "protocol": "TCP"}, {"port": 5942, "protocol": "TCP"}, {"port": 5984, "protocol": "TCP"}, {"port": 6001, "protocol": "TCP"}, {"port": 6002, "protocol": "TCP"}, {"port": 6022, "protocol": "TCP"}, {"port": 6036, "protocol": "TCP"}, {"port": 6060, "protocol": "TCP"}, {"port": 6129, "protocol": "TCP"}, {"port": 6379, "protocol": "TCP"}, {"port": 6443, "protocol": "TCP"}, {"port": 6466, "protocol": "TCP"}, {"port": 6467, "protocol": "TCP"}, {"port": 6699, "protocol": "TCP"}, {"port": 6713, "protocol": "TCP"}, {"port": 6783, "protocol": "TCP"}, {"port": 6917, "protocol": "TCP"}, {"port": 6921, "protocol": "TCP"}, {"port": 7062, "protocol": "TCP"}, {"port": 7080, "protocol": "TCP"}, {"port": 7170, "protocol": "TCP"}, {"port": 7474, "protocol": "TCP"}, {"port": 7557, "protocol": "TCP"}, {"port": 7676, "protocol": "TCP"}, {"port": 7680, "protocol": "TCP"}, {"port": 7681, "protocol": "TCP"}, {"port": 7746, "protocol": "TCP"}, {"port": 7777, "protocol": "TCP"}, {"port": 7920, "protocol": "TCP"}, {"port": 8000, "protocol": "TCP"}, {"port": 8001, "protocol": "TCP"}, {"port": 8008, "protocol": "TCP"}, {"port": 8010, "protocol": "TCP"}, {"port": 8020, "protocol": "TCP"}, {"port": 8022, "protocol": "TCP"}, {"port": 8080, "protocol": "TCP"}, {"port": 8081, "protocol": "TCP"}, {"port": 8082, "protocol": "TCP"}, {"port": 8083, "protocol": "TCP"}, {"port": 8084, "protocol": "TCP"}, {"port": 8085, "protocol": "TCP"}, {"port": 8088, "protocol": "TCP"}, {"port": 8089, "protocol": "TCP"}, {"port": 8098, "protocol": "TCP"}, {"port": 8099, "protocol": "TCP"}, {"port": 8112, "protocol": "TCP"}, {"port": 8181, "protocol": "TCP"}, {"port": 8200, "protocol": "TCP"}, {"port": 8291, "protocol": "TCP"}, {"port": 8437, "protocol": "TCP"}, {"port": 8443, "protocol": "TCP"}, {"port": 8471, "protocol": "TCP"}, {"port": 8512, "protocol": "TCP"}, {"port": 8728, "protocol": "TCP"}, {"port": 8729, "protocol": "TCP"}, {"port": 8800, "protocol": "TCP"}, {"port": 8880, "protocol": "TCP"}, {"port": 8883, "protocol": "TCP"}, {"port": 8888, "protocol": "TCP"}, {"port": 8990, "protocol": "TCP"}, {"port": 8991, "protocol": "TCP"}, {"port": 8999, "protocol": "TCP"}, {"port": 9000, "protocol": "TCP"}, {"port": 9001, "protocol": "TCP"}, {"port": 9002, "protocol": "TCP"}, {"port": 9010, "protocol": "TCP"}, {"port": 9080, "protocol": "TCP"}, {"port": 9084, "protocol": "TCP"}, {"port": 9090, "protocol": "TCP"}, {"port": 9091, "protocol": "TCP"}, {"port": 9092, "protocol": "TCP"}, {"port": 9160, "protocol": "TCP"}, {"port": 9200, "protocol": "TCP"}, {"port": 9300, "protocol": "TCP"}, {"port": 9444, "protocol": "TCP"}, {"port": 9699, "protocol": "TCP"}, {"port": 9997, "protocol": "TCP"}, {"port": 9998, "protocol": "TCP"}, {"port": 9999, "protocol": "TCP"}, {"port": 10000, "protocol": "TCP"}, {"port": 10001, "protocol": "TCP"}, {"port": 10002, "protocol": "TCP"}, {"port": 10010, "protocol": "TCP"}, {"port": 10050, "protocol": "TCP"}, {"port": 10080, "protocol": "TCP"}, {"port": 10101, "protocol": "TCP"}, {"port": 10107, "protocol": "TCP"}, {"port": 10443, "protocol": "TCP"}, {"port": 12345, "protocol": "TCP"}, {"port": 14430, "protocol": "TCP"}, {"port": 15627, "protocol": "TCP"}, {"port": 15691, "protocol": "TCP"}, {"port": 15800, "protocol": "TCP"}, {"port": 17500, "protocol": "TCP"}, {"port": 18264, "protocol": "TCP"}, {"port": 18301, "protocol": "TCP"}, {"port": 20202, "protocol": "TCP"}, {"port": 21242, "protocol": "TCP"}, {"port": 21300, "protocol": "TCP"}, {"port": 22232, "protocol": "TCP"}, {"port": 22288, "protocol": "TCP"}, {"port": 27017, "protocol": "TCP"}, {"port": 27018, "protocol": "TCP"}, {"port": 27080, "protocol": "TCP"}, {"port": 27117, "protocol": "TCP"}, {"port": 28017, "protocol": "TCP"}, {"port": 30004, "protocol": "TCP"}, {"port": 30005, "protocol": "TCP"}, {"port": 30006, "protocol": "TCP"}, {"port": 30007, "protocol": "TCP"}, {"port": 30010, "protocol": "TCP"}, {"port": 30083, "protocol": "TCP"}, {"port": 32531, "protocol": "TCP"}, {"port": 32768, "protocol": "TCP"}, {"port": 34567, "protocol": "TCP"}, {"port": 34964, "protocol": "TCP"}, {"port": 37304, "protocol": "TCP"}, {"port": 37443, "protocol": "TCP"}, {"port": 37777, "protocol": "TCP"}, {"port": 38182, "protocol": "TCP"}, {"port": 38520, "protocol": "TCP"}, {"port": 38646, "protocol": "TCP"}, {"port": 40000, "protocol": "TCP"}, {"port": 40005, "protocol": "TCP"}, {"port": 40197, "protocol": "TCP"}, {"port": 44401, "protocol": "TCP"}, {"port": 47001, "protocol": "TCP"}, {"port": 48460, "protocol": "TCP"}, {"port": 49153, "protocol": "TCP"}, {"port": 49155, "protocol": "TCP"}, {"port": 49157, "protocol": "TCP"}, {"port": 49158, "protocol": "TCP"}, {"port": 49160, "protocol": "TCP"}, {"port": 49501, "protocol": "TCP"}, {"port": 49664, "protocol": "TCP"}, {"port": 49667, "protocol": "TCP"}, {"port": 49669, "protocol": "TCP"}, {"port": 50001, "protocol": "TCP"}, {"port": 50580, "protocol": "TCP"}, {"port": 50996, "protocol": "TCP"}, {"port": 51007, "protocol": "TCP"}, {"port": 51200, "protocol": "TCP"}, {"port": 52200, "protocol": "TCP"}, {"port": 52869, "protocol": "TCP"}, {"port": 53000, "protocol": "TCP"}, {"port": 53416, "protocol": "TCP"}, {"port": 54322, "protocol": "TCP"}, {"port": 54660, "protocol": "TCP"}, {"port": 55170, "protocol": "TCP"}, {"port": 55555, "protocol": "TCP"}, {"port": 55920, "protocol": "TCP"}, {"port": 57331, "protocol": "TCP"}, {"port": 58603, "protocol": "TCP"}, {"port": 60088, "protocol": "TCP"}, {"port": 65004, "protocol": "TCP"}, {"port": 65062, "protocol": "TCP"}], "web": {"paths": ["/aY4o", "/owa/", "/f5xJ", "/owa/auth/logon.aspx", "/", "/BgIk", "/nice ports,/Trinity.txt.bak", "/mgmt/shared/authn/login"], "useragents": ["Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0", "", "Go-http-client/1.1", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:76.0) Gecko/20100101 Firefox/76.0", "TBI-HttpOpenPlugin/0.1.0 (+https://leakix.net/)", "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)", "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1667.0 Safari/537.36", "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.13; ko; rv:1.9.1b2) Gecko/20081201 Firefox/60.0", "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36", "WhatWeb/0.5.5"]}, "ja3": [{"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 22}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 110}, {"fingerprint": "872afe5bfa5995245e58609aa23f6a0d", "port": 443}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 443}, {"fingerprint": "706e10b69c57aa391de219ed24f17a58", "port": 443}, {"fingerprint": "917fde1bf3bcb67f961b77b18d9ee14a", "port": 993}, {"fingerprint": "006315b3ad276906ff11527f9594e5ba", "port": 993}, {"fingerprint": "a96dc3876784813c57d302241e620acd", "port": 993}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 993}, {"fingerprint": "03a3ad27040f733ee5c9915e0903d028", "port": 993}, {"fingerprint": "7f9ae904ef5a8d37a4028ce5c57bc099", "port": 993}, {"fingerprint": "db8d4ad49cb378fa370b43a61a9b06b6", "port": 993}, {"fingerprint": "1289771a3fce256d5fb4cb5c95b43ee6", "port": 993}, {"fingerprint": "013c30c8ce44c8b27e9ceb2a14db7283", "port": 993}, {"fingerprint": "917fde1bf3bcb67f961b77b18d9ee14a", "port": 995}, {"fingerprint": "006315b3ad276906ff11527f9594e5ba", "port": 995}, {"fingerprint": "a96dc3876784813c57d302241e620acd", "port": 995}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 995}, {"fingerprint": "03a3ad27040f733ee5c9915e0903d028", "port": 995}, {"fingerprint": "7f9ae904ef5a8d37a4028ce5c57bc099", "port": 995}, {"fingerprint": "db8d4ad49cb378fa370b43a61a9b06b6", "port": 995}, {"fingerprint": "1289771a3fce256d5fb4cb5c95b43ee6", "port": 995}, {"fingerprint": "013c30c8ce44c8b27e9ceb2a14db7283", "port": 995}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 4567}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 5432}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 5666}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8000}, {"fingerprint": "706e10b69c57aa391de219ed24f17a58", "port": 8000}, {"fingerprint": "95d6f221c32953590c3a85cbee0d9e61", "port": 8080}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8088}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8443}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8888}, {"fingerprint": "706e10b69c57aa391de219ed24f17a58", "port": 8888}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 8991}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 9999}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 10001}, {"fingerprint": "89be98bbd4f065fe510fca4893cf8d9b", "port": 10010}], "hassh": [{"fingerprint": "1616c6d18e845e7a01168a44591f7a35", "port": 22}, {"fingerprint": "34e2be231a36f388a636d2140f5bb9aa", "port": 22}, {"fingerprint": "98ddc5604ef6a1006a2b49a58759fbe6", "port": 22}, {"fingerprint": "fda360b1b4f4d3455cb75c6e7edb1d11", "port": 22}, {"fingerprint": "57446c12547a668110aa237e5965e374", "port": 22}, {"fingerprint": "57446c12547a668110aa237e5965e374", "port": 2222}, {"fingerprint": "98ddc5604ef6a1006a2b49a58759fbe6", "port": 2222}]}, "first_seen": "2019-06-25", "last_seen": "2021-04-05", "rdns": "", "seen": true, "tags": ["404 Crawler", "EHLO Crawler", "Generic Lines Crawler", "Generic Outlook Web Access Crawler", "Go HTTP Client", "HTTP OPTIONS Crawler", "JRMI Scanner", "Nmap", "Open Proxy Scanner", "Outlook Web Access Login Crawler", "Radmin Crawler", "SSH Alternative Port Crawler", "SSH Bruteforcer", "TLS/SSL Crawler", "Web Crawler", "X Server Connection Attempt"], "actor": "unknown", "classification": "malicious", "cve": ["CVE-1999-0526"]}
from pygreynoise.
bradchiappetta
commented on June 18, 2024
@tlynx538 : we've tried reproducing this on a couple of different systems, and aren't able to get the same result, even with another Debian system. Is there anything unique about your machine that could be contributing to this on your side? If you try this from a different machine, do you experience the same issue?
from pygreynoise.
tlynx538
commented on June 18, 2024
I do not think so, as far as I know I had downloaded the ISO installer from Debian's Official Website.
FYI, I was running Greynoise CLI on a VM (VMware Workstation)
I do not think so there's anything unique about our system in general.
from pygreynoise.
bradchiappetta
commented on June 18, 2024
@tlynx538 : if you can provide the exact image or a link to it on the Debian site, we can try to reproduce this. Also, if you could provide any changes to language/region settings may be in play here as well. Thanks for the additional information.
from pygreynoise.
tlynx538
commented on June 18, 2024
AFAIK i downloaded the ISO from this link
from pygreynoise.
bradchiappetta
commented on June 18, 2024
@tlynx538 : I've done everything I can think of to try to reproduce this, matching your exact OS and all python packages, but everything continues to work for me. I've also validated that we don't directly use latin-1 in our code-base, so this error seems to be actually stemming from another package (perhaps click as indicated in the stacktrace).
The best I can offer at the moment is try to for a re-install and see if that corrects anything:
pip3 install --upgrade --force-reinstall greynoise
If you are able to troubleshoot or determine anything else unique about your setup, please let us know.
from pygreynoise.
tlynx538
commented on June 18, 2024
I will try and let you know.
from pygreynoise.
bradchiappetta
commented on June 18, 2024
Wasn't able to reproduce. Closing issue, can file new issue if issue continues.
from pygreynoise.
Related Issues (20)
- [Feature Request] Support for http proxy HOT 2
- Replace dicttoxml
- Add reStructuredText linter to the CI workflow so all .rst's are validated in the PRs
- Validate and handle non-list format for API Quick Query
- feature: Cache should be configurable
- Add feature to allow API Quick IP lookup to return invalid IPs in JSON response
- Add support for looking up IPs with RIOT API endpoint
- Add details about "integration_name" parameter to docs
- Consider using AWS CLI precedence model for greynoise CLI configuration.
- Update test_connection fuction
- Add support for Community API
- Enable the query subcommand to specify size and token inputs
- CLI throws stack_trace on expired API key
- Include_Invalid on Quick command missing "riot" key in response
- Add Bulk-Context lookup support
- IP Context Command is missing HASSH Information
- do not setup logging in library code HOT 4
- Create Command that returns Classification / TL only
- Add structlog version >= 18.1.0 to requirements HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from pygreynoise.